last executing test programs:

3m34.986463749s ago: executing program 1 (id=485):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0)

3m34.920406481s ago: executing program 1 (id=486):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000040), 0x2)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x4008, 0x3, 0x0, 0x0, 0x8000000000000001, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x2)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="e4d58545efa78c3d9fba6c0cbb378f35eece03a1d421abb05f9e90753ae3d006495d2cea54", 0x25}], 0x1}, 0x4000)

3m34.244053682s ago: executing program 2 (id=500):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

3m34.133810515s ago: executing program 2 (id=502):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x4, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000100), 0x5042)

3m34.049692223s ago: executing program 2 (id=503):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x68}}, 0x0)

3m34.049103166s ago: executing program 1 (id=504):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r0, 0x0, 0x40)
perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004c818)
sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081)
recvmsg(r2, 0x0, 0x40012000)
recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x2042)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x20000000)
mkdir(0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x0, 0x0, 0x0, 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8)

3m33.978292933s ago: executing program 2 (id=506):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x200000000000002a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount$bpf(0x20000000f9fd, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000200a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a3000000000090002"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x6, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000)
r7 = socket$kcm(0x10, 0x2, 0x4)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8942, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
close(r7)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m33.753957769s ago: executing program 1 (id=508):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

3m33.753808757s ago: executing program 1 (id=509):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff27, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa3}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m33.682757294s ago: executing program 2 (id=510):
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)

3m33.393124669s ago: executing program 2 (id=511):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

3m33.392701968s ago: executing program 1 (id=512):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0x1}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0xff, 0x0, 0xfd, 0x0, 0xb0, 0x25008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x20000000004, 0x8000000000000000}, 0x2b10, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x80020002, 0x0, 0x0, 0xfffffff8, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801)
recvmsg(r2, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x2000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x7, 0x5, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x1dbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
close(r3)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)

3m33.254218764s ago: executing program 32 (id=511):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

3m33.189633069s ago: executing program 33 (id=512):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0x1}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0xff, 0x0, 0xfd, 0x0, 0xb0, 0x25008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x20000000004, 0x8000000000000000}, 0x2b10, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x80020002, 0x0, 0x0, 0xfffffff8, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801)
recvmsg(r2, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x2000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x7, 0x5, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x1dbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
close(r3)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)

2m0.434884699s ago: executing program 0 (id=1659):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x37}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

2m0.387540228s ago: executing program 0 (id=1661):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x0, [{@local}]}]}}}], 0x20}, 0x0)

2m0.334984702s ago: executing program 0 (id=1663):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48)

2m0.334834282s ago: executing program 0 (id=1664):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2m0.174732437s ago: executing program 0 (id=1668):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

1m58.390344546s ago: executing program 0 (id=1680):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000ec00000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m43.352520685s ago: executing program 34 (id=1680):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000ec00000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

10.730520297s ago: executing program 5 (id=3032):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x15}, [@typed={0xc, 0x127, 0x0, 0x0, @u64=0xffffffffffffff37}]}, 0x20}, 0x1, 0x0, 0x0, 0x448d3}, 0x40040)

10.530608185s ago: executing program 5 (id=3033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0x3)

10.370697743s ago: executing program 5 (id=3035):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r0, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

9.970385045s ago: executing program 5 (id=3038):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))

9.658784292s ago: executing program 5 (id=3041):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

8.765067293s ago: executing program 5 (id=3044):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x40000008}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="240000000000000001"], 0x28}, 0x4008040)

1.397436457s ago: executing program 3 (id=3138):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='L\x00\x00', 0x3}], 0x1}, 0x0)

1.39683633s ago: executing program 4 (id=3139):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8f, 0xd, 0x0, 0x0, 0x0, 0x2, 0x3013a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0xb}, 0x106522, 0x0, 0x6, 0x2, 0x3fc, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x0, 0x0})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000080)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00'})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r4, 0x29, 0x18, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0xffffff80, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000)
r5 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x24000000)

1.259960253s ago: executing program 3 (id=3140):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x4040)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x2000, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f0000000780)}, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0)
socket$kcm(0x11, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000b4f00d"], 0x38}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002400010122bd7000fcffffff210000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

410.180423ms ago: executing program 3 (id=3141):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000c80)={0x0, 0x5a, &(0x7f0000000c40)={&(0x7f0000000340)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x0, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0xa00}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0)
close(r4)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4001)
socket$kcm(0x10, 0x2, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3ff)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00', @broadcast})
ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x0)

316.78398ms ago: executing program 4 (id=3142):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002400052"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

190.126743ms ago: executing program 4 (id=3143):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080))

140.154385ms ago: executing program 3 (id=3144):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

139.560451ms ago: executing program 3 (id=3145):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)

60.043411ms ago: executing program 3 (id=3146):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000000b010300000000000000000304000908000340000000010800034000000001f618b69482318c9258408238ad28f0d40e424780f6813dd21a6bee7abc27ae8186259b93196f732e338a1b46adc03b9285d91b091caa5cabc81148d11bc408bcf108f277f900c641c86505762d72b4eb04b7aef4e9240b9a444b4ad1a8f99bcac925cedb80a2c7363f9eae4e9a816d49ef0861446b0a1b8088ed8572a4ef890a91cfe24e48d9c5491903695b913479937dca69d66d72492c803842ad0f6b9109de42e33d40e55ed601aecb83d9415e2823938f43"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000400)="99", 0x1}], 0x1}, 0x24040080)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000018110000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000006d000000bf09000000000000b60904000000000065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000043000000b70000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040)

59.687203ms ago: executing program 4 (id=3147):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x1411, 0x309, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x4040000)

225.563µs ago: executing program 4 (id=3148):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r0, 0xfffffffffffffffe)

