last executing test programs:

38.545010761s ago: executing program 1 (id=1144):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50)

38.544744662s ago: executing program 1 (id=1145):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0)
ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180))

38.338115751s ago: executing program 1 (id=1146):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000841}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x7c, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x2}, 0x102000, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
close(0x3)

38.046066895s ago: executing program 1 (id=1150):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)

37.968284367s ago: executing program 1 (id=1152):
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x1b, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0)

37.747968202s ago: executing program 1 (id=1158):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0xc, 0x3, 0x0, 0x6}, {0x6, 0x8, 0xc0, 0x4}]})

37.288623809s ago: executing program 32 (id=1158):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0xc, 0x3, 0x0, 0x6}, {0x6, 0x8, 0xc0, 0x4}]})

17.57570819s ago: executing program 2 (id=1374):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055)

17.506631022s ago: executing program 2 (id=1376):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@map, 0xffffffffffffffff, 0x22, 0x2000}, 0x20)

17.490307931s ago: executing program 3 (id=1377):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
write$cgroup_devices(r0, 0x0, 0xffdd)

17.42295667s ago: executing program 2 (id=1379):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f, 0x8}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x2f, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x2a)

17.355707236s ago: executing program 3 (id=1382):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x21, 0x2, 0x2)
close(r0)

17.285197047s ago: executing program 0 (id=1383):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf00}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newae={0x140, 0x1e, 0x8, 0x1070bd28, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4d2, 0xa, 0x2b}, @in=@remote}, [@lifetime_val={0x24, 0x9, {0x2, 0x7, 0xfffffffffffffffe, 0x2}}, @algo_comp={0x7d, 0x3, {{'lzs\x00'}, 0x1a8, "0ba0436e586c194865e34d5547da807fbb927879d00aa5818e63fe216ba01bf6910797897ee2930aea05165eab1fc3396f93af2ede"}}, @replay_thresh={0x8, 0xb, 0x7}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0xa}}, @address_filter={0x28, 0x1a, {@in6=@empty, @in=@remote, 0xa, 0xe, 0xff}}]}, 0x140}, 0x1, 0x0, 0x0, 0x24004000}, 0xc880)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000070c963fa00000000a01332d531a5f2df8b8db320e0c09d8dde8e4af4f0af795f32a21a539183399da6d647b94899207c"], 0x50)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
fstat(r4, 0x0)
getpid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000ec0), 0x0, &(0x7f0000000fc0), 0x0, 0x4}, 0x8001)
close(r4)
r5 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r5, 0x6, 0x9, 0x0, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r8, 0xffffffffffffffff, 0x3a, 0x0, @void}, 0x10)
ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)

17.284602233s ago: executing program 2 (id=1384):
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x83240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x8}, 0xc02, 0x1, 0x0, 0x9, 0x4, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x401}, 0x117e97, 0xc78, 0x10, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b70200001400001e219999dcade5b2c9f000b7030000008900000000000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

17.273064499s ago: executing program 3 (id=1385):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0), &(0x7f0000000200)=""/71}, 0x20)

17.121845264s ago: executing program 3 (id=1386):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x46}, 0x28)

16.973589318s ago: executing program 3 (id=1387):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94)
write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[], 0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x7603, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)={r4})
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0x61, 0x9, 0x0, 0x6, 0x86e47, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, @perf_config_ext={0xc, 0x806}, 0x40fc, 0x3, 0x0, 0x3, 0x9, 0x5, 0xe, 0x0, 0x4, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000))
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x11ffa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x2004c011}, 0x90)

16.105744781s ago: executing program 2 (id=1388):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x10})

16.012286349s ago: executing program 0 (id=1389):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9, 0x0, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x52}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.010153976s ago: executing program 0 (id=1390):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/169, 0xa9}], 0x2}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120)

15.957209018s ago: executing program 2 (id=1391):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0)
close(r0)

15.957026278s ago: executing program 0 (id=1392):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000806030000000010000000000a00000a0500018007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4040004)

15.939123284s ago: executing program 3 (id=1393):
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x44120, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x8001, 0x37}, 0x1112, 0xf, 0x0, 0x2, 0x2, 0x3, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001", @ANYBLOB], 0x50)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r1}, 0x20)
close(r2)

15.866994953s ago: executing program 0 (id=1394):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x4b, &(0x7f0000000500), 0x4)

