last executing test programs:

4m1.411616162s ago: executing program 1 (id=2359):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3e, 0x107, 0xfffff7fe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x909'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

4m1.257444683s ago: executing program 1 (id=2363):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private1}}]}, 0x60}}, 0x0)

4m1.257069033s ago: executing program 1 (id=2364):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000080000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
unlink(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000000000000100000408000000000000000300000010000000000000000000000200000000030000000000000f040000000000002e"], 0x0, 0x4d}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="aaf2c7bd627230b2b4fa835f0541baf8e72de40b79c753b939ffffddb2dd8b856e34d56ab14e671032593dd072d1b3d8d6d034b41f0cbec964d51e0f1ed8b19c77042d36fec26feb44d7d017fe8544dfb6925442e60d22f83236a4aba6519a4d1ee9251e03a99c234ca19142fd52ad0eb61b98eaf7292c95400e947270474699d2dd46491893e9d878ca76a31134924b013ec08ae07937a9af10bcb34d8d3bd931d3b894b0ee49e4c52d5088d34af4609e1e8cfab70b48139fccfc0345f462daac518a4828ab89c3a8015556018a281ba429c8093b7a157a0da6e948eb6c2485e4ea454b7807c669f91a8223ce79e06bd7c7c59aaceb0d4a48f99a28e09a5943382c9681ee8835a85749d40e5e1ba492f860224f4a315868c41626928937c9ba6dcb46f0f99bde89d90e5162120ae8cc545dc12cd4851d9ae6b78a99837fe9e655e3f13d81e982959bf6fa2a494136ae65f3f09bfd8e47041ace0669f60801cf571509122bb9b7189c891bc86dfe29e35f27a822041ee2e11ce13b312f7f048e32bcf371751613780a288fe072a37ab43f39213996163b8aec6ec7016d8c351340bfb6310f43d96515471ff1c230432fef748965187accb61fa201602705cab9490b7afe02c75c4138aad2334cddcefd2f198558874bdb906c402294a343aebb9b968e64075075497c62021865b5f2fdc94439fac435eecaf65b4e4d38057c8fc9e29b32f1d92436fd1c265489f22edae9f57ffeb9c3931e682ee228d0f4a320e3ff59cc8c7ec9789b421352395afef1777747257f8ed49240d8e0bbea9fc539e1ce82c8fcb6483c3c63813a734dd485b034090b193bc6c1bd9614b29744fc7f0529f01f2f89480415ac8936d4b419c5331f4d90f49280e5f276ef95baf3b26fe54e8bc2579691118194efc514822cbd177166ea9f8310f250959b7f6aa3001c445499570b72f55adcb59574b33430450fc6d9df53bca88bb2b90b0fb3724f1016429db5b07237", @ANYRES32, @ANYBLOB="c203338b0000e919440000e8060000000000", @ANYRES32=0x0, @ANYBLOB="7ff06b062a241716c2025dd051c17ea1a0d26d95e203399b15cd3813180d2997099ddc4a386d86aeb78e1dbff286779e7f2c194edc29bb5a2477e103c35852932c67573b1b6ce45a9d63e8deff717c56131a497e12bd893934d90e2c0e182b133d182905cd44a44594453371b5c43620b23a69c83f3de2d26a9c1fda3973099b84f808710e6503b684ecf19486378f998ef1667e105659564a942f86d3bca73cce0eb6ecd170e018ca68d2de23"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r4, &(0x7f0000000a40)="8c55de7b14e8", 0x0}, 0x20)
syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fffffdb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4m1.125278166s ago: executing program 2 (id=2366):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48)
r1 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r1}, 0x20)
recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40000140)

4m1.036983862s ago: executing program 2 (id=2367):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000800004000000", @ANYRES32, @ANYBLOB="0000000000000000000000efffffffffffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

4m0.957943431s ago: executing program 2 (id=2368):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000140), 0x4d)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80)
r1 = socket$kcm(0x1e, 0x4, 0x0)
close(r0)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef)

4m0.910553272s ago: executing program 1 (id=2370):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x400fe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x2000000000}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0)

4m0.856480151s ago: executing program 2 (id=2372):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000", @ANYRES32, @ANYBLOB="02000000000000000000ef2ad2000000000000000000004960515a65bdea257561340cbe484705e8788c5cc4a5a2c471d0a923c716a8a28fc0a79e4900c0004fff3cd7ba", @ANYRES32=0x0, @ANYBLOB="040000000100"/28], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00400020207000200020001000200000000938037a786a6d0001000000e4509c5f05c2f070000000000000088bbcb", 0x52}, {&(0x7f0000000100)="9b25af20af07241a63c3", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)

4m0.745554256s ago: executing program 2 (id=2374):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a}, 0x28)

4m0.686984754s ago: executing program 1 (id=2375):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x43, &(0x7f0000000000), 0x4)

4m0.617814813s ago: executing program 1 (id=2376):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003100b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa0", 0x39}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)

4m0.542838703s ago: executing program 32 (id=2376):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003100b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa0", 0x39}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)

4m0.492515103s ago: executing program 2 (id=2378):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})

4m0.40594665s ago: executing program 33 (id=2378):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})

2m12.30566122s ago: executing program 3 (id=4091):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001140)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4)

2m12.305261525s ago: executing program 3 (id=4092):
r0 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000001040)=""/4096, 0x0, 0x1000, 0x0, 0x8, 0x10000}, 0x28)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073587a310000000020000780050003001f0000000600018008000140ffffffff08000840000000e405000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"})

2m11.765773377s ago: executing program 0 (id=4101):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)

2m11.644369523s ago: executing program 0 (id=4103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r2}, 0x18)
syz_open_procfs$namespace(0x0, 0x0)
mkdir(0x0, 0x101)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()

2m11.406424446s ago: executing program 0 (id=4105):
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0}, 0x0)
socket$kcm(0x18, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
write$cgroup_devices(r1, 0x0, 0xffdd)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000)

2m11.406063011s ago: executing program 3 (id=4106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000030)

2m11.342483317s ago: executing program 3 (id=4107):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair(0xa, 0x3, 0xff, &(0x7f0000000180))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040084)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x41}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8800)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x401, 0xe}, 0x140}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, 0x0)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="006200000000000000e2bedb581c25ba29000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x5f}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0xd}, 0x94)

2m10.532920057s ago: executing program 0 (id=4108):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="5c00000012006bb09a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400330038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a57aec408218841f080c9f4440c8037e70e0000c5bbfbffa849", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48000)

2m10.532107934s ago: executing program 0 (id=4110):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2)

2m10.456927882s ago: executing program 0 (id=4111):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000060)

2m10.432124574s ago: executing program 3 (id=4112):
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x258b3035abf78e17, '\x00', 0x0, @fallback=0x2e}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

2m10.311358474s ago: executing program 34 (id=4111):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000060)

2m10.008937226s ago: executing program 3 (id=4114):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0)

2m10.008695292s ago: executing program 35 (id=4114):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0)

1m42.603656795s ago: executing program 4 (id=4455):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x2}, 0x94)

1m42.483776514s ago: executing program 4 (id=4458):
r0 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x7387, 0xb0ed}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x1, 0x6, 0x0, 0x3, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, r0, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000240)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r4 = socket$kcm(0x10, 0x3, 0x10)
r5 = socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690030000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}, 0x80, 0x0}, 0x20000001)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}, 0x50)
close(r6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)

1m39.493669731s ago: executing program 4 (id=4461):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000d5aa1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b00)="140000003600fb50e35d3c4a0ed898a00a0c8c00", 0x14}], 0x1}, 0x4044880)

1m39.2114394s ago: executing program 4 (id=4467):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1m39.134667777s ago: executing program 4 (id=4471):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x400, 0x70bd26, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0xc000)

1m38.994128s ago: executing program 4 (id=4473):
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b06, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
gettid()
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0x76, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x1f, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @ldst={0x3, 0x1, 0x3, 0x6, 0x9, 0x2, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @printk={@lld}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, r2, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x8, 0x3}, 0x10, r4, r5, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r2], 0x0, 0x10, 0x1}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

1m23.963507489s ago: executing program 36 (id=4473):
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b06, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
gettid()
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0x76, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x1f, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @ldst={0x3, 0x1, 0x3, 0x6, 0x9, 0x2, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @printk={@lld}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, r2, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x8, 0x3}, 0x10, r4, r5, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r2], 0x0, 0x10, 0x1}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

6.407560892s ago: executing program 6 (id=5799):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@float={0x3, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}]}, {0x0, [0x61, 0x61, 0x2e]}}, 0x0, 0x51}, 0x28)

6.329140456s ago: executing program 6 (id=5801):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x10000009, 0x8080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7deb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x99e, 0x5, 0x1, 0x5, 0x2}, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)

6.061352254s ago: executing program 6 (id=5805):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

5.954245043s ago: executing program 6 (id=5808):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x0, 0x0})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000080)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00'})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x29, 0x18, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x24000000)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94)
socket$kcm(0x2, 0x922000000001, 0x106)

5.953851987s ago: executing program 7 (id=5809):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00037300005b686158bbcfe8875a060300000022000000000000000000000000ac1414aa"], 0xfdef)

5.804441512s ago: executing program 7 (id=5811):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

5.804209566s ago: executing program 7 (id=5812):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c000480380001800b00010064796e73657400002800028008000940000000020900010073797a3000000000080003400000000008000440"], 0xd8}}, 0x0)

5.724731246s ago: executing program 7 (id=5813):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x88080)

5.309699295s ago: executing program 7 (id=5815):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f0"], 0xcfa4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

5.032772482s ago: executing program 6 (id=5816):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x48, 0x0, 0x90)

4.974406683s ago: executing program 7 (id=5817):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

4.798606904s ago: executing program 37 (id=5817):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

4.751938641s ago: executing program 6 (id=5819):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d001c00020400bf050005001201", 0x2e}], 0x1}, 0x0)

4.721696094s ago: executing program 38 (id=5819):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d001c00020400bf050005001201", 0x2e}], 0x1}, 0x0)

551.803301ms ago: executing program 8 (id=5835):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x6b}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

503.130978ms ago: executing program 8 (id=5836):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000090000dd0a00000000000073017b00000000009500000000000000425e494e53a90f38f870e056d03b2010633dee8a3a6601dbd212"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48)

502.848198ms ago: executing program 8 (id=5837):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

403.106969ms ago: executing program 8 (id=5840):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x84, 0x0, 0x0, 0x8e}}}], 0x58}, 0x20040000)

400.120193ms ago: executing program 8 (id=5842):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}], 0x20}, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10)

312.358485ms ago: executing program 8 (id=5844):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_int(r1, &(0x7f0000000240)=0x2, 0x12)

153.569301ms ago: executing program 5 (id=5846):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c0002800800014080ffffff0c0001800800014080ffffff050014002000000005000500020000000500010006"], 0x6c}}, 0x0)

153.28906ms ago: executing program 5 (id=5847):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

60.474938ms ago: executing program 5 (id=5848):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

60.130162ms ago: executing program 5 (id=5849):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="1400000000000000010000000c0000000000000000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100010000"], 0x6b}, 0xfc00)

59.839341ms ago: executing program 5 (id=5850):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11, 0x65, &(0x7f0000000640), 0x4)

0s ago: executing program 5 (id=5851):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94)
r1 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="14", 0x1}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\\', 0xfffd}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

kernel console output (not intermixed with test programs):

