last executing test programs:

2m25.142068818s ago: executing program 0 (id=1262):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x6, 0x1f7c, 0x8}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

2m25.093393043s ago: executing program 0 (id=1264):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001114010000000000000000000800030000000100080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

2m25.009542604s ago: executing program 0 (id=1266):
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000000c0)="80005b020eaa4da2e5", 0x9}], 0x1, 0x0, 0x0, 0x900}, 0x0)

2m24.942676642s ago: executing program 0 (id=1269):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

2m24.871227619s ago: executing program 0 (id=1270):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043000900000000000000000003000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000044)

2m24.703551876s ago: executing program 0 (id=1274):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a00", 0x1e}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast}, 0x2, 0x4, 0x4, 0x3}}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0)

2m24.507916223s ago: executing program 32 (id=1274):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a00", 0x1e}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast}, 0x2, 0x4, 0x4, 0x3}}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0)

27.429582635s ago: executing program 3 (id=3130):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe8000"], 0xfdef)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xe0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

24.6711245s ago: executing program 3 (id=3136):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x2, 0x0, 0x2dd}}, [@tmpl={0x104, 0x5, [{{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{@in6=@loopback, 0x4d2, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x1}]}]}, 0x1bc}}, 0x0)

24.61176298s ago: executing program 3 (id=3139):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007090000000000000000ff02000000000000000000000000000100000000000000000000ffff64010100fffc00094e2000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff01000000000000000000bdf7000001000000002b000000fc020000000000000000000000000001000000000000000000000000000000000200000000000000000000000000000000000000010000000000000000000000000000000000000000000000002000000000000000000000000000000000009c00e02ff5e33e474d1cffb912000000000000040000000000e80a0000ffffffff000000000a000500710000000000000014000e00"], 0x104}, 0x1, 0x0, 0x0, 0x84}, 0x0)

24.523430327s ago: executing program 3 (id=3143):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x30}}]}]}, 0xcc}}, 0x0)

24.461921058s ago: executing program 3 (id=3145):
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000290081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40), 0x10, 0xfffffff3}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4)
r4 = socket$kcm(0x2, 0x3, 0x84)
setsockopt$sock_attach_bpf(r4, 0x84, 0x9, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0)

24.438981232s ago: executing program 3 (id=3146):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240440d1)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
fstat(0xffffffffffffffff, 0x0)
fstat(r2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, 0x2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x181}, 0x80)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2d1b47cadf767bbd, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%ps    \x00'}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24004080)
sendmsg$NFT_BATCH(r4, &(0x7f0000001240)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f00000022c0)=ANY=[], 0x830}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
fstat(r5, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fstat(r4, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
mount$bpf(0x0, &(0x7f0000001380)='./file0\x00', 0x0, 0x1810840, &(0x7f0000001500)={[{@gid={'gid', 0x3d, r7}}], [{@obj_role={'obj_role', 0x3d, '$'}}, {@fowner_lt={'fowner<', r8}}]})
fstat(r3, &(0x7f0000000d40))
fstat(r6, &(0x7f00000004c0))
fstat(r1, &(0x7f0000000540))
mount$bpf(0x0, 0x0, 0x0, 0x2010, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3)

9.320238002s ago: executing program 33 (id=3146):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240440d1)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
fstat(0xffffffffffffffff, 0x0)
fstat(r2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, 0x2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x181}, 0x80)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2d1b47cadf767bbd, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%ps    \x00'}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24004080)
sendmsg$NFT_BATCH(r4, &(0x7f0000001240)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f00000022c0)=ANY=[], 0x830}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
fstat(r5, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fstat(r4, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
mount$bpf(0x0, &(0x7f0000001380)='./file0\x00', 0x0, 0x1810840, &(0x7f0000001500)={[{@gid={'gid', 0x3d, r7}}], [{@obj_role={'obj_role', 0x3d, '$'}}, {@fowner_lt={'fowner<', r8}}]})
fstat(r3, &(0x7f0000000d40))
fstat(r6, &(0x7f00000004c0))
fstat(r1, &(0x7f0000000540))
mount$bpf(0x0, 0x0, 0x0, 0x2010, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3)

5.726844851s ago: executing program 1 (id=3370):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x200}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0)

5.726107122s ago: executing program 1 (id=3373):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

5.63906414s ago: executing program 1 (id=3375):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, 0x0, 0xffffffff}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x48)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.571714991s ago: executing program 1 (id=3378):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

5.561504576s ago: executing program 1 (id=3382):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

4.264473086s ago: executing program 1 (id=3389):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1.047498427s ago: executing program 2 (id=3422):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@remote, @in6=@empty, 0x2, 0xfffc, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x16}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}, 0xb}}]}, 0x138}}, 0x0)

880.428222ms ago: executing program 2 (id=3424):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800a00010072656469720000000c00028008000140e20000010900010073797a30"], 0xbc}}, 0x0)

803.098198ms ago: executing program 2 (id=3425):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004564ffec850000006d0000007b0000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

802.837429ms ago: executing program 2 (id=3426):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}}, 0x0)

180.012134ms ago: executing program 4 (id=3427):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000430033"], 0xfe33)

116.977789ms ago: executing program 4 (id=3428):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x6, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080)={0x3}, 0xfffffffffffffc79}, 0x26)

116.612817ms ago: executing program 4 (id=3429):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48)
close(r0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)

116.454842ms ago: executing program 2 (id=3430):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xe}, {0xa, 0x6}, {0x7, 0xb}}}, 0x24}}, 0x20000011)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

60.101415ms ago: executing program 4 (id=3431):
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8)

59.791683ms ago: executing program 4 (id=3432):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a100000000eef1880400800000007f4386dd78bb3bb7dbfc7780c28395cc7e", 0x0, 0xa17, 0x0, 0x2, 0x0, &(0x7f00000001c0)="010a", 0x0}, 0x50)

58.095927ms ago: executing program 2 (id=3437):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)

0s ago: executing program 4 (id=3433):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x20, 0x0, 0x0, 0x20, 0x0, 0xb84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8800, 0x0, 0x0, 0x0, 0xc5, 0x680e4bae}, 0x0, 0x0, 0xffffffffffffffff, 0xd)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffd56, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40040c1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
socket$kcm(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b00000002000000fe8000000000000000000000000000aa0000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000010)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, &(0x7f0000000100))
socket$key(0xf, 0x3, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x3f, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r2}, 0x38)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002740)={r0, 0x0, 0x0}, 0x10)

kernel console output (not intermixed with test programs):

] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.573648][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.577116][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.586100][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.588944][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.660776][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.663899][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.666716][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.669522][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.672096][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.685797][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.688690][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.691532][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.696604][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.700565][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.809942][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   54.933559][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.938003][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.941255][ T5847] bridge_slave_0: entered allmulticast mode
[   54.945299][ T5847] bridge_slave_0: entered promiscuous mode
[   54.950405][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.953336][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.956513][ T5847] bridge_slave_1: entered allmulticast mode
[   54.960395][ T5847] bridge_slave_1: entered promiscuous mode
[   55.009338][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.014608][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.036718][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.043518][ T5847] team0: Port device team_slave_0 added
[   55.049255][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   55.060026][ T5847] team0: Port device team_slave_1 added
[   55.128559][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.131260][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.141359][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.158584][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.161352][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.171356][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.227707][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.230087][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.232800][ T5853] bridge_slave_0: entered allmulticast mode
[   55.236502][ T5853] bridge_slave_0: entered promiscuous mode
[   55.239785][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.242132][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.244606][ T5853] bridge_slave_1: entered allmulticast mode
[   55.247616][ T5853] bridge_slave_1: entered promiscuous mode
[   55.249952][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.252301][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.254730][ T5851] bridge_slave_0: entered allmulticast mode
[   55.258215][ T5851] bridge_slave_0: entered promiscuous mode
[   55.283769][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.286760][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.289160][ T5851] bridge_slave_1: entered allmulticast mode
[   55.291914][ T5851] bridge_slave_1: entered promiscuous mode
[   55.306340][ T5847] hsr_slave_0: entered promiscuous mode
[   55.308759][ T5847] hsr_slave_1: entered promiscuous mode
[   55.337440][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.350820][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.356896][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.364677][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.396245][ T5853] team0: Port device team_slave_0 added
[   55.413156][ T5853] team0: Port device team_slave_1 added
[   55.423388][ T5851] team0: Port device team_slave_0 added
[   55.437395][ T5851] team0: Port device team_slave_1 added
[   55.440386][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.442824][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.451899][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.472463][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.474812][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.483916][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.506091][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.508428][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.517113][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.537685][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.540347][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.550641][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.571273][ T5853] hsr_slave_0: entered promiscuous mode
[   55.573808][ T5853] hsr_slave_1: entered promiscuous mode
[   55.576704][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   55.578841][ T5853] Cannot create hsr debugfs directory
[   55.649781][ T5851] hsr_slave_0: entered promiscuous mode
[   55.652072][ T5851] hsr_slave_1: entered promiscuous mode
[   55.654297][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   55.657082][ T5851] Cannot create hsr debugfs directory
[   55.797092][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.805623][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.819252][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.823476][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.898263][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.912685][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.936753][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.942842][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.019946][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.029595][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.038448][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.044940][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.125525][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.174252][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.183523][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.195897][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.199765][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.202743][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.213549][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   56.219241][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.222063][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.234872][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.237447][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.246763][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   56.257611][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.259981][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.267904][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.270265][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.282512][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.285189][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.441737][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.467540][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.471886][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.502434][ T5847] veth0_vlan: entered promiscuous mode
[   56.517070][ T5853] veth0_vlan: entered promiscuous mode
[   56.520345][ T5847] veth1_vlan: entered promiscuous mode
[   56.530571][ T5853] veth1_vlan: entered promiscuous mode
[   56.540365][ T5851] veth0_vlan: entered promiscuous mode
[   56.561720][ T5847] veth0_macvtap: entered promiscuous mode
[   56.566040][ T5851] veth1_vlan: entered promiscuous mode
[   56.571812][ T5853] veth0_macvtap: entered promiscuous mode
[   56.574819][ T5847] veth1_macvtap: entered promiscuous mode
[   56.584467][ T5853] veth1_macvtap: entered promiscuous mode
[   56.608785][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.617359][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.624698][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.628496][ T5856] Bluetooth: hci0: command tx timeout
[   56.631130][ T5851] veth0_macvtap: entered promiscuous mode
[   56.640705][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.647007][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.650528][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.654087][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.663317][ T5851] veth1_macvtap: entered promiscuous mode
[   56.666833][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.676104][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.683100][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.687253][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.703285][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.715288][ T5856] Bluetooth: hci1: command tx timeout
[   56.753349][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.763046][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.780803][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.785415][ T5856] Bluetooth: hci2: command tx timeout
[   56.788480][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.790382][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.791238][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.794097][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.806141][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.810773][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.813756][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.857478][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.860802][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.896615][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.901358][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.921672][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.925137][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.941000][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.994655][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.999831][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.118046][ T5918] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.145923][ T5921] netlink: 'syz.2.5': attribute type 10 has an invalid length.
[   57.355028][    C0] hrtimer: interrupt took 28350 ns
[   57.423736][ T5921] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   57.564214][ T5921] syz.2.5 (5921) used greatest stack depth: 19120 bytes left
[   57.728987][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'.
[   58.200553][ T5957] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   58.243330][ T5961] netlink: 'syz.0.24': attribute type 12 has an invalid length.
[   58.247463][ T5961] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24'.
[   58.281813][ T5961] C: renamed from team_slave_0 (while UP)
[   58.297522][ T5961] netlink: 'syz.0.24': attribute type 1 has an invalid length.
[   58.300796][ T5961] netlink: 152 bytes leftover after parsing attributes in process `syz.0.24'.
[   58.308978][ T5961] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   58.319991][ T5965] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   58.411710][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'.
[   58.434266][ T5972] Zero length message leads to an empty skb
[   58.434901][ T5974] lo speed is unknown, defaulting to 1000
[   58.440790][ T5974] lo speed is unknown, defaulting to 1000
[   58.462085][ T5974] lo speed is unknown, defaulting to 1000
[   58.520556][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'.
[   58.527993][ T5974] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   58.578605][ T5974] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   58.690249][ T5982] netlink: 104 bytes leftover after parsing attributes in process `syz.1.33'.
[   58.707491][ T5856] Bluetooth: hci0: command tx timeout
[   58.748056][ T5984] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   58.791101][ T5856] Bluetooth: hci1: command tx timeout
[   58.893850][ T5856] Bluetooth: hci2: command tx timeout
[   58.939669][ T5974] lo speed is unknown, defaulting to 1000
[   58.950239][ T5974] lo speed is unknown, defaulting to 1000
[   58.959584][ T5974] lo speed is unknown, defaulting to 1000
[   59.044652][ T5856] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[   59.538039][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'.
[   59.578451][ T6011] netlink: 763 bytes leftover after parsing attributes in process `syz.0.45'.
[   59.740098][ T6023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.51'.
[   59.839565][ T6032] warning: `syz.1.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.202847][ T6044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.791742][ T5856] Bluetooth: hci0: command tx timeout
[   60.862323][ T6072] netlink: 'syz.1.71': attribute type 28 has an invalid length.
[   60.866820][ T5856] Bluetooth: hci1: command tx timeout
[   60.873342][ T6072] netlink: 'syz.1.71': attribute type 3 has an invalid length.
[   60.955156][ T5856] Bluetooth: hci2: command tx timeout
[   61.683374][ T6098] netlink: 'syz.1.83': attribute type 4 has an invalid length.
[   61.821499][ T6098] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   62.006800][ T6108] netlink: 'syz.2.87': attribute type 9 has an invalid length.
[   62.092505][ T6112] netlink: 'syz.1.86': attribute type 16 has an invalid length.
[   62.284014][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.622848][ T6126] netlink: 'syz.1.92': attribute type 39 has an invalid length.
[   62.811837][ T6126] veth0_macvtap: left promiscuous mode
[   62.876277][ T5856] Bluetooth: hci0: command tx timeout
[   62.945452][ T5856] Bluetooth: hci1: command tx timeout
[   63.026287][ T5856] Bluetooth: hci2: command tx timeout
[   63.683663][ T6173] netlink: 'syz.1.110': attribute type 39 has an invalid length.
[   63.684317][ T6170] netlink: 'syz.2.113': attribute type 29 has an invalid length.
[   63.730545][ T6173] hsr_slave_0 (unregistering): left promiscuous mode
[   63.734214][ T6175] __nla_validate_parse: 9 callbacks suppressed
[   63.734229][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'.
[   63.746581][ T6170] netlink: 'syz.2.113': attribute type 29 has an invalid length.
[   64.160571][ T6212] netlink: 'syz.0.132': attribute type 3 has an invalid length.
[   64.163098][ T6212] netlink: 'syz.0.132': attribute type 1 has an invalid length.
[   64.166515][ T6212] netlink: 'syz.0.132': attribute type 2 has an invalid length.
[   64.168982][ T6212] netlink: 'syz.0.132': attribute type 8 has an invalid length.
[   64.171408][ T6212] netlink: 'syz.0.132': attribute type 10 has an invalid length.
[   64.179597][ T6212] netlink: 'syz.0.132': attribute type 11 has an invalid length.
[   64.182389][ T6212] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.132'.
[   64.200493][ T6217] netlink: 96 bytes leftover after parsing attributes in process `syz.1.135'.
[   64.377609][ T6231] netlink: 22 bytes leftover after parsing attributes in process `syz.0.137'.
[   65.550580][ T6256] netlink: 56 bytes leftover after parsing attributes in process `syz.0.146'.
[   66.389909][ T6296] gretap0: refused to change device tx_queue_len
[   66.392478][ T6296] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   66.540955][ T6303] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   66.613515][ T6310] netlink: 156 bytes leftover after parsing attributes in process `syz.0.168'.
[   66.618029][ T6310] IPv6: NLM_F_CREATE should be specified when creating new route
[   66.623364][ T6310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   66.625994][ T6310] IPv6: NLM_F_CREATE should be set when creating new route
[   66.628599][ T6310] IPv6: NLM_F_CREATE should be set when creating new route
[   66.631029][ T6310] IPv6: NLM_F_CREATE should be set when creating new route
[   66.879109][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'.
[   66.963883][ T5856] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[   67.463633][ T6334] netlink: 132 bytes leftover after parsing attributes in process `syz.0.178'.
[   67.569409][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'.
[   67.696463][ T6347] validate_nla: 4 callbacks suppressed
[   67.696473][ T6347] netlink: 'syz.2.182': attribute type 10 has an invalid length.
[   67.700831][ T6347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.182'.
[   67.703857][ T6347] ipvlan1: entered promiscuous mode
[   67.706378][ T6347] ipvlan1: entered allmulticast mode
[   67.708179][ T6347] veth0_vlan: entered allmulticast mode
[   67.711252][ T6347] bridge0: port 3(ipvlan1) entered blocking state
[   67.713604][ T6347] bridge0: port 3(ipvlan1) entered disabled state
[   67.718674][ T6347] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   67.862480][ T6351] netlink: 'syz.2.184': attribute type 3 has an invalid length.
[   67.867728][ T6351] netlink: 'syz.2.184': attribute type 3 has an invalid length.
[   68.191617][ T6364] syz.0.189 uses obsolete (PF_INET,SOCK_PACKET)
[   69.416872][ T6447] __nla_validate_parse: 3 callbacks suppressed
[   69.416880][ T6447] netlink: 100 bytes leftover after parsing attributes in process `syz.2.228'.
[   69.478523][ T6445] netlink: 188 bytes leftover after parsing attributes in process `syz.1.227'.
[   69.710599][ T6455] netlink: 'syz.2.229': attribute type 1 has an invalid length.
[   69.713549][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'.
[   71.107775][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[   71.112119][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[   71.550512][ T6486] netlink: 'syz.1.245': attribute type 10 has an invalid length.
[   71.560236][ T6486] syz_tun: entered promiscuous mode
[   71.577187][ T6486] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   71.649491][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'.
[   71.737162][ T6502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.253'.
[   71.768155][ T6507] netlink: 'syz.0.256': attribute type 1 has an invalid length.
[   71.909278][ T6516] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[   72.036046][ T6527] netlink: 56 bytes leftover after parsing attributes in process `syz.2.266'.
[   72.068835][ T6531] netlink: 'syz.2.267': attribute type 3 has an invalid length.
[   72.071347][ T6531] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.267'.
[   72.350152][ T6541] netlink: 'syz.1.271': attribute type 1 has an invalid length.
[   72.353366][ T6541] netlink: 5 bytes leftover after parsing attributes in process `syz.1.271'.
[   72.528025][ T6554] netlink: 'syz.2.277': attribute type 21 has an invalid length.
[   72.531358][ T6554] netlink: 128 bytes leftover after parsing attributes in process `syz.2.277'.