15.866558158s ago: executing program 0 (id=1395):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91, 0x4, @perf_config_ext={0x8, 0x7}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0xfffffffd, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="05000000980000004300000001"], 0x50)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

196.222806ms ago: executing program 33 (id=1395):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91, 0x4, @perf_config_ext={0x8, 0x7}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0xfffffffd, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="05000000980000004300000001"], 0x50)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

113.074238ms ago: executing program 34 (id=1393):
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x44120, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x8001, 0x37}, 0x1112, 0xf, 0x0, 0x2, 0x2, 0x3, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001", @ANYBLOB], 0x50)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r1}, 0x20)
close(r2)

0s ago: executing program 35 (id=1391):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0)
close(r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20670' (ED25519) to the list of known hosts.
syzkaller login: [   57.253036][ T5600] cgroup: Unknown subsys name 'net'
[   57.385706][ T5600] cgroup: Unknown subsys name 'cpuset'
[   57.392963][ T5600] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.287429][ T5600] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.953505][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.957982][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.962948][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.968001][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.971426][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.001128][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.006148][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.010380][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.014842][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.017994][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.047002][ T5004] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.050726][ T5004] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.053487][ T5004] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.056886][ T5004] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.059684][ T5004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.638390][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.643987][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.646933][ T5621] bridge_slave_0: entered allmulticast mode
[   65.650883][ T5621] bridge_slave_0: entered promiscuous mode
[   65.657218][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.661571][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.664521][ T5621] bridge_slave_1: entered allmulticast mode
[   65.668354][ T5621] bridge_slave_1: entered promiscuous mode
[   65.761811][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.772535][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.775414][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.778355][ T5617] bridge_slave_0: entered allmulticast mode
[   65.784468][ T5617] bridge_slave_0: entered promiscuous mode
[   65.791210][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.830828][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.833668][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.836606][ T5617] bridge_slave_1: entered allmulticast mode
[   65.840477][ T5617] bridge_slave_1: entered promiscuous mode
[   65.879838][ T5621] team0: Port device team_slave_0 added
[   65.908587][ T5621] team0: Port device team_slave_1 added
[   65.922704][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.925858][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.928965][ T5628] bridge_slave_0: entered allmulticast mode
[   65.932834][ T5628] bridge_slave_0: entered promiscuous mode
[   65.938970][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.955250][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.958841][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.962049][ T5628] bridge_slave_1: entered allmulticast mode
[   65.965864][ T5628] bridge_slave_1: entered promiscuous mode
[   65.971428][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.987491][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.990795][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.000550][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.031161][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.033832][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.044003][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.070002][ T5617] team0: Port device team_slave_0 added
[   66.077518][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.083245][ T5617] team0: Port device team_slave_1 added
[   66.099202][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.156292][ T5621] hsr_slave_0: entered promiscuous mode
[   66.159570][ T5621] hsr_slave_1: entered promiscuous mode
[   66.176193][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.178985][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.189101][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.195555][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.198341][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.208580][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.216186][ T5628] team0: Port device team_slave_0 added
[   66.239278][ T5628] team0: Port device team_slave_1 added
[   66.276365][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.279206][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.289556][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.312650][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.315273][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.325928][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.368637][ T5617] hsr_slave_0: entered promiscuous mode
[   66.371955][ T5617] hsr_slave_1: entered promiscuous mode
[   66.374736][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   66.376995][ T5617] Cannot create hsr debugfs directory
[   66.425561][ T5628] hsr_slave_0: entered promiscuous mode
[   66.428358][ T5628] hsr_slave_1: entered promiscuous mode
[   66.431036][ T5628] debugfs: 'hsr0' already exists in 'hsr'