09] netlink: 'syz.2.2080': attribute type 1 has an invalid length.
[  223.029195][T10717] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.2084'.
[  223.032926][T10717] netlink: 'syz.0.2084': attribute type 3 has an invalid length.
[  223.061034][T10719] netlink: 'syz.0.2085': attribute type 11 has an invalid length.
[  223.247961][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'.
[  223.405136][T10736] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2094'.
[  223.503250][T10736] netlink: 'syz.2.2094': attribute type 3 has an invalid length.
[  223.506716][T10736] netlink: 'syz.2.2094': attribute type 2 has an invalid length.
[  223.514036][T10736] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.2094'.
[  226.410341][T10743] netlink: 62967 bytes leftover after parsing attributes in process `syz.2.2096'.
[  226.439872][T10745] netlink: 'syz.0.2097': attribute type 1 has an invalid length.
[  226.921035][T10757] netlink: 'syz.0.2102': attribute type 10 has an invalid length.
[  226.963845][T10757] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2102'.
[  227.000682][T10766] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2107'.
[  227.608369][T10783] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2114'.
[  228.042309][T10806] netlink: 'syz.1.2121': attribute type 10 has an invalid length.
[  228.046050][T10806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2121'.
[  228.050130][T10806] team0: entered promiscuous mode
[  228.085673][T10806] team_slave_0: entered promiscuous mode
[  228.088968][T10806] team_slave_1: entered promiscuous mode
[  228.092997][T10806] team0: entered allmulticast mode
[  228.095518][T10806] team_slave_0: entered allmulticast mode
[  228.098235][T10806] team_slave_1: entered allmulticast mode
[  228.103764][T10806] bridge0: port 3(team0) entered blocking state
[  228.107262][T10806] bridge0: port 3(team0) entered disabled state
[  228.116066][T10806] bridge0: port 3(team0) entered blocking state
[  228.119235][T10806] bridge0: port 3(team0) entered forwarding state
[  228.534910][ T5236] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11
[  228.538855][ T5236] Bluetooth: hci2: unexpected event for opcode 0x1004
[  228.778196][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2139'.
[  228.781982][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2139'.
[  228.955420][T10852] netlink: 'syz.1.2142': attribute type 41 has an invalid length.
[  229.045352][T10859] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2144'.
[  230.648146][T10902] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2165'.
[  232.143894][T10911] tap0: tun_chr_ioctl cmd 1074025675
[  232.146394][T10911] tap0: persist enabled
[  232.148304][T10912] tap0: tun_chr_ioctl cmd 1074025675
[  232.150314][T10912] tap0: persist enabled
[  232.603798][ T5236] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  232.607758][ T5236] Bluetooth: hci2: Injecting HCI hardware error event
[  232.612403][   T54] Bluetooth: hci2: hardware error 0x00
[  233.078993][T10949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2183'.
[  233.252902][T10969] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2191'.
[  233.774107][T10983] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2196'.
[  233.867999][T10985] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2198'.
[  234.605255][T11014] delete_channel: no stack
[  234.607231][T11014] delete_channel: no stack
[  234.852419][   T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  235.464646][T11063] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2232'.
[  235.506812][T11066] netlink: 'syz.0.2234': attribute type 10 has an invalid length.
[  235.510738][T11066] geneve0: entered promiscuous mode
[  235.518428][T11066] geneve0: entered allmulticast mode
[  235.520894][T11066] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  236.716741][T11102] netlink: 'syz.1.2249': attribute type 27 has an invalid length.
[  236.720184][T11102] netlink: 'syz.1.2249': attribute type 4 has an invalid length.
[  236.725626][T11102] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2249'.
[  236.899043][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2258'.
[  236.926808][T11124] netlink: 'syz.2.2260': attribute type 29 has an invalid length.
[  236.952168][T11126] netlink: 'syz.1.2261': attribute type 21 has an invalid length.
[  237.342644][T11143] netlink: 'syz.2.2268': attribute type 11 has an invalid length.
[  237.801227][T11152] syzkaller0: entered promiscuous mode
[  237.803502][T11152] syzkaller0: entered allmulticast mode
[  240.371121][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2275'.
[  240.387145][T11160] : entered promiscuous mode
[  242.001112][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'.
[  242.010333][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'.
[  242.066629][T11187] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2287'.
[  242.080408][T11187] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.163408][T11187] bridge_slave_0 (unregistering): left allmulticast mode
[  242.166611][T11187] bridge_slave_0 (unregistering): left promiscuous mode
[  242.171885][T11187] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.519135][T11205] delete_channel: no stack
[  242.631493][T11210] sit0: entered allmulticast mode
[  242.691502][T11210] sit0: entered promiscuous mode
[  243.087021][T11234] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2305'.
[  243.097512][T11232] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2305'.
[  243.121444][T11234] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2305'.
[  245.017962][T11263] netlink: 'syz.1.2318': attribute type 39 has an invalid length.
[  245.090437][T11265] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2319'.
[  245.141778][T11267] netlink: 'syz.0.2320': attribute type 28 has an invalid length.
[  245.145302][T11267] netlink: 'syz.0.2320': attribute type 4 has an invalid length.
[  245.149715][T11267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2320'.
[  245.179272][T11271] netlink: 'syz.2.2323': attribute type 2 has an invalid length.
[  245.183077][T11271] netlink: 'syz.2.2323': attribute type 1 has an invalid length.
[  245.186225][T11271] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2323'.
[  245.352510][T11291] netlink: 'syz.2.2332': attribute type 29 has an invalid length.
[  245.358031][T11291] netlink: 'syz.2.2332': attribute type 29 has an invalid length.
[  245.369819][T11291] netlink: 'syz.2.2332': attribute type 29 has an invalid length.
[  245.403691][T11291] netlink: 'syz.2.2332': attribute type 29 has an invalid length.
[  245.764116][T11318] smc: removing ib device syz!
[  245.825806][   T54] Bluetooth: hci1: unexpected event 0x34 length: 15 > 6
[  246.010299][   T33] audit: type=1107 audit(1756316600.285:3): pid=11330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  246.104718][T11335] netlink: 'syz.2.2350': attribute type 2 has an invalid length.
[  246.150582][T11335] __nla_validate_parse: 1 callbacks suppressed
[  246.150601][T11335] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2350'.
[  246.159650][T11335] nbd: illegal input index 65540
[  246.871072][T11348] sit0: left promiscuous mode
[  246.873950][T11348] sit0: left allmulticast mode
[  247.004472][T11348] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.061443][T11348] bridge0: port 3(dummy0) entered blocking state
[  247.065764][T11348] bridge0: port 3(dummy0) entered forwarding state
[  247.108453][T11348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.151007][T11348] syz.2.2356 (11348) used greatest stack depth: 18680 bytes left
[  247.213895][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2361'.
[  247.731146][T11389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2372'.
[  249.113984][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  249.118164][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  249.121496][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  249.127268][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  249.131017][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  249.252986][T11421] chnl_net:caif_netlink_parms(): no params data found
[  249.306394][T11421] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.308934][T11421] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.312989][T11421] bridge_slave_0: entered allmulticast mode
[  249.316331][T11421] bridge_slave_0: entered promiscuous mode
[  249.320529][T11421] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.323617][T11421] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.326063][T11421] bridge_slave_1: entered allmulticast mode
[  249.328934][T11421] bridge_slave_1: entered promiscuous mode
[  249.347748][T11421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.353734][T11421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.374076][T11421] team0: Port device team_slave_0 added
[  249.377630][T11421] team0: Port device team_slave_1 added
[  249.397389][T11421] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.400264][T11421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.410224][T11421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.416315][T11421] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.418751][T11421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.428461][T11421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.459218][T11421] hsr_slave_0: entered promiscuous mode
[  249.462557][T11421] hsr_slave_1: entered promiscuous mode
[  249.464948][T11421] debugfs: 'hsr0' already exists in 'hsr'
[  249.466967][T11421] Cannot create hsr debugfs directory
[  249.649074][T11421] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  249.663959][T11421] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  249.680953][T11421] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  249.692975][T11421] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  249.788549][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  249.798447][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  249.804036][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  249.810127][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  249.816766][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  249.836353][T11421] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.875704][T11421] 8021q: adding VLAN 0 to HW filter on device team0
[  249.914706][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.917170][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.938236][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.940841][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.096446][T11442] chnl_net:caif_netlink_parms(): no params data found
[  250.170128][T11442] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.172804][T11442] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.175667][T11442] bridge_slave_0: entered allmulticast mode
[  250.178999][T11442] bridge_slave_0: entered promiscuous mode
[  250.186038][T11442] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.188448][T11442] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.190807][T11442] bridge_slave_1: entered allmulticast mode
[  250.196951][T11442] bridge_slave_1: entered promiscuous mode
[  250.222975][T11442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.248408][T11442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.289801][T11421] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.307413][T11442] team0: Port device team_slave_0 added
[  250.323923][T11442] team0: Port device team_slave_1 added
[  250.372296][T11442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.374739][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.376917][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'.
[  250.383985][T11442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.421537][T11442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.438145][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.452051][T11442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.469474][T11421] veth0_vlan: entered promiscuous mode
[  250.503563][T11421] veth1_vlan: entered promiscuous mode
[  250.510548][T11442] hsr_slave_0: entered promiscuous mode
[  250.514101][T11442] hsr_slave_1: entered promiscuous mode
[  250.516912][T11442] debugfs: 'hsr0' already exists in 'hsr'
[  250.519236][T11442] Cannot create hsr debugfs directory
[  250.598213][T11474] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2392'.
[  250.601348][T11474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2392'.
[  250.608578][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2392'.
[  250.618235][T11421] veth0_macvtap: entered promiscuous mode
[  250.644938][T11421] veth1_macvtap: entered promiscuous mode
[  250.734228][T11421] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.745176][T11421] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.794210][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.798501][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.804632][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.808120][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.851267][T11442] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  250.870838][T11442] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  250.887285][T11442] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  250.913825][T11442] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  250.919826][T11486] validate_nla: 4 callbacks suppressed
[  250.919838][T11486] netlink: 'syz.0.2398': attribute type 30 has an invalid length.
[  250.928060][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.932638][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.992299][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.995746][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.064913][T11442] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.130721][T11442] 8021q: adding VLAN 0 to HW filter on device team0
[  251.140560][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.143574][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.156093][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.158938][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.173161][   T54] Bluetooth: hci0: command tx timeout
[  251.278879][T11504] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2402'.
[  251.341355][T11508] netlink: 'syz.0.2403': attribute type 2 has an invalid length.
[  251.394971][T11442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.557711][T11523] unsupported nla_type 256
[  251.596599][T11442] veth0_vlan: entered promiscuous mode
[  251.605500][T11442] veth1_vlan: entered promiscuous mode
[  251.678698][T11442] veth0_macvtap: entered promiscuous mode
[  251.698214][T11442] veth1_macvtap: entered promiscuous mode
[  251.717533][T11442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.729061][T11442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.753041][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.757813][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.761519][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.778628][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.867225][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.872569][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.881881][   T54] Bluetooth: hci1: command tx timeout
[  251.932486][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.935927][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.820527][T11554] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2419'.
[  252.973940][T11560] netlink: 'syz.3.2421': attribute type 21 has an invalid length.
[  253.242123][   T54] Bluetooth: hci0: command tx timeout
[  253.982571][   T54] Bluetooth: hci1: command tx timeout
[  253.988213][T11609] netlink: 'syz.4.2443': attribute type 12 has an invalid length.
[  253.991218][T11609] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2443'.
[  254.181743][T11613] netlink: 'syz.0.2441': attribute type 3 has an invalid length.
[  254.197573][T11613] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2441'.
[  254.406350][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2446'.
[  254.411413][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2446'.
[  254.679009][T11628] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  254.687375][T11628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.794217][T11631] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  254.797914][T11631] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  254.985811][T11641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2454'.
[  254.989443][T11638] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2454'.
[  254.994134][T11638] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2454'.
[  255.027397][T11640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2455'.
[  255.321910][   T54] Bluetooth: hci0: command tx timeout
[  255.404366][T11670] syzkaller1: tun_chr_ioctl cmd 1074812117
[  255.485384][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.487954][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  256.041891][   T54] Bluetooth: hci1: command tx timeout
[  256.108765][T11703] netlink: 'syz.0.2483': attribute type 7 has an invalid length.
[  256.865075][T11742] netlink: 'syz.0.2500': attribute type 10 has an invalid length.
[  257.360236][T11777] __nla_validate_parse: 8 callbacks suppressed
[  257.360284][T11777] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2516'.
[  257.407224][   T54] Bluetooth: hci0: command tx timeout
[  257.489825][T11788] netlink: 'syz.4.2522': attribute type 29 has an invalid length.
[  257.519086][T11788] netlink: 'syz.4.2522': attribute type 29 has an invalid length.
[  257.537696][T11788] : entered promiscuous mode
[  257.758013][T11800] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2528'.
[  257.766344][T11800] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2528'.
[  258.067037][T11810] netlink: 'syz.0.2530': attribute type 13 has an invalid length.
[  258.132535][   T54] Bluetooth: hci1: command tx timeout
[  258.187104][T11810] bridge0: port 4(macsec0) entered disabled state
[  258.189602][T11810] bridge0: port 3(bond0) entered disabled state
[  258.192227][T11810] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.195355][T11810] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.413276][T11810] veth1_macvtap: left allmulticast mode
[  258.507000][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.516094][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.520054][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.530082][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.611458][T11830] netlink: 'syz.3.2540': attribute type 29 has an invalid length.
[  258.616557][T11830] netlink: 'syz.3.2540': attribute type 29 has an invalid length.
[  258.620362][T11830] netlink: 'syz.3.2540': attribute type 29 has an invalid length.