0s ago: executing program 4 (id=3149):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14341' (ED25519) to the list of known hosts.
syzkaller login: [   56.871662][ T5833] cgroup: Unknown subsys name 'net'
[   57.006991][ T5833] cgroup: Unknown subsys name 'cpuset'
[   57.012681][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.126391][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.320737][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.335379][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.339103][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.343097][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.347368][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.351338][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.355312][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.357609][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.360112][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.363675][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.367499][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.386789][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.392075][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.396354][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.400969][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.734015][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   64.805244][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   64.918737][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.962665][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.965708][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.968496][ T5848] bridge_slave_0: entered allmulticast mode
[   64.972355][ T5848] bridge_slave_0: entered promiscuous mode
[   65.027924][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.030824][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.034259][ T5848] bridge_slave_1: entered allmulticast mode
[   65.038467][ T5848] bridge_slave_1: entered promiscuous mode
[   65.055686][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.058374][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.061119][ T5854] bridge_slave_0: entered allmulticast mode
[   65.066202][ T5854] bridge_slave_0: entered promiscuous mode
[   65.069921][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.072877][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.075694][ T5854] bridge_slave_1: entered allmulticast mode
[   65.079267][ T5854] bridge_slave_1: entered promiscuous mode
[   65.120170][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.129388][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.134503][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.139097][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.194272][ T5854] team0: Port device team_slave_0 added
[   65.198085][ T5848] team0: Port device team_slave_0 added
[   65.200651][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.204744][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.207243][ T5851] bridge_slave_0: entered allmulticast mode
[   65.210728][ T5851] bridge_slave_0: entered promiscuous mode
[   65.215999][ T5854] team0: Port device team_slave_1 added
[   65.219628][ T5848] team0: Port device team_slave_1 added
[   65.234098][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.236555][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.239482][ T5851] bridge_slave_1: entered allmulticast mode
[   65.242312][ T5851] bridge_slave_1: entered promiscuous mode
[   65.293831][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.296071][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.306391][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.311653][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.314524][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.322342][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.329705][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.338283][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.341976][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.344997][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.356877][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.361892][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.365020][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.374312][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.433008][ T5851] team0: Port device team_slave_0 added
[   65.459126][ T5851] team0: Port device team_slave_1 added
[   65.469330][ T5848] hsr_slave_0: entered promiscuous mode
[   65.473146][ T5848] hsr_slave_1: entered promiscuous mode
[   65.519753][ T5854] hsr_slave_0: entered promiscuous mode
[   65.524172][ T5854] hsr_slave_1: entered promiscuous mode
[   65.526979][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   65.529276][ T5854] Cannot create hsr debugfs directory
[   65.534734][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.537349][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.545998][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.584141][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.586910][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.597766][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.708064][ T5851] hsr_slave_0: entered promiscuous mode
[   65.710570][ T5851] hsr_slave_1: entered promiscuous mode
[   65.714349][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   65.716650][ T5851] Cannot create hsr debugfs directory
[   65.928830][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.943014][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.948526][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.959216][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.018095][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.023972][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.035104][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.046878][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.098924][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.118669][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.125013][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.136289][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.188093][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.217535][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   66.229771][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.232964][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.253817][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.256051][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.281637][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.309604][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   66.331707][ T3405] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.334652][ T3405] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.359291][ T3405] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.362204][ T3405] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.384019][ T5850] Bluetooth: hci0: command tx timeout
[   66.386455][ T5850] Bluetooth: hci2: command tx timeout
[   66.400137][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.439024][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   66.461267][ T3405] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.464292][ T3405] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.469871][ T5852] Bluetooth: hci1: command tx timeout
[   66.486160][ T3405] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.489143][ T3405] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.547418][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.644244][ T5854] veth0_vlan: entered promiscuous mode
[   66.670053][ T5854] veth1_vlan: entered promiscuous mode
[   66.701606][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.736240][ T5854] veth0_macvtap: entered promiscuous mode
[   66.758730][ T5854] veth1_macvtap: entered promiscuous mode
[   66.799989][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.817456][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.827846][ T5848] veth0_vlan: entered promiscuous mode
[   66.838678][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.849086][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.866871][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.872431][ T5848] veth1_vlan: entered promiscuous mode
[   66.885504][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.907616][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.975053][ T5848] veth0_macvtap: entered promiscuous mode
[   66.981610][ T3405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.991050][ T3405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.001468][ T5848] veth1_macvtap: entered promiscuous mode
[   67.028939][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.035025][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.047650][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.055647][ T5851] veth0_vlan: entered promiscuous mode
[   67.059043][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.086578][ T5851] veth1_vlan: entered promiscuous mode
[   67.090109][ T5882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.093737][ T5882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.096443][ T5882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.099761][ T5882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.118196][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.183142][ T5851] veth0_macvtap: entered promiscuous mode
[   67.183204][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.187834][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.194512][ T5851] veth1_macvtap: entered promiscuous mode
[   67.236415][ T5920] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.249466][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.253798][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.258055][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.278049][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.305353][ T5882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.331068][ T5882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.336377][ T5882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.339634][ T5882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.657835][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.682366][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.790919][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.801463][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.464464][ T5852] Bluetooth: hci2: command tx timeout
[   68.466717][ T5852] Bluetooth: hci0: command tx timeout
[   68.553156][ T5850] Bluetooth: hci1: command tx timeout
[   70.455267][ T5943] netlink: 'syz.2.11': attribute type 21 has an invalid length.
[   70.457694][ T5943] netlink: 160 bytes leftover after parsing attributes in process `syz.2.11'.
[   70.543150][ T5850] Bluetooth: hci0: command tx timeout
[   70.545146][ T5850] Bluetooth: hci2: command tx timeout
[   70.633818][ T5850] Bluetooth: hci1: command tx timeout
[   71.001730][ T5970] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   71.109359][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.112251][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.890064][ T5978] netlink: 763 bytes leftover after parsing attributes in process `syz.1.27'.
[   72.321081][ T5997] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.36'.
[   72.392231][    C0] hrtimer: interrupt took 34356 ns
[   72.539567][ T6002] C: renamed from team_slave_0 (while UP)
[   72.630457][ T5850] Bluetooth: hci2: command tx timeout
[   72.632861][ T5850] Bluetooth: hci0: command tx timeout
[   72.726666][ T5852] Bluetooth: hci1: command tx timeout
[   73.237387][ T6002] netlink: 164 bytes leftover after parsing attributes in process `syz.0.37'.
[   73.261131][ T6005] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   73.270964][ T6010] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   74.835948][ T6030] netlink: 'syz.1.45': attribute type 1 has an invalid length.
[   74.915919][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[   74.919142][ T6035] netlink: 6 bytes leftover after parsing attributes in process `syz.2.48'.
[   74.942165][ T5852] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4
[   76.979702][ T6106] warning: `syz.2.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.331836][ T6119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.81'.
[   77.386339][ T6119] Zero length message leads to an empty skb
[   77.778939][ T6131] netlink: 340 bytes leftover after parsing attributes in process `syz.0.86'.
[   77.784797][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'.
[   77.799504][ T6131] : renamed from hsr0 (while UP)
[   77.973642][ T5852] Bluetooth: hci2: Malformed LE Event: 0x0b
[   78.031363][ T6137] netlink: 128 bytes leftover after parsing attributes in process `syz.0.89'.
[   78.035295][ T6137] netlink: 'syz.0.89': attribute type 1 has an invalid length.
[   78.328109][ T6151] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.96'.
[   78.356227][ T6154] syz.1.97 uses obsolete (PF_INET,SOCK_PACKET)
[   78.368895][ T6154] bond0: entered promiscuous mode
[   78.375621][ T6154] bond_slave_0: entered promiscuous mode
[   78.378873][ T6154] bond_slave_1: entered promiscuous mode
[   78.381187][ T6154] bond0: entered allmulticast mode
[   78.387382][ T6154] bond_slave_0: entered allmulticast mode
[   78.389974][ T6154] bond_slave_1: entered allmulticast mode
[   78.751774][ T6165] netlink: 'syz.1.102': attribute type 1 has an invalid length.
[   78.760783][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'.
[   78.838990][ T6169] 0: renamed from bond_slave_1 (while UP)
[   78.907274][ T6172] netlink: 'syz.2.104': attribute type 3 has an invalid length.
[   78.909888][ T6172] netlink: 'syz.2.104': attribute type 6 has an invalid length.
[   78.915132][ T6172] netlink: 'syz.2.104': attribute type 8 has an invalid length.
[   78.918186][ T6172] netlink: 'syz.2.104': attribute type 10 has an invalid length.
[   78.922403][ T6172] netlink: 'syz.2.104': attribute type 11 has an invalid length.
[   78.926467][ T6172] netlink: 198236 bytes leftover after parsing attributes in process `syz.2.104'.
[   79.259789][ T6203] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.113'.
[   79.309698][ T6207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.112'.
[   79.401763][ T6211] netlink: 132 bytes leftover after parsing attributes in process `syz.0.117'.
[   80.456219][ T6251] netlink: 'syz.1.135': attribute type 21 has an invalid length.
[   81.367242][   T10] cfg80211: failed to load regulatory.db
[   82.096929][ T6321] netlink: 'syz.0.168': attribute type 1 has an invalid length.
[   82.677316][ T6342] __nla_validate_parse: 2 callbacks suppressed
[   82.677333][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'.