[   66.433325][ T5628] Cannot create hsr debugfs directory
[   66.719573][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.727765][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.730939][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.737066][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.742004][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.748117][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.751747][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.759132][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.822560][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.829464][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.833268][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.838339][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.841866][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.847288][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.853308][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.860602][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.947341][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.953214][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.958993][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.966958][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.972773][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.977114][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.982531][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.987617][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   67.012160][ T5004] Bluetooth: hci0: command tx timeout
[   67.019222][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.059783][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   67.078144][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.080988][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.092296][   T54] Bluetooth: hci1: command tx timeout
[   67.094442][ T5004] Bluetooth: hci2: command tx timeout
[   67.104812][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.107675][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.136879][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.176238][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   67.197913][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.200766][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.219246][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.221632][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.233014][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.285980][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[   67.306284][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.309108][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.334368][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.337545][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.584630][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.634775][ T5621] veth0_vlan: entered promiscuous mode
[   67.642441][ T5621] veth1_vlan: entered promiscuous mode
[   67.666329][ T5621] veth0_macvtap: entered promiscuous mode
[   67.672477][ T5621] veth1_macvtap: entered promiscuous mode
[   67.685414][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.694765][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.703784][ T5673] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.708641][ T5673] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.715060][ T5673] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.719208][ T5673] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.793405][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.809246][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.818145][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.850533][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.855254][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.866228][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.900922][ T5617] veth0_vlan: entered promiscuous mode
[   67.915438][ T5617] veth1_vlan: entered promiscuous mode
[   67.942414][ T5628] veth0_vlan: entered promiscuous mode
[   67.949465][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.955344][ T5628] veth1_vlan: entered promiscuous mode
[   67.965852][ T5617] veth0_macvtap: entered promiscuous mode
[   67.973871][ T5617] veth1_macvtap: entered promiscuous mode
[   67.995650][ T5628] veth0_macvtap: entered promiscuous mode
[   68.006211][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.019209][ T5628] veth1_macvtap: entered promiscuous mode
[   68.029437][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.037966][ T5673] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.041308][ T5673] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.055566][ T5673] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.058572][ T5673] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.074581][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.091955][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.118237][ T5673] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.137171][ T5673] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.141627][ T5673] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.144388][ T5673] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.215707][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.229839][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.304933][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.309817][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.348417][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.357489][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.362752][ T5736] netlink: 'syz.0.6': attribute type 1 has an invalid length.
[   68.366303][ T5736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'.
[   68.407929][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.416533][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.961152][ T5756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'.
[   69.071347][ T5760] netlink: 'syz.1.14': attribute type 39 has an invalid length.
[   69.080781][ T5004] Bluetooth: hci0: command tx timeout
[   69.170378][   T54] Bluetooth: hci1: command tx timeout
[   69.172276][ T5004] Bluetooth: hci2: command tx timeout
[   69.334717][ T5776] netlink: 'syz.0.22': attribute type 39 has an invalid length.