[  258.627251][T11832] netlink: 'syz.0.2541': attribute type 29 has an invalid length.
[  258.841187][T11837] netlink: 'syz.3.2542': attribute type 10 has an invalid length.
[  258.955788][T11837] team0 (unregistering): Port device team_slave_0 removed
[  258.977680][T11837] team0 (unregistering): Port device team_slave_1 removed
[  259.782296][T11863] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2555'.
[  260.077673][T11884] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2565'.
[  260.092831][T11891] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2565'.
[  263.225276][T11917] validate_nla: 3 callbacks suppressed
[  263.225291][T11917] netlink: 'syz.4.2578': attribute type 16 has an invalid length.
[  263.231817][T11917] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2578'.
[  263.329923][T11926] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  264.944970][T11961] netlink: 'syz.4.2596': attribute type 10 has an invalid length.
[  265.218542][T11960] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  265.224281][T11960] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  265.233607][T11961] veth1_vlan: entered allmulticast mode
[  265.417111][T11971] netlink: 'syz.0.2599': attribute type 4 has an invalid length.
[  265.460987][T11961] team0: Device veth1_vlan failed to register rx_handler
[  265.525724][T11966] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  265.648596][T11977] netlink: 'syz.3.2603': attribute type 4 has an invalid length.
[  265.836324][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2610'.
[  266.583938][T12021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2622'.
[  266.810168][T12027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2624'.
[  266.814110][T12027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2624'.
[  267.041846][T12033] netlink: 1042 bytes leftover after parsing attributes in process `syz.4.2627'.
[  267.615991][T12049] netlink: 'syz.0.2633': attribute type 10 has an invalid length.
[  267.620995][T12049] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2633'.
[  267.653207][T12049] team0: entered promiscuous mode
[  267.656689][T12049] team_slave_0: entered promiscuous mode
[  267.675073][T12049] team_slave_1: entered promiscuous mode
[  267.784806][T12049] 8021q: adding VLAN 0 to HW filter on device team0
[  267.791118][T12049] bridge0: port 5(team0) entered blocking state
[  267.797830][T12049] bridge0: port 5(team0) entered disabled state
[  267.801103][T12049] team0: entered allmulticast mode
[  267.809661][T12049] team_slave_0: entered allmulticast mode
[  267.814405][T12049] team_slave_1: entered allmulticast mode
[  268.016906][T12064] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2639'.
[  268.026844][T12064] netlink: 'syz.0.2639': attribute type 2 has an invalid length.
[  268.030280][T12064] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2639'.
[  268.046540][T12064] netlink: 'syz.0.2639': attribute type 2 has an invalid length.
[  268.050243][T12064] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2639'.
[  268.213563][T12069] netlink: 'syz.3.2641': attribute type 2 has an invalid length.
[  268.217401][T12069] nbd: must specify at least one socket
[  268.585236][T12078] netlink: 'syz.0.2645': attribute type 29 has an invalid length.
[  268.597467][T12078] netlink: 'syz.0.2645': attribute type 29 has an invalid length.
[  268.641458][T12078] __nla_validate_parse: 1 callbacks suppressed
[  268.641524][T12078] netlink: 572 bytes leftover after parsing attributes in process `syz.0.2645'.
[  268.671395][T12082] netlink: 'syz.3.2647': attribute type 1 has an invalid length.
[  269.390714][   T54] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6
[  269.827522][T12116] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2662'.
[  269.908213][T12124] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2666'.
[  269.912697][T12124] netlink: zone id is out of range
[  269.915043][T12124] netlink: zone id is out of range
[  269.917275][T12124] netlink: zone id is out of range
[  269.925535][T12124] netlink: zone id is out of range
[  269.927774][T12124] netlink: zone id is out of range
[  269.932058][T12124] netlink: zone id is out of range
[  269.934267][T12124] netlink: zone id is out of range
[  269.937299][T12124] netlink: zone id is out of range
[  269.939376][T12124] netlink: zone id is out of range
[  269.941502][T12124] netlink: zone id is out of range
[  270.306383][T12152] netlink: 'syz.3.2679': attribute type 3 has an invalid length.
[  270.791962][T12161] netlink: 'syz.3.2683': attribute type 2 has an invalid length.
[  270.794602][T12161] netlink: 'syz.3.2683': attribute type 3 has an invalid length.
[  270.797182][T12161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2683'.
[  270.841179][T12163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2684'.
[  270.846987][T12163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2684'.
[  271.224425][T12179] netlink: 'syz.0.2692': attribute type 3 has an invalid length.
[  271.238489][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2692'.
[  271.258534][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'.
[  272.165048][T12212] netlink: 'syz.3.2706': attribute type 20 has an invalid length.
[  272.429557][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2711'.
[  272.529365][T12225] netlink: 'syz.4.2712': attribute type 1 has an invalid length.
[  272.532858][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2712'.
[  273.496871][T12251] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  273.711379][T12268] __nla_validate_parse: 4 callbacks suppressed
[  273.711390][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2729'.
[  273.736160][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2729'.
[  273.739168][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2729'.
[  273.901253][T12283] netlink: 'syz.4.2737': attribute type 6 has an invalid length.
[  273.905843][T12283] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2737'.
[  274.710491][T12311] netlink: 'syz.0.2747': attribute type 3 has an invalid length.
[  274.969566][T12319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  274.972705][T12319] IPv6: NLM_F_CREATE should be set when creating new route
[  274.975892][T12319] IPv6: NLM_F_CREATE should be set when creating new route
[  274.979021][T12319] IPv6: NLM_F_CREATE should be set when creating new route
[  275.176535][T12330] netlink: 'syz.4.2754': attribute type 2 has an invalid length.
[  275.180116][T12330] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2754'.
[  275.528322][T12339] netlink: 'syz.0.2757': attribute type 21 has an invalid length.
[  275.537476][T12339] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2757'.
[  275.770354][T12347] netlink: 'syz.4.2761': attribute type 10 has an invalid length.
[  275.834147][T12347] team0: Port device geneve1 added
[  275.977198][T12354] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2764'.
[  276.830257][T12380] netlink: 'syz.4.2773': attribute type 17 has an invalid length.
[  276.884690][T12382] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2774'.
[  276.957221][T12391] netlink: 'syz.4.2778': attribute type 2 has an invalid length.
[  276.959621][T12391] netlink: 'syz.4.2778': attribute type 8 has an invalid length.
[  276.968714][T12391] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2778'.
[  277.045448][T12399] netlink: 'syz.4.2782': attribute type 1 has an invalid length.
[  277.048502][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2782'.
[  277.270893][T12420] net_ratelimit: 75 callbacks suppressed
[  277.270909][T12420] openvswitch: netlink: Flow actions attr not present in new flow.
[  277.280404][T12420] syzkaller0: entered promiscuous mode
[  278.106744][T12453] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  278.848581][T12488] __nla_validate_parse: 2 callbacks suppressed
[  278.848596][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2824'.
[  278.855881][T12488] netlink: 'syz.4.2824': attribute type 2 has an invalid length.
[  278.859732][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2824'.
[  279.220899][T12503] validate_nla: 1 callbacks suppressed
[  279.220917][T12503] netlink: 'syz.0.2831': attribute type 12 has an invalid length.
[  279.226938][T12503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2831'.
[  280.738877][T12549] netlink: 'syz.0.2851': attribute type 1 has an invalid length.
[  281.058117][T12557] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2855'.
[  281.476423][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'.
[  281.540316][T12583] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2868'.
[  281.799958][T12597] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  281.936939][T12603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2878'.
[  282.217723][T12611] netlink: 'syz.4.2882': attribute type 2 has an invalid length.
[  282.270819][T12609] netlink: zone id is out of range
[  282.306901][T12609] netlink: zone id is out of range
[  282.309737][T12609] netlink: zone id is out of range
[  282.315040][T12612] netlink: del zone limit has 4 unknown bytes
[  282.570702][T12630] IPv6: NLM_F_CREATE should be specified when creating new route
[  282.577212][T12630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  282.579856][T12630] IPv6: NLM_F_CREATE should be set when creating new route
[  282.611491][T12609] netlink: set zone limit has 4 unknown bytes
[  282.812309][T12644] netlink: 'syz.4.2897': attribute type 21 has an invalid length.
[  282.815898][T12644] netlink: 'syz.4.2897': attribute type 6 has an invalid length.
[  282.819252][T12644] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2897'.
[  282.984454][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'.
[  283.233019][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2906'.
[  283.243684][T12664] delete_channel: no stack
[  283.245739][T12664] delete_channel: no stack
[  283.815413][T12698] syzkaller0: entered promiscuous mode
[  283.817357][T12698] syzkaller0: entered allmulticast mode
[  283.862781][T12700] __nla_validate_parse: 5 callbacks suppressed
[  283.862795][T12700] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2925'.
[  284.729805][T12716] netlink: 'syz.0.2932': attribute type 10 has an invalid length.
[  284.757307][T12718] netlink: 'syz.3.2933': attribute type 2 has an invalid length.
[  285.525314][T12723] netlink: 'syz.3.2934': attribute type 3 has an invalid length.
[  285.528608][T12723] netlink: 'syz.3.2934': attribute type 1 has an invalid length.
[  285.541788][T12723] netlink: 191264 bytes leftover after parsing attributes in process `syz.3.2934'.
[  285.647405][T12727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2936'.
[  285.815840][T12739] netlink: 'syz.0.2942': attribute type 10 has an invalid length.
[  285.820316][T12739] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  285.855883][T12739] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  285.860366][T12739] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  285.887878][T12746] netlink: 'syz.4.2946': attribute type 2 has an invalid length.
[  285.894984][T12746] netlink: 'syz.4.2946': attribute type 1 has an invalid length.
[  285.898208][T12746] netlink: 'syz.4.2946': attribute type 1 has an invalid length.
[  285.926772][   T54] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  285.985813][T12752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2948'.
[  285.990645][T12752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2948'.
[  285.996214][T12752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2948'.
[  286.267158][T12765] netlink: 'syz.0.2953': attribute type 41 has an invalid length.
[  286.270531][T12763] netlink: 'syz.3.2952': attribute type 21 has an invalid length.
[  286.290570][T12763] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2952'.
[  286.491840][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2956'.
[  286.587762][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2958'.
[  286.934570][T12787] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.2962'.
[  288.508402][T12864] bond0: entered promiscuous mode
[  288.512853][T12864] bond_slave_0: entered promiscuous mode
[  288.518061][T12864] bond_slave_1: entered promiscuous mode
[  288.525310][T12864] bridge0: port 3(bond0) entered blocking state
[  288.527999][T12864] bridge0: port 3(bond0) entered disabled state
[  288.531305][T12864] bond0: entered allmulticast mode
[  288.539268][T12864] bond_slave_0: entered allmulticast mode
[  288.545821][T12864] bond_slave_1: entered allmulticast mode
[  288.580872][T12864] bridge0: port 3(bond0) entered blocking state
[  288.584800][T12864] bridge0: port 3(bond0) entered forwarding state
[  289.206320][T12879] delete_channel: no stack
[  289.559948][T12907] team0: Device hsr_slave_0 failed to register rx_handler
[  290.800844][T12947] __nla_validate_parse: 11 callbacks suppressed
[  290.800897][T12947] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3037'.
[  291.005023][T12953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3039'.
[  291.013063][T12953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3039'.
[  291.469749][T12965] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.748487][T12979] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3050'.
[  291.754492][T12979] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3050'.
[  291.924418][T12994] validate_nla: 11 callbacks suppressed
[  291.924430][T12994] netlink: 'syz.3.3058': attribute type 5 has an invalid length.
[  291.928790][T12994] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3058'.
[  292.120910][T13008] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.3065'.
[  292.219739][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3068'.
[  292.228969][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3068'.
[  292.784764][T13054] netlink: 'syz.3.3088': attribute type 1 has an invalid length.
[  292.789597][T13054] netlink: 'syz.3.3088': attribute type 1 has an invalid length.
[  292.820828][T13056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  293.034649][T13067] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3092'.
[  293.096133][T13071] IPv6: NLM_F_REPLACE set, but no existing node found!
[  293.100738][T13071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.104447][T13071] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.807958][T13071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.814300][T13071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  294.243680][T13102] netlink: 'syz.0.3108': attribute type 2 has an invalid length.
[  294.246459][T13102] netlink: 'syz.0.3108': attribute type 1 has an invalid length.
[  294.249392][T13102] netlink: 'syz.0.3108': attribute type 1 has an invalid length.
[  295.419178][T13138] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  295.732296][T13150] delete_channel: no stack
[  296.195330][T13164] ref_ctr_offset mismatch. inode: 0x536 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  296.709084][T13192] __nla_validate_parse: 4 callbacks suppressed
[  296.709095][T13192] netlink: 11318 bytes leftover after parsing attributes in process `syz.4.3145'.
[  299.250068][T13244] netlink: 'syz.4.3169': attribute type 10 has an invalid length.
[  300.081221][T13244] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  301.075398][T13274] netlink: 'syz.3.3182': attribute type 29 has an invalid length.
[  301.079113][T13274] netlink: 'syz.3.3182': attribute type 29 has an invalid length.
[  301.083790][T13274] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3182'.
[  301.232195][T13280] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3185'.
[  301.301713][T13284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3187'.
[  301.306384][T13284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3187'.
[  302.130083][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3194'.
[  302.166340][T13302] netlink: 'syz.4.3195': attribute type 10 has an invalid length.
[  302.187849][T13298] netlink: 'syz.0.3194': attribute type 1 has an invalid length.
[  302.191248][T13298] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3194'.
[  302.270638][T13304] debugfs: '!' already exists in 'ieee80211'
[  302.657005][T13311] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3199'.
[  302.664984][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3199'.
[  302.882360][T13317] netlink: 'syz.0.3202': attribute type 21 has an invalid length.
[  302.885960][T13317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3202'.
[  303.258546][T13327] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3206'.
[  303.294928][T13325] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3205'.
[  303.420649][T13335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3210'.
[  303.531398][T13340] netlink: 'syz.4.3207': attribute type 21 has an invalid length.
[  303.534764][T13340] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3207'.
[  303.538087][T13340] netlink: 'syz.4.3207': attribute type 4 has an invalid length.
[  303.551257][T13340] netlink: 'syz.4.3207': attribute type 5 has an invalid length.
[  303.571920][T13340] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3207'.
[  305.036945][T13394] netlink: 'syz.0.3233': attribute type 21 has an invalid length.
[  305.039973][T13394] IPv6: NLM_F_CREATE should be specified when creating new route
[  305.045875][T13394] IPv6: Can't replace route, no match found
[  305.257736][T13398] netlink: 'syz.4.3235': attribute type 10 has an invalid length.
[  305.379826][T13415] netlink: 'syz.0.3240': attribute type 10 has an invalid length.
[  305.469633][T13419] netlink: 'syz.0.3242': attribute type 29 has an invalid length.
[  305.899658][   T54] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11
[  306.188223][T13455] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  306.442066][T13465] netlink: 'syz.4.3258': attribute type 39 has an invalid length.
[  306.709713][T13479] netlink: 'syz.0.3263': attribute type 2 has an invalid length.
[  307.018602][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.056550][T13483] : entered promiscuous mode
[  307.116389][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.222845][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.237462][T13496] netlink: 'syz.0.3269': attribute type 39 has an invalid length.
[  307.359249][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.846736][   T12] bridge0: port 3(team0) entered disabled state
[  307.922587][   T12] bridge_slave_1: left allmulticast mode
[  307.938732][   T12] bridge_slave_1: left promiscuous mode
[  307.950275][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.999692][   T12] bridge_slave_0: left promiscuous mode
[  308.016599][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.469452][T13517] __nla_validate_parse: 10 callbacks suppressed