[   82.827891][ T6350] netlink: 'syz.2.180': attribute type 9 has an invalid length.
[   82.831197][ T6350] netlink: 143452 bytes leftover after parsing attributes in process `syz.2.180'.
[   83.252805][ T6355] netlink: 132 bytes leftover after parsing attributes in process `syz.2.182'.
[   83.379189][ T6365] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.469023][ T6370] validate_nla: 1 callbacks suppressed
[   83.469054][ T6370] netlink: 'syz.1.189': attribute type 29 has an invalid length.
[   83.483764][ T6370] netlink: 'syz.1.189': attribute type 29 has an invalid length.
[   83.497633][ T6370] netlink: 'syz.1.189': attribute type 29 has an invalid length.
[   83.502810][ T6370] netlink: 'syz.1.189': attribute type 29 has an invalid length.
[   83.605429][ T6379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.193'.
[   83.608838][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.193'.
[   83.630727][ T6379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.193'.
[   83.649788][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.193'.
[   83.669650][ T6381] openvswitch: netlink: IP tunnel dst address not specified
[   83.860810][ T6390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.198'.
[   85.507225][ T6452] syzkaller0: entered promiscuous mode
[   85.509301][ T6452] syzkaller0: entered allmulticast mode
[   85.941980][ T5852] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[   85.945284][ T5852] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[   86.862236][ T6488] netlink: 'syz.0.233': attribute type 7 has an invalid length.
[   86.937278][ T6489] netlink: 'syz.2.231': attribute type 10 has an invalid length.
[   86.996370][ T6492] netlink: 'syz.2.231': attribute type 11 has an invalid length.
[   86.998799][ T6492] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.231'.
[   86.999321][ T6494] netlink: 'syz.0.235': attribute type 21 has an invalid length.
[   87.006510][ T6494] IPv6: NLM_F_CREATE should be specified when creating new route
[   87.009283][ T6494] IPv6: Can't replace route, no match found
[   87.021648][ T6489] team0: Port device wlan1 added
[   87.080612][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'.
[   87.605822][ T6481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.485459][ T6515] netlink: 'syz.1.244': attribute type 27 has an invalid length.
[   90.756175][ T6532] netlink: 'syz.0.252': attribute type 7 has an invalid length.
[   90.759085][ T6532] __nla_validate_parse: 4 callbacks suppressed
[   90.759096][ T6532] netlink: 140 bytes leftover after parsing attributes in process `syz.0.252'.
[   92.214453][ T5852] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   92.525612][ T6586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.599639][ T6584] netlink: 277 bytes leftover after parsing attributes in process `syz.0.277'.
[   92.667682][ T6591] netlink: 188 bytes leftover after parsing attributes in process `syz.1.280'.
[   93.115470][ T6612] netlink: 'syz.2.289': attribute type 2 has an invalid length.
[   93.117975][ T6612] netlink: 164 bytes leftover after parsing attributes in process `syz.2.289'.
[   93.125983][ T6612] netlink: 'syz.2.289': attribute type 2 has an invalid length.
[   93.128623][ T6612] netlink: 164 bytes leftover after parsing attributes in process `syz.2.289'.
[   94.183971][ T6636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.260070][ T6641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.301788][ T6643] netlink: 'syz.0.304': attribute type 10 has an invalid length.
[   94.304696][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.307250][ T6641] netlink: 'syz.2.303': attribute type 10 has an invalid length.
[   94.315731][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.325235][ T6643] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   94.958039][ T6677] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.317'.
[   94.961677][ T6677] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.317'.
[   94.967109][ T6677] netlink: 336 bytes leftover after parsing attributes in process `syz.1.317'.
[   95.723626][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.726025][ T6686] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.728937][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.731454][ T6686] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.210046][ T6711] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.570202][ T6729] netlink: 'syz.2.343': attribute type 10 has an invalid length.
[   96.666262][ T6731] veth1_macvtap: left promiscuous mode
[   96.668560][ T6731] macsec0: entered promiscuous mode
[   96.670669][ T6731] macsec0: entered allmulticast mode
[   96.679926][ T6732] veth1_macvtap: entered promiscuous mode
[   96.682943][ T6732] veth1_macvtap: entered allmulticast mode
[   96.883163][ T6741] netlink: 104 bytes leftover after parsing attributes in process `syz.1.347'.
[   99.998649][ T6773] IPv6: NLM_F_CREATE should be specified when creating new route
[  102.170917][ T6818] netlink: 'syz.2.378': attribute type 10 has an invalid length.
[  102.226850][ T6818] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  102.256217][ T6820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.379'.
[  105.685141][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2044468413 wd_nsec: 2044454942
[  107.332594][ T6859] bridge_slave_1: left allmulticast mode
[  107.335052][ T6859] bridge_slave_1: left promiscuous mode
[  107.338130][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.347102][ T6859] bridge_slave_0: left allmulticast mode
[  107.349352][ T6859] bridge_slave_0: left promiscuous mode
[  107.351752][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.761707][ T6880] netlink: 60 bytes leftover after parsing attributes in process `syz.2.403'.
[  107.768397][ T6880] netlink: 60 bytes leftover after parsing attributes in process `syz.2.403'.
[  108.365889][ T6885] : renamed from vlan0 (while UP)
[  110.055363][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'.
[  110.059125][ T6920] netlink: 152 bytes leftover after parsing attributes in process `syz.2.422'.
[  110.254026][ T6938] IPv6: NLM_F_CREATE should be specified when creating new route
[  110.605553][ T6943] netlink: 'syz.0.431': attribute type 11 has an invalid length.
[  110.609772][ T6943] netlink: 'syz.0.431': attribute type 11 has an invalid length.
[  110.780960][ T6955] netlink: 'syz.0.436': attribute type 1 has an invalid length.
[  110.786048][ T6955] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.436'.
[  110.888701][ T5850] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  111.107837][ T6978] netlink: 'syz.2.447': attribute type 7 has an invalid length.
[  111.158692][ T6982] netlink: 'syz.0.449': attribute type 11 has an invalid length.
[  111.784850][ T7000] netlink: 'syz.2.454': attribute type 1 has an invalid length.
[  111.787921][ T7000] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.454'.
[  112.858222][ T7018] netlink: 'syz.0.463': attribute type 46 has an invalid length.
[  112.861518][ T7018] netlink: 'syz.0.463': attribute type 19 has an invalid length.
[  112.876235][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'.
[  112.972027][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'.
[  113.887949][ T7056] netlink: 14 bytes leftover after parsing attributes in process `syz.1.481'.
[  114.100083][ T7060] netlink: 46603 bytes leftover after parsing attributes in process `syz.2.483'.
[  115.084908][ T7110] =======================================================
[  115.084908][ T7110] WARNING: The mand mount option has been deprecated and
[  115.084908][ T7110]          and is ignored by this kernel. Remove the mand
[  115.084908][ T7110]          option from the mount to silence this warning.
[  115.084908][ T7110] =======================================================
[  115.204921][ T7116] netlink: 'syz.2.506': attribute type 49 has an invalid length.
[  115.570635][ T5883] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.658687][ T5883] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.754364][ T5883] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.810388][ T5883] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.117424][ T5883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.123141][ T5883] bond0 (unregistering): (slave 0): Releasing backup interface
[  116.126573][ T5883] bond0 (unregistering): Released all slaves
[  116.309321][ T5883] team0: Port device wlan1 removed
[  116.494980][ T5883] hsr_slave_0: left promiscuous mode
[  116.515414][ T5883] hsr_slave_1: left promiscuous mode
[  116.538411][ T5883] veth1_vlan: left promiscuous mode
[  116.540473][ T5883] veth0_vlan: left promiscuous mode
[  116.628701][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  116.635201][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  116.638568][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  116.645887][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  116.649174][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  116.786071][ T5883] team0 (unregistering): Port device team_slave_1 removed
[  116.818687][ T5883] team0 (unregistering): Port device team_slave_0 removed
[  116.983687][ T7157] netlink: 156 bytes leftover after parsing attributes in process `syz.0.517'.
[  117.020380][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  117.024133][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  117.027167][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  117.030464][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  117.037506][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  117.248826][ T7162] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.518'.
[  117.476760][ T7159] chnl_net:caif_netlink_parms(): no params data found
[  117.503007][ T7151] chnl_net:caif_netlink_parms(): no params data found
[  117.822720][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.824960][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.827563][ T7159] bridge_slave_0: entered allmulticast mode
[  117.830685][ T7159] bridge_slave_0: entered promiscuous mode
[  117.893622][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.896311][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.898727][ T7159] bridge_slave_1: entered allmulticast mode
[  117.902416][ T7159] bridge_slave_1: entered promiscuous mode
[  117.926307][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.928646][ T7151] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.931000][ T7151] bridge_slave_0: entered allmulticast mode
[  117.944396][ T7151] bridge_slave_0: entered promiscuous mode
[  117.960199][ T5883] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.985829][ T7151] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.988928][ T7151] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.991657][ T7151] bridge_slave_1: entered allmulticast mode
[  118.002454][ T7151] bridge_slave_1: entered promiscuous mode
[  118.033388][ T5883] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.044814][ T7159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.082143][ T7151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.091347][ T7159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.106981][ T7151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.168764][ T5883] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.270327][ T7159] team0: Port device team_slave_0 added
[  118.285615][ T5883] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.301978][ T7151] team0: Port device team_slave_0 added
[  118.314057][ T7159] team0: Port device team_slave_1 added
[  118.319825][ T7151] team0: Port device team_slave_1 added
[  118.702972][ T5852] Bluetooth: hci0: command tx timeout
[  118.942145][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.944507][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.953189][ T7159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.959179][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.965777][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.976105][ T7159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.987216][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.994321][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.005375][ T7151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.087114][ T7151] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.090252][ T7151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.102243][ T7151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.114027][ T7159] hsr_slave_0: entered promiscuous mode
[  119.114715][ T5852] Bluetooth: hci1: command tx timeout
[  119.117580][ T7159] hsr_slave_1: entered promiscuous mode
[  119.269411][ T7151] hsr_slave_0: entered promiscuous mode
[  119.276428][ T7151] hsr_slave_1: entered promiscuous mode
[  119.279664][ T7151] debugfs: 'hsr0' already exists in 'hsr'
[  119.281814][ T7151] Cannot create hsr debugfs directory
[  119.296678][ T5883] bridge_slave_1: left allmulticast mode
[  119.298979][ T5883] bridge_slave_1: left promiscuous mode
[  119.302329][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.326427][ T5883] bridge_slave_0: left allmulticast mode
[  119.328533][ T5883] bridge_slave_0: left promiscuous mode
[  119.330649][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.605686][ T5883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.608989][ T5883] bond_slave_0: left promiscuous mode
[  119.611315][ T5883] bond_slave_0: left allmulticast mode
[  119.615640][ T5883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.618756][ T5883] bond_slave_1: left promiscuous mode
[  119.620835][ T5883] bond_slave_1: left allmulticast mode
[  119.623774][ T5883] bond0 (unregistering): Released all slaves
[  119.765304][ T7213] : entered promiscuous mode
[  119.767395][ T7213] : entered allmulticast mode
[  120.065467][ T5883] hsr_slave_0: left promiscuous mode
[  120.067581][ T5883] hsr_slave_1: left promiscuous mode
[  120.069773][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.072285][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.080555][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.086388][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.096301][ T5883] veth1_macvtap: left promiscuous mode
[  120.098448][ T5883] veth0_macvtap: left promiscuous mode
[  120.100300][ T5883] veth1_vlan: left promiscuous mode
[  120.101969][ T5883] veth0_vlan: left promiscuous mode
[  120.452843][ T5883] team0 (unregistering): Port device team_slave_1 removed
[  120.483691][ T5883] team0 (unregistering): Port device team_slave_0 removed
[  120.784043][ T5852] Bluetooth: hci0: command tx timeout