[   72.536240][ T6554] netlink: 'syz.2.277': attribute type 4 has an invalid length.
[   72.550843][ T6554] netlink: 3 bytes leftover after parsing attributes in process `syz.2.277'.
[   72.561127][ T6556] IPv6: NLM_F_CREATE should be specified when creating new route
[   72.831583][ T6569] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[   73.032569][ T6575] validate_nla: 2 callbacks suppressed
[   73.032613][ T6575] netlink: 'syz.0.290': attribute type 2 has an invalid length.
[   73.042435][ T6577] siw: device registration error -23
[   73.072702][ T6579] syzkaller0: entered promiscuous mode
[   73.074702][ T6579] syzkaller0: entered allmulticast mode
[   74.906516][ T6609] pim6reg1: entered allmulticast mode
[   75.100286][ T6621] netlink: 'syz.2.302': attribute type 21 has an invalid length.
[   75.103609][ T6621] netlink: 'syz.2.302': attribute type 6 has an invalid length.
[   75.125120][ T6621] __nla_validate_parse: 1 callbacks suppressed
[   75.125132][ T6621] netlink: 132 bytes leftover after parsing attributes in process `syz.2.302'.
[   75.594299][ T6673] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.327'.
[   75.660664][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'.
[   75.740417][ T6685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.333'.
[   76.481212][ T6709] netlink: 'syz.0.344': attribute type 28 has an invalid length.
[   76.484548][ T6709] netlink: 2 bytes leftover after parsing attributes in process `syz.0.344'.
[   76.642884][ T6723] netlink: 'syz.0.351': attribute type 1 has an invalid length.
[   76.645906][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.351'.
[   76.705815][ T6729] netlink: 172 bytes leftover after parsing attributes in process `syz.0.353'.
[   76.884908][ T6741] netlink: 'syz.1.360': attribute type 23 has an invalid length.
[   77.670235][ T6756] netlink: 'syz.2.367': attribute type 1 has an invalid length.
[   77.692255][ T6754] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   77.938287][ T6781] netlink: 148 bytes leftover after parsing attributes in process `syz.2.378'.
[   77.987832][ T6786] netlink: 'syz.0.380': attribute type 2 has an invalid length.
[   77.990770][ T6786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.380'.
[   78.072475][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'.
[   79.612987][ T6832] netlink: 'syz.0.398': attribute type 10 has an invalid length.
[   79.720069][ T6838] =======================================================
[   79.720069][ T6838] WARNING: The mand mount option has been deprecated and
[   79.720069][ T6838]          and is ignored by this kernel. Remove the mand
[   79.720069][ T6838]          option from the mount to silence this warning.
[   79.720069][ T6838] =======================================================
[   80.323293][ T6847] __nla_validate_parse: 5 callbacks suppressed
[   80.323371][ T6847] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.402'.
[   81.071019][ T6866] netlink: 'syz.1.410': attribute type 21 has an invalid length.
[   81.080408][ T6866] IPv6: NLM_F_CREATE should be specified when creating new route
[   81.138930][ T6868] netlink: zone id is out of range
[   81.140723][ T6868] netlink: set zone limit has 8 unknown bytes
[   81.347020][ T1941] cfg80211: failed to load regulatory.db
[   81.650759][ T6907] netlink: 'syz.0.430': attribute type 10 has an invalid length.
[   81.823519][ T6911] netlink: 'syz.0.432': attribute type 7 has an invalid length.
[   81.891800][ T5856] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[   82.570124][ T6938] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.445'.
[   82.759398][ T6952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.448'.
[   82.763035][ T6952] netlink: 60 bytes leftover after parsing attributes in process `syz.2.448'.
[   82.764434][ T6954] netlink: 182 bytes leftover after parsing attributes in process `syz.0.449'.
[   83.386865][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'.
[   83.526829][ T6969] netlink: 'syz.1.456': attribute type 28 has an invalid length.
[   83.530188][ T6969] netlink: 'syz.1.456': attribute type 29 has an invalid length.
[   83.533453][ T6969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.456'.
[   83.572043][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'.
[   83.583942][ T6976] netlink: 'syz.1.460': attribute type 11 has an invalid length.
[   83.674649][ T6984] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   83.798373][ T6995] netlink: 'syz.0.469': attribute type 25 has an invalid length.
[   84.004774][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'.
[   84.018289][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'.
[   84.122259][ T7024] syzkaller0: entered promiscuous mode
[   84.124162][ T7024] syzkaller0: entered allmulticast mode
[   84.920966][ T7086] netlink: 'syz.0.510': attribute type 21 has an invalid length.
[   84.924276][ T7086] netlink: 'syz.0.510': attribute type 4 has an invalid length.
[   86.421747][ T7122] __nla_validate_parse: 1 callbacks suppressed
[   86.421800][ T7122] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.523'.
[   86.473502][ T7126] pim6reg1: entered promiscuous mode
[   86.477252][ T7126] pim6reg1: entered allmulticast mode
[   87.021462][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.025650][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.059649][ T7143] bridge0: entered allmulticast mode
[   88.961422][ T7174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.970251][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'.
[   89.491959][ T7185] netlink: 17 bytes leftover after parsing attributes in process `syz.0.550'.
[   89.544855][ T7185] netlink: zone id is out of range
[   89.547699][ T7185] netlink: zone id is out of range
[   89.550104][ T7185] netlink: zone id is out of range
[   89.552503][ T7185] netlink: zone id is out of range
[   89.554863][ T7185] netlink: zone id is out of range
[   89.582955][ T7185] netlink: zone id is out of range
[   89.585924][ T7185] netlink: zone id is out of range
[   89.588161][ T7185] netlink: zone id is out of range
[   89.590367][ T7185] netlink: zone id is out of range
[   89.646225][ T7195] netlink: 'syz.1.555': attribute type 11 has an invalid length.
[   89.962940][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.568'.
[   90.164572][ T7233] netlink: 11318 bytes leftover after parsing attributes in process `syz.1.573'.
[   90.302504][ T7256] : renamed from bond_slave_0 (while UP)
[   90.389682][ T7260] netlink: 152 bytes leftover after parsing attributes in process `syz.0.588'.
[   90.464504][ T7272] netlink: 'syz.2.591': attribute type 10 has an invalid length.
[   90.479701][ T7272] batman_adv: batadv0: Adding interface: netdevsim0
[   90.482073][ T7272] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.498289][ T7272] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   91.090742][ T7309] netlink: 'syz.2.608': attribute type 11 has an invalid length.
[   91.093865][ T7309] netlink: 'syz.2.608': attribute type 11 has an invalid length.
[   91.134917][ T7311] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.140110][ T7311] bridge0: entered allmulticast mode
[   91.252756][ T7313] netlink: 64 bytes leftover after parsing attributes in process `syz.2.609'.
[   91.490433][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'.
[   91.810306][ T5856] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[   93.303912][ T7422] netlink: 'syz.1.643': attribute type 27 has an invalid length.
[   93.307743][ T7422] netlink: 'syz.1.643': attribute type 1 has an invalid length.
[   93.389222][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.646'.
[   93.392907][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.646'.
[   93.485585][ T7434] debugfs: '!' already exists in 'ieee80211'
[   93.615987][ T7441] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.652'.
[   93.650706][ T7447] netlink: 10 bytes leftover after parsing attributes in process `syz.0.653'.
[   93.825624][ T5856] Bluetooth: hci2: command tx timeout
[   94.668184][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'.
[   96.364319][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'.
[   96.469007][ T7498] netlink: 'syz.0.676': attribute type 3 has an invalid length.
[   96.471619][ T7498] netlink: 199752 bytes leftover after parsing attributes in process `syz.0.676'.
[   96.515752][ T7506] netlink: 104 bytes leftover after parsing attributes in process `syz.2.680'.
[   96.558297][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'.
[   96.587794][ T7518] net_ratelimit: 14 callbacks suppressed
[   96.587803][ T7518] openvswitch: netlink: Invalid VLAN frame
[   96.600680][ T7522] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[   96.693847][ T7534] netlink: 'syz.0.693': attribute type 10 has an invalid length.
[   96.751077][ T7536] netlink: 'syz.1.694': attribute type 10 has an invalid length.
[   96.754399][ T7536] netlink: 55 bytes leftover after parsing attributes in process `syz.1.694'.
[   96.957620][ T7555] netlink: 'syz.2.701': attribute type 1 has an invalid length.
[   97.492756][ T7560] netlink: 188 bytes leftover after parsing attributes in process `syz.0.702'.
[   97.819687][ T7580] openvswitch: netlink: IP tunnel dst address not specified
[   98.854672][ T7603] netlink: 'syz.2.722': attribute type 64 has an invalid length.
[   98.895921][ T7604] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.723'.
[   99.852961][ T7629] netlink: 'syz.0.733': attribute type 21 has an invalid length.
[   99.971962][ T7639] netlink: 'syz.1.737': attribute type 2 has an invalid length.
[   99.973378][ T7628] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.732'.
[  100.051223][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.740'.
[  100.054569][ T7645] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  100.728971][ T7660] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.818503][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.748'.
[  100.822378][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.748'.
[  100.949534][ T7670] netlink: 68 bytes leftover after parsing attributes in process `syz.1.750'.
[  101.571860][ T7696] IPv6: NLM_F_CREATE should be specified when creating new route
[  101.648278][ T7701] netlink: 'syz.2.763': attribute type 16 has an invalid length.
[  101.651384][ T7701] netlink: 'syz.2.763': attribute type 17 has an invalid length.
[  101.708647][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.711425][ T7701] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.714691][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.717414][ T7701] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.034510][ T7701] bridge0: left allmulticast mode
[  102.118543][ T7701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.178402][ T5856] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6
[  102.261505][ T7717] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.771'.
[  102.261720][ T7716] netlink: 830 bytes leftover after parsing attributes in process `syz.0.770'.
[  102.312561][ T7719] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.772'.
[  102.316007][ T7719] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  102.654533][ T7745] netlink: 144 bytes leftover after parsing attributes in process `syz.1.781'.
[  103.054207][ T7757] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.788'.
[  103.179784][ T7765] netlink: 60 bytes leftover after parsing attributes in process `syz.2.792'.
[  103.184450][ T7765] netlink: 60 bytes leftover after parsing attributes in process `syz.2.792'.
[  103.197446][ T7765] netlink: 60 bytes leftover after parsing attributes in process `syz.2.792'.
[  103.741423][ T7783] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.800'.
[  103.838487][ T7793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.805'.
[  103.870884][ T7799] netlink: 'syz.1.808': attribute type 1 has an invalid length.
[  103.873638][ T7799] netlink: 'syz.1.808': attribute type 4 has an invalid length.
[  103.880042][ T7799] netlink: 'syz.1.808': attribute type 1 has an invalid length.
[  103.882684][ T7799] netlink: 'syz.1.808': attribute type 4 has an invalid length.
[  104.058159][ T7817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.272844][ T7837] openvswitch: netlink: IP tunnel dst address not specified
[  104.431706][ T7843] netlink: 'syz.2.829': attribute type 10 has an invalid length.
[  104.919483][ T7861] netlink: 'syz.2.836': attribute type 2 has an invalid length.
[  105.000746][ T7867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.653361][ T7913] netlink: 'syz.1.857': attribute type 15 has an invalid length.
[  105.656151][ T7913] netlink: 'syz.1.857': attribute type 7 has an invalid length.
[  105.986789][ T7945] dummy0: entered promiscuous mode
[  105.988667][ T7945] dummy0: entered allmulticast mode
[  105.992072][ T7945] bond0: (slave dummy0): Releasing backup interface
[  106.003732][ T7945] bridge0: port 3(dummy0) entered blocking state
[  106.008837][ T7945] bridge0: port 3(dummy0) entered disabled state
[  107.864046][ T7998] validate_nla: 2 callbacks suppressed
[  107.864055][ T7998] netlink: 'syz.2.894': attribute type 46 has an invalid length.
[  107.869856][ T7998] __nla_validate_parse: 22 callbacks suppressed
[  107.869863][ T7998] netlink: 55 bytes leftover after parsing attributes in process `syz.2.894'.
[  108.096326][ T8011] netlink: 208344 bytes leftover after parsing attributes in process `syz.0.900'.
[  108.096942][ T8015] netlink: 14 bytes leftover after parsing attributes in process `syz.1.901'.
[  108.099471][ T8011] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  108.103890][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'.
[  108.108499][ T8011] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  108.116327][ T8014] netlink: 'syz.2.902': attribute type 2 has an invalid length.
[  108.120270][ T8014] netlink: 'syz.2.902': attribute type 1 has an invalid length.
[  108.123131][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'.
[  108.155779][ T5856] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  108.200563][ T8023] netlink: 277 bytes leftover after parsing attributes in process `syz.0.906'.
[  108.324381][ T8033] ref_ctr_offset mismatch. inode: 0x659 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  108.380656][ T8038] netlink: 156 bytes leftover after parsing attributes in process `syz.2.913'.
[  108.689064][ T8058] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.919'.
[  109.068703][ T8088] sctp: [Deprecated]: syz.0.934 (pid 8088) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.068703][ T8088] Use struct sctp_sack_info instead
[  109.358187][ T8052] delete_channel: no stack
[  109.817024][ T8094] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.937'.
[  109.840002][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'.
[  109.978961][ T8100] syzkaller0: entered promiscuous mode
[  109.981343][ T8100] syzkaller0: entered allmulticast mode
[  112.903457][ T8113] netlink: 'syz.1.946': attribute type 10 has an invalid length.
[  112.906498][ T8113] netlink: 55 bytes leftover after parsing attributes in process `syz.1.946'.
[  113.792031][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'.
[  113.829133][ T8141] netlink: 104 bytes leftover after parsing attributes in process `syz.2.959'.
[  113.871627][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'.
[  113.888237][ T8149] netlink: 'syz.2.963': attribute type 10 has an invalid length.
[  113.890939][ T8149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.963'.
[  113.980109][ T8159] netlink: 'syz.1.968': attribute type 1 has an invalid length.
[  114.031041][ T8163] netlink: 'syz.0.970': attribute type 2 has an invalid length.
[  114.034663][ T8163] netlink: 'syz.0.970': attribute type 1 has an invalid length.
[  114.062875][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'.
[  114.066111][ T8166] netlink: 33 bytes leftover after parsing attributes in process `syz.1.971'.
[  114.069762][ T8166] netlink: 33 bytes leftover after parsing attributes in process `syz.1.971'.
[  114.157353][ T8169] lo speed is unknown, defaulting to 1000
[  114.162624][ T8172] netlink: 'syz.0.974': attribute type 11 has an invalid length.
[  114.536991][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'.
[  114.726482][ T8207] netlink: 'syz.0.987': attribute type 40 has an invalid length.
[  114.814773][ T8216] netlink: 60 bytes leftover after parsing attributes in process `syz.1.989'.
[  114.816500][ T8215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.091769][ T8222] netlink: 'syz.2.995': attribute type 9 has an invalid length.
[  115.470156][ T8261] netlink: 'syz.0.1010': attribute type 10 has an invalid length.
[  115.858338][ T8273] netlink: 'syz.1.1015': attribute type 10 has an invalid length.
[  116.200736][ T8290] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  116.205298][ T8290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.323350][ T8262] delete_channel: no stack
[  117.194613][ T8347] netlink: 'syz.1.1048': attribute type 4 has an invalid length.
[  117.307989][ T8347] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  117.979180][ T8375] validate_nla: 1 callbacks suppressed
[  117.979196][ T8375] netlink: 'syz.2.1057': attribute type 6 has an invalid length.
[  117.984917][ T8375] __nla_validate_parse: 18 callbacks suppressed
[  117.984926][ T8375] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1057'.
[  118.036124][ T8377] tap0: tun_chr_ioctl cmd 2147767517
[  118.369269][ T8383] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1061'.
[  118.476983][ T8385] netlink: 'syz.2.1062': attribute type 29 has an invalid length.
[  118.480400][ T8385] netlink: 'syz.2.1062': attribute type 29 has an invalid length.
[  118.480774][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'.
[  118.483453][ T8385] netlink: 'syz.2.1062': attribute type 29 has an invalid length.
[  118.486823][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1063'.
[  118.595170][ T8403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.678560][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'.
[  118.686129][ T8407] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1073'.
[  118.689048][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'.
[  118.719445][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'.
[  121.837201][ T8428] netlink: 'syz.0.1083': attribute type 11 has an invalid length.
[  121.840359][ T8428] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1083'.