[  308.469464][T13517] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3279'.
[  308.556811][   T12] : left promiscuous mode
[  308.863388][T13561] netlink: 211 bytes leftover after parsing attributes in process `syz.0.3297'.
[  308.926447][T13567] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16
[  309.016455][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3300'.
[  309.034827][T13571] : entered promiscuous mode
[  309.961852][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  309.966474][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  309.970182][   T54] Bluetooth: hci1: hardware error 0x00
[  310.155610][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.158311][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.163032][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.166309][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.186815][   T12] veth1_macvtap: left promiscuous mode
[  310.189214][   T12] veth0_macvtap: left promiscuous mode
[  310.191148][   T12] veth1_vlan: left promiscuous mode
[  310.194892][   T12] veth0_vlan: left promiscuous mode
[  310.436527][T13600] netlink: 428 bytes leftover after parsing attributes in process `syz.3.3311'.
[  310.599105][T13612] netlink: 'syz.4.3317': attribute type 21 has an invalid length.
[  310.640433][   T12] team_slave_1 (unregistering): left promiscuous mode
[  310.645469][   T12] team_slave_1 (unregistering): left allmulticast mode
[  310.648622][   T12] team0 (unregistering): Port device team_slave_1 removed
[  310.676084][   T12] team_slave_0 (unregistering): left promiscuous mode
[  310.678561][   T12] team_slave_0 (unregistering): left allmulticast mode
[  310.683015][   T12] team0 (unregistering): Port device team_slave_0 removed
[  311.314174][T13637] netlink: 'syz.0.3324': attribute type 29 has an invalid length.
[  311.318578][T13637] netlink: 'syz.0.3324': attribute type 29 has an invalid length.
[  311.332059][T13637] netlink: 'syz.0.3324': attribute type 29 has an invalid length.
[  312.043670][   T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  313.276225][   T33] audit: type=1107 audit(1756316667.555:4): pid=13687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  313.659710][T13716] IPv6: NLM_F_CREATE should be specified when creating new route
[  313.845486][T13726] netlink: 'syz.3.3347': attribute type 3 has an invalid length.
[  314.662807][T13766] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3365'.
[  315.151440][T13797] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3378'.
[  315.340403][T13807] netlink: 'syz.4.3382': attribute type 2 has an invalid length.
[  315.344014][T13807] netlink: 'syz.4.3382': attribute type 1 has an invalid length.
[  315.347458][T13807] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.3382'.
[  315.351489][T13807] block nbd5: not configured, cannot reconfigure
[  315.430712][T13801] netlink: 116572 bytes leftover after parsing attributes in process `syz.0.3380'.
[  315.484098][T13810] netlink: 'syz.4.3383': attribute type 19 has an invalid length.
[  315.499200][   T54] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  315.502770][   T54] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  316.209878][T13857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3402'.
[  316.214770][T13855] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3402'.
[  316.219305][T13857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3402'.
[  316.343862][T13861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3404'.
[  316.348458][T13861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3404'.
[  316.548046][T13876] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.852714][T13890] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3416'.
[  316.942805][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  316.945099][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  317.243781][T13900] netlink: 'syz.4.3419': attribute type 2 has an invalid length.
[  317.827642][T13916] netlink: 'syz.3.3425': attribute type 40 has an invalid length.
[  317.907437][T13916] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.400286][T13949] netlink: 'syz.4.3438': attribute type 3 has an invalid length.
[  318.405633][T13949] netlink: 'syz.4.3438': attribute type 1 has an invalid length.
[  318.531237][T13957] netlink: 'syz.4.3442': attribute type 2 has an invalid length.
[  319.486827][T13968] siw: device registration error -23
[  319.728889][T13976] netlink: 'syz.0.3449': attribute type 12 has an invalid length.
[  319.741961][T13976] __nla_validate_parse: 3 callbacks suppressed
[  319.742024][T13976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3449'.
[  319.758069][T13978] netlink: 'syz.3.3450': attribute type 39 has an invalid length.
[  319.767082][T13978] veth0_macvtap: left promiscuous mode
[  320.064415][T13994] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3457'.
[  320.195189][T14006] netlink: 'syz.3.3463': attribute type 29 has an invalid length.
[  320.207116][T14006] netlink: 'syz.3.3463': attribute type 29 has an invalid length.
[  320.373752][T14017] !: renamed from bond_slave_0 (while UP)
[  320.477618][T14019] netlink: 'syz.3.3469': attribute type 29 has an invalid length.
[  320.678616][T14029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3471'.
[  320.692109][T14029] team0: entered promiscuous mode
[  320.694382][T14029] team_slave_0: entered promiscuous mode
[  320.696945][T14029] team_slave_1: entered promiscuous mode
[  320.699431][T14029] geneve1: entered promiscuous mode
[  320.725359][T14029] team0: entered allmulticast mode
[  320.727437][T14029] team_slave_0: entered allmulticast mode
[  320.731476][T14029] team_slave_1: entered allmulticast mode
[  320.734274][T14029] geneve1: entered allmulticast mode
[  320.751143][T14029] 8021q: adding VLAN 0 to HW filter on device team0
[  320.752268][T14025] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  320.755657][T14029] bridge0: port 3(team0) entered blocking state
[  320.759594][T14025] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  320.759664][T14029] bridge0: port 3(team0) entered disabled state
[  320.774397][T14029] bridge0: port 3(team0) entered blocking state
[  320.776897][T14029] bridge0: port 3(team0) entered forwarding state
[  321.647979][T14084] netlink: 'syz.0.3496': attribute type 11 has an invalid length.
[  321.650691][T14084] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3496'.
[  321.934218][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3500'.
[  322.197321][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3507'.
[  322.200794][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3507'.
[  322.205212][T14107] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3507'.
[  322.208992][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3507'.
[  322.212184][T14107] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3507'.
[  323.144845][T14109] validate_nla: 2 callbacks suppressed
[  323.144858][T14109] netlink: 'syz.4.3508': attribute type 21 has an invalid length.
[  325.307517][T14169] bpf: Bad value for 'gid'
[  325.824376][T14194] netlink: 'syz.3.3545': attribute type 29 has an invalid length.
[  325.828789][T14194] netlink: 'syz.3.3545': attribute type 29 has an invalid length.
[  325.841147][T14194] __nla_validate_parse: 4 callbacks suppressed
[  325.841159][T14194] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3545'.
[  325.876851][T14199] netlink: 'syz.0.3547': attribute type 21 has an invalid length.
[  325.938521][T14210] netlink: 'syz.0.3553': attribute type 10 has an invalid length.
[  325.944172][T14210] bond0: (slave bond_slave_0): Releasing backup interface
[  325.947122][T14210] bond_slave_0: left promiscuous mode
[  325.949107][T14210] bond_slave_0: left allmulticast mode
[  326.010824][T14218] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3557'.
[  326.182283][T14236] netlink: 'syz.3.3566': attribute type 21 has an invalid length.
[  326.239906][T14246] netlink: 'syz.3.3571': attribute type 2 has an invalid length.
[  326.307438][T14254] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3575'.
[  326.683642][T14284] netlink: 'syz.3.3589': attribute type 46 has an invalid length.
[  328.308476][T14325] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3609'.
[  328.313381][T14325] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3609'.
[  328.368771][T14330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3611'.
[  329.130286][T14367] netlink: 'syz.4.3628': attribute type 11 has an invalid length.
[  329.133365][T14367] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3628'.
[  329.146547][T14367] netlink: 'syz.4.3628': attribute type 11 has an invalid length.
[  329.149591][T14367] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3628'.
[  329.540110][T14376] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3631'.
[  329.973656][T14402] netlink: 'syz.3.3644': attribute type 39 has an invalid length.
[  330.049403][T14408] delete_channel: no stack
[  330.156221][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3650'.
[  330.418045][T14427] netlink: 'syz.3.3653': attribute type 21 has an invalid length.
[  330.722524][T14434] netlink: 'syz.3.3656': attribute type 3 has an invalid length.
[  330.725313][T14434] netlink: 'syz.3.3656': attribute type 1 has an invalid length.
[  330.926465][T14444] netlink: 'syz.3.3661': attribute type 11 has an invalid length.
[  331.298281][T14460] netlink: 'syz.0.3668': attribute type 1 has an invalid length.
[  331.974935][T14494] netlink: 'syz.0.3683': attribute type 3 has an invalid length.
[  333.119156][T14513] __nla_validate_parse: 3 callbacks suppressed
[  333.119288][T14513] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3690'.
[  333.195597][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3692'.
[  333.772828][T14553] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3709'.
[  334.079677][T14573] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3718'.
[  334.463900][T14592] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3727'.
[  334.845041][T14631] netlink: 'syz.0.3746': attribute type 1 has an invalid length.
[  334.986093][T14648] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3754'.
[  335.273513][T14666] netlink: 'syz.3.3762': attribute type 6 has an invalid length.
[  335.276845][T14666] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3762'.
[  335.688223][T14688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3772'.
[  335.758511][T14692] netlink: 'syz.3.3774': attribute type 2 has an invalid length.
[  335.810761][T14694] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.814166][T14694] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.818378][T14694] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.820926][T14694] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.151363][T14706] netlink: 'syz.3.3781': attribute type 10 has an invalid length.
[  336.504030][T14723] C: renamed from team_slave_0
[  336.508442][T14723] netlink: 'syz.0.3788': attribute type 2 has an invalid length.
[  336.512084][T14723] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3788'.
[  336.516025][T14723] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  336.620473][T14728] delete_channel: no stack
[  336.697152][T14736] netlink: 'syz.3.3794': attribute type 27 has an invalid length.
[  336.699988][T14736] netlink: 'syz.3.3794': attribute type 3 has an invalid length.
[  336.702986][T14736] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3794'.
[  336.976120][T14757] syzkaller0: entered promiscuous mode
[  336.977919][T14757] syzkaller0: entered allmulticast mode
[  337.064641][   T54] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5
[  338.139047][T14778] __nla_validate_parse: 2 callbacks suppressed
[  338.139060][T14778] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3815'.
[  338.148654][T14778] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3815'.
[  338.194279][T14782] netlink: 'syz.0.3816': attribute type 2 has an invalid length.
[  338.197249][T14782] netlink: 'syz.0.3816': attribute type 1 has an invalid length.
[  338.200011][T14782] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3816'.
[  338.205250][T14782] nbd: couldn't find a device at index 16
[  338.416185][T14803] netlink: 'syz.4.3826': attribute type 13 has an invalid length.
[  338.418763][T14803] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.3826'.
[  338.593416][T14816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  339.639276][T14827] netlink: 'syz.3.3835': attribute type 3 has an invalid length.
[  339.650878][T14827] netlink: 196004 bytes leftover after parsing attributes in process `syz.3.3835'.
[  339.755295][T14835] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3839'.
[  339.861293][T14839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3841'.
[  340.032851][T14859] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3849'.
[  341.205870][T14887] validate_nla: 9 callbacks suppressed
[  341.205883][T14887] netlink: 'syz.3.3862': attribute type 21 has an invalid length.
[  341.334154][   T54] Bluetooth: hci0: ACL packet too small
[  342.072715][T14897] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.3867'.
[  343.584823][T14952] netlink: 'syz.3.3891': attribute type 21 has an invalid length.
[  343.587744][T14952] netlink: 14565 bytes leftover after parsing attributes in process `syz.3.3891'.
[  344.047727][T14976] netlink: 'syz.3.3902': attribute type 8 has an invalid length.
[  344.050418][T14976] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3902'.
[  345.299134][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3934'.
[  345.402712][T15058] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3936'.
[  345.497520][T15066] netlink: 'syz.3.3939': attribute type 11 has an invalid length.
[  345.500820][T15066] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.3939'.
[  346.117649][T15075] syzkaller0: entered promiscuous mode
[  346.120107][T15075] syzkaller0: entered allmulticast mode
[  346.188646][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3945'.
[  346.447534][T15081] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3947'.
[  347.689572][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.777499][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.983562][T15131] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3966'.
[  348.039115][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.087921][   T13] bond0: (slave netdevsim0): Releasing backup interface
[  348.105510][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.219469][   T13] dummy0: left allmulticast mode
[  348.223529][   T13] dummy0: left promiscuous mode
[  348.226623][   T13] bridge0: port 3(dummy0) entered disabled state
[  348.426790][   T13] team0: Port device bridge0 removed
[  348.439931][T15144] netlink: 'syz.0.3971': attribute type 21 has an invalid length.
[  348.527601][T15146] netlink: 'syz.0.3972': attribute type 2 has an invalid length.
[  348.530764][T15146] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.3972'.
[  348.642095][   T13] team0: Port device bond0 removed
[  348.646449][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.651843][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.657865][   T13] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  348.664956][   T13] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  348.670452][   T13] bond0 (unregistering): Released all slaves
[  348.689093][  T793] syz2: Port: 1 Link DOWN
[  349.397446][T15160] netlink: 'syz.4.3977': attribute type 39 has an invalid length.
[  349.701085][T15180] netlink: 'syz.3.3986': attribute type 17 has an invalid length.
[  349.720620][T15180] netlink: 'syz.3.3986': attribute type 16 has an invalid length.
[  349.725484][T15175] vcan0 speed is unknown, defaulting to 1000
[  349.731260][T15175] vcan0 speed is unknown, defaulting to 1000
[  349.737867][T15180] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3986'.
[  349.745021][T15175] vcan0 speed is unknown, defaulting to 1000
[  349.890858][T15184] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3988'.
[  349.895003][T15184] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3988'.
[  350.019147][T15186] netlink: 'syz.4.3989': attribute type 25 has an invalid length.
[  350.026384][T15186] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3989'.
[  350.385959][T15175] infiniband syz1: set down
[  350.387932][ T9430] vcan0 speed is unknown, defaulting to 1000
[  350.401685][T15175] infiniband syz1: added vcan0
[  350.484220][T15175] RDS/IB: syz1: added
[  350.486156][T15175] smc: adding ib device syz1 with port count 1
[  350.488631][T15175] smc:    ib device syz1 port 1 has pnetid 
[  350.492007][ T9430] vcan0 speed is unknown, defaulting to 1000
[  350.495577][T15175] vcan0 speed is unknown, defaulting to 1000
[  350.623790][T15208] sctp: [Deprecated]: syz.3.3997 (pid 15208) Use of struct sctp_assoc_value in delayed_ack socket option.
[  350.623790][T15208] Use struct sctp_sack_info instead
[  350.627594][T15175] vcan0 speed is unknown, defaulting to 1000
[  350.758208][T15175] vcan0 speed is unknown, defaulting to 1000
[  350.876249][T15214] netlink: 824 bytes leftover after parsing attributes in process `syz.4.4002'.
[  350.890739][T15175] vcan0 speed is unknown, defaulting to 1000
[  350.974970][T15216] bond_slave_1: mtu less than device minimum
[  351.314142][T15230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4010'.
[  351.320046][T15230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4010'.
[  351.669640][T15256] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  351.926403][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4029'.
[  352.280099][T15294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4039'.
[  352.293894][T15294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4039'.
[  352.364717][T15301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  352.393696][T15305] netlink: 'syz.0.4043': attribute type 30 has an invalid length.
[  352.795229][T15336] netlink: 'syz.3.4059': attribute type 1 has an invalid length.
[  354.208006][T15359] netlink: 'syz.4.4067': attribute type 10 has an invalid length.
[  354.213806][T15359] veth1_macvtap: left promiscuous mode
[  354.935106][T15373] __nla_validate_parse: 2 callbacks suppressed
[  354.935120][T15373] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4074'.
[  355.520626][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4087'.
[  356.475927][T15430] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4094'.
[  356.504749][T15430] unsupported nlmsg_type 40
[  356.766517][T15444] netlink: 'syz.4.4100': attribute type 21 has an invalid length.
[  356.769234][T15444] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4100'.
[  358.008589][T15480] netlink: 'syz.0.4108': attribute type 51 has an invalid length.