[  120.815804][ T7159] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  120.828421][ T7159] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  120.858066][ T7159] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  120.877544][ T7159] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  120.989916][ T7151] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  120.997184][ T7151] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  121.006128][ T7151] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  121.012434][ T7151] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  121.089564][ T7159] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.144707][ T7159] 8021q: adding VLAN 0 to HW filter on device team0
[  121.163944][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.166866][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.182919][ T5852] Bluetooth: hci1: command tx timeout
[  121.189735][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.192588][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.244126][ T7151] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.276618][ T7151] 8021q: adding VLAN 0 to HW filter on device team0
[  121.299019][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.301313][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.314912][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.317162][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.436908][ T7159] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.494843][ T7159] veth0_vlan: entered promiscuous mode
[  121.511447][ T7159] veth1_vlan: entered promiscuous mode
[  121.571338][ T7151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.580198][ T7159] veth0_macvtap: entered promiscuous mode
[  121.584281][ T7159] veth1_macvtap: entered promiscuous mode
[  121.604909][ T7159] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.612403][ T7159] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.632196][ T5883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.644987][ T5883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.655758][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.667460][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.725610][ T3606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.728299][ T3606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.777209][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.780209][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.878421][ T7151] veth0_vlan: entered promiscuous mode
[  121.904044][ T7151] veth1_vlan: entered promiscuous mode
[  121.957257][ T7151] veth0_macvtap: entered promiscuous mode
[  121.965319][ T7151] veth1_macvtap: entered promiscuous mode
[  121.976898][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.990589][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.029326][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.035754][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.042059][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.054672][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.171912][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.194367][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.241403][ T7339] netlink: 'syz.0.546': attribute type 11 has an invalid length.
[  122.252003][ T7339] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.546'.
[  122.264812][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.266054][ T7339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.269195][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.314732][ T7344] netlink: 'syz.0.549': attribute type 10 has an invalid length.
[  123.148237][ T5852] Bluetooth: hci0: command tx timeout
[  123.263103][ T5852] Bluetooth: hci1: command tx timeout
[  123.771951][ T7380] netlink: 'syz.4.559': attribute type 29 has an invalid length.
[  123.799380][ T7380] netlink: 'syz.4.559': attribute type 29 has an invalid length.
[  123.835689][ T7380] netlink: 'syz.4.559': attribute type 29 has an invalid length.
[  123.844232][ T7378] netlink: 'syz.4.559': attribute type 29 has an invalid length.
[  125.193193][ T5852] Bluetooth: hci0: command tx timeout
[  125.353216][ T5852] Bluetooth: hci1: command tx timeout
[  130.756474][ T7435] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.574'.
[  130.770168][ T7435] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  130.797910][ T7437] netlink: 'syz.3.575': attribute type 2 has an invalid length.
[  130.801139][ T7437] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.575'.
[  130.806926][ T7437] netlink: 5 bytes leftover after parsing attributes in process `syz.3.575'.
[  131.604053][ T7482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.649909][ T7478] bpf: Bad value for 'gid'
[  132.087683][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'.
[  132.149519][ T7512] : entered promiscuous mode
[  132.581944][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.586209][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.350772][ T7556] syzkaller0: entered promiscuous mode
[  133.353807][ T7556] syzkaller0: entered allmulticast mode
[  134.661228][ T7593] netlink: 'syz.0.628': attribute type 29 has an invalid length.
[  134.677115][ T7593] netlink: 'syz.0.628': attribute type 29 has an invalid length.
[  135.077700][ T7612] syzkaller1: tun_chr_ioctl cmd 1074025677
[  135.080713][ T7612] syzkaller1: linktype set to 823
[  135.598872][ T7628] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.638'.
[  137.515094][ T7681] netlink: 'syz.4.661': attribute type 6 has an invalid length.
[  137.684405][ T7689] netlink: 180 bytes leftover after parsing attributes in process `syz.3.665'.
[  137.790108][ T7695] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  137.804915][ T7695] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  138.939048][ T7740] netlink: 'syz.0.688': attribute type 11 has an invalid length.
[  139.950698][ T7776] syz_tun: entered promiscuous mode
[  140.318032][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.715'.
[  140.737860][ T7816] netlink: 64 bytes leftover after parsing attributes in process `syz.4.721'.
[  141.305972][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'.
[  141.347336][ T7825] nftables ruleset with unbound chain
[  141.534376][ T7832] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.728'.
[  141.767553][ T7839] netlink: del zone limit has 4 unknown bytes
[  141.921296][ T7846] netlink: 'syz.4.733': attribute type 2 has an invalid length.
[  141.931141][ T7846] netlink: 'syz.4.733': attribute type 1 has an invalid length.
[  141.949072][ T7846] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.733'.
[  142.042961][ T7843] netlink: 'syz.3.732': attribute type 1 has an invalid length.
[  142.186997][   T33] audit: type=1107 audit(1759317137.771:2): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  147.031902][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'.
[  147.056143][ T7916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.762'.
[  147.060340][ T7914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.762'.
[  147.073835][ T7916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.762'.
[  149.684799][ T7959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.781'.
[  149.688518][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'.
[  149.866782][ T7969] netlink: 'syz.3.785': attribute type 10 has an invalid length.
[  149.978161][ T7969] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  150.031583][ T7977] netlink: 'syz.4.790': attribute type 10 has an invalid length.
[  150.043094][ T7977] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.790'.
[  150.290470][ T7988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.727940][ T7992] raw_sendmsg: syz.4.797 forgot to set AF_INET. Fix it!
[  150.761927][ T7994] netlink: 'syz.0.798': attribute type 10 has an invalid length.
[  150.765553][ T7994] lo: entered promiscuous mode
[  150.771836][ T7994] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  150.840425][ T7998] netlink: 763 bytes leftover after parsing attributes in process `syz.0.800'.
[  150.952645][ T8002] netlink: 'syz.4.803': attribute type 10 has an invalid length.
[  150.955543][ T8002] netlink: 2 bytes leftover after parsing attributes in process `syz.4.803'.
[  150.959061][ T8002] team0: entered promiscuous mode
[  150.960940][ T8002] team_slave_0: entered promiscuous mode
[  150.967971][ T8002] team_slave_1: entered promiscuous mode
[  150.970917][ T8002] bridge0: port 3(team0) entered blocking state
[  150.978251][ T8002] bridge0: port 3(team0) entered disabled state
[  150.981975][ T8002] team0: entered allmulticast mode
[  150.984280][ T8002] team_slave_0: entered allmulticast mode
[  150.986343][ T8002] team_slave_1: entered allmulticast mode
[  150.991592][ T8002] bridge0: port 3(team0) entered blocking state
[  150.994497][ T8002] bridge0: port 3(team0) entered forwarding state
[  151.207172][ T8015] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  151.218995][ T8015] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  152.430531][ T8060] openvswitch: netlink: IP tunnel dst address not specified
[  152.556522][ T8064] option changes via remount are deprecated (pid=8054 comm=syz.4.826)
[  152.690551][ T8068] netlink: 'syz.3.831': attribute type 12 has an invalid length.
[  152.694630][ T8068] netlink: 132 bytes leftover after parsing attributes in process `syz.3.831'.
[  152.870222][ T8082] netlink: 1 bytes leftover after parsing attributes in process `syz.0.837'.
[  153.067567][ T8094] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  153.071896][ T8094] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  153.311369][ T8100] netlink: 'syz.0.846': attribute type 1 has an invalid length.
[  153.317381][ T8100] netlink: 'syz.0.846': attribute type 2 has an invalid length.
[  153.325058][ T8100] netlink: 'syz.0.846': attribute type 3 has an invalid length.
[  153.328506][ T8100] netlink: 'syz.0.846': attribute type 5 has an invalid length.
[  153.331679][ T8100] netlink: 'syz.0.846': attribute type 6 has an invalid length.
[  153.335722][ T8100] netlink: 449 bytes leftover after parsing attributes in process `syz.0.846'.
[  153.339463][ T8100] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.846'.
[  153.351344][ T8100] netlink: 449 bytes leftover after parsing attributes in process `syz.0.846'.
[  153.499390][ T8112] IPv6: NLM_F_CREATE should be specified when creating new route
[  153.795675][ T8122] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  154.307180][ T8147] netlink: 152 bytes leftover after parsing attributes in process `syz.3.866'.
[  154.314759][ T8149] netlink: 56 bytes leftover after parsing attributes in process `syz.4.868'.
[  154.322822][ T8149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.868'.
[  154.468169][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'.
[  154.610759][ T8177] netlink: 60 bytes leftover after parsing attributes in process `syz.0.878'.
[  155.083825][ T8200] validate_nla: 13 callbacks suppressed
[  155.083836][ T8200] netlink: 'syz.0.888': attribute type 29 has an invalid length.
[  155.089907][ T8200] netlink: 'syz.0.888': attribute type 29 has an invalid length.
[  155.096434][ T8200] netlink: 'syz.0.888': attribute type 29 has an invalid length.
[  155.099609][ T8200] netlink: 'syz.0.888': attribute type 29 has an invalid length.
[  155.315843][ T8204] netlink: 'syz.3.890': attribute type 21 has an invalid length.
[  155.330823][ T8204] netlink: 'syz.3.890': attribute type 10 has an invalid length.
[  156.617393][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.657857][ T8271] bridge_slave_0 (unregistering): left allmulticast mode
[  156.660830][ T8271] bridge_slave_0 (unregistering): left promiscuous mode
[  156.666223][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.215550][ T8283] netlink: 'syz.3.925': attribute type 3 has an invalid length.
[  158.407631][ T8293] netlink: 'syz.3.929': attribute type 5 has an invalid length.
[  158.411265][ T8293] netlink: 'syz.3.929': attribute type 5 has an invalid length.
[  158.607130][ T8295] netlink: 'syz.4.930': attribute type 29 has an invalid length.
[  158.920398][ T8323] __nla_validate_parse: 11 callbacks suppressed
[  158.920413][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'.
[  158.958608][ T8321] veth1_macvtap (unregistering): left allmulticast mode
[  159.339913][ T8348] IPv6: NLM_F_CREATE should be specified when creating new route
[  160.695835][ T8367] netlink: 44 bytes leftover after parsing attributes in process `syz.3.962'.
[  161.075426][ T8371] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.964'.
[  161.080794][ T8373] validate_nla: 1 callbacks suppressed
[  161.080809][ T8373] netlink: 'syz.0.965': attribute type 21 has an invalid length.
[  161.086408][ T8373] netlink: 156 bytes leftover after parsing attributes in process `syz.0.965'.
[  161.089973][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'.
[  161.879052][ T8425] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  161.890954][ T8425] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  162.356091][ T8441] netlink: 14 bytes leftover after parsing attributes in process `syz.4.997'.
[  164.056784][ T8441] hsr_slave_0: left promiscuous mode
[  164.066445][ T8441] hsr_slave_1: left promiscuous mode
[  164.655680][ T8467] wg2: entered allmulticast mode
[  164.680608][ T8467] wg2: entered promiscuous mode
[  164.822273][ T8474] netlink: 'syz.4.1010': attribute type 39 has an invalid length.
[  165.467696][ T8482] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  165.867622][ T5852] Bluetooth: hci2: unknown advertising packet type: 0x65
[  165.867665][ T5852] Bluetooth: hci2: Dropping invalid advertising data
[  165.873142][ T5852] Bluetooth: hci2: Malformed LE Event: 0x02
[  165.879074][ T8499] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1019'.
[  165.894115][ T8499] netlink: 'syz.3.1019': attribute type 1 has an invalid length.
[  165.914614][ T8506] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1022'.
[  166.808153][ T8519] sctp: [Deprecated]: syz.4.1025 (pid 8519) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.808153][ T8519] Use struct sctp_sack_info instead
[  168.883066][ T8562] netlink: 'syz.3.1045': attribute type 23 has an invalid length.
[  170.025220][ T8589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1055'.
[  170.247937][ T8599] netlink: 'syz.4.1060': attribute type 21 has an invalid length.
[  171.277577][ T8614] lo speed is unknown, defaulting to 1000
[  171.281121][ T8614] lo speed is unknown, defaulting to 1000
[  171.286986][ T8614] lo speed is unknown, defaulting to 1000
[  171.534312][ T8614] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  171.994554][ T8614] lo speed is unknown, defaulting to 1000
[  172.021046][ T8614] lo speed is unknown, defaulting to 1000
[  172.036799][ T8614] lo speed is unknown, defaulting to 1000
[  172.446875][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'.
[  174.008719][ T8717] netlink: 'syz.3.1111': attribute type 4 has an invalid length.
[  174.011908][ T8717] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1111'.
[  174.138870][ T8729] netlink: 'syz.4.1117': attribute type 17 has an invalid length.