[   69.847479][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'.
[   69.938018][ T5792] netlink: 104 bytes leftover after parsing attributes in process `syz.1.29'.
[   71.173016][ T5004] Bluetooth: hci0: command tx timeout
[   71.293566][ T5004] Bluetooth: hci2: command tx timeout
[   71.295234][ T5004] Bluetooth: hci1: command tx timeout
[   72.590887][ T5912] netlink: 'syz.1.53': attribute type 11 has an invalid length.
[   73.250701][   T54] Bluetooth: hci0: command tx timeout
[   73.320744][   T54] Bluetooth: hci1: command tx timeout
[   73.323390][ T5004] Bluetooth: hci2: command tx timeout
[   73.426257][ T5004] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17
[   73.454265][ T5941] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.68'.
[   73.459463][ T5941] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.68'.
[   73.629751][ T5947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.696638][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'.
[   75.041048][ T5978] can: request_module (can-proto-0) failed.
[   75.091560][ T5981] netlink: 'syz.2.82': attribute type 16 has an invalid length.
[   75.094774][ T5981] netlink: 'syz.2.82': attribute type 30 has an invalid length.
[   75.189473][ T5983] netlink: 'syz.2.83': attribute type 10 has an invalid length.
[   75.236345][ T5983] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.247719][ T5986] netlink: 'syz.2.83': attribute type 10 has an invalid length.
[   75.247831][ T5983] team0: Port device netdevsim1 added
[   75.273310][ T5986] team0: Port device netdevsim1 removed
[   75.287916][ T5986] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   75.302326][ T5986] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   76.147019][ T6007] netlink: 'syz.2.93': attribute type 11 has an invalid length.
[   76.572076][ T6032] netlink: 44 bytes leftover after parsing attributes in process `syz.0.105'.
[   76.875163][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[   76.878286][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[   76.928036][ T6059] netlink: 'syz.2.111': attribute type 39 has an invalid length.
[   77.268120][ T6059] hsr_slave_0: left promiscuous mode
[   77.355466][ T6059] hsr_slave_1: left promiscuous mode
[   77.932600][ T5004] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28
[   77.935593][ T5004] Bluetooth: hci2: Unable to find connection with handle 0x0000
[   78.054684][ T6122] netlink: 65035 bytes leftover after parsing attributes in process `syz.1.119'.
[   78.125237][ T6126] netlink: 'syz.0.122': attribute type 1 has an invalid length.
[   78.135806][ T6126] netlink: 'syz.0.122': attribute type 1 has an invalid length.
[   79.114051][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'.
[   79.121735][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'.
[   79.219315][ T6182] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.149'.
[   79.314039][ T6190] netlink: 'syz.2.153': attribute type 4 has an invalid length.
[   79.316852][ T6190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.153'.
[   79.424661][ T6199] netlink: 'syz.1.157': attribute type 3 has an invalid length.
[   79.427467][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'.
[   79.432751][ T6199] netlink: 'syz.1.157': attribute type 3 has an invalid length.
[   79.435717][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'.
[   79.439197][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'.
[   80.679373][ T6253] netlink: 'syz.2.176': attribute type 27 has an invalid length.
[   82.368521][ T6307] =======================================================
[   82.368521][ T6307] WARNING: The mand mount option has been deprecated and
[   82.368521][ T6307]          and is ignored by this kernel. Remove the mand
[   82.368521][ T6307]          option from the mount to silence this warning.
[   82.368521][ T6307] =======================================================
[   83.006532][ T6336] Zero length message leads to an empty skb
[   83.265758][ T5004] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[   83.283447][ T6355] netlink: 'syz.0.219': attribute type 46 has an invalid length.
[   83.673552][ T6362] netlink: 'syz.1.220': attribute type 13 has an invalid length.
[   84.178851][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.184274][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.592918][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.618341][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.830393][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.840152][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.847598][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.858880][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.356741][ T6393] netlink: 128 bytes leftover after parsing attributes in process `syz.0.234'.
[   85.362518][ T6393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.098428][  T796] cfg80211: failed to load regulatory.db
[   88.851264][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'.
[   89.509458][ T5004] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6
[   89.752677][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.281'.
[   89.759352][ T6514] netlink: 90 bytes leftover after parsing attributes in process `syz.0.281'.
[   89.774566][ T6514] netlink: 90 bytes leftover after parsing attributes in process `syz.0.281'.
[   89.995767][ T6515] netlink: 763 bytes leftover after parsing attributes in process `syz.2.282'.
[   90.555534][ T6558] netlink: 64 bytes leftover after parsing attributes in process `syz.2.301'.
[   91.806906][ T6639] netlink: 'syz.0.312': attribute type 27 has an invalid length.
[   92.353578][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.321'.
[   92.943688][ T5004] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   93.150146][ T6660] Set syz1 is full, maxelem 6117 reached
[   93.485027][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'.
[   93.488659][ T6706] netlink: 60 bytes leftover after parsing attributes in process `syz.2.337'.
[   93.569613][ T6711] netlink: 44 bytes leftover after parsing attributes in process `syz.1.341'.
[   93.618431][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.340'.
[   93.728351][ T6720] netlink: 68 bytes leftover after parsing attributes in process `syz.0.346'.