[  359.499057][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  359.502528][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  359.505763][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  359.509339][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  359.513179][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  359.535266][T15509] vcan0 speed is unknown, defaulting to 1000
[  359.690942][T15509] chnl_net:caif_netlink_parms(): no params data found
[  359.750957][T15509] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.753489][T15509] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.755966][T15509] bridge_slave_0: entered allmulticast mode
[  359.758928][T15509] bridge_slave_0: entered promiscuous mode
[  359.762827][T15509] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.765516][T15509] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.768611][T15509] bridge_slave_1: entered allmulticast mode
[  359.772153][T15509] bridge_slave_1: entered promiscuous mode
[  359.794037][T15509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.799235][T15509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.829796][T15509] team0: Port device team_slave_0 added
[  359.834936][T15509] team0: Port device team_slave_1 added
[  359.864404][T15509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.867267][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.877174][T15509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.882549][T15509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.884992][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.893734][T15509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.921982][T15509] hsr_slave_0: entered promiscuous mode
[  359.924897][T15509] hsr_slave_1: entered promiscuous mode
[  359.927200][T15509] debugfs: 'hsr0' already exists in 'hsr'
[  359.929355][T15509] Cannot create hsr debugfs directory
[  360.043259][T15509] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  360.050199][T15509] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  360.058015][T15509] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  360.063538][T15509] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  360.085300][T15509] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.088222][T15509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.091220][T15509] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.093721][T15509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.137360][T15509] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.147688][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.152849][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.162449][T15509] 8021q: adding VLAN 0 to HW filter on device team0
[  360.170594][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.173503][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.182163][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.185114][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.300810][T15509] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.437485][T15509] veth0_vlan: entered promiscuous mode
[  360.450980][T15509] veth1_vlan: entered promiscuous mode
[  360.498700][T15509] veth0_macvtap: entered promiscuous mode
[  360.506743][T15509] veth1_macvtap: entered promiscuous mode
[  360.529323][T15509] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.550432][T15509] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.565000][ T5858] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.573472][ T5858] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.582331][ T5858] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.585518][ T5858] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.658521][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  360.662105][T15538] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4116'.
[  360.668188][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  360.674878][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  360.680711][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  360.687120][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  360.693214][ T6595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.696877][ T6595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.725166][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.728862][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.739422][T15539] vcan0 speed is unknown, defaulting to 1000
[  360.782631][T15542] netlink: 830 bytes leftover after parsing attributes in process `syz.6.4119'.
[  361.361000][T15536] delete_channel: no stack
[  361.563522][   T54] Bluetooth: hci0: command tx timeout
[  361.665580][T15539] chnl_net:caif_netlink_parms(): no params data found
[  361.910921][T15539] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.921836][T15539] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.925142][T15539] bridge_slave_0: entered allmulticast mode
[  361.930110][T15539] bridge_slave_0: entered promiscuous mode
[  361.940870][T15539] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.945126][T15539] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.948547][T15539] bridge_slave_1: entered allmulticast mode
[  361.953690][T15539] bridge_slave_1: entered promiscuous mode
[  362.081433][T15539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.095167][T15539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.159593][T15539] team0: Port device team_slave_0 added
[  362.173200][T15539] team0: Port device team_slave_1 added
[  362.229039][T15539] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.232847][T15539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.246106][T15539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.252561][T15539] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.255294][T15539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.273083][T15539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.358340][T15539] hsr_slave_0: entered promiscuous mode
[  362.371233][T15539] hsr_slave_1: entered promiscuous mode
[  362.375802][T15539] debugfs: 'hsr0' already exists in 'hsr'
[  362.378430][T15539] Cannot create hsr debugfs directory
[  362.431757][T15572] netlink: ct family unspecified
[  362.433494][T15572] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.626307][T15539] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  362.684769][T15539] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  362.694969][T15539] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  362.700402][T15539] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  362.750640][T15539] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.753719][T15539] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.756420][T15539] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.759170][T15539] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.762013][   T54] Bluetooth: hci2: command tx timeout
[  362.768454][T15147] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.775462][T15147] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.788548][T15593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4136'.
[  362.801722][T15593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4136'.
[  362.847919][T15539] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.866799][T15539] 8021q: adding VLAN 0 to HW filter on device team0
[  362.883016][ T6595] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.886292][ T6595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.911509][ T6595] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.914634][ T6595] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.213352][T15539] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.325478][T15618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.496714][T15627] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4147'.
[  363.513633][T15539] veth0_vlan: entered promiscuous mode
[  363.527705][T15539] veth1_vlan: entered promiscuous mode
[  363.578469][T15539] veth0_macvtap: entered promiscuous mode
[  363.592980][T15539] veth1_macvtap: entered promiscuous mode
[  363.616256][T15635] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4150'.
[  363.630443][T15539] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.641967][   T54] Bluetooth: hci0: command tx timeout
[  363.654544][T15539] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.674565][ T5895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.682550][ T5895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.692923][ T5895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.697704][ T5895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.781403][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.794092][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.819877][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.825123][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.871024][T15639] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4153'.
[  364.151198][T15653] openvswitch: netlink: IP tunnel TTL not specified.
[  364.229640][T15659] netlink: 'syz.4.4161': attribute type 1 has an invalid length.
[  364.498753][T15677] netlink: 'syz.5.4167': attribute type 8 has an invalid length.
[  364.502498][T15677] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4167'.
[  364.723210][T15684] netlink: 495 bytes leftover after parsing attributes in process `syz.6.4172'.
[  364.842804][   T54] Bluetooth: hci2: command tx timeout
[  364.904479][T15688] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4174'.
[  365.541376][T15712] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  365.712222][T15719] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.4179'.
[  365.726088][   T54] Bluetooth: hci0: command tx timeout
[  365.747318][T15723] netlink: 'syz.6.4182': attribute type 21 has an invalid length.
[  365.751039][T15723] netlink: 'syz.6.4182': attribute type 6 has an invalid length.
[  365.754499][T15723] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4182'.
[  365.833136][T15727] openvswitch: netlink: IPv4 frag type 101 is out of range max 2
[  366.360257][T15752] netlink: 'syz.5.4196': attribute type 5 has an invalid length.
[  366.363483][T15752] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4196'.
[  366.493643][T15763] netlink: 'syz.4.4201': attribute type 7 has an invalid length.
[  366.622860][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4205'.
[  366.626639][T15772] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4205'.
[  366.922105][   T54] Bluetooth: hci2: command tx timeout
[  367.255580][T15787] netlink: 'syz.6.4212': attribute type 40 has an invalid length.
[  367.259656][T15787] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4212'.
[  368.358346][   T54] Bluetooth: hci0: command tx timeout
[  368.495390][T15811] netlink: 'syz.4.4221': attribute type 3 has an invalid length.
[  368.498854][T15811] netlink: 199752 bytes leftover after parsing attributes in process `syz.4.4221'.
[  368.602486][T15822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4226'.
[  368.608147][T15822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4226'.
[  368.817653][T15831] syzkaller0: entered promiscuous mode
[  368.820092][T15831] syzkaller0: entered allmulticast mode
[  368.886283][T15841] netlink: 'syz.6.4235': attribute type 1 has an invalid length.
[  368.889791][T15841] netlink: 'syz.6.4235': attribute type 1 has an invalid length.
[  369.019583][   T54] Bluetooth: hci2: command tx timeout
[  373.784187][T15883] netlink: 'syz.4.4250': attribute type 1 has an invalid length.
[  373.787252][T15883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.834996][T15887] netlink: 'syz.6.4252': attribute type 1 has an invalid length.
[  373.927349][T15891] sit0: entered allmulticast mode
[  373.936579][T15891] sit0: entered promiscuous mode
[  374.318422][T15894] netlink: 'syz.6.4254': attribute type 1 has an invalid length.
[  374.744507][T15910] netlink: 'syz.6.4261': attribute type 25 has an invalid length.
[  374.748125][T15910] netlink: 2418 bytes leftover after parsing attributes in process `syz.6.4261'.
[  375.345832][T15930] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.4268'.
[  375.397743][T15932] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.4269'.
[  375.407836][T15934] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4270'.
[  375.730602][T15948] vcan0 speed is unknown, defaulting to 1000
[  376.097624][T15961] netlink: 'syz.6.4280': attribute type 14 has an invalid length.
[  376.178928][T15968] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4283'.
[  376.269640][T15973] netlink: 'syz.6.4285': attribute type 2 has an invalid length.
[  376.274988][T15973] netlink: 'syz.6.4285': attribute type 7 has an invalid length.
[  376.277698][T15977] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4287'.
[  376.282596][T15973] netlink: 85 bytes leftover after parsing attributes in process `syz.6.4285'.
[  376.291715][T15973] netlink: 130140 bytes leftover after parsing attributes in process `syz.6.4285'.
[  376.295724][T15973] netlink: 'syz.6.4285': attribute type 2 has an invalid length.
[  376.298961][T15973] netlink: 'syz.6.4285': attribute type 7 has an invalid length.
[  376.311019][T15973] netlink: 85 bytes leftover after parsing attributes in process `syz.6.4285'.
[  376.523542][T15996] Dead loop on virtual device ip6_vti0, fix it urgently!
[  376.792579][T16013] netlink: 'syz.4.4305': attribute type 10 has an invalid length.
[  376.815932][T16013] bond0: (slave 1!): Releasing backup interface
[  376.861791][T16021] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4309'.
[  378.715714][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  378.718486][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  378.835209][T16072] openvswitch: netlink: IP tunnel dst address not specified
[  378.887847][T16079] netlink: 'syz.5.4335': attribute type 2 has an invalid length.
[  378.890725][T16079] netlink: 'syz.5.4335': attribute type 1 has an invalid length.
[  379.164634][T16102] netlink: 'syz.6.4346': attribute type 10 has an invalid length.
[  380.064323][T16121] __nla_validate_parse: 11 callbacks suppressed
[  380.064334][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4355'.
[  380.303923][T16134] netlink: 'syz.5.4360': attribute type 10 has an invalid length.
[  380.317931][T16134] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.4360'.
[  380.398674][T16142] C: renamed from team_slave_0 (while UP)
[  380.404721][T16142] netlink: 'syz.4.4365': attribute type 3 has an invalid length.
[  380.407539][T16142] netlink: 'syz.4.4365': attribute type 1 has an invalid length.
[  380.410400][T16142] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4365'.
[  380.415514][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4366'.
[  380.421294][T16144] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4366'.
[  380.432152][T16144] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4366'.
[  381.337120][T16163] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4375'.
[  381.465683][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4381'.
[  383.441885][T16189] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4383'.
[  383.446113][T16189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.625090][T16192] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4385'.
[  384.079088][T16224] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  384.380891][T16237] netlink: 'syz.5.4403': attribute type 29 has an invalid length.
[  384.385213][T16237] netlink: 'syz.5.4403': attribute type 3 has an invalid length.
[  385.022385][T16294] sctp: [Deprecated]: syz.5.4425 (pid 16294) Use of int in max_burst socket option deprecated.
[  385.022385][T16294] Use struct sctp_assoc_value instead
[  385.567833][T16326] __nla_validate_parse: 2 callbacks suppressed
[  385.567848][T16326] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4444'.
[  389.254128][T16371] openvswitch: netlink: IPv4 tunnel dst address is zero
[  389.271135][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4466'.
[  389.687400][T16389] vcan0 speed is unknown, defaulting to 1000
[  389.698767][T16393] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  389.837543][T16398] netlink: 'syz.5.4476': attribute type 1 has an invalid length.
[  390.430526][T16393] vcan0 speed is unknown, defaulting to 1000
[  390.591814][T16404] netlink: 'syz.6.4479': attribute type 11 has an invalid length.
[  390.797713][T16415] netlink: 'syz.6.4483': attribute type 29 has an invalid length.
[  390.813806][T16415] netlink: 'syz.6.4483': attribute type 29 has an invalid length.
[  390.891334][T16418] netlink: 830 bytes leftover after parsing attributes in process `syz.6.4484'.
[  390.960462][T16423] openvswitch: netlink: Key type 4117 is out of range max 32
[  391.486332][T16452] netlink: 'syz.6.4499': attribute type 16 has an invalid length.
[  391.489641][T16452] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4499'.
[  391.679128][T16464] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4503'.
[  391.683628][T16464] batadv_slave_1: entered promiscuous mode
[  391.737114][T16466] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4504'.
[  391.992455][   T54] Bluetooth: hci0: SCO packet for unknown connection handle 601
[  392.694014][ T1090] wlan1: Trigger new scan to find an IBSS to join
[  393.207082][T16499] netlink: 'syz.5.4517': attribute type 10 has an invalid length.
[  393.209911][T16499] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4517'.
[  393.214377][T16499] ipvlan1: entered promiscuous mode
[  393.216886][T16499] ipvlan1: entered allmulticast mode
[  393.219236][T16499] veth0_vlan: entered allmulticast mode
[  393.227246][T16499] bridge0: port 3(ipvlan1) entered blocking state
[  393.230176][T16499] bridge0: port 3(ipvlan1) entered disabled state
[  393.245604][T16499] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  394.053670][T16519] netlink: 'syz.6.4524': attribute type 29 has an invalid length.
[  394.073415][T16519] netlink: 'syz.6.4524': attribute type 29 has an invalid length.
[  394.092412][T16519] netlink: 'syz.6.4524': attribute type 29 has an invalid length.
[  394.126622][T16519] netlink: 'syz.6.4524': attribute type 29 has an invalid length.
[  394.597018][T16534] syzkaller0: entered promiscuous mode
[  394.599461][T16534] syzkaller0: entered allmulticast mode
[  395.557607][T16597] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  395.601018][T16600] validate_nla: 1 callbacks suppressed
[  395.601037][T16600] netlink: 'syz.6.4564': attribute type 4 has an invalid length.
[  395.607535][T16600] netlink: 'syz.6.4564': attribute type 1 has an invalid length.
[  395.613748][T16600] netlink: 'syz.6.4564': attribute type 2 has an invalid length.
[  395.617131][T16600] netlink: 198236 bytes leftover after parsing attributes in process `syz.6.4564'.
[  395.706513][T16608] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4567'.