[  174.162720][ T8729] netlink: 'syz.4.1117': attribute type 16 has an invalid length.
[  174.165949][ T8729] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1117'.
[  174.196926][ T8731] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1118'.
[  174.374931][ T8737] netlink: 'syz.0.1121': attribute type 11 has an invalid length.
[  174.378895][ T8737] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.1121'.
[  174.409357][ T8736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.109760][ T8764] netlink: 'syz.4.1132': attribute type 3 has an invalid length.
[  175.143984][ T8764] netlink: 'syz.4.1132': attribute type 2 has an invalid length.
[  175.147248][ T8764] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.1132'.
[  175.231075][ T8769] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1134'.
[  175.322358][ T8773] netlink: 'syz.4.1136': attribute type 1 has an invalid length.
[  175.631717][ T8788] netlink: 'syz.0.1143': attribute type 10 has an invalid length.
[  175.649614][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'.
[  175.680607][ T8788] bond0: (slave bond_slave_0): Releasing backup interface
[  175.947624][ T8812] netlink: 'syz.4.1154': attribute type 9 has an invalid length.
[  175.950911][ T8812] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.1154'.
[  176.507243][ T8850] netlink: 824 bytes leftover after parsing attributes in process `syz.4.1174'.
[  177.246022][ T8904] netlink: 'syz.4.1197': attribute type 21 has an invalid length.
[  177.787823][ T8921] __nla_validate_parse: 1 callbacks suppressed
[  177.787839][ T8921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1205'.
[  177.795132][ T8921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1205'.
[  177.799313][ T8921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1205'.
[  178.201139][ T8937] rdma_rxe: rxe_newlink: failed to add lo
[  178.216302][ T8950] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1217'.
[  178.234396][ T8950] hsr_slave_0: left promiscuous mode
[  178.238831][ T8950] hsr_slave_1: left promiscuous mode
[  178.279244][ T8954] netlink: 'syz.4.1221': attribute type 2 has an invalid length.
[  178.281776][ T8954] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1221'.
[  178.286187][ T8954] block nbd5: not configured, cannot reconfigure
[  178.471906][ T8964] @: renamed from bond_slave_0 (while UP)
[  178.565195][ T8969] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1229'.
[  179.590382][ T8983] validate_nla: 1 callbacks suppressed
[  179.590451][ T8983] netlink: 'syz.3.1234': attribute type 23 has an invalid length.
[  179.801313][ T9001] netlink: 'syz.3.1242': attribute type 10 has an invalid length.
[  179.878804][ T9001] team0: Device ipvlan1 failed to register rx_handler
[  180.556812][ T9025] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1252'.
[  180.751609][ T9035] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1256'.
[  180.840663][ T9035] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  180.846005][ T9035] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  181.949335][ T9067] netlink: 'syz.4.1268': attribute type 1 has an invalid length.
[  181.952436][ T9067] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1268'.
[  182.064118][ T9073] lo speed is unknown, defaulting to 1000
[  182.232018][ T9087] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1275'.
[  182.595300][ T9103] option changes via remount are deprecated (pid=9102 comm=syz.0.1283)
[  182.604450][ T9100] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  182.635851][ T5852] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  182.818216][ T9112] netlink: 'syz.3.1285': attribute type 4 has an invalid length.
[  182.821009][ T9112] __nla_validate_parse: 1 callbacks suppressed
[  182.821061][ T9112] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1285'.
[  182.856281][ T9112] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  183.355118][ T9127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1293'.
[  186.293837][ T9147] netlink: 'syz.0.1303': attribute type 6 has an invalid length.
[  186.296968][ T9147] netlink: 14573 bytes leftover after parsing attributes in process `syz.0.1303'.
[  186.441176][ T9152] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  186.580168][ T9156] netlink: 'syz.3.1305': attribute type 10 has an invalid length.
[  186.586222][ T9156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1305'.
[  186.590579][ T9156] bridge0: port 3(batadv0) entered blocking state
[  186.594582][ T9156] bridge0: port 3(batadv0) entered disabled state
[  186.598492][ T9156] batadv0: entered allmulticast mode
[  186.602392][ T9156] batadv0: entered promiscuous mode
[  186.607103][ T9156] bridge0: port 3(batadv0) entered blocking state
[  186.609789][ T9156] bridge0: port 3(batadv0) entered forwarding state
[  186.853150][ T5883] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  186.857399][ T5883] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  187.421391][ T9171] netlink: 'syz.3.1313': attribute type 1 has an invalid length.
[  187.647677][ T9174] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  187.755104][ T9185] xt_policy: neither incoming nor outgoing policy selected
[  187.927972][ T9196] netlink: 'syz.4.1324': attribute type 10 has an invalid length.
[  188.088291][ T9202] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1325'.
[  188.825152][ T9206] syzkaller1: tun_chr_ioctl cmd 1074812117
[  189.105339][ T9218] netlink: 'syz.3.1332': attribute type 4 has an invalid length.
[  189.109039][ T9218] netlink: 182632 bytes leftover after parsing attributes in process `syz.3.1332'.
[  189.139228][ T5850] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  190.052205][ T9265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1353'.
[  190.283372][ T9277] sctp: [Deprecated]: syz.4.1356 (pid 9277) Use of struct sctp_assoc_value in delayed_ack socket option.
[  190.283372][ T9277] Use struct sctp_sack_info instead
[  190.596493][ T9294] netlink: 'syz.0.1364': attribute type 39 has an invalid length.
[  190.687766][ T9296] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1365'.
[  190.942643][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  191.247925][ T9334] lo speed is unknown, defaulting to 1000
[  191.608504][   T27] wlan1: Trigger new scan to find an IBSS to join
[  191.911269][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'.
[  191.914837][ T9371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1398'.
[  192.424059][ T9397] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1410'.
[  192.684549][ T9418] netlink: 'syz.4.1421': attribute type 11 has an invalid length.
[  192.691031][ T9418] netlink: 'syz.4.1421': attribute type 11 has an invalid length.
[  192.917325][ T9430] netlink: 'syz.0.1426': attribute type 10 has an invalid length.
[  192.920652][ T9430] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1426'.
[  192.932434][ T9430] bond0: entered promiscuous mode
[  192.935262][ T9430] bond_slave_1: entered promiscuous mode
[  192.939281][ T9430] batadv_slave_0: entered promiscuous mode
[  192.951881][ T9430] bridge0: port 3(bond0) entered blocking state
[  192.958140][ T9430] bridge0: port 3(bond0) entered disabled state
[  192.961764][ T9430] bond0: entered allmulticast mode
[  192.966098][ T9430] bond_slave_1: entered allmulticast mode
[  192.969793][ T9430] batadv_slave_0: entered allmulticast mode
[  193.026773][ T9430] bridge0: port 3(bond0) entered blocking state
[  193.030141][ T9430] bridge0: port 3(bond0) entered forwarding state
[  193.042325][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.459196][ T9456] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1438'.
[  193.987204][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.989913][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.080153][ T9484] openvswitch: netlink: Message has 4 unknown bytes.
[  194.241572][ T9490] netlink: 'syz.3.1455': attribute type 13 has an invalid length.
[  194.252805][ T9490] netlink: 'syz.3.1455': attribute type 17 has an invalid length.
[  194.730636][ T9490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.749623][ T5917] lo speed is unknown, defaulting to 1000
[  195.212463][ T9514] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  195.431175][ T9531] netlink: 'syz.3.1472': attribute type 21 has an invalid length.
[  195.642149][ T9541] netlink: 'syz.3.1476': attribute type 11 has an invalid length.
[  195.648012][ T9541] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1476'.
[  195.653696][ T9540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.543598][ T1090] wlan1: Trigger new scan to find an IBSS to join
[  196.906762][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'.
[  197.022210][ T9580] netlink: 'syz.0.1494': attribute type 10 has an invalid length.
[  197.273307][ T9594] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  197.493283][ T4666] wlan1: Creating new IBSS network, BSSID ee:73:3d:4f:fa:fc
[  197.800876][ T9620] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1509'.
[  197.805884][ T9620] D`: renamed from hsr_slave_1 (while UP)
[  198.335656][ T9652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1523'.
[  198.437772][ T9662] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  198.564348][ T9673] netlink: 'syz.3.1533': attribute type 21 has an invalid length.
[  198.567187][ T9673] netlink: 'syz.3.1533': attribute type 20 has an invalid length.
[  198.857037][ T9683] netlink: 'syz.0.1538': attribute type 1 has an invalid length.
[  199.012189][ T9687] : entered promiscuous mode
[  199.061836][ T9693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1542'.
[  199.069071][ T9693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1542'.
[  199.134510][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1543'.
[  199.494224][ T9725] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1558'.
[  199.519780][ T9727] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1560'.
[  200.577084][ T9756] cgroup: fork rejected by pids controller in /syz4
[  200.829247][ T9771] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.429774][ T5866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.511899][ T5866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.706949][ T5866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.775662][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  201.782011][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  201.789057][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  201.797586][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  201.800888][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  201.865182][ T9784] lo speed is unknown, defaulting to 1000
[  202.099097][ T9784] chnl_net:caif_netlink_parms(): no params data found
[  202.105363][ T5866] team0: left allmulticast mode
[  202.107231][ T5866] team_slave_0: left allmulticast mode
[  202.109427][ T5866] team_slave_1: left allmulticast mode
[  202.112695][ T5866] bridge0: port 3(team0) entered disabled state
[  202.118328][ T5866] bridge_slave_1: left allmulticast mode
[  202.120138][ T5866] bridge_slave_1: left promiscuous mode
[  202.121955][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.386298][ T9804] netlink: 'syz.3.1590': attribute type 39 has an invalid length.
[  202.487051][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.493890][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.499165][ T5866] bond0 (unregistering): Released all slaves
[  202.596626][ T5866] : left promiscuous mode
[  202.709500][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.711951][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.718393][ T9784] bridge_slave_0: entered allmulticast mode
[  202.728524][ T9784] bridge_slave_0: entered promiscuous mode
[  202.736709][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.743307][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.755427][ T9784] bridge_slave_1: entered allmulticast mode
[  202.764890][ T9784] bridge_slave_1: entered promiscuous mode
[  202.876331][ T9784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.905777][ T9784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.947222][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.953819][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.966483][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.969451][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.995288][ T5866] veth1_macvtap: left promiscuous mode
[  202.997145][ T5866] veth0_macvtap: left promiscuous mode
[  202.998910][ T5866] veth1_vlan: left promiscuous mode
[  203.000585][ T5866] veth0_vlan: left promiscuous mode
[  203.108676][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1597'.
[  203.562423][ T5866] team_slave_1 (unregistering): left promiscuous mode
[  203.568511][ T5866] team0 (unregistering): Port device team_slave_1 removed
[  203.605275][ T5866] team_slave_0 (unregistering): left promiscuous mode
[  203.608465][ T5866] team0 (unregistering): Port device team_slave_0 removed
[  203.823512][ T5852] Bluetooth: hci0: command tx timeout
[  203.892936][ T9854] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1607'.
[  203.895946][ T9854] openvswitch: netlink: Message has 4 unknown bytes.
[  203.959770][ T9854] netlink: 'syz.0.1607': attribute type 39 has an invalid length.
[  204.247514][ T9784] team0: Port device team_slave_0 added
[  204.250968][ T9784] team0: Port device team_slave_1 added
[  204.359709][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.362451][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.381416][ T9784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.390240][ T9846] lo speed is unknown, defaulting to 1000
[  204.403163][ T9784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.405958][ T9784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.431913][ T9784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.552102][ T9784] hsr_slave_0: entered promiscuous mode
[  204.566856][ T9784] hsr_slave_1: entered promiscuous mode
[  204.769129][ T9866] syzkaller0: entered promiscuous mode
[  204.771443][ T9866] syzkaller0: entered allmulticast mode
[  205.903370][ T5852] Bluetooth: hci0: command tx timeout
[  206.140899][ T9877] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1611'.
[  206.194114][ T9877] bridge0: port 3(bond0) entered disabled state
[  206.282466][ T9877] bond0 (unregistering): left allmulticast mode
[  206.286402][ T9877] bond_slave_1: left allmulticast mode
[  206.288567][ T9877] batadv_slave_0: left allmulticast mode
[  206.290851][ T9877] bridge0: port 3(bond0) entered disabled state
[  206.298024][ T9877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.301720][ T9877] bond_slave_1: left promiscuous mode
[  206.310192][ T9877] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  206.315835][ T9877] batadv_slave_0: left promiscuous mode
[  206.319359][ T9877] bond0 (unregistering): Released all slaves