[  121.881322][ T8432] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.926436][ T8438] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1088'.
[  121.998609][ T8446] netlink: 'syz.2.1092': attribute type 10 has an invalid length.
[  122.002931][ T8446] batman_adv: batadv0: Adding interface: vlan1
[  122.008790][ T8446] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.021549][ T8446] batman_adv: batadv0: Interface activated: vlan1
[  122.030758][ T8448] rdma_rxe: rxe_newlink: failed to add lo
[  123.016330][ T8490] __nla_validate_parse: 3 callbacks suppressed
[  123.016344][ T8490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1110'.
[  123.023021][ T8490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1110'.
[  123.029523][ T8490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1110'.
[  123.240427][ T8506] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1118'.
[  123.414986][ T8522] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1126'.
[  123.423351][ T8522] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1126'.
[  123.552598][ T8530] netlink: 'syz.0.1131': attribute type 10 has an invalid length.
[  123.558171][ T8530] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1131'.
[  124.702671][ T8554] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1140'.
[  124.831688][ T8563] netlink: 'syz.2.1142': attribute type 10 has an invalid length.
[  124.863580][ T8563] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  124.873335][ T8563] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  124.883941][ T8563] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  124.907191][ T8567] bridge_slave_1: left allmulticast mode
[  124.913652][ T8567] bridge_slave_1: left promiscuous mode
[  124.916730][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.922558][ T8567] bridge_slave_0: left promiscuous mode
[  124.929156][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.979244][ T8571] netlink: 'syz.2.1147': attribute type 29 has an invalid length.
[  124.983177][ T8571] netlink: 'syz.2.1147': attribute type 29 has an invalid length.
[  125.044743][ T8577] syz.2.1150 (8577) used obsolete PPPIOCDETACH ioctl
[  125.229628][ T8583] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1153'.
[  125.923223][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'.
[  126.731542][ T8635] netlink: 'syz.1.1174': attribute type 1 has an invalid length.
[  127.113352][ T8660] openvswitch: netlink: IP tunnel dst address not specified
[  127.475901][ T8695] netlink: 'syz.2.1200': attribute type 29 has an invalid length.
[  127.479278][ T8695] netlink: 'syz.2.1200': attribute type 29 has an invalid length.
[  127.662737][ T8707] : entered promiscuous mode
[  127.666570][ T8707] : entered allmulticast mode
[  127.947570][ T8723] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  128.721726][ T8733] netlink: 'syz.0.1211': attribute type 39 has an invalid length.
[  128.798712][ T8739] net veth1_virt_wifi : renamed from virt_wifi0
[  128.884702][ T8741] netdevsim netdevsim2 : renamed from netdevsim0
[  129.039038][ T8746] __nla_validate_parse: 4 callbacks suppressed
[  129.039051][ T8746] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1215'.
[  129.099691][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'.
[  129.109699][ T8752] : entered promiscuous mode
[  129.156068][ T8758] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1220'.
[  129.159568][ T8758] netlink: zone id is out of range
[  129.161296][ T8758] netlink: zone id is out of range
[  129.163313][ T8758] netlink: zone id is out of range
[  129.171889][ T8758] netlink: zone id is out of range
[  129.174681][ T8758] netlink: zone id is out of range
[  129.176717][ T8758] netlink: zone id is out of range
[  129.178486][ T8758] netlink: zone id is out of range
[  129.180265][ T8758] netlink: zone id is out of range
[  129.182349][ T8758] netlink: zone id is out of range
[  129.360206][ T8784] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1234'.
[  129.642036][ T8806] netlink: 'syz.2.1244': attribute type 21 has an invalid length.
[  129.648408][ T8806] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1244'.
[  129.757310][ T8814] netlink: 'syz.2.1249': attribute type 5 has an invalid length.
[  130.706958][ T8824] netlink: 'syz.2.1254': attribute type 1 has an invalid length.
[  130.759049][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'.
[  130.889574][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1264'.
[  131.356654][ T5720] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.438660][ T5720] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.449873][ T8866] lo speed is unknown, defaulting to 1000
[  131.530912][ T5720] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.593641][ T5720] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.741323][ T5720] bridge_slave_1: left allmulticast mode
[  131.743435][ T5720] bridge_slave_1: left promiscuous mode
[  131.748860][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.813823][ T5720] bridge_slave_0: left allmulticast mode
[  131.820523][ T5720] bridge_slave_0: left promiscuous mode
[  131.823329][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.826754][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.832428][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.845974][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.852542][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.855864][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.913160][ T8885] netlink: 'syz.1.1279': attribute type 2 has an invalid length.
[  132.080858][ T8894] raw_sendmsg: syz.1.1282 forgot to set AF_INET. Fix it!
[  132.241080][ T8902] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1286'.
[  132.279741][ T5720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.284239][ T5720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.288110][ T5720] bond0 (unregistering): Released all slaves
[  132.320916][ T8900] net_ratelimit: 14 callbacks suppressed
[  132.320930][ T8900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.362252][ T8877] lo speed is unknown, defaulting to 1000
[  132.372815][ T5720] : left promiscuous mode
[  132.526800][ T8877] chnl_net:caif_netlink_parms(): no params data found
[  132.605908][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  132.608685][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  133.717646][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.720649][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.723731][ T8877] bridge_slave_0: entered allmulticast mode
[  133.732101][ T8877] bridge_slave_0: entered promiscuous mode
[  133.782380][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.784818][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.795152][ T8877] bridge_slave_1: entered allmulticast mode
[  133.798273][ T8877] bridge_slave_1: entered promiscuous mode
[  133.893150][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.908067][ T5856] Bluetooth: hci1: command tx timeout
[  133.950667][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.066922][ T8877] team0: Port device team_slave_0 added
[  134.082908][ T8877] team0: Port device team_slave_1 added
[  134.226841][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.230510][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.242187][ T8877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.287711][ T5720] hsr_slave_0: left promiscuous mode
[  134.299109][ T5720] hsr_slave_1: left promiscuous mode
[  134.302121][ T5720] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.305532][ T5720] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.316512][ T5720] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.319767][ T5720] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.339364][ T5720] veth1_macvtap: left promiscuous mode
[  134.342039][ T5720] veth0_macvtap: left promiscuous mode
[  134.344755][ T5720] veth1_vlan: left promiscuous mode
[  134.350830][ T5720] veth0_vlan: left promiscuous mode
[  134.720084][ T5720] team0 (unregistering): Port device team_slave_1 removed
[  134.743849][ T5720] team0 (unregistering): Port device C removed
[  135.032809][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.036607][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.051784][ T8877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.089731][ T5909] lo speed is unknown, defaulting to 1000
[  135.092403][ T5909] syz2: Port: 1 Link DOWN
[  135.155922][ T8877] hsr_slave_0: entered promiscuous mode
[  135.158741][ T8877] hsr_slave_1: entered promiscuous mode
[  135.161330][ T8877] debugfs: 'hsr0' already exists in 'hsr'
[  135.163407][ T8877] Cannot create hsr debugfs directory
[  135.413705][ T8877] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  135.467055][ T8877] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  135.479437][ T8877] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  135.534843][ T8877] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  135.667297][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.681058][ T8877] 8021q: adding VLAN 0 to HW filter on device team0
[  135.704591][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.707071][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.723986][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.726414][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.760770][ T8877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  135.794031][ T9001] netlink: 'syz.2.1312': attribute type 10 has an invalid length.
[  135.867772][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.900217][ T8877] veth0_vlan: entered promiscuous mode
[  135.910743][ T8877] veth1_vlan: entered promiscuous mode
[  135.952835][ T8877] veth0_macvtap: entered promiscuous mode
[  135.961721][ T8877] veth1_macvtap: entered promiscuous mode
[  135.985130][ T5856] Bluetooth: hci1: command tx timeout
[  135.996005][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.006629][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.024622][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.031592][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.039936][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.048814][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.093437][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.097662][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.136818][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.140182][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.196476][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1276'.
[  136.234700][ T9023] netlink: 'syz.2.1316': attribute type 1 has an invalid length.
[  136.424399][ T9037] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1320'.
[  136.711585][ T9058] syzkaller0: entered promiscuous mode
[  136.713477][ T9058] syzkaller0: entered allmulticast mode
[  137.017017][ T9073] netlink: 'syz.1.1333': attribute type 10 has an invalid length.
[  137.019720][ T9073] netlink: 'syz.1.1333': attribute type 19 has an invalid length.
[  137.022606][ T9073] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1333'.
[  137.700086][ T9087] netlink: 'syz.1.1339': attribute type 22 has an invalid length.
[  138.066734][ T5856] Bluetooth: hci1: command tx timeout
[  139.230384][ T9142] bridge0: entered promiscuous mode
[  139.232409][ T9142] bridge0: entered allmulticast mode
[  139.240849][ T9144] netlink: 'syz.1.1361': attribute type 2 has an invalid length.
[  139.254120][ T9144] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1361'.
[  139.373181][ T9156] netlink: 'syz.2.1364': attribute type 1 has an invalid length.
[  139.549119][ T9170] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1373'.
[  139.595657][ T9170] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1373'.
[  139.727850][ T9170] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1373'.
[  139.751982][ T9187] netlink: 'syz.1.1379': attribute type 21 has an invalid length.
[  139.755235][ T9187] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1379'.
[  139.798953][ T9189] _Z`Ԁ@S!: entered promiscuous mode
[  139.840351][ T9191] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  139.882349][ T9193] netlink: 'syz.1.1382': attribute type 21 has an invalid length.
[  139.885913][ T9193] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1382'.
[  139.889638][ T9193] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1382'.
[  139.968495][ T9197] netlink: 'syz.1.1384': attribute type 12 has an invalid length.
[  140.145299][ T5856] Bluetooth: hci1: command tx timeout
[  140.968354][ T9222] sit0: entered allmulticast mode
[  141.228058][ T9248] __nla_validate_parse: 3 callbacks suppressed
[  141.228071][ T9248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1400'.
[  141.661746][ T9254] netlink: 'syz.3.1403': attribute type 3 has an invalid length.
[  141.664621][ T9254] netlink: 'syz.3.1403': attribute type 3 has an invalid length.
[  142.252445][ T9264] netlink: 'syz.2.1407': attribute type 46 has an invalid length.
[  142.253983][ T9265] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1408'.
[  142.423732][ T9282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1416'.
[  142.719757][ T9305] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  142.748523][ T5856] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  142.870554][ T9312] netlink: 'syz.2.1430': attribute type 3 has an invalid length.
[  142.888273][ T9312] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1430'.
[  142.983021][ T9320] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  143.180495][ T9328] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1436'.
[  143.184503][ T9328] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1436'.
[  143.189442][ T9328] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1436'.
[  143.472686][ T9339] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.1439'.
[  143.591795][ T9343] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1441'.
[  143.651352][ T9349] netlink: 'syz.1.1444': attribute type 10 has an invalid length.
[  143.660682][ T9349] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1444'.
[  143.668211][ T9349] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  143.713550][ T9352] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  144.182823][ T9400] blkio.reset_stats is deprecated
[  144.677585][ T9403] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  144.711627][ T9403] netlink: 'syz.3.1468': attribute type 10 has an invalid length.
[  144.839090][ T9403] team0: Port device dummy0 added
[  146.415366][ T9473] __nla_validate_parse: 5 callbacks suppressed
[  146.415376][ T9473] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1497'.
[  146.427033][ T9473] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  148.543349][ T9512] netlink: 'syz.1.1503': attribute type 4 has an invalid length.
[  148.553500][ T9512] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1503'.
[  148.741039][ T9528] netlink: 'syz.1.1510': attribute type 4 has an invalid length.
[  148.744243][ T9528] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1510'.
[  149.078251][ T9554] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1520'.
[  149.125426][ T9559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1521'.
[  149.133342][ T9559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1521'.
[  149.169844][ T9557] syzkaller0: entered promiscuous mode
[  149.172075][ T9557] syzkaller0: entered allmulticast mode
[  149.174864][ T9559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1521'.
[  149.248302][ T9570] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1524'.
[  149.441489][ T9583] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  150.235971][ T9599] bridge_slave_0: entered promiscuous mode
[  150.310261][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1537'.
[  150.329090][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'.
[  150.980692][ T9629] wg0 speed is unknown, defaulting to 1000
[  150.984209][ T9629] wg0 speed is unknown, defaulting to 1000
[  150.990683][ T9629] wg0 speed is unknown, defaulting to 1000
[  151.011453][ T9629] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  151.117613][ T9629] wg0 speed is unknown, defaulting to 1000
[  151.122711][ T9629] wg0 speed is unknown, defaulting to 1000
[  151.129103][ T9629] wg0 speed is unknown, defaulting to 1000
[  151.133182][ T9629] wg0 speed is unknown, defaulting to 1000
[  151.139192][ T9629] wg0 speed is unknown, defaulting to 1000
[  151.145596][ T9629] wg0 speed is unknown, defaulting to 1000
[  151.494388][ T9649] __nla_validate_parse: 1 callbacks suppressed
[  151.494403][ T9649] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1552'.
[  151.596062][ T9652] netlink: 'syz.2.1553': attribute type 1 has an invalid length.
[  151.599585][ T9652] netlink: 'syz.2.1553': attribute type 1 has an invalid length.
[  151.724429][   T33] audit: type=1107 audit(1757555354.529:2): pid=9641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  152.661758][ T9664] option changes via remount are deprecated (pid=9663 comm=syz.2.1558)
[  152.873866][ T9672] netlink: 'syz.3.1561': attribute type 1 has an invalid length.
[  153.128551][ T9696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.286540][ T9708] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1578'.
[  153.290699][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'.
[  153.420023][ T9716] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1582'.
[  153.946792][ T9748] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1597'.
[  154.096245][ T5856] Bluetooth: hci1: unexpected event 0x3c length: 15 > 7
[  154.331413][ T9763] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.357064][ T9766] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1605'.
[  154.902852][ T9796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.292794][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'.
[  155.318482][ T9817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1629'.
[  155.873036][ T9866] netlink: 'syz.2.1651': attribute type 1 has an invalid length.
[  155.932410][ T9870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1654'.
[  156.025395][ T9875] syz.2.1656: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  156.033409][ T9875] CPU: 0 UID: 0 PID: 9875 Comm: syz.2.1656 Not tainted syzkaller #0 PREEMPT(full) 
[  156.033420][ T9875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.033424][ T9875] Call Trace:
[  156.033428][ T9875]  <TASK>