[  395.980129][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4573'.
[  395.984554][T16620] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4573'.
[  395.987801][T16620] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4573'.
[  396.207258][T16637] netlink: 'syz.6.4581': attribute type 1 has an invalid length.
[  396.219575][T16639] netlink: 360 bytes leftover after parsing attributes in process `syz.5.4582'.
[  396.511267][T16658] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  396.519361][T16658] netlink: 'syz.6.4591': attribute type 10 has an invalid length.
[  396.546838][T16658] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  396.682052][T15147] wlan1: Trigger new scan to find an IBSS to join
[  396.920421][T16674] netlink: 'syz.5.4595': attribute type 1 has an invalid length.
[  396.931135][T16674] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4595'.
[  397.051441][T16678] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  397.061932][T16678] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  397.614147][T16693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.697491][T16697] netlink: 'syz.5.4605': attribute type 2 has an invalid length.
[  397.749733][   T54] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  398.682013][  T540] wlan1: Creating new IBSS network, BSSID 0a:8f:2c:14:61:01
[  398.835961][T16717] netlink: 'syz.5.4613': attribute type 28 has an invalid length.
[  398.839663][T16717] netlink: 'syz.5.4613': attribute type 29 has an invalid length.
[  398.849510][T16717] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4613'.
[  399.057192][T16731] netlink: 'syz.5.4619': attribute type 10 has an invalid length.
[  399.060854][T16731] macvlan1: entered allmulticast mode
[  399.065038][T16731] veth1_vlan: entered allmulticast mode
[  399.067830][T16731] team0: Device macvlan1 is up. Set it down before adding it as a team port
[  399.139828][T16733] GPL: port 1(gretap0) entered blocking state
[  399.142840][T16733] GPL: port 1(gretap0) entered disabled state
[  399.145673][T16733] gretap0: entered allmulticast mode
[  399.150298][T16733] gretap0: entered promiscuous mode
[  399.865112][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4628'.
[  401.803216][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  401.806928][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  401.810956][   T54] Bluetooth: hci0: hardware error 0x00
[  401.973377][T16770] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4638'.
[  402.027859][T16776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.035398][T16776] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4638'.
[  402.097059][T16770] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4638'.
[  402.221471][T16776] validate_nla: 1 callbacks suppressed
[  402.221493][T16776] netlink: 'syz.6.4638': attribute type 1 has an invalid length.
[  402.562975][T16789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4643'.
[  402.825563][T16797] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4650'.
[  402.830221][T16797] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4650'.
[  402.835484][T16797] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4650'.
[  402.980318][T16805] bridge_slave_1: left allmulticast mode
[  402.983538][T16805] bridge_slave_1: left promiscuous mode
[  402.991702][T16805] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.720829][T16805] bridge_slave_0: left promiscuous mode
[  403.723611][T16805] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.882339][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  404.033879][T16825] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4662'.
[  404.090145][T16829] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4664'.
[  404.180837][T16835] netlink: 'syz.6.4667': attribute type 3 has an invalid length.
[  404.190648][T16835] netlink: 13435 bytes leftover after parsing attributes in process `syz.6.4667'.
[  404.928040][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  404.933344][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  404.936954][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  404.941862][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  404.946042][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  404.984229][T16876] vcan0 speed is unknown, defaulting to 1000
[  405.021161][T16878] IPv6: Can't replace route, no match found
[  405.201509][T16876] chnl_net:caif_netlink_parms(): no params data found
[  405.262058][T16876] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.264645][T16876] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.267213][T16876] bridge_slave_0: entered allmulticast mode
[  405.270386][T16876] bridge_slave_0: entered promiscuous mode
[  405.274171][T16876] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.276983][T16876] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.279896][T16876] bridge_slave_1: entered allmulticast mode
[  405.284107][T16876] bridge_slave_1: entered promiscuous mode
[  405.308469][T16876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.313930][T16876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.336406][T16876] team0: Port device team_slave_0 added
[  405.340172][T16876] team0: Port device team_slave_1 added
[  405.359847][T16876] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.362692][T16876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.371205][T16876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.376379][T16876] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.378697][T16876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.387127][T16876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.424504][T16876] hsr_slave_0: entered promiscuous mode
[  405.428735][T16876] hsr_slave_1: entered promiscuous mode
[  405.436921][T16876] debugfs: 'hsr0' already exists in 'hsr'
[  405.439768][T16876] Cannot create hsr debugfs directory
[  405.655402][T16876] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  405.665600][T16876] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  405.673493][T16876] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  405.682854][T16876] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  405.718507][T16876] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.721844][T16876] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.725089][T16876] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.728287][T16876] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.794277][T16876] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.811167][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.817661][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.854580][T16876] 8021q: adding VLAN 0 to HW filter on device team0
[  405.867195][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.870786][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.890728][ T6595] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.894118][ T6595] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.249140][T16876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.484499][T16933] netlink: 'syz.6.4703': attribute type 1 has an invalid length.
[  406.559274][T16876] veth0_vlan: entered promiscuous mode
[  406.586347][T16876] veth1_vlan: entered promiscuous mode
[  406.613947][T16876] veth0_macvtap: entered promiscuous mode
[  406.618415][T16876] veth1_macvtap: entered promiscuous mode
[  406.629160][T16876] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.638686][T16876] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.655871][T16893] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.660111][T16893] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.671883][T16893] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.675983][T16893] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.778743][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.782707][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.829353][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.835008][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.001836][ T5236] Bluetooth: hci3: command tx timeout
[  407.010306][T16962] netlink: 'syz.7.4715': attribute type 21 has an invalid length.
[  407.049766][T16968] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  407.097480][T16972] netlink: 'syz.5.4719': attribute type 2 has an invalid length.
[  407.100873][T16972] netlink: 'syz.5.4719': attribute type 1 has an invalid length.
[  407.199680][T16981] netlink: 'syz.6.4724': attribute type 49 has an invalid length.
[  407.219373][T16985] __nla_validate_parse: 5 callbacks suppressed
[  407.219383][T16985] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.4727'.
[  407.753864][T17014] netlink: 209832 bytes leftover after parsing attributes in process `syz.6.4741'.
[  407.789811][T17016] netlink: 'syz.7.4742': attribute type 13 has an invalid length.
[  408.023180][T17016] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.027114][T17016] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.076822][T17022] netlink: 'syz.6.4744': attribute type 33 has an invalid length.
[  408.080638][T17022] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4744'.
[  408.293752][T17016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  408.322105][T17016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  408.829018][ T5858] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.834373][ T5858] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.841225][ T5858] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.850950][ T5858] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.906183][T17040] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4750'.
[  409.033192][T17046] : entered promiscuous mode
[  409.073283][T17053] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4756'.
[  409.082865][ T5236] Bluetooth: hci3: command tx timeout
[  409.611307][T17068] delete_channel: no stack
[  409.617092][T17068] delete_channel: no stack
[  409.710568][T17076] netlink: 'syz.5.4767': attribute type 10 has an invalid length.
[  409.938555][T17093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.163346][ T5236] Bluetooth: hci3: command tx timeout
[  411.237600][T17136] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  411.255121][T17140] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.4797'.
[  411.259296][T17140] netlink: 6264 bytes leftover after parsing attributes in process `syz.6.4797'.
[  411.265646][T17140] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4797'.
[  411.268232][T17142] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4798'.
[  411.340122][T17148] netlink: 'syz.7.4801': attribute type 1 has an invalid length.
[  411.346483][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4801'.
[  413.079685][T17171] netlink: 495 bytes leftover after parsing attributes in process `syz.6.4811'.
[  413.175364][T17174] netlink: 'syz.6.4813': attribute type 12 has an invalid length.
[  413.179726][T17174] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4813'.
[  413.247662][ T5236] Bluetooth: hci3: command tx timeout
[  413.549921][T17177] netlink: 'syz.7.4814': attribute type 3 has an invalid length.
[  413.554813][T17177] netlink: 13435 bytes leftover after parsing attributes in process `syz.7.4814'.
[  413.709095][T17187] syzkaller0: entered promiscuous mode
[  413.712120][T17187] syzkaller0: entered allmulticast mode
[  413.761685][T17193] netlink: 'syz.6.4820': attribute type 2 has an invalid length.
[  413.764505][T17193] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4820'.
[  414.349855][T17197] netlink: 'syz.5.4821': attribute type 1 has an invalid length.
[  414.352770][T17197] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.4821'.
[  416.101113][T17207] netlink: 'syz.7.4826': attribute type 3 has an invalid length.
[  416.106152][T17207] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4826'.
[  416.130955][T17209] netlink: 'syz.7.4828': attribute type 19 has an invalid length.
[  416.133958][T17209] netlink: 55 bytes leftover after parsing attributes in process `syz.7.4828'.
[  416.384573][T17223] netlink: 'syz.6.4832': attribute type 1 has an invalid length.
[  416.387531][T17223] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4832'.
[  416.596787][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4843'.
[  416.757852][T17251] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4845'.
[  416.768380][T17251] openvswitch: netlink: Missing key (keys=40, expected=100)
[  416.848940][T17257] syzkaller0: entered promiscuous mode
[  416.850817][T17257] syzkaller0: entered allmulticast mode
[  417.019409][T17261] option changes via remount are deprecated (pid=17260 comm=syz.5.4850)
[  419.998884][T17309] netlink: 'syz.5.4871': attribute type 5 has an invalid length.
[  420.002804][T17309] netlink: 'syz.5.4871': attribute type 5 has an invalid length.
[  420.052087][T17313] netlink: 'syz.5.4873': attribute type 29 has an invalid length.
[  420.057043][T17313] netlink: 'syz.5.4873': attribute type 29 has an invalid length.
[  420.060314][T17313] netlink: 'syz.5.4873': attribute type 29 has an invalid length.
[  420.123752][T17317] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  420.126473][T17317] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.208423][T17323] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4878'.
[  420.744909][T17351] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  420.959827][T17370] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4899'.
[  420.964877][T17370] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4899'.
[  420.968458][T17370] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4899'.
[  421.054100][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4900'.
[  421.104932][T17383] netlink: 'syz.5.4905': attribute type 1 has an invalid length.
[  421.194565][T17387] netlink: 180 bytes leftover after parsing attributes in process `syz.7.4907'.
[  421.225252][T17389] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4908'.
[  421.287270][T17391] netlink: 24032 bytes leftover after parsing attributes in process `syz.5.4909'.
[  421.290549][T17391] netlink: 104088 bytes leftover after parsing attributes in process `syz.5.4909'.
[  421.296459][T17391] netlink: 24032 bytes leftover after parsing attributes in process `syz.5.4909'.
[  421.349551][T17398] netlink: 'syz.7.4912': attribute type 25 has an invalid length.
[  421.353041][T17398] netlink: 'syz.7.4912': attribute type 3 has an invalid length.
[  422.845274][T17484] IPv6: Can't replace route, no match found
[  423.199650][T17500] rdma_rxe: rxe_newlink: failed to add bond0
[  423.763469][T17521] netlink: 'syz.6.4967': attribute type 21 has an invalid length.
[  423.917047][T17531] netlink: 'syz.6.4972': attribute type 4 has an invalid length.
[  424.188995][T17547] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  425.300472][T17581] validate_nla: 2 callbacks suppressed
[  425.300484][T17581] netlink: 'syz.6.4995': attribute type 27 has an invalid length.
[  425.306650][T17581] __nla_validate_parse: 5 callbacks suppressed
[  425.306660][T17581] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4995'.
[  425.333849][T17583] netlink: 'syz.6.4996': attribute type 21 has an invalid length.
[  425.337464][T17583] IPv6: NLM_F_CREATE should be specified when creating new route
[  425.341254][T17583] IPv6: Can't replace route, no match found
[  427.573446][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4999'.
[  427.576981][T17594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  427.740286][T17606] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5007'.
[  428.032088][T17632] netlink: 'syz.6.5019': attribute type 1 has an invalid length.
[  428.038005][T17632] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.5019'.
[  428.146925][T17639] netlink: 140 bytes leftover after parsing attributes in process `syz.7.5022'.
[  428.150208][T17639] netlink: 6 bytes leftover after parsing attributes in process `syz.7.5022'.
[  428.305041][T17646] netlink: 'syz.6.5025': attribute type 10 has an invalid length.
[  428.346746][T17648] netlink: 'syz.7.5026': attribute type 10 has an invalid length.
[  428.359650][T17648] team0: Device ipvlan1 failed to register rx_handler
[  428.517239][T17648] netlink: 'syz.7.5026': attribute type 29 has an invalid length.
[  428.520989][T17648] netlink: 'syz.7.5026': attribute type 3 has an invalid length.
[  428.524879][T17648] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5026'.
[  428.823924][T17665] sctp: [Deprecated]: syz.6.5033 (pid 17665) Use of struct sctp_assoc_value in delayed_ack socket option.
[  428.823924][T17665] Use struct sctp_sack_info instead
[  429.020421][T17683] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.5041'.
[  429.640546][T17697] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5047'.
[  429.793517][T17703] netlink: 'syz.6.5049': attribute type 10 has an invalid length.
[  429.807699][T17705] netlink: 'syz.7.5050': attribute type 10 has an invalid length.
[  429.912730][T17703] team0 (unregistering): Port device team_slave_0 removed
[  429.920681][T17703] team0 (unregistering): Port device team_slave_1 removed
[  429.934850][T17705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  429.944007][T17705] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  430.128865][T17731] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5062'.
[  430.165163][T17732] syzkaller0: entered promiscuous mode
[  430.167189][T17732] syzkaller0: entered allmulticast mode
[  431.630394][T17758] netlink: 'syz.5.5071': attribute type 64 has an invalid length.
[  431.919228][T17765] netlink: 'syz.6.5076': attribute type 29 has an invalid length.
[  431.926171][T17766] netlink: 'syz.6.5076': attribute type 10 has an invalid length.
[  432.084193][T17772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5081'.
[  432.088239][T17772] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5081'.
[  432.109327][T17776] netlink: 'syz.6.5082': attribute type 12 has an invalid length.
[  432.116488][T17776] netlink: 172 bytes leftover after parsing attributes in process `syz.6.5082'.
[  432.333694][T17784] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  432.337183][T17784] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  432.574339][T17802] lo: entered promiscuous mode
[  433.699104][T17844] netlink: 130144 bytes leftover after parsing attributes in process `syz.5.5109'.
[  433.740540][T17846] netlink: 'syz.7.5113': attribute type 11 has an invalid length.
[  433.758604][T17846] netlink: 140 bytes leftover after parsing attributes in process `syz.7.5113'.
[  434.116170][T17877] blkio.reset_stats is deprecated
[  434.335663][T17887] netlink: 316 bytes leftover after parsing attributes in process `syz.7.5132'.
[  434.428755][T17895] syzkaller0: entered promiscuous mode