[  206.498247][ T9784] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  206.508693][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'.
[  206.514534][ T9784] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  206.532925][ T9784] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  206.539125][ T9784] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  206.620730][ T9784] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.640641][ T9784] 8021q: adding VLAN 0 to HW filter on device team0
[  206.649894][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.652416][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.676425][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.678857][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.845575][ T9909] netlink: 'syz.0.1620': attribute type 28 has an invalid length.
[  206.951371][ T9784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.165713][ T9784] veth0_vlan: entered promiscuous mode
[  207.185475][ T9784] veth1_vlan: entered promiscuous mode
[  207.215030][ T9784] veth0_macvtap: entered promiscuous mode
[  207.239344][ T9784] veth1_macvtap: entered promiscuous mode
[  207.257824][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.271499][ T9784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.280739][ T9952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1631'.
[  207.287422][ T5883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.290795][ T5883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.304537][ T5883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.322456][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.383444][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.393698][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.411494][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1634'.
[  207.474347][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.477891][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.982717][ T5852] Bluetooth: hci0: command tx timeout
[  208.742235][T10026] netlink: 'syz.3.1665': attribute type 10 has an invalid length.
[  208.746405][T10026] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1665'.
[  208.751814][T10027] netlink: 'syz.0.1664': attribute type 12 has an invalid length.
[  208.757621][T10027] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1664'.
[  208.867864][T10036] netlink: 'syz.3.1670': attribute type 21 has an invalid length.
[  208.891398][T10036] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1670'.
[  208.896290][T10036] netlink: 'syz.3.1670': attribute type 5 has an invalid length.
[  208.900835][T10036] netlink: 'syz.3.1670': attribute type 6 has an invalid length.
[  208.904734][T10036] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1670'.
[  210.035985][T10046] netlink: 'syz.3.1674': attribute type 2 has an invalid length.
[  210.039324][T10046] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1674'.
[  210.051367][T10046] nbd: must specify an index to disconnect
[  210.102720][ T5852] Bluetooth: hci0: command tx timeout
[  210.112441][T10047] netlink: 'syz.3.1674': attribute type 1 has an invalid length.
[  210.223098][T10049] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  210.616689][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'.
[  210.888474][T10066] Dead loop on virtual device ip6_vti0, fix it urgently!
[  211.512046][T10089] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1693'.
[  211.727602][T10097] lo speed is unknown, defaulting to 1000
[  212.299567][ T5852] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6
[  212.650544][T10125] tap0: tun_chr_ioctl cmd 35108
[  213.006138][T10136] netlink: 'syz.3.1713': attribute type 25 has an invalid length.
[  213.009510][T10136] netlink: 'syz.3.1713': attribute type 28 has an invalid length.
[  213.039206][T10138] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1714'.
[  213.044118][T10138] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1714'.
[  213.048339][T10138] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1714'.
[  213.941332][T10154] cgroup: Unknown subsys name '0x0000000000000000'
[  214.552723][T10175] netlink: 'syz.3.1731': attribute type 21 has an invalid length.
[  214.618934][T10179] : entered promiscuous mode
[  214.648409][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1735'.
[  214.651495][T10181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1735'.
[  215.811419][T10218] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1750'.
[  216.138838][T10235] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1758'.
[  216.577338][T10245] netlink: 'syz.3.1763': attribute type 39 has an invalid length.
[  217.764245][T10258] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.1767'.
[  218.167854][T10278] netlink: 'syz.3.1777': attribute type 3 has an invalid length.
[  218.225139][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1778'.
[  219.255581][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1782'.
[  219.258878][T10290] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1782'.
[  219.262404][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1782'.
[  220.513044][T10340] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1806'.
[  220.550487][T10342] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1807'.
[  221.008485][T10363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1816'.
[  221.011868][T10363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1816'.
[  221.015180][T10363] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1816'.
[  223.647508][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1824'.
[  223.924992][T10391] netlink: 'syz.3.1826': attribute type 2 has an invalid length.
[  223.928371][T10391] netlink: 8196 bytes leftover after parsing attributes in process `syz.3.1826'.
[  224.847589][T10420] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1842'.
[  224.878714][ T5852] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  225.049730][T10432] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1848'.
[  225.056322][T10432] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1848'.
[  225.088908][T10434] netlink: set zone limit has 8 unknown bytes
[  225.208606][T10440] TCP: TCP_TX_DELAY enabled
[  225.318119][T10446] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1855'.
[  225.330868][T10446] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1855'.
[  225.371092][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'.
[  225.980928][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  225.985298][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  226.007623][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  226.013914][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  226.019071][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  226.038147][ T5883] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.077464][T10461] lo speed is unknown, defaulting to 1000
[  226.135717][ T5883] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.210202][ T5883] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.519646][ T5883] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.539950][T10461] chnl_net:caif_netlink_parms(): no params data found
[  226.700944][T10461] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.705363][T10461] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.709313][T10461] bridge_slave_0: entered allmulticast mode
[  226.714201][T10461] bridge_slave_0: entered promiscuous mode
[  226.761347][T10461] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.767162][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1869'.
[  226.767911][T10461] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.772403][T10461] bridge_slave_1: entered allmulticast mode
[  226.776665][T10461] bridge_slave_1: entered promiscuous mode
[  226.840852][ T5883] bridge_slave_1: left allmulticast mode
[  226.844561][ T5883] bridge_slave_1: left promiscuous mode
[  226.850044][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.864736][ T5883] bridge_slave_0: left allmulticast mode
[  226.869327][ T5883] bridge_slave_0: left promiscuous mode
[  226.871532][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.931157][T10501] netlink: 'syz.4.1874': attribute type 1 has an invalid length.
[  226.938868][T10501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.442215][T10461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.462122][T10461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.520998][T10461] team0: Port device team_slave_0 added
[  227.526668][T10461] team0: Port device team_slave_1 added
[  227.537269][   T28] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  228.062851][ T5850] Bluetooth: hci2: command tx timeout
[  230.142788][ T5850] Bluetooth: hci2: command tx timeout
[  230.576567][T10461] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.579652][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.590043][T10461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.605052][T10461] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.607958][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.619190][T10461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.874616][T10461] hsr_slave_0: entered promiscuous mode
[  230.880887][T10461] hsr_slave_1: entered promiscuous mode
[  230.896755][T10461] debugfs: 'hsr0' already exists in 'hsr'
[  230.898647][T10461] Cannot create hsr debugfs directory
[  231.164366][T10546] syzkaller0: entered promiscuous mode
[  231.166088][T10546] syzkaller0: entered allmulticast mode
[  231.203164][ T5883] hsr_slave_0: left promiscuous mode
[  231.206085][ T5883] D`: left promiscuous mode
[  231.207924][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.210298][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.266997][ T5883] veth1_vlan: left promiscuous mode
[  231.268893][ T5883] veth0_vlan: left promiscuous mode
[  231.439001][T10553] netlink: 'syz.3.1886': attribute type 1 has an invalid length.
[  231.446442][T10553] netlink: 'syz.3.1886': attribute type 2 has an invalid length.
[  231.731400][ T5883] team0 (unregistering): Port device team_slave_1 removed
[  231.782120][ T5883] team0 (unregistering): Port device C removed
[  232.111242][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'.
[  232.222984][ T5850] Bluetooth: hci2: command tx timeout
[  232.255759][T10565] : entered promiscuous mode
[  232.365303][T10570] netlink: 'syz.3.1891': attribute type 1 has an invalid length.
[  232.521679][T10574] netlink: 'syz.3.1893': attribute type 2 has an invalid length.
[  232.524367][T10574] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1893'.
[  234.308637][ T5850] Bluetooth: hci2: command tx timeout
[  234.688514][T10461] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  234.702057][T10461] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  234.733922][T10461] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  234.740545][T10461] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  235.005755][T10461] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.129942][T10621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1909'.
[  235.137633][T10461] 8021q: adding VLAN 0 to HW filter on device team0
[  235.157129][ T3405] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.159921][ T3405] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.227624][ T3405] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.230515][ T3405] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.618857][T10461] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.668733][T10655] netlink: 'syz.3.1916': attribute type 33 has an invalid length.
[  235.677313][T10655] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1916'.
[  235.950398][T10662] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  235.957561][T10662] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  236.018959][T10461] veth0_vlan: entered promiscuous mode
[  236.040366][T10461] veth1_vlan: entered promiscuous mode
[  236.089690][T10461] veth0_macvtap: entered promiscuous mode
[  236.095126][T10461] veth1_macvtap: entered promiscuous mode
[  236.117042][T10461] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.151908][T10461] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.163792][ T5883] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.168670][ T5883] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.172247][ T5883] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.180782][ T5883] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.251644][ T3405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.260336][ T3405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.297539][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.301287][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.391774][T10678] netlink: 'syz.3.1924': attribute type 4 has an invalid length.
[  236.401371][T10678] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1924'.
[  236.406986][T10678] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  236.632915][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'.
[  237.638972][T10703] netlink: 'syz.3.1931': attribute type 29 has an invalid length.
[  237.642268][T10703] netlink: 'syz.3.1931': attribute type 29 has an invalid length.
[  237.646797][T10703] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1931'.
[  237.655074][T10704] netlink: 'syz.4.1933': attribute type 21 has an invalid length.
[  237.746047][T10706] netlink: 'syz.5.1934': attribute type 29 has an invalid length.
[  237.752428][T10706] netlink: 'syz.5.1934': attribute type 29 has an invalid length.
[  237.857755][T10718] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1940'.
[  238.069122][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'.
[  238.087308][T10731] netlink: 130016 bytes leftover after parsing attributes in process `syz.4.1946'.
[  238.093009][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'.
[  238.161599][T10734] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1946'.
[  238.610084][T10750] netlink: 'syz.4.1954': attribute type 21 has an invalid length.
[  238.614147][T10750] netlink: 'syz.4.1954': attribute type 15 has an invalid length.
[  238.619093][T10750] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1954'.
[  238.625963][T10750] IPv6: NLM_F_CREATE should be specified when creating new route
[  238.629925][T10750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  238.632858][T10750] IPv6: NLM_F_CREATE should be set when creating new route
[  238.635751][T10750] IPv6: NLM_F_CREATE should be set when creating new route
[  238.636774][ T3405] wlan1: Trigger new scan to find an IBSS to join
[  238.638510][T10750] IPv6: NLM_F_CREATE should be set when creating new route
[  239.166874][T10761] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1960'.
[  240.281803][T10772] lo speed is unknown, defaulting to 1000