[  156.033431][ T9875]  dump_stack_lvl+0x189/0x250
[  156.033445][ T9875]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.033453][ T9875]  ? __pfx__printk+0x10/0x10
[  156.033463][ T9875]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  156.033492][ T9875]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  156.033500][ T9875]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  156.033510][ T9875]  warn_alloc+0x214/0x310
[  156.033518][ T9875]  ? stack_depot_save_flags+0x40/0x860
[  156.033530][ T9875]  ? __pfx_warn_alloc+0x10/0x10
[  156.033538][ T9875]  ? kasan_save_track+0x4f/0x80
[  156.033548][ T9875]  ? xskq_create+0x56/0x170
[  156.033557][ T9875]  ? xsk_init_queue+0xb0/0x110
[  156.033565][ T9875]  ? xsk_setsockopt+0x57b/0x8d0
[  156.033573][ T9875]  ? do_sock_setsockopt+0x17c/0x1b0
[  156.033580][ T9875]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  156.033585][ T9875]  ? do_syscall_64+0xfa/0x3b0
[  156.033591][ T9875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.033601][ T9875]  __vmalloc_node_range_noprof+0x125/0x12f0
[  156.033624][ T9875]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  156.033635][ T9875]  ? xskq_create+0x56/0x170
[  156.033645][ T9875]  ? __kasan_kmalloc+0x93/0xb0
[  156.033655][ T9875]  vmalloc_user_noprof+0xad/0xf0
[  156.033662][ T9875]  ? xskq_create+0xbf/0x170
[  156.033671][ T9875]  xskq_create+0xbf/0x170
[  156.033681][ T9875]  xsk_init_queue+0xb0/0x110
[  156.033691][ T9875]  xsk_setsockopt+0x57b/0x8d0
[  156.033700][ T9875]  ? __pfx_xsk_setsockopt+0x10/0x10
[  156.033708][ T9875]  ? __pfx_aa_sk_perm+0x10/0x10
[  156.033720][ T9875]  ? __fget_files+0x2a/0x420
[  156.033726][ T9875]  ? aa_sock_opt_perm+0xff/0x1b0
[  156.033734][ T9875]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  156.033742][ T9875]  ? __pfx_xsk_setsockopt+0x10/0x10
[  156.033751][ T9875]  do_sock_setsockopt+0x17c/0x1b0
[  156.033759][ T9875]  __x64_sys_setsockopt+0x13f/0x1b0
[  156.033768][ T9875]  do_syscall_64+0xfa/0x3b0
[  156.033775][ T9875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.033781][ T9875]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  156.033790][ T9875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.033796][ T9875] RIP: 0033:0x7f467298eba9
[  156.033804][ T9875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.033809][ T9875] RSP: 002b:00007f46738fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  156.033817][ T9875] RAX: ffffffffffffffda RBX: 00007f4672bd5fa0 RCX: 00007f467298eba9
[  156.033822][ T9875] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  156.033825][ T9875] RBP: 00007f4672a11e19 R08: 0000000000000004 R09: 0000000000000000
[  156.033829][ T9875] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  156.033833][ T9875] R13: 00007f4672bd6038 R14: 00007f4672bd5fa0 R15: 00007ffd357eddc8
[  156.033845][ T9875]  </TASK>
[  156.034065][ T9875] Mem-Info:
[  156.087124][ T9880] netlink: 'syz.2.1656': attribute type 9 has an invalid length.
[  156.088353][ T9875] active_anon:6506 inactive_anon:0 isolated_anon:0
[  156.088353][ T9875]  active_file:16031 inactive_file:38279 isolated_file:0
[  156.088353][ T9875]  unevictable:1768 dirty:188 writeback:0
[  156.088353][ T9875]  slab_reclaimable:9837 slab_unreclaimable:54758
[  156.088353][ T9875]  mapped:18096 shmem:2463 pagetables:1150
[  156.088353][ T9875]  sec_pagetables:0 bounce:0
[  156.088353][ T9875]  kernel_misc_reclaimable:0
[  156.088353][ T9875]  free:282872 free_pcp:16814 free_cma:0
[  156.160874][ T9882] netlink: 'syz.3.1658': attribute type 10 has an invalid length.
[  156.169156][ T9875] Node 0 active_anon:14936kB inactive_anon:0kB active_file:43420kB inactive_file:15968kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38732kB dirty:560kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5900kB pagetables:2388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  156.182564][ T9875] Node 1 active_anon:10952kB inactive_anon:0kB active_file:20704kB inactive_file:137148kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33856kB dirty:192kB writeback:0kB shmem:4760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6056kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  156.193542][ T9875] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  156.203857][ T9875] lowmem_reserve[]: 0 811 811 811 811
[  156.207813][ T9875] Node 0 DMA32 free:345976kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14800kB inactive_anon:0kB active_file:43420kB inactive_file:15968kB unevictable:3536kB writepending:560kB present:1556484kB managed:830936kB mlocked:0kB bounce:0kB free_pcp:30996kB local_pcp:15132kB free_cma:0kB
[  156.226708][ T9875] lowmem_reserve[]: 0 0 0 0 0
[  156.228998][ T9875] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  156.241538][ T9875] lowmem_reserve[]: 0 0 854 854 854
[  156.243980][ T9875] Node 1 Normal free:309424kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10884kB inactive_anon:0kB active_file:20704kB inactive_file:137148kB unevictable:3536kB writepending:192kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37928kB local_pcp:20960kB free_cma:0kB
[  156.255463][ T9875] lowmem_reserve[]: 0 0 0 0 0
[  156.257456][ T9875] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  156.262074][ T9875] Node 0 DMA32: 854*4kB (UM) 490*8kB (UM) 429*16kB (UM) 429*32kB (UME) 126*64kB (UM) 40*128kB (UME) 17*256kB (UM) 15*512kB (UME) 8*1024kB (UM) 3*2048kB (ME) 68*4096kB (M) = 346008kB
[  156.269060][ T9875] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  156.275898][ T9875] Node 1 Normal: 560*4kB (UME) 594*8kB (UME) 674*16kB (UME) 188*32kB (UME) 224*64kB (UM) 133*128kB (UME) 25*256kB (UM) 6*512kB (UM) 7*1024kB (UME) 4*2048kB (UM) 56*4096kB (UM) = 309360kB
[  156.283296][ T9875] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  156.287330][ T9875] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  156.296267][ T9875] 56739 total pagecache pages
[  156.299037][ T9875] 0 pages in swap cache
[  156.305159][ T9875] Free swap  = 124996kB
[  156.308433][ T9875] Total swap = 124996kB
[  156.315695][ T9875] 786301 pages RAM
[  156.318240][ T9875] 0 pages HighMem/MovableOnly
[  156.321264][ T9875] 241335 pages reserved
[  156.322967][ T9875] 0 pages cma reserved
[  156.461125][ T9899] netlink: 'syz.3.1666': attribute type 10 has an invalid length.
[  156.477443][ T9899] 8021q: adding VLAN 0 to HW filter on device team0
[  156.481995][ T9899] bond0: (slave team0): Enslaving as an active interface with an up link
[  156.554409][ T9899] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  156.593272][ T9899] can: request_module (can-proto-0) failed.
[  156.755285][ T9899] syz.3.1666 (9899) used greatest stack depth: 19072 bytes left
[  156.951461][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'.
[  157.008930][ T9955] netlink: 'syz.1.1692': attribute type 2 has an invalid length.
[  158.149988][ T9978] syzkaller0: entered promiscuous mode
[  158.152845][ T9978] syzkaller0: entered allmulticast mode
[  159.423832][ T9984] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1707'.
[  159.428713][ T9984] netlink: zone id is out of range
[  159.430957][ T9984] netlink: zone id is out of range
[  159.433231][ T9984] netlink: zone id is out of range
[  159.435687][ T9984] netlink: zone id is out of range
[  159.437943][ T9984] netlink: zone id is out of range
[  159.440287][ T9984] netlink: zone id is out of range
[  159.442174][ T9984] netlink: zone id is out of range
[  159.444439][ T9984] netlink: zone id is out of range
[  159.446926][ T9984] netlink: zone id is out of range
[  159.449092][ T9984] netlink: zone id is out of range
[  160.242851][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'.
[  160.257316][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'.
[  160.380421][T10001] netlink: 'syz.3.1715': attribute type 1 has an invalid length.
[  160.381642][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'.
[  160.470542][T10007] netlink: 'syz.3.1718': attribute type 1 has an invalid length.
[  160.473246][T10007] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1718'.
[  160.527147][T10012] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  160.703542][T10029] netlink: 'syz.1.1729': attribute type 10 has an invalid length.
[  160.705299][T10030] netlink: 'syz.3.1728': attribute type 21 has an invalid length.
[  160.706615][T10029] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1729'.
[  160.719678][T10029] bond0: entered promiscuous mode
[  160.722093][T10029] : entered promiscuous mode
[  160.724387][T10029] bond_slave_1: entered promiscuous mode
[  160.731993][T10029] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.770494][T10036] netlink: 'syz.2.1732': attribute type 29 has an invalid length.
[  160.776148][T10036] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1732'.
[  160.779765][T10036] unsupported nla_type 58
[  161.362824][T10063] validate_nla: 1 callbacks suppressed
[  161.362838][T10063] netlink: 'syz.1.1744': attribute type 10 has an invalid length.
[  161.369146][T10063] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1744'.
[  161.594080][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'.
[  161.887135][T10101] netlink: 'syz.1.1761': attribute type 21 has an invalid length.
[  161.972851][T10106] netlink: 'syz.1.1763': attribute type 11 has an invalid length.
[  161.984039][T10106] __nla_validate_parse: 1 callbacks suppressed
[  161.984159][T10106] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1763'.
[  162.913503][T10125] netlink: 'syz.3.1769': attribute type 64 has an invalid length.
[  163.108252][ T5856] Bluetooth: hci0: ACL packet too small
[  163.764066][T10146] netlink: 'syz.1.1780': attribute type 2 has an invalid length.
[  163.769170][T10146] netlink: 'syz.1.1780': attribute type 1 has an invalid length.
[  163.772881][T10146] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1780'.
[  163.778840][T10146] nbd: illegal input index -404748436
[  163.901742][T10153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.904693][T10153] IPv6: NLM_F_CREATE should be set when creating new route
[  163.907981][T10153] IPv6: NLM_F_CREATE should be set when creating new route
[  163.911164][T10153] IPv6: NLM_F_CREATE should be set when creating new route
[  164.232925][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1784'.
[  164.729649][T10179] net_ratelimit: 73 callbacks suppressed
[  164.729658][T10179] openvswitch: netlink: IPv4 tunnel dst address is zero
[  164.877443][T10183] team0: Port device team_slave_0 removed
[  164.880204][T10183] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  164.937333][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1798'.
[  164.994625][T10193] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1801'.
[  165.063221][T10198] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1803'.
[  165.070049][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1803'.
[  165.466335][T10219] rdma_rxe: rxe_newlink: failed to add erspan0
[  165.636396][T10223] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.701610][T10226] netlink: 'syz.1.1814': attribute type 21 has an invalid length.
[  165.704957][T10226] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1814'.
[  165.708919][T10226] netlink: 'syz.1.1814': attribute type 4 has an invalid length.
[  166.351544][T10259] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1831'.
[  166.355937][T10259] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1831'.
[  166.943579][T10275] syzkaller1: tun_chr_ioctl cmd 1074025677
[  166.946646][T10275] syzkaller1: linktype set to 1
[  167.089847][T10279] __nla_validate_parse: 2 callbacks suppressed
[  167.089860][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'.
[  168.199004][T10297] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.202727][T10297] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.206286][T10297] bridge0: left promiscuous mode
[  168.321105][T10297] bridge_slave_1: left allmulticast mode
[  168.325003][T10297] bridge_slave_1: left promiscuous mode
[  168.336283][T10297] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.399909][T10297] bridge_slave_0: left allmulticast mode
[  168.403311][T10297] bridge_slave_0: left promiscuous mode
[  168.407603][T10297] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.716715][T10308] veth1_to_bond: entered allmulticast mode
[  168.940206][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'.
[  169.072205][T10330] netlink: 628 bytes leftover after parsing attributes in process `syz.1.1863'.
[  169.773406][T10354] netlink: 'syz.2.1872': attribute type 64 has an invalid length.
[  170.036103][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'.
[  170.151925][T10379] netlink: 'syz.3.1882': attribute type 14 has an invalid length.
[  170.155380][T10379] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1882'.
[  170.292035][T10386] netlink: 'syz.3.1885': attribute type 3 has an invalid length.
[  170.745295][T10395] netlink: 'syz.2.1888': attribute type 13 has an invalid length.
[  170.751142][T10395] netlink: 'syz.2.1888': attribute type 17 has an invalid length.
[  170.874276][T10395] bridge0: port 3(dummy0) entered blocking state
[  170.877215][T10395] bridge0: port 3(dummy0) entered forwarding state
[  170.891671][T10395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.906830][ T5856] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6
[  171.130607][T10417] netlink: 'syz.1.1900': attribute type 2 has an invalid length.
[  171.154906][T10417] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.1900'.
[  171.266237][T10429] netlink: 'syz.1.1905': attribute type 27 has an invalid length.
[  171.269304][T10429] netlink: 'syz.1.1905': attribute type 3 has an invalid length.
[  171.272021][T10429] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1905'.
[  172.172843][T10456] netlink: 'syz.2.1916': attribute type 3 has an invalid length.
[  172.273196][T10466] netlink: 'syz.1.1921': attribute type 10 has an invalid length.
[  172.276592][T10466] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1921'.
[  172.282351][T10466] dummy0: entered promiscuous mode
[  172.285187][T10466] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  173.029689][T10481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1928'.
[  173.450842][   T33] audit: type=1107 audit(1757555376.259:3): pid=10496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  173.460387][   T33] audit: type=1107 audit(1757555376.269:4): pid=10496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='T3'
[  173.939963][T10520] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1946'.
[  173.943805][T10520] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  174.253965][T10549] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1960'.
[  174.292481][T10552] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1962'.
[  174.639406][ T5856] Bluetooth: hci1: unknown advertising packet type: 0x5f
[  175.183148][T10598] syzkaller0: entered promiscuous mode
[  175.188757][T10598] syzkaller0: entered allmulticast mode
[  176.273920][T10609] netlink: 'syz.3.1986': attribute type 2 has an invalid length.
[  176.391588][T10621] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1992'.
[  177.101055][T10643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.683214][T10661] openvswitch: netlink: IP tunnel dst address not specified
[  177.873599][T10667] netlink: 'syz.2.2010': attribute type 13 has an invalid length.
[  177.879511][T10667] netlink: 'syz.2.2010': attribute type 58 has an invalid length.
[  177.890181][T10667] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2010'.
[  178.383725][T10676] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2014'.
[  178.391483][T10676] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2014'.
[  179.415914][T10703] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2026'.
[  179.453578][T10705] netlink: 'syz.1.2027': attribute type 3 has an invalid length.
[  179.458342][T10705] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2027'.
[  179.472436][T10707] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2028'.
[  180.009754][T10737] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2042'.
[  180.709791][ T5856] Bluetooth: hci2: command 0x0406 tx timeout
[  181.100199][T10756] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2049'.
[  181.104443][T10756] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2049'.
[  181.109524][T10756] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2049'.
[  181.463253][T10776] netlink: 'syz.1.2058': attribute type 1 has an invalid length.
[  181.514329][T10783] netlink: 'syz.3.2057': attribute type 1 has an invalid length.
[  182.014495][T10808] netlink: 'syz.1.2072': attribute type 29 has an invalid length.
[  182.020147][T10808] netlink: 'syz.1.2072': attribute type 29 has an invalid length.
[  182.024406][T10808] netlink: 'syz.1.2072': attribute type 29 has an invalid length.
[  182.567152][T10822] sock: sock_set_timeout: `syz.3.2078' (pid 10822) tries to set negative timeout
[  183.097347][T10842] netlink: 'syz.2.2088': attribute type 10 has an invalid length.
[  183.100859][T10842] __nla_validate_parse: 2 callbacks suppressed
[  183.100900][T10842] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2088'.
[  183.798475][T10870] syzkaller0: entered promiscuous mode
[  183.801127][T10870] syzkaller0: entered allmulticast mode
[  183.992367][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2105'.
[  184.991145][T10898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.925594][T10925] netlink: 'syz.1.2124': attribute type 9 has an invalid length.
[  185.935192][T10925] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.2124'.
[  185.967244][T10927] netlink: 'syz.3.2125': attribute type 5 has an invalid length.
[  186.084027][T10929] netlink: 'syz.3.2126': attribute type 29 has an invalid length.
[  186.098670][T10929] netlink: 'syz.3.2126': attribute type 10 has an invalid length.
[  186.259392][T10929] team0: Device bond0 is already an upper device of the team interface
[  187.031490][T10996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2154'.
[  188.027450][T11028] netlink: 'syz.2.2170': attribute type 41 has an invalid length.
[  188.108659][T11035] netlink: 'syz.3.2173': attribute type 1 has an invalid length.
[  188.111912][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2173'.
[  188.138129][T11018] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2165'.
[  188.448388][T11075] netlink: 'syz.2.2187': attribute type 13 has an invalid length.