[  434.431182][T17895] syzkaller0: entered allmulticast mode
[  434.481059][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5139'.
[  437.162892][T17930] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5148'.
[  439.171437][T17960] netlink: 'syz.5.5161': attribute type 21 has an invalid length.
[  439.807062][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  439.810632][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  440.422333][T18002] netlink: 'syz.6.5175': attribute type 1 has an invalid length.
[  440.425136][T18002] netlink: 'syz.6.5175': attribute type 2 has an invalid length.
[  440.859720][T18022] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5184'.
[  441.160461][T18037] netlink: 'syz.6.5190': attribute type 29 has an invalid length.
[  441.352689][T18045] delete_channel: no stack
[  441.447552][T18050] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5196'.
[  441.450696][T18050] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  442.625275][ T5236] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  443.769623][T18154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5241'.
[  443.967544][T18170] sit0: entered allmulticast mode
[  443.975043][T18170] sit0: entered promiscuous mode
[  444.402535][T18176] 0: renamed from bond_slave_1 (while UP)
[  446.030655][T18210] netlink: 'syz.7.5265': attribute type 3 has an invalid length.
[  446.037044][T18210] netlink: 'syz.7.5265': attribute type 2 has an invalid length.
[  446.040400][T18210] netlink: 130500 bytes leftover after parsing attributes in process `syz.7.5265'.
[  446.150056][T18220] netlink: 'syz.5.5270': attribute type 1 has an invalid length.
[  446.354522][T18237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  446.619784][T18249] netlink: 24032 bytes leftover after parsing attributes in process `syz.7.5282'.
[  446.623039][T18249] netlink: 104088 bytes leftover after parsing attributes in process `syz.7.5282'.
[  446.626241][T18249] netlink: 24032 bytes leftover after parsing attributes in process `syz.7.5282'.
[  446.970472][T18259] netlink: 'syz.7.5285': attribute type 29 has an invalid length.
[  446.976607][T18259] netlink: 'syz.7.5285': attribute type 29 has an invalid length.
[  446.979849][T18259] netlink: 500 bytes leftover after parsing attributes in process `syz.7.5285'.
[  449.649298][T18263] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5287'.
[  449.776320][T18272] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5291'.
[  450.184180][T18288] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.187274][T18288] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.196126][T18288] bridge0: entered allmulticast mode
[  450.207296][T18288] bridge_slave_1: left allmulticast mode
[  450.209362][T18288] bridge_slave_1: left promiscuous mode
[  450.213642][T18288] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.617971][T18288] bridge_slave_0: left allmulticast mode
[  452.619910][T18288] bridge_slave_0: left promiscuous mode
[  452.622092][T18288] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.786541][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5306'.
[  453.187779][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5320'.
[  453.209911][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5320'.
[  453.934791][T18370] netlink: 294 bytes leftover after parsing attributes in process `syz.5.5335'.
[  455.227034][ T5236] Bluetooth: hci2: ISO packet too small
[  455.344586][T18396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.561423][T18418] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5358'.
[  455.572644][T18418] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5358'.
[  455.781119][T18439] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5368'.
[  456.513968][T18446] syzkaller0: entered promiscuous mode
[  456.517235][T18446] syzkaller0: entered allmulticast mode
[  458.619612][T18507] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.5399'.
[  458.624931][T18507] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.5399'.
[  459.197923][T18533] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5411'.
[  459.339917][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5418'.
[  459.396234][T18549] netlink: 'syz.6.5419': attribute type 7 has an invalid length.
[  460.271512][T18588] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.5436'.
[  460.275725][T18583] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.5436'.
[  460.280110][T18588] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.5436'.
[  460.299041][T18587] netlink: 'syz.5.5437': attribute type 4 has an invalid length.
[  461.204065][T18609] netlink: 'syz.7.5447': attribute type 1 has an invalid length.
[  461.309315][T18611] netlink: 'syz.6.5448': attribute type 10 has an invalid length.
[  461.408737][T18611] batman_adv: batadv0: Adding interface: netdevsim0
[  461.423723][T18611] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  461.435127][T18611] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  462.235524][T18666] netlink: 'syz.5.5473': attribute type 21 has an invalid length.
[  463.323092][T18691] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.721198][T18703] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5488'.
[  463.935971][T18715] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5492'.
[  465.295272][T18741] netlink: 'syz.6.5504': attribute type 2 has an invalid length.
[  465.302832][T18741] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5504'.
[  465.339044][T18741] netlink: 'syz.6.5504': attribute type 2 has an invalid length.
[  465.352122][T18741] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5504'.
[  465.745564][T18767] netlink: 'syz.5.5513': attribute type 46 has an invalid length.
[  466.018560][T18784] netlink: 'syz.6.5521': attribute type 10 has an invalid length.
[  466.021444][T18784] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5521'.
[  466.116684][T18790] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.5523'.
[  466.153571][T18793] netlink: 198328 bytes leftover after parsing attributes in process `syz.7.5525'.
[  466.156839][T18793] netlink: 'syz.7.5525': attribute type 1 has an invalid length.
[  466.160274][T18793] netlink: 'syz.7.5525': attribute type 2 has an invalid length.
[  466.336029][T18815] netlink: 'syz.5.5536': attribute type 33 has an invalid length.
[  466.338595][T18815] netlink: 'syz.5.5536': attribute type 3 has an invalid length.
[  466.345353][T18815] netlink: 153952 bytes leftover after parsing attributes in process `syz.5.5536'.
[  466.547926][T18834] netdevsim netdevsim6 : renamed from netdevsim0
[  468.002933][T18874] netlink: 'syz.6.5563': attribute type 23 has an invalid length.
[  468.449057][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5577'.
[  469.332246][T18915] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5583'.
[  469.359606][T18923] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5587'.
[  469.716580][T18942] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5597'.
[  469.738075][T18942] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5597'.
[  469.834660][T18950] netlink: 'syz.5.5600': attribute type 10 has an invalid length.
[  470.406429][T18950] 8021q: adding VLAN 0 to HW filter on device team0
[  470.410168][T18950] bond0: (slave team0): Enslaving as an active interface with an up link
[  470.469397][T18950] netdevsim netdevsim5 : renamed from netdevsim0 (while UP)
[  470.971161][T18988] netlink: 'syz.6.5616': attribute type 39 has an invalid length.
[  471.905740][T19008] delete_channel: no stack
[  472.322997][T19023] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  472.392382][T19027] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5633'.
[  472.526922][ T5236] Bluetooth: hci2: Malformed LE Event: 0x1d
[  472.815005][T19051] netlink: 'syz.5.5645': attribute type 6 has an invalid length.
[  474.949943][T19088] netlink: 'syz.5.5661': attribute type 10 has an invalid length.
[  474.963585][T19093] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5662'.
[  474.995916][T19093] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5662'.
[  475.154212][T19105] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5664'.
[  475.319706][T19109] netlink: zone id is out of range
[  475.321948][T19109] netlink: zone id is out of range
[  475.323660][T19109] netlink: zone id is out of range
[  475.325382][T19109] netlink: zone id is out of range
[  475.327110][T19109] netlink: zone id is out of range
[  475.329085][T19109] netlink: zone id is out of range
[  475.330758][T19109] netlink: zone id is out of range
[  475.335064][T19109] netlink: zone id is out of range
[  475.336890][T19109] netlink: zone id is out of range
[  475.531388][T19124] netlink: 'syz.6.5673': attribute type 21 has an invalid length.
[  475.948655][T19145] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5683'.
[  475.958351][T19145] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5683'.
[  476.115840][T19159] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5690'.
[  476.397497][T19179] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5700'.
[  476.397836][T19183] netlink: 61211 bytes leftover after parsing attributes in process `syz.7.5701'.
[  476.460789][   T33] audit: type=1107 audit(1756316830.735:5): pid=19186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  476.514298][T19189] vcan0 speed is unknown, defaulting to 1000
[  476.836141][T19211] netlink: 'syz.7.5715': attribute type 21 has an invalid length.
[  476.880133][T19216] 8021q: adding VLAN 0 to HW filter on device batadv0
[  477.361014][T19254] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  477.376362][T19254] netlink: 'syz.5.5736': attribute type 10 has an invalid length.
[  477.397090][T19254] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  477.577075][T19262] netlink: 763 bytes leftover after parsing attributes in process `syz.7.5740'.
[  477.804108][T19281] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5749'.
[  477.818837][T19279] sctp: [Deprecated]: syz.7.5748 (pid 19279) Use of struct sctp_assoc_value in delayed_ack socket option.
[  477.818837][T19279] Use struct sctp_sack_info instead
[  479.180008][T19325] netlink: 'syz.7.5768': attribute type 29 has an invalid length.
[  479.189013][T19325] netlink: 'syz.7.5768': attribute type 29 has an invalid length.
[  479.202445][T19325] netlink: 'syz.7.5768': attribute type 29 has an invalid length.
[  479.434026][T19345] netlink: 'syz.6.5777': attribute type 16 has an invalid length.
[  479.628102][T19356] netlink: 'syz.6.5783': attribute type 16 has an invalid length.
[  479.643545][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  479.736937][T19360] syzkaller0: entered promiscuous mode
[  479.739091][T19360] syzkaller0: entered allmulticast mode
[  482.604028][   T40] wlan1: Trigger new scan to find an IBSS to join
[  482.842850][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  485.570115][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  485.576441][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  485.582405][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  485.588239][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  485.592813][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  485.626747][T19472] vcan0 speed is unknown, defaulting to 1000
[  485.642112][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  485.910692][T19472] chnl_net:caif_netlink_parms(): no params data found
[  485.987772][T19472] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.991084][T19472] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.998315][T19472] bridge_slave_0: entered allmulticast mode
[  486.002811][T19472] bridge_slave_0: entered promiscuous mode
[  486.006568][T19472] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.009843][T19472] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.016362][T19472] bridge_slave_1: entered allmulticast mode
[  486.020573][T19472] bridge_slave_1: entered promiscuous mode
[  486.053993][T19472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.059407][T19472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  486.086156][T19472] team0: Port device team_slave_0 added
[  486.091536][T19472] team0: Port device team_slave_1 added
[  486.120992][T19472] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.123826][T19472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.134442][T19472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.140364][T19472] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.143592][T19472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.154995][T19472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.186401][T19472] hsr_slave_0: entered promiscuous mode
[  486.188994][T19472] hsr_slave_1: entered promiscuous mode
[  486.191372][T19472] debugfs: 'hsr0' already exists in 'hsr'
[  486.193874][T19472] Cannot create hsr debugfs directory
[  486.318630][T19472] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  486.325592][T19472] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  486.332524][T19472] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  486.338158][T19472] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  486.371706][T19472] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.374872][T19472] bridge0: port 2(bridge_slave_1) entered forwarding state
[  486.378220][T19472] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.380791][T19472] bridge0: port 1(bridge_slave_0) entered forwarding state
[  486.428998][T19472] 8021q: adding VLAN 0 to HW filter on device bond0
[  486.439883][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.444301][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.462940][T19472] 8021q: adding VLAN 0 to HW filter on device team0
[  486.474342][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.477461][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  486.487366][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.490207][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  486.553980][   T26] wlan1: Creating new IBSS network, BSSID c2:75:53:4e:57:15
[  486.608248][T19472] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.666109][T19494] __nla_validate_parse: 8 callbacks suppressed
[  486.666127][T19494] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5821'.
[  486.827553][T19472] veth0_vlan: entered promiscuous mode
[  486.840138][T19472] veth1_vlan: entered promiscuous mode
[  486.864021][T19472] veth0_macvtap: entered promiscuous mode
[  486.869555][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  486.872486][T19472] veth1_macvtap: entered promiscuous mode
[  486.877041][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  486.880756][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  486.886000][T19472] batman_adv: batadv0: Interface activated: batadv_slave_0
[  486.891267][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  486.895767][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  486.904988][T19472] batman_adv: batadv0: Interface activated: batadv_slave_1
[  486.926310][ T5858] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.930194][ T5858] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.938498][ T5858] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.943832][T19503] vcan0 speed is unknown, defaulting to 1000
[  486.943911][ T5858] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  487.071929][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.075940][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.114515][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.118686][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.196532][T19503] chnl_net:caif_netlink_parms(): no params data found
[  487.610168][T19503] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.614050][T19503] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.617702][T19503] bridge_slave_0: entered allmulticast mode
[  487.623347][T19503] bridge_slave_0: entered promiscuous mode
[  487.629021][T19503] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.633432][T19503] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.636856][T19503] bridge_slave_1: entered allmulticast mode
[  487.642041][T19503] bridge_slave_1: entered promiscuous mode
[  487.652121][   T54] Bluetooth: hci0: command tx timeout
[  487.701349][T19503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.712989][T19519] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5825'.
[  487.717869][T19503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.766734][T19503] team0: Port device team_slave_0 added
[  487.771329][T19503] team0: Port device team_slave_1 added
[  487.803608][T19503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.806297][T19503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.832330][T19503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.838243][T19503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.841140][T19503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.854413][T19503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  487.921478][T19503] hsr_slave_0: entered promiscuous mode
[  487.933906][T19503] hsr_slave_1: entered promiscuous mode
[  487.937950][T19503] debugfs: 'hsr0' already exists in 'hsr'
[  487.940014][T19503] Cannot create hsr debugfs directory
[  487.998717][T19536] C: renamed from team_slave_0 (while UP)
[  488.010463][T19536] netlink: 'syz.5.5834': attribute type 3 has an invalid length.
[  488.025243][T19536] netlink: 'syz.5.5834': attribute type 1 has an invalid length.
[  488.028153][T19536] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5834'.
[  488.327965][T19557] syzkaller0: entered promiscuous mode
[  488.330776][T19557] syzkaller0: entered allmulticast mode
[  488.337800][T19503] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  488.861844][   T13] unregister_netdevice: waiting for bridge0 to become free. Usage count = 3
[  488.869977][   T13] ref_tracker: netdev@ffff888109bb8610 has 1/1 users at
[  488.869977][   T13]      ib_device_set_netdev+0x31f/0x6d0
[  488.869977][   T13]      siw_newlink+0x40c/0xd70
[  488.869977][   T13]      nldev_newlink+0x4a5/0x5a0
[  488.869977][   T13]      rdma_nl_rcv+0x6ae/0x980
[  488.869977][   T13]      netlink_unicast+0x82f/0x9e0
[  488.869977][   T13]      netlink_sendmsg+0x805/0xb30
[  488.869977][   T13]      __sock_sendmsg+0x21c/0x270
[  488.869977][   T13]      ____sys_sendmsg+0x505/0x830
[  488.869977][   T13]      ___sys_sendmsg+0x21f/0x2a0
[  488.869977][   T13]      __x64_sys_sendmsg+0x19b/0x260
[  488.869977][   T13]      do_syscall_64+0xfa/0x3b0
[  488.869977][   T13]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.869977][   T13] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  488.930253][   T54] Bluetooth: hci3: command tx timeout
[  489.722094][   T54] Bluetooth: hci0: command tx timeout
[  490.563872][T19503] netdevsim netdevsim9 netdevsim1: renamed from eth1