[  240.445234][T10784] netlink: 'syz.4.1970': attribute type 29 has an invalid length.
[  240.449139][T10784] netlink: 'syz.4.1970': attribute type 29 has an invalid length.
[  240.452251][T10784] netlink: 'syz.4.1970': attribute type 29 has an invalid length.
[  241.591596][   T36] wlan1: Trigger new scan to find an IBSS to join
[  241.627399][T10826] macvtap0: refused to change device tx_queue_len
[  242.010734][T10852] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  242.153560][ T5852] Bluetooth: hci1: command 0x0406 tx timeout
[  242.378973][T10883] openvswitch: netlink: IP tunnel dst address not specified
[  242.895243][T10913] syzkaller0: entered promiscuous mode
[  242.897535][T10913] syzkaller0: entered allmulticast mode
[  243.102073][T10924] validate_nla: 2 callbacks suppressed
[  243.102091][T10924] netlink: 'syz.5.2032': attribute type 29 has an invalid length.
[  243.464926][T10946] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2042'.
[  243.468801][T10946] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2042'.
[  243.577504][T10954] netlink: 'syz.4.2046': attribute type 21 has an invalid length.
[  243.583093][T10954] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2046'.
[  243.665924][T10962] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2050'.
[  244.659927][   T28] wlan1: Trigger new scan to find an IBSS to join
[  244.745671][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2055'.
[  244.869309][ T5852] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  245.644238][   T27] wlan1: Creating new IBSS network, BSSID 2e:ff:3c:d5:dd:8a
[  246.875637][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2070'.
[  247.281432][T11040] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  247.294634][T11040] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  247.311333][T11047] sock: sock_timestamping_bind_phc: sock not bind to device
[  247.517247][T11055] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2080'.
[  247.520953][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'.
[  248.490325][T11082] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2090'.
[  248.575996][T11089] delete_channel: no stack
[  248.712093][T11100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2099'.
[  248.720803][T11100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2099'.
[  249.454110][T11129] syzkaller1: tun_chr_ioctl cmd 1074025677
[  249.461762][T11129] syzkaller1: linktype set to 823
[  250.311628][T11167] : port 1(vlan0) entered blocking state
[  250.323194][T11167] : port 1(vlan0) entered disabled state
[  250.325799][T11167] vlan0: entered allmulticast mode
[  250.327934][T11167] veth0_vlan: entered allmulticast mode
[  250.361531][T11167] vlan0: entered promiscuous mode
[  250.772103][T11184] openvswitch: netlink: Message has 4 unknown bytes.
[  250.821812][T11187] mac80211_hwsim hwsim18 .3c: renamed from wlan1 (while UP)
[  250.837207][T11188] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.2134'.
[  251.063883][T11200] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2137'.
[  251.075343][T11209] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2144'.
[  251.079736][T11209] netlink: zone id is out of range
[  251.081464][T11209] netlink: zone id is out of range
[  251.085305][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2137'.
[  251.088372][T11209] netlink: zone id is out of range
[  251.090847][T11209] netlink: zone id is out of range
[  251.095437][T11209] netlink: zone id is out of range
[  251.097136][T11209] netlink: zone id is out of range
[  251.098900][T11209] netlink: zone id is out of range
[  251.100579][T11209] netlink: zone id is out of range
[  251.107901][T11209] netlink: zone id is out of range
[  251.366602][T11230] netlink: 'syz.3.2153': attribute type 2 has an invalid length.
[  251.369853][T11230] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2153'.
[  251.641984][T11250] netlink: 'syz.4.2159': attribute type 21 has an invalid length.
[  251.646419][T11250] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2159'.
[  252.704603][T11277] netlink: 'syz.3.2167': attribute type 1 has an invalid length.
[  252.808072][T11284] netlink: 'syz.3.2170': attribute type 17 has an invalid length.
[  252.810858][T11284] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2170'.
[  255.485403][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.487966][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  256.248293][T11312] __nla_validate_parse: 1 callbacks suppressed
[  256.248303][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2184'.
[  257.298029][T11334] netlink: 'syz.5.2192': attribute type 1 has an invalid length.
[  257.301263][T11334] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2192'.
[  257.654460][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2196'.
[  257.823537][T11355] net_ratelimit: 76 callbacks suppressed
[  257.823559][T11355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  257.829042][T11355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  257.832678][T11355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  257.836145][T11355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  257.839629][T11355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  257.843019][T11355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  257.846226][T11355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  257.849624][T11355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  257.853284][T11355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  257.856769][T11355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  258.367649][T11379] netlink: 'syz.4.2211': attribute type 6 has an invalid length.
[  258.371336][T11379] netlink: 'syz.4.2211': attribute type 1 has an invalid length.
[  258.382191][T11379] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2211'.
[  258.627837][T11396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2219'.
[  258.631674][T11396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2219'.
[  259.050589][T11421] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2230'.
[  259.211181][T11429] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.2234'.
[  259.217437][T11429] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2234'.
[  259.370986][T11431] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2236'.
[  259.588045][T11441] netlink: 'syz.3.2240': attribute type 26 has an invalid length.
[  260.016696][T11465] netlink: 'syz.4.2250': attribute type 10 has an invalid length.
[  260.163553][T11467] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.167303][T11467] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.179617][T11467] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.184790][T11467] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.478887][T11467] bridge0: port 3(batadv0) entered disabled state
[  260.552891][T11467] batadv0 (unregistering): left allmulticast mode
[  260.555055][T11467] batadv0 (unregistering): left promiscuous mode
[  260.557375][T11467] bridge0: port 3(batadv0) entered disabled state
[  261.773263][T11502] __nla_validate_parse: 7 callbacks suppressed
[  261.773278][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2267'.
[  261.868564][T11505] netlink: 'syz.5.2268': attribute type 11 has an invalid length.
[  262.442727][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2278'.
[  262.463244][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2278'.
[  262.466654][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'.
[  262.549611][T11531] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0
[  264.077693][T11558] netlink: 'syz.3.2291': attribute type 23 has an invalid length.
[  264.413661][T11568] netlink: 'syz.3.2295': attribute type 2 has an invalid length.
[  264.416529][T11568] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.2295'.
[  264.686406][T11588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2305'.
[  264.690119][T11588] unsupported nlmsg_type 40
[  264.889974][T11601] netlink: 'syz.5.2308': attribute type 21 has an invalid length.
[  265.139138][T11605] netlink: 'syz.3.2311': attribute type 2 has an invalid length.
[  265.284865][T11619] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2318'.
[  265.383458][T11621] netlink: 'syz.5.2319': attribute type 5 has an invalid length.
[  265.386168][T11621] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2319'.
[  265.834524][T11646] net_ratelimit: 3321 callbacks suppressed
[  265.834541][T11646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.073044][T11657] bridge_slave_1: left allmulticast mode
[  266.075654][T11657] bridge_slave_1: left promiscuous mode
[  266.079787][T11657] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.732222][T11657] bridge_slave_0: left allmulticast mode
[  266.734147][T11657] bridge_slave_0: left promiscuous mode
[  266.735948][T11657] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.783704][T11668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2339'.
[  266.916146][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2340'.
[  267.174157][T11687] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2348'.
[  267.398463][ T5852] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  267.401466][ T5852] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x65
[  267.416196][T11703] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode
[  267.652261][T11720] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2362'.
[  268.688559][T11732] delete_channel: no stack
[  269.245632][T11771] netlink: 'syz.5.2385': attribute type 10 has an invalid length.
[  269.259547][T11771] team0: Device ipvlan1 failed to register rx_handler
[  269.820188][   T33] audit: type=1107 audit(1759317265.361:3): pid=11798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  269.953198][T11801] netlink: 280 bytes leftover after parsing attributes in process `syz.5.2399'.
[  270.442089][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2404'.
[  270.629177][T11821] netlink: 'syz.4.2407': attribute type 3 has an invalid length.
[  270.638470][T11821] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2407'.
[  270.876067][T11827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2411'.
[  271.021485][T11831] netlink: 'syz.4.2412': attribute type 13 has an invalid length.
[  271.161270][   T33] audit: type=1107 audit(1759317266.741:4): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  271.385511][T11859] netlink: 'syz.5.2423': attribute type 1 has an invalid length.
[  271.680014][T11875] netlink: 22 bytes leftover after parsing attributes in process `syz.5.2431'.
[  271.880624][T11892] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2438'.
[  275.692788][ T4666] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  276.665880][T11946] unsupported nla_type 52263
[  276.862184][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2467'.
[  277.149015][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'.
[  278.948094][T12002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2486'.
[  281.590345][T12012] netlink: 'syz.4.2491': attribute type 6 has an invalid length.
[  281.598685][T12012] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2491'.
[  282.353494][T12047] netlink: 'syz.3.2507': attribute type 39 has an invalid length.
[  282.568094][T12059] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  282.571769][T12059] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  282.647588][T12070] netlink: 'syz.4.2517': attribute type 1 has an invalid length.
[  282.683461][T12074] netlink: 'syz.4.2518': attribute type 25 has an invalid length.
[  282.691592][T12063] syzkaller0: entered promiscuous mode
[  282.695136][T12063] syzkaller0: entered allmulticast mode
[  284.157340][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2525'.
[  284.378861][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2532'.
[  285.069431][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'.
[  285.234390][T12163] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2558'.
[  285.238051][T12163] netlink: 'syz.3.2558': attribute type 1 has an invalid length.
[  285.546478][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2563'.
[  285.868907][T12194] 0: renamed from bond_slave_1 (while UP)
[  289.271515][T12284] netlink: 'syz.4.2610': attribute type 2 has an invalid length.
[  289.274401][T12284] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2610'.
[  289.981000][T12310] openvswitch: netlink: IP tunnel dst address not specified
[  290.914368][T12333] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2632'.
[  290.917435][T12333] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2632'.
[  291.371678][T12355] netlink: 'syz.4.2642': attribute type 21 has an invalid length.
[  291.381867][T12355] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2642'.
[  291.403521][T12357] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2643'.
[  291.513452][T12363] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2646'.
[  291.898653][T12379] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2646'.
[  292.152610][T12395] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2657'.
[  292.155795][T12395] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  292.159039][T12395] openvswitch: netlink: Message has 2 unknown bytes.
[  292.215697][T12399] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.2659'.
[  292.281078][ T5852] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  292.285442][ T5852] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  293.080577][T12414] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2665'.
[  293.115631][T12414] IPv6: NLM_F_CREATE should be specified when creating new route
[  293.120662][T12414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  293.123213][T12414] IPv6: NLM_F_CREATE should be set when creating new route
[  294.540898][T12462] netlink: 'syz.4.2685': attribute type 3 has an invalid length.
[  294.545560][T12462] __nla_validate_parse: 4 callbacks suppressed
[  294.545576][T12462] netlink: 199752 bytes leftover after parsing attributes in process `syz.4.2685'.
[  294.627036][T12469] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2688'.
[  294.691794][T12474] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2690'.
[  294.728767][T12476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2691'.
[  294.870566][ T5852] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6
[  295.160689][T12496] netlink: 'syz.5.2700': attribute type 29 has an invalid length.
[  295.224089][T12496] netlink: 'syz.5.2700': attribute type 29 has an invalid length.
[  295.291892][T12503] netlink: 'syz.5.2700': attribute type 29 has an invalid length.
[  295.343829][T12496] netlink: 'syz.5.2700': attribute type 29 has an invalid length.
[  295.365853][T12507] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2705'.
[  295.694621][T12522] netlink: 'syz.4.2711': attribute type 21 has an invalid length.