[  188.452475][T11075] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2187'.
[  188.467550][T11075] erspan0: refused to change device tx_queue_len
[  188.470212][T11075] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  188.995813][T11093] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  189.000531][T11093] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  189.528499][T11101] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2197'.
[  189.653234][T11105] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2199'.
[  189.677976][T11093] syz.2.2195 (11093) used greatest stack depth: 18488 bytes left
[  189.720818][T11107] netlink: 'syz.1.2199': attribute type 21 has an invalid length.
[  189.728377][T11107] netlink: 'syz.1.2199': attribute type 10 has an invalid length.
[  190.087411][T11116] netlink: 'syz.3.2204': attribute type 16 has an invalid length.
[  190.090762][T11116] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2204'.
[  190.099410][T11114] netlink: 'syz.2.2202': attribute type 17 has an invalid length.
[  190.103261][T11114] netlink: 'syz.2.2202': attribute type 16 has an invalid length.
[  190.109151][T11114] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2202'.
[  190.230703][T11126] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2209'.
[  190.502046][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2213'.
[  190.506661][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2213'.
[  190.537044][T11140] netlink: 'syz.1.2215': attribute type 1 has an invalid length.
[  190.539705][T11140] netlink: 'syz.1.2215': attribute type 4 has an invalid length.
[  191.123231][T11146] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  191.788274][ T5848] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5
[  192.267268][T11202] batadv_slave_1: entered promiscuous mode
[  192.408073][T11210] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  193.689717][T11254] validate_nla: 4 callbacks suppressed
[  193.689727][T11254] netlink: 'syz.1.2266': attribute type 39 has an invalid length.
[  193.774861][T11257] __nla_validate_parse: 6 callbacks suppressed
[  193.774936][T11257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2263'.
[  193.812241][T11261] netlink: 'syz.3.2269': attribute type 12 has an invalid length.
[  193.815647][T11261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2269'.
[  193.821013][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2270'.
[  193.849470][T11265] netlink: 5844 bytes leftover after parsing attributes in process `syz.1.2271'.
[  193.931122][ T5847] bond0: (slave syz_tun): Releasing backup interface
[  193.997491][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  194.000003][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  194.341743][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  194.347202][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.350960][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.354959][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.361049][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.419720][T11274] wg0 speed is unknown, defaulting to 1000
[  194.570099][T11274] chnl_net:caif_netlink_parms(): no params data found
[  194.678173][T11274] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.681153][T11274] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.684154][T11274] bridge_slave_0: entered allmulticast mode
[  194.694132][T11274] bridge_slave_0: entered promiscuous mode
[  194.706813][T11274] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.714199][T11274] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.723604][T11274] bridge_slave_1: entered allmulticast mode
[  194.738414][T11274] bridge_slave_1: entered promiscuous mode
[  194.805662][T11274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.812585][T11274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.846286][T11274] team0: Port device team_slave_0 added
[  194.850007][T11274] team0: Port device team_slave_1 added
[  194.876658][T11274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.879640][T11274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.890463][T11274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.897566][T11274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.900654][T11274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.912091][T11274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.958829][T11274] hsr_slave_0: entered promiscuous mode
[  194.961815][T11274] hsr_slave_1: entered promiscuous mode
[  194.971556][T11274] debugfs: 'hsr0' already exists in 'hsr'
[  194.973692][T11274] Cannot create hsr debugfs directory
[  195.129438][T11274] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.143626][T11307] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.2288'.
[  195.198633][T11274] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.287028][T11274] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.357404][T11274] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.466467][T11274] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  195.474801][T11274] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  195.486270][T11274] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  195.492749][T11274] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  195.590722][T11274] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.603690][T11274] 8021q: adding VLAN 0 to HW filter on device team0
[  195.620412][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.623600][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.639896][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.642737][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.782981][T11274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.818007][T11274] veth0_vlan: entered promiscuous mode
[  195.824451][T11274] veth1_vlan: entered promiscuous mode
[  195.852438][T11274] veth0_macvtap: entered promiscuous mode
[  195.858541][T11274] veth1_macvtap: entered promiscuous mode
[  195.867473][T11274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.872478][T11274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.882929][ T5908] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.893868][ T5908] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.898365][ T5908] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.901578][T11374] netlink: 'syz.2.2316': attribute type 29 has an invalid length.
[  195.914163][ T5908] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.920977][T11374] netlink: 'syz.2.2316': attribute type 29 has an invalid length.
[  195.929926][T11374] netlink: 'syz.2.2316': attribute type 29 has an invalid length.
[  195.974303][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.977775][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.026565][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.031029][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.123877][T11384] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  196.151685][T11388] netlink: 'syz.3.2322': attribute type 7 has an invalid length.
[  196.155410][T11388] netlink: 'syz.3.2322': attribute type 8 has an invalid length.
[  196.385233][ T5848] Bluetooth: hci0: command tx timeout
[  197.412886][T11420] netlink: 'syz.2.2332': attribute type 64 has an invalid length.
[  197.610379][T11434] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2340'.
[  197.778170][T11451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2347'.
[  197.782267][T11451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2347'.
[  198.059827][T11459] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2350'.
[  198.465328][ T5848] Bluetooth: hci0: command tx timeout
[  199.189498][T11490] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  199.193009][T11490] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  199.588391][T11512] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2374'.
[  199.688015][T11520] openvswitch: netlink: Missing valid actions attribute.
[  199.690641][T11520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.909215][T11526] delete_channel: no stack
[  199.990248][T11543] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2387'.
[  200.234319][T11557] netlink: 'syz.3.2394': attribute type 10 has an invalid length.
[  200.238468][T11557] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2394'.
[  200.318213][T11559] netlink: 'syz.3.2395': attribute type 12 has an invalid length.
[  200.321921][T11559] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2395'.
[  200.363580][T11561] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2393'.
[  200.713275][ T5848] Bluetooth: hci0: command tx timeout
[  200.940195][T11567] netlink: 'syz.1.2398': attribute type 11 has an invalid length.
[  200.943278][T11567] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.2398'.
[  201.005316][T11573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.053461][T11576] lo speed is unknown, defaulting to 1000
[  201.114339][T11578] syzkaller0: entered promiscuous mode
[  201.116366][T11578] syzkaller0: entered allmulticast mode
[  202.891360][ T5848] Bluetooth: hci0: command tx timeout
[  204.030524][T11620] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2419'.
[  204.062991][T11626] netlink: 'syz.1.2421': attribute type 12 has an invalid length.
[  204.067112][T11626] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2421'.
[  204.139986][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'.
[  204.271454][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2428'.
[  204.319028][T11645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.627139][T11662] delete_channel: no stack
[  205.263892][T11683] netlink: 'syz.1.2445': attribute type 32 has an invalid length.
[  208.340626][T11705] __nla_validate_parse: 2 callbacks suppressed
[  208.340640][T11705] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2449'.
[  208.343933][T11706] sock: sock_timestamping_bind_phc: sock not bind to device
[  208.463317][T11721] netlink: 'syz.2.2458': attribute type 21 has an invalid length.
[  208.470782][T11721] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2458'.
[  208.564038][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'.
[  208.589233][T11732] siw: device registration error -23
[  210.459996][T11760] sctp: [Deprecated]: syz.2.2475 (pid 11760) Use of struct sctp_assoc_value in delayed_ack socket option.
[  210.459996][T11760] Use struct sctp_sack_info instead
[  211.312113][ T5848] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  211.312687][T11770] @: renamed from bond_slave_0 (while UP)
[  211.353179][T11772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2479'.
[  211.472770][T11776] syzkaller0: entered promiscuous mode
[  211.476139][T11776] syzkaller0: entered allmulticast mode
[  211.531931][T11784] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2484'.
[  213.001754][T11809] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  213.052176][T11811] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2495'.
[  213.061819][T11811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2495'.
[  213.072057][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2495'.
[  213.280860][T11813] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.920237][T11836] netlink: 'syz.2.2505': attribute type 1 has an invalid length.
[  213.923501][T11836] netlink: 'syz.2.2505': attribute type 2 has an invalid length.
[  214.029874][ T5848] Bluetooth: hci2: Dropping invalid advertising data
[  214.032707][ T5848] Bluetooth: hci2: Malformed LE Event: 0x02
[  214.672160][ T5848] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  215.342034][T11895] C: renamed from team_slave_0 (while UP)
[  215.351690][T11895] netlink: 'syz.3.2532': attribute type 8 has an invalid length.
[  215.354560][T11895] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  215.735876][T11897] syzkaller0: entered promiscuous mode
[  215.738560][T11897] syzkaller0: entered allmulticast mode
[  215.796540][T11906] netlink: 'syz.1.2537': attribute type 2 has an invalid length.
[  215.799079][T11906] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2537'.
[  216.260376][T11920] netlink: 'syz.2.2543': attribute type 39 has an invalid length.
[  216.950229][T11925] netlink: 'syz.1.2545': attribute type 10 has an invalid length.
[  216.953001][T11925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2545'.
[  217.087447][T11925] dummy0: entered promiscuous mode
[  217.272553][T11946] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2555'.
[  217.277543][T11946] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2555'.
[  217.281035][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2555'.
[  217.397562][T11960] netlink: 'syz.2.2562': attribute type 2 has an invalid length.
[  217.454646][T11968] netlink: 'syz.3.2566': attribute type 6 has an invalid length.
[  217.499524][T11973] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2569'.
[  217.502396][T11973] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2569'.
[  218.031192][T12000] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.2580'.
[  218.093979][T12009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2584'.
[  218.143631][T12017] netlink: 'syz.3.2588': attribute type 21 has an invalid length.
[  218.148096][T12017] netlink: 14565 bytes leftover after parsing attributes in process `syz.3.2588'.
[  220.676602][T12102] wg0 speed is unknown, defaulting to 1000
[  220.856540][T12125] __nla_validate_parse: 1 callbacks suppressed
[  220.856550][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'.
[  220.873803][T12125] : entered promiscuous mode
[  220.908363][T12128] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2621'.
[  221.146960][T12144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2628'.
[  221.151601][T12144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2628'.
[  222.269957][ T5848] Bluetooth: hci1: Malformed LE Event: 0x0d
[  222.406442][T12204] netlink: 'syz.1.2653': attribute type 6 has an invalid length.
[  222.411245][T12204] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2653'.
[  223.393299][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2662'.
[  223.467390][T12236] netlink: 'syz.3.2665': attribute type 10 has an invalid length.
[  223.470109][T12236] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2665'.
[  223.987316][T12262] netlink: 'syz.2.2676': attribute type 1 has an invalid length.
[  223.990426][T12262] netlink: 'syz.2.2676': attribute type 4 has an invalid length.
[  223.993482][T12262] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2676'.
[  224.687863][T12275] netlink: 'syz.3.2682': attribute type 27 has an invalid length.
[  225.081019][T12295] hsr0: entered promiscuous mode
[  225.203268][ T5848] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  225.782473][ T5848] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[  226.021391][T12362] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2721'.
[  226.150914][T12377] syzkaller0: entered promiscuous mode
[  226.152812][T12377] syzkaller0: entered allmulticast mode
[  226.160050][T12379] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.2729'.
[  226.176838][T12375] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.2728'.
[  226.182756][T12375] openvswitch: netlink: Message has 6 unknown bytes.
[  226.272386][T12383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2728'.
[  227.230637][T12393] syzkaller0: entered promiscuous mode
[  227.232481][T12393] syzkaller0: entered allmulticast mode
[  227.349477][T12408] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  228.129864][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2739'.
[  228.134027][T12410] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2739'.
[  228.208176][T12415] IPv6: Can't replace route, no match found
[  228.252119][T12412] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  228.259808][T12412] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  228.333465][T12423] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2745'.
[  228.348837][T12427] netlink: 'syz.3.2747': attribute type 21 has an invalid length.
[  228.352298][T12427] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2747'.
[  228.642854][T12451] netlink: 'syz.1.2757': attribute type 29 has an invalid length.
[  228.647966][T12451] netlink: 'syz.1.2757': attribute type 29 has an invalid length.
[  228.650909][T12451] netlink: 'syz.1.2757': attribute type 29 has an invalid length.
[  229.022411][T12463] netlink: 'syz.3.2762': attribute type 11 has an invalid length.
[  229.025702][T12463] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.2762'.
[  229.080981][T12463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.230636][T12428] delete_channel: no stack
[  229.280177][T12469] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  229.292860][T12471] sock: sock_timestamping_bind_phc: sock not bind to device
[  230.707732][T12536] netlink: 'syz.2.2793': attribute type 1 has an invalid length.
[  230.838028][T12547] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2797'.
[  230.868649][T12550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.904392][T12556] netlink: 'syz.1.2802': attribute type 21 has an invalid length.
[  230.925905][T12558] netlink: zone id is out of range
[  230.928138][T12558] netlink: zone id is out of range
[  230.930458][T12558] netlink: zone id is out of range
[  230.932373][T12558] netlink: zone id is out of range
[  230.934068][T12558] netlink: zone id is out of range
[  230.936917][T12558] netlink: zone id is out of range
[  231.007890][T12564] netlink: 'syz.3.2806': attribute type 11 has an invalid length.
[  231.011548][T12563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.213709][T12590] __nla_validate_parse: 3 callbacks suppressed
[  231.213719][T12590] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2818'.
[  231.300975][T12603] C: renamed from team_slave_0 (while UP)
[  231.310025][T12603] netlink: 'syz.1.2825': attribute type 4 has an invalid length.
[  231.313097][T12603] net_ratelimit: 79 callbacks suppressed
[  231.313104][T12603] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  232.348984][T12625] netlink: 'syz.1.2835': attribute type 6 has an invalid length.
[  232.352073][T12625] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2835'.
[  232.408715][T12627] batman_adv: batadv0: Interface deactivated: vlan1
[  232.497647][T12630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2837'.
[  232.501020][T12630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2837'.