VM DIAGNOSIS:
17:47:23  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000106fd0
R8 =ffff8880200b8237 R9 =1ffff11004017046 R10=dffffc0000000000 R11=ffffffff854efef0
R12=dffffc0000000000 R13=ffffffff99af98e0 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff6c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f08a436cfc8 CR3=000000010e076000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f7fdca12e53
XMM06=0000000000000000 00007f7fdca12e4d XMM07=0000000000000000 00007f7fdca12e61
XMM08=0000000000000000 00007f7fdca12ee7 XMM09=0000000000000000 00007f7fdca12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000651401 RDX=0000000000000000
RSI=0000000000000201 RDI=0000000000000000 RBP=ffffc90002f3f960 RSP=ffffc90002f3f8b8
R8 =ffffffff8fa38137 R9 =1ffffffff1f47026 R10=dffffc0000000000 R11=fffffbfff1f47027
R12=1ffff920005e7f18 R13=dffffc0000000000 R14=0000000000000246 R15=dffffc0000000000
RIP=ffffffff819dee30 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000200 CR3=000000003d0f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f7fdca12e53
XMM06=0000000000000000 00007f7fdca12e4d XMM07=0000000000000000 00007f7fdca12e61
XMM08=0000000000000000 00007f7fdca12ee7 XMM09=0000000000000000 00007f7fdca12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