[  295.697358][T12522] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2711'.
[  298.028872][T12549] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  298.148127][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2725'.
[  298.191004][T12555] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2726'.
[  298.571037][T12553] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  299.374616][T12598] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2742'.
[  299.379902][T12598] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2742'.
[  299.447411][T12607] C: renamed from team_slave_0 (while UP)
[  299.457556][T12607] netlink: 'syz.3.2746': attribute type 4 has an invalid length.
[  299.460082][T12607] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  299.610751][T12622] netlink: 'syz.3.2753': attribute type 10 has an invalid length.
[  299.652270][T12622] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  300.903412][T12651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.223084][T12659] bridge_slave_1: left allmulticast mode
[  301.229415][T12659] bridge_slave_1: left promiscuous mode
[  301.232065][T12659] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.564201][T12659] bridge_slave_0: left allmulticast mode
[  301.566481][T12659] bridge_slave_0: left promiscuous mode
[  301.568871][T12659] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.639355][T12658] __nla_validate_parse: 2 callbacks suppressed
[  301.639407][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2767'.
[  301.811442][T12658] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2767'.
[  301.833851][T12648] delete_channel: no stack
[  302.064712][T12675] netlink: 'syz.5.2774': attribute type 10 has an invalid length.
[  302.519760][T12692] netlink: 'syz.4.2776': attribute type 10 has an invalid length.
[  302.587744][T12693] netlink: 'syz.4.2776': attribute type 11 has an invalid length.
[  302.598621][T12693] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2776'.
[  302.880184][T12688] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2777'.
[  302.894236][T12692] team0: Port device .3c added
[  302.896539][T12686] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2777'.
[  302.951044][T12678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.991188][T12696] netlink: 'syz.5.2778': attribute type 1 has an invalid length.
[  303.485931][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2783'.
[  304.258595][T12753] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2805'.
[  304.461082][T12757] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2807'.
[  304.622442][T12775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2816'.
[  304.680769][T12773] siw: device registration error -23
[  306.000700][T12822] netlink: 'syz.5.2838': attribute type 3 has an invalid length.
[  306.008963][T12822] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2838'.
[  306.785342][   T28] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  306.967634][T12838] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2844'.
[  307.666573][T12860] netlink: 'syz.3.2853': attribute type 39 has an invalid length.
[  308.120718][T12878] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2862'.
[  309.082346][T12902] lo speed is unknown, defaulting to 1000
[  309.762208][T12949] netlink: 'syz.4.2895': attribute type 21 has an invalid length.
[  309.767891][T12949] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2895'.
[  309.771755][T12949] netlink: 'syz.4.2895': attribute type 4 has an invalid length.
[  309.779422][T12949] netlink: 'syz.4.2895': attribute type 5 has an invalid length.
[  309.782464][T12949] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2895'.
[  309.902118][T12958] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  309.941657][T12961] netlink: 'syz.5.2901': attribute type 1 has an invalid length.
[  309.946108][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2901'.
[  309.992982][T12967] IPv6: NLM_F_CREATE should be specified when creating new route
[  310.131711][T12976] netlink: 'syz.3.2908': attribute type 12 has an invalid length.
[  310.136833][T12976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2908'.
[  310.181046][T12980] netlink: 'syz.3.2910': attribute type 10 has an invalid length.
[  310.183778][T12980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2910'.
[  310.189040][T12980] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  310.606893][T12993] netlink: 'syz.3.2915': attribute type 1 has an invalid length.
[  310.610293][T12993] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2915'.
[  310.916442][T13007] netlink: 'syz.4.2922': attribute type 11 has an invalid length.
[  311.234156][T13019] netlink: 'syz.5.2927': attribute type 10 has an invalid length.
[  311.237405][T13019] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2927'.
[  311.694752][T13051] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  311.697902][T13051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.716658][T13084] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2955'.
[  314.060346][T13114] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2968'.
[  314.574622][T13146] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2983'.
[  316.881668][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.885445][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.805189][T13250] netlink: 'syz.4.3029': attribute type 10 has an invalid length.
[  317.953617][T13250] vlan0 (unregistering): left allmulticast mode
[  317.956137][T13250] veth0_vlan: left allmulticast mode
[  317.958190][T13250] vlan0 (unregistering): left promiscuous mode
[  317.961217][T13250] : port 1(vlan0) entered disabled state
[  318.533417][T13261] netlink: 'syz.4.3034': attribute type 11 has an invalid length.
[  318.541300][T13261] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.3034'.
[  318.609621][T13262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.756254][T13266] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.3036'.
[  319.455775][T13284] netlink: 'syz.3.3039': attribute type 64 has an invalid length.
[  320.304654][T13292] netlink: 'syz.3.3046': attribute type 12 has an invalid length.
[  320.307706][T13292] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3046'.
[  320.496595][T13302] openvswitch: netlink: Missing valid actions attribute.
[  320.499366][T13302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.774816][T13318] netlink: 'syz.4.3058': attribute type 10 has an invalid length.
[  322.348451][T13353] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3073'.
[  322.409330][T13357] netlink: 'syz.4.3075': attribute type 13 has an invalid length.
[  322.416745][T13357] netlink: 'syz.4.3075': attribute type 17 has an invalid length.
[  322.420167][T13359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3076'.
[  322.824555][T13357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  324.056025][T13401] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.072958][ T5852] Bluetooth: hci0: command 0x0406 tx timeout
[  324.231405][T13414] netlink: 'syz.4.3098': attribute type 29 has an invalid length.
[  324.268676][T13414] netlink: 'syz.4.3098': attribute type 29 has an invalid length.
[  324.280191][T13414] netlink: 'syz.4.3098': attribute type 29 has an invalid length.
[  324.294712][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3101'.
[  324.298465][T13414] netlink: 'syz.4.3098': attribute type 29 has an invalid length.
[  324.333939][T13418] : entered promiscuous mode
[  324.488480][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3105'.
[  324.519573][T13426] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3105'.
[  325.689864][T13446] netlink: 'syz.4.3111': attribute type 13 has an invalid length.
[  325.695268][T13446] netlink: 'syz.4.3111': attribute type 17 has an invalid length.
[  325.802307][T13446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  326.274252][T13466] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3118'.
[  326.624499][T13470] syzkaller1: tun_chr_ioctl cmd 1074025677
[  326.626953][T13470] syzkaller1: linktype set to 823
[  328.947786][T13530] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  328.951761][T13530] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  329.082856][T13541] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  329.087184][T13541] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  329.090868][T13541] CPU: 1 UID: 0 PID: 13541 Comm: syz.4.3150 Not tainted syzkaller #0 PREEMPT(full) 
[  329.094464][T13541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  329.097619][T13541] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  329.099333][T13541] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 46 d6 00 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 0f d7 00 f8 4d 89 3e
[  329.105523][T13541] RSP: 0018:ffffc90007df75a0 EFLAGS: 00010246
[  329.107625][T13541] RAX: 0000000000000000 RBX: 1ffff11023631ec6 RCX: dffffc0000000000
[  329.110570][T13541] RDX: ffffc90008ee2000 RSI: 0000000000000127 RDI: 0000000000000128
[  329.113087][T13541] RBP: ffffc90007df76f8 R08: ffff888106869cc0 R09: 0000000000000002
[  329.115701][T13541] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11006f4c636
[  329.118286][T13541] R13: ffff88811b18f630 R14: 0000000000000000 R15: ffff88811b18f628
[  329.120846][T13541] FS:  00007f338e8716c0(0000) GS:ffff8881a3c11000(0000) knlGS:0000000000000000
[  329.123887][T13541] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  329.126408][T13541] CR2: 000000110c28175b CR3: 0000000035b46000 CR4: 00000000000006f0
[  329.129407][T13541] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  329.132378][T13541] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  329.135303][T13541] Call Trace:
[  329.136400][T13541]  <TASK>
[  329.137462][T13541]  ? xfrm_alloc_spi+0x2a0/0xf30
[  329.139338][T13541]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  329.141050][T13541]  ? xfrm_find_acq+0x87/0xa0
[  329.142729][T13541]  pfkey_getspi+0x7a8/0xee0
[  329.144366][T13541]  pfkey_sendmsg+0xbfe/0x1090
[  329.146164][T13541]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  329.148139][T13541]  ? irqentry_exit+0x74/0x90
[  329.149813][T13541]  ? lockdep_hardirqs_on+0x9c/0x150
[  329.151474][T13541]  ? aa_sock_msg_perm+0xf1/0x1d0
[  329.153186][T13541]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  329.154769][T13541]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  329.156664][T13541]  __sock_sendmsg+0x21c/0x270
[  329.158488][T13541]  ____sys_sendmsg+0x505/0x830
[  329.160372][T13541]  ? __pfx_____sys_sendmsg+0x10/0x10
[  329.162042][T13541]  ? import_iovec+0x74/0xa0
[  329.163630][T13541]  ___sys_sendmsg+0x21f/0x2a0
[  329.165432][T13541]  ? __pfx____sys_sendmsg+0x10/0x10
[  329.167443][T13541]  ? __fget_files+0x2a/0x420
[  329.169038][T13541]  ? __fget_files+0x3a0/0x420
[  329.170597][T13541]  __x64_sys_sendmsg+0x19b/0x260
[  329.172273][T13541]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  329.174124][T13541]  do_syscall_64+0xfa/0x3b0
[  329.175558][T13541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.177442][T13541]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  329.179333][T13541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.181152][T13541] RIP: 0033:0x7f338d98ec29
[  329.182538][T13541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.189592][T13541] RSP: 002b:00007f338e871038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  329.192922][T13541] RAX: ffffffffffffffda RBX: 00007f338dbd5fa0 RCX: 00007f338d98ec29
[  329.196136][T13541] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 000000000000000a
[  329.199396][T13541] RBP: 00007f338da11e41 R08: 0000000000000000 R09: 0000000000000000
[  329.202591][T13541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  329.205806][T13541] R13: 00007f338dbd6038 R14: 00007f338dbd5fa0 R15: 00007ffdc4079ee8
[  329.209069][T13541]  </TASK>
[  329.210347][T13541] Modules linked in:
[  329.212426][T13541] ---[ end trace 0000000000000000 ]---
[  329.214838][T13541] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  329.217306][T13541] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 46 d6 00 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 0f d7 00 f8 4d 89 3e
[  329.225295][T13541] RSP: 0018:ffffc90007df75a0 EFLAGS: 00010246
[  329.228335][T13541] RAX: 0000000000000000 RBX: 1ffff11023631ec6 RCX: dffffc0000000000
[  329.231735][T13541] RDX: ffffc90008ee2000 RSI: 0000000000000127 RDI: 0000000000000128
[  329.235195][T13541] RBP: ffffc90007df76f8 R08: ffff888106869cc0 R09: 0000000000000002
[  329.238531][T13541] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11006f4c636
[  329.241914][T13541] R13: ffff88811b18f630 R14: 0000000000000000 R15: ffff88811b18f628
[  329.245549][T13541] FS:  00007f338e8716c0(0000) GS:ffff8881a3c11000(0000) knlGS:0000000000000000
[  329.249365][T13541] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  329.252245][T13541] CR2: 000000110c28175b CR3: 0000000035b46000 CR4: 00000000000006f0
[  329.712534][T13541] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  329.715976][T13541] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  329.719337][T13541] Kernel panic - not syncing: Fatal exception in interrupt
[  329.722856][T13541] Kernel Offset: disabled
[  329.724632][T13541] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:15:24  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4665b RBX=1ffff11026cc7f61 RCX=ffff8880232d8000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900212c77e0 RSP=ffffc900212c7660
R8 =ffffffff8fa3b537 R9 =1ffffffff1f476a6 R10=dffffc0000000000 R11=fffffbfff1f476a7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b46643 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f338e870fc8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f31c7812e7b
XMM06=0000000000000000 00007f31c7812e75 XMM07=0000000000000000 00007f31c7812e89
XMM08=0000000000000000 00007f31c7812f0f XMM09=0000000000000000 00007f31c7812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bf260 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000001286 RDI=0000000000001287 RBP=ffffffff99df96b0 RSP=ffffc90007df6cd0
R8 =ffff888021580237 R9 =1ffff110042b0046 R10=dffffc0000000000 R11=ffffffff85504af0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504b67 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f338e8716c0 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c28175b CR3=0000000035b46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f338dba7498 00007f338dba7470 XMM03=00007f338dba74a8 00007f338dba74a0
XMM04=00007f338e70d100 00007f338dba7460 XMM05=00007f338dba7478 00007f338dba74c0
XMM06=00007f338dba74b8 00007f338dba74b0 XMM07=00007f338dba74a8 00007f338dba74a0
XMM08=0000000000000000 00007f338da12f0f XMM09=0000000000000000 00007f338da12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