[  232.506232][T12629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2837'.
[  232.589076][T12638] veth0_vlan: left promiscuous mode
[  232.592955][T12638] veth0_vlan: entered promiscuous mode
[  232.601837][T12638] batman_adv: batadv0: Interface activated: vlan1
[  233.337621][T12646] netlink: 'syz.3.2844': attribute type 10 has an invalid length.
[  233.370189][T12646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.377117][T12646] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  233.581890][T12667] netlink: 'syz.2.2853': attribute type 21 has an invalid length.
[  233.584842][T12667] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2853'.
[  233.600727][T12667] netlink: 'syz.2.2853': attribute type 4 has an invalid length.
[  233.626394][T12671] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2856'.
[  233.635790][T12671] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2856'.
[  233.661677][T12674] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2859'.
[  233.665079][T12674] tc_dump_action: action bad kind
[  233.948004][T12704] netlink: 'syz.2.2871': attribute type 10 has an invalid length.
[  233.967836][T12706] netlink: 'syz.1.2872': attribute type 11 has an invalid length.
[  234.092742][T12704] batman_adv: batadv0: Interface deactivated: vlan1
[  234.377450][T12704] veth0_vlan: left promiscuous mode
[  234.426912][T12704] veth0_vlan: entered promiscuous mode
[  234.701280][T12704] batman_adv: batadv0: Interface activated: vlan1
[  234.706290][T12704] team0: Device veth0_vlan failed to register rx_handler
[  234.753569][T12704] batman_adv: batadv0: Interface deactivated: vlan1
[  234.800446][T12704] syz.2.2871 (12704) used greatest stack depth: 18424 bytes left
[  234.892559][T12728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2882'.
[  235.106064][ T5848] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  235.109980][ T5848] Bluetooth: hci0: Injecting HCI hardware error event
[  235.113595][ T5848] Bluetooth: hci0: hardware error 0x00
[  236.185340][T12791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.410509][T12814] veth1_macvtap: left promiscuous mode
[  236.412436][T12814] macsec0: entered allmulticast mode
[  236.428498][T12814] veth1_macvtap: entered promiscuous mode
[  236.430463][T12814] veth1_macvtap: entered allmulticast mode
[  236.433079][T12814] macsec0: entered promiscuous mode
[  236.532923][T12816] __nla_validate_parse: 2 callbacks suppressed
[  236.532932][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2921'.
[  236.535781][T12819] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2918'.
[  236.860323][T12836] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2929'.
[  237.186915][ T5848] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  237.256782][T12867] netlink: 'syz.2.2939': attribute type 4 has an invalid length.
[  237.259437][T12867] netlink: 209028 bytes leftover after parsing attributes in process `syz.2.2939'.
[  238.263987][T12887] netlink: 'syz.1.2947': attribute type 10 has an invalid length.
[  238.287821][T12887] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  238.302948][T12897] netlink: 'syz.2.2951': attribute type 4 has an invalid length.
[  238.328322][T12899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2952'.
[  238.371677][T12903] netlink: 'syz.2.2955': attribute type 5 has an invalid length.
[  238.377782][T12903] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2955'.
[  238.422412][T12907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  238.424893][T12907] IPv6: NLM_F_CREATE should be set when creating new route
[  238.427398][T12907] IPv6: NLM_F_CREATE should be set when creating new route
[  238.429836][T12907] IPv6: NLM_F_CREATE should be set when creating new route
[  238.619556][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2962'.
[  240.134552][T12956] svc: failed to register nfsdv3 RPC service (errno 111).
[  240.141880][T12956] svc: failed to register nfsaclv3 RPC service (errno 111).
[  240.715352][T12978] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2986'.
[  240.804538][T12982] _Z`Ԁ@S: entered promiscuous mode
[  240.947006][T13002] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2997'.
[  241.003010][T13002] netlink: 'syz.2.2997': attribute type 4 has an invalid length.
[  241.103868][T13011] netlink: 'syz.1.3002': attribute type 29 has an invalid length.
[  241.108402][T13011] netlink: 'syz.1.3002': attribute type 29 has an invalid length.
[  241.111307][T13011] netlink: 'syz.1.3002': attribute type 29 has an invalid length.
[  241.232067][T13015] wg0 speed is unknown, defaulting to 1000
[  241.268776][T13002] netlink: 'syz.2.2997': attribute type 10 has an invalid length.
[  241.287776][T13002] bridge0: port 3(dummy0) entered disabled state
[  241.291596][T13002] dummy0: left allmulticast mode
[  241.293556][T13002] dummy0: left promiscuous mode
[  241.297387][T13002] bridge0: port 3(dummy0) entered disabled state
[  241.341725][T13002] team0: Port device dummy0 added
[  241.530115][T13034] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3008'.
[  241.620598][T13041] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3014'.
[  241.634526][T13046] netlink: 'syz.1.3015': attribute type 8 has an invalid length.
[  241.640071][T13046] netlink: 'syz.1.3015': attribute type 3 has an invalid length.
[  241.642683][T13046] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.3015'.
[  241.645932][T13048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3017'.
[  241.650705][T13048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3017'.
[  241.654122][T13048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3017'.
[  241.853510][T13064] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3023'.
[  242.100705][T13076] netlink: 5520 bytes leftover after parsing attributes in process `syz.2.3028'.
[  242.318721][T13084] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3032'.
[  242.444738][T13092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3036'.
[  242.710479][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'.
[  242.771348][T13109] tap0: tun_chr_ioctl cmd 1074812118
[  243.141238][T13148] netlink: 'syz.1.3062': attribute type 10 has an invalid length.
[  243.301555][T13145] netlink: 'syz.2.3061': attribute type 9 has an invalid length.
[  243.380402][T13162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.876212][T13203] netlink: 'syz.2.3083': attribute type 13 has an invalid length.
[  243.879420][T13203] erspan0: refused to change device tx_queue_len
[  243.881852][T13203] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  244.577817][T13242] nbd: couldn't find device at index 65542
[  251.522068][T13403] validate_nla: 2 callbacks suppressed
[  251.522113][T13403] netlink: 'syz.3.3145': attribute type 6 has an invalid length.
[  251.534220][T13403] __nla_validate_parse: 11 callbacks suppressed
[  251.534277][T13403] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3145'.
[  252.647608][T13406] wg0 speed is unknown, defaulting to 1000
[  253.226708][T13437] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3159'.
[  253.352086][T13443] netlink: 'syz.1.3162': attribute type 6 has an invalid length.
[  253.387505][T13445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3163'.
[  255.443069][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  255.445609][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  256.221639][T13449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3165'.
[  256.471536][T13469] netlink: 'syz.2.3174': attribute type 2 has an invalid length.
[  256.474483][T13469] netlink: 'syz.2.3174': attribute type 9 has an invalid length.
[  256.485632][T13469] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3174'.
[  256.502712][T13471] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.560080][T13475] IPv6: NLM_F_CREATE should be specified when creating new route
[  257.028841][T13495] netlink: 'syz.2.3185': attribute type 27 has an invalid length.
[  257.328676][T13509] syzkaller0: entered promiscuous mode
[  257.330926][T13509] syzkaller0: entered allmulticast mode
[  257.507769][ T5856] Bluetooth: hci1: command 0x0406 tx timeout
[  258.329400][T13518] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3193'.
[  259.770322][ T5848] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11
[  259.919433][T13584] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.3226'.
[  260.846487][T13626] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3244'.
[  260.976585][T13630] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  261.025875][T13634] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3248'.
[  261.056689][T13638] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3250'.
[  261.212657][T13650] netlink: 'syz.1.3258': attribute type 1 has an invalid length.
[  261.318314][T13660] C: renamed from team_slave_0
[  261.321075][T13660] netlink: 'syz.2.3262': attribute type 4 has an invalid length.
[  261.323597][T13660] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  261.654449][T13667] netlink: 'syz.1.3265': attribute type 11 has an invalid length.
[  261.658117][T13667] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3265'.
[  261.663001][T13666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.630867][T13676] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.3269'.
[  262.632144][T13674] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.3268'.
[  262.642613][T13674] openvswitch: netlink: Message has 6 unknown bytes.
[  262.719072][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'.
[  263.184386][T13690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.312171][T13696] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3276'.
[  263.552502][T13700] netlink: 'syz.1.3277': attribute type 16 has an invalid length.
[  263.556011][T13700] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3277'.
[  263.605450][T13701] netlink: 809 bytes leftover after parsing attributes in process `syz.1.3277'.
[  263.608636][T13701] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.3277'.
[  263.611659][T13701] netlink: 809 bytes leftover after parsing attributes in process `syz.1.3277'.
[  264.377514][T13705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3279'.
[  265.114222][T13741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3295'.
[  266.013020][T13756] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3304'.
[  266.239483][T13774] netlink: 'syz.1.3311': attribute type 10 has an invalid length.
[  266.344272][T13774] bond0: (slave bond_slave_0): Releasing backup interface
[  266.434043][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3314'.
[  266.437231][T13782] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  266.439913][T13782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.467952][T13784] netlink: 'syz.2.3315': attribute type 2 has an invalid length.
[  266.470513][T13784] netlink: 'syz.2.3315': attribute type 8 has an invalid length.
[  266.473375][T13784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3315'.
[  266.817416][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  266.820742][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  266.823495][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  266.826440][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  266.829043][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  267.086357][T13786] wg0 speed is unknown, defaulting to 1000
[  267.200767][T13786] chnl_net:caif_netlink_parms(): no params data found
[  267.306484][T13786] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.312043][T13786] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.316827][T13786] bridge_slave_0: entered allmulticast mode
[  267.320429][T13786] bridge_slave_0: entered promiscuous mode
[  267.324927][T13786] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.330165][T13786] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.333255][T13786] bridge_slave_1: entered allmulticast mode
[  267.338634][T13786] bridge_slave_1: entered promiscuous mode
[  267.394761][T13786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.401666][T13786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.444636][T13786] team0: Port device team_slave_0 added
[  267.449622][T13786] team0: Port device team_slave_1 added
[  267.493951][T13786] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.496829][T13786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.506832][T13786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.512600][T13786] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.516518][T13786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.526822][T13786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.566779][T13786] hsr_slave_0: entered promiscuous mode
[  267.570243][T13786] hsr_slave_1: entered promiscuous mode
[  267.572961][T13786] debugfs: 'hsr0' already exists in 'hsr'
[  267.575371][T13786] Cannot create hsr debugfs directory
[  267.724686][T13786] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  267.731067][T13786] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  267.736898][T13786] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  267.743853][T13786] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  267.770135][T13786] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.772993][T13786] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.776096][T13786] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.778938][T13786] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.828574][T13786] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.841866][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.845785][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.860435][T13786] 8021q: adding VLAN 0 to HW filter on device team0
[  267.871258][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.874050][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.881956][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.884780][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.013477][T13786] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.188225][T13831] netlink: 'syz.1.3325': attribute type 10 has an invalid length.
[  268.210080][T13835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3326'.
[  268.236073][T13786] veth0_vlan: entered promiscuous mode
[  268.249370][T13786] veth1_vlan: entered promiscuous mode
[  268.253754][T13837] netlink: 'syz.1.3327': attribute type 22 has an invalid length.
[  268.300801][T13786] veth0_macvtap: entered promiscuous mode
[  268.304596][T13786] veth1_macvtap: entered promiscuous mode
[  268.314074][T13786] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.322089][T13786] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.349574][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.353828][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.365376][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.368609][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.406068][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.408710][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.442115][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.444749][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.538377][T13858] veth1_macvtap: left promiscuous mode
[  268.541188][T13858] macsec0: entered allmulticast mode
[  268.552279][T13858] veth1_macvtap: entered promiscuous mode
[  268.554669][T13858] veth1_macvtap: entered allmulticast mode
[  268.558956][T13858] macsec0: entered promiscuous mode
[  268.661927][T13862] __nla_validate_parse: 2 callbacks suppressed
[  268.661988][T13862] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3337'.
[  268.710056][T13859] netlink: 'syz.1.3338': attribute type 8 has an invalid length.
[  268.872819][ T5848] Bluetooth: hci3: command tx timeout
[  269.554109][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'.
[  269.749034][T13905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  269.752066][T13905] IPv6: NLM_F_CREATE should be set when creating new route
[  269.754990][T13905] IPv6: NLM_F_CREATE should be set when creating new route
[  269.757996][T13905] IPv6: NLM_F_CREATE should be set when creating new route
[  269.982806][T13918] netlink: 'syz.1.3365': attribute type 5 has an invalid length.
[  269.990183][T13918] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3365'.
[  270.069338][T13924] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3360'.
[  270.297518][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3372'.
[  270.300707][T13944] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  270.303746][T13944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.712112][T13975] netlink: 'syz.4.3388': attribute type 39 has an invalid length.
[  270.768260][T13976] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3388'.
[  270.972152][ T5848] Bluetooth: hci3: command tx timeout
[  272.207758][T13990] netlink: 'syz.4.3393': attribute type 4 has an invalid length.
[  272.286560][T13990] netlink: 209028 bytes leftover after parsing attributes in process `syz.4.3393'.
[  273.025756][ T5856] Bluetooth: hci3: command tx timeout
[  273.101597][T14008] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3402'.
[  274.492888][T14026] _Z`Ԁ@S: entered promiscuous mode
[  274.544475][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3413'.
[  274.650262][T14036] netlink: 5520 bytes leftover after parsing attributes in process `syz.4.3417'.
[  274.901496][T14043] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3420'.
[  275.105175][ T5856] Bluetooth: hci3: command tx timeout
[  275.883358][T14061] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  276.035089][ T5720] unregister_netdevice: waiting for lo to become free. Usage count = 3
[  276.038758][ T5720] ref_tracker: netdev@ffff888112586610 has 1/1 users at
[  276.038758][ T5720]      ib_device_set_netdev+0x31f/0x6d0
[  276.038758][ T5720]      siw_newlink+0x40c/0xd70
[  276.038758][ T5720]      nldev_newlink+0x4a5/0x5a0
[  276.038758][ T5720]      rdma_nl_rcv+0x6ae/0x980
[  276.038758][ T5720]      netlink_unicast+0x82f/0x9e0
[  276.038758][ T5720]      netlink_sendmsg+0x805/0xb30
[  276.038758][ T5720]      __sock_sendmsg+0x21c/0x270
[  276.038758][ T5720]      ____sys_sendmsg+0x505/0x830
[  276.038758][ T5720]      ___sys_sendmsg+0x21f/0x2a0
[  276.038758][ T5720]      __x64_sys_sendmsg+0x19b/0x260
[  276.038758][ T5720]      do_syscall_64+0xfa/0x3b0
[  276.038758][ T5720]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.038758][ T5720] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)

VM DIAGNOSIS:
01:51:19  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81000101 RBX=0000000000000015 RCX=0000000000000001 RDX=0000000000000801
RSI=0000000000000015 RDI=ffffc900079b6b40 RBP=ffffc900079b6d70 RSP=ffffc900079b6aa8
R8 =0000000000000000 R9 =ffffffff81cea0b6 R10=ffffc900079b6a58 R11=ffffffff81ac3930
R12=0000000000000015 R13=dffffc0000000000 R14=ffffc900079b6b40 R15=ffffc900079b6be8
RIP=ffffffff81ac4548 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1ed76c46c0 ffffffff 00c00000
GS =0000 ffff8880b8619000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32b1dff8 CR3=00000000334cc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1ed6812e53
XMM06=0000000000000000 00007f1ed6812e4d XMM07=0000000000000000 00007f1ed6812e61
XMM08=0000000000000000 00007f1ed6812ee7 XMM09=0000000000000000 00007f1ed6812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002ebeeb0
R8 =ffff8881067c8237 R9 =1ffff11020cf9046 R10=dffffc0000000000 R11=ffffffff854f62b0
R12=dffffc0000000000 R13=ffffffff99afc8f6 R14=ffffffff99df13a0 R15=0000000000000000
RIP=ffffffff854f632c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c19000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1ed76c3fc8 CR3=00000000280ca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007ff09b012e53
XMM06=0000000000000000 00007ff09b012e4d XMM07=0000000000000000 00007ff09b012e61
XMM08=0000000000000000 00007ff09b012ee7 XMM09=0000000000000000 00007ff09b012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