[   94.362046][ T6729] ref_ctr_offset mismatch. inode: 0x23d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[   95.487599][ T6767] netlink: 156 bytes leftover after parsing attributes in process `syz.1.365'.
[   95.605838][ T6770] netlink: 48 bytes leftover after parsing attributes in process `syz.1.366'.
[   96.251481][ T6800] netlink: 'syz.2.380': attribute type 46 has an invalid length.
[   96.369805][ T6802] syz.0.382 uses obsolete (PF_INET,SOCK_PACKET)
[   96.752755][ T6827] netlink: 228 bytes leftover after parsing attributes in process `syz.2.391'.
[   97.642228][ T6832] syzkaller0: entered promiscuous mode
[   97.645897][ T6832] syzkaller0: entered allmulticast mode
[   99.535373][ T6846] mac80211_hwsim hwsim7 ..c: renamed from wlan1 (while UP)
[   99.592008][ T6852] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.403'.
[   99.906700][ T6873] netlink: 'syz.0.413': attribute type 2 has an invalid length.
[   99.961399][ T6875] xt_bpf: check failed: parse error
[  100.322338][ T6894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.422'.
[  101.247046][ T6931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.431'.
[  102.838429][ T6966] IPv6: NLM_F_CREATE should be specified when creating new route
[  102.843104][ T6966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  102.846732][ T6966] IPv6: NLM_F_CREATE should be set when creating new route
[  102.881311][ T6966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  102.884197][ T6966] IPv6: NLM_F_CREATE should be set when creating new route
[  102.974410][ T6969] netlink: 'syz.0.450': attribute type 1 has an invalid length.
[  102.995012][ T6969] netlink: 'syz.0.450': attribute type 10 has an invalid length.
[  102.999451][ T6969] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.450'.
[  103.347855][ T6987] tc_dump_action: action bad kind
[  103.681142][ T6998] openvswitch: netlink: IP tunnel dst address not specified
[  103.751962][ T7002] netlink: 'syz.0.464': attribute type 21 has an invalid length.
[  103.757840][ T7002] netlink: 'syz.0.464': attribute type 6 has an invalid length.
[  103.995865][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'.
[  104.039809][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'.
[  104.046615][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'.
[  104.271798][ T7032] sctp: [Deprecated]: syz.2.479 (pid 7032) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.271798][ T7032] Use struct sctp_sack_info instead
[  105.028865][ T7065] netlink: 184 bytes leftover after parsing attributes in process `syz.2.495'.
[  107.435212][ T7134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.521'.
[  107.457653][ T7134] unsupported nlmsg_type 40
[  107.774837][ T7155] lo: entered promiscuous mode
[  108.280526][ T7178] netlink: 'syz.0.544': attribute type 6 has an invalid length.
[  108.392457][ T7176] netlink: 56 bytes leftover after parsing attributes in process `syz.1.543'.
[  108.553638][   T54] Bluetooth: hci1: adv larger than maximum supported
[  108.646980][ T7191] xt_time: invalid argument - start or stop time greater than 23:59:59
[  108.929057][ T7205] Driver unsupported XDP return value 0 on prog  (id 185) dev N/A, expect packet loss!
[  108.996678][ T7207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.557'.
[  109.165448][   T54] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10
[  109.295037][   T54] Bluetooth: hci0: Malformed LE Event: 0x0d
[  109.469120][ T7232] warning: `syz.0.569' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  109.576731][ T7240] netlink: 'syz.2.573': attribute type 5 has an invalid length.
[  109.618646][ T7244] netlink: 'syz.2.575': attribute type 1 has an invalid length.
[  109.709085][ T7252] netlink: 'syz.2.579': attribute type 16 has an invalid length.
[  109.712868][ T7252] netlink: 'syz.2.579': attribute type 3 has an invalid length.
[  109.715319][ T7252] netlink: 132 bytes leftover after parsing attributes in process `syz.2.579'.
[  109.840246][ T7255] netlink: 10 bytes leftover after parsing attributes in process `syz.1.580'.
[  109.845489][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'.
[  110.247933][ T5004] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.257115][ T5004] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.262522][ T5004] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.268481][ T5004] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.286846][ T5004] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.304313][ T7268] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.587'.
[  110.323098][ T7268] netlink: 'syz.1.587': attribute type 10 has an invalid length.
[  110.335622][ T7268] veth0_macvtap: left promiscuous mode
[  110.365142][ T7268] team0: Device veth0_macvtap failed to register rx_handler
[  110.920663][ T7271] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.923573][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.926796][ T7271] bridge_slave_0: entered allmulticast mode
[  110.930168][ T7271] bridge_slave_0: entered promiscuous mode
[  110.934052][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.937085][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.940186][ T7271] bridge_slave_1: entered allmulticast mode
[  110.944789][ T7271] bridge_slave_1: entered promiscuous mode
[  110.969135][ T7271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.976985][ T7271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.020311][ T7271] team0: Port device team_slave_0 added
[  111.025160][ T7271] team0: Port device team_slave_1 added
[  111.061659][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.065415][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.082037][ T7271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.095999][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.101665][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.120626][ T7271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.179480][ T7271] hsr_slave_0: entered promiscuous mode
[  111.186224][ T7271] hsr_slave_1: entered promiscuous mode
[  111.192564][ T7271] debugfs: 'hsr0' already exists in 'hsr'
[  111.196656][ T7271] Cannot create hsr debugfs directory
[  111.240055][   T54] Bluetooth: hci0: command tx timeout
[  111.279083][ T7301] netlink: 'syz.1.593': attribute type 29 has an invalid length.
[  111.299793][ T7301] netlink: 'syz.1.593': attribute type 29 has an invalid length.
[  111.324210][ T7301] netlink: 'syz.1.593': attribute type 29 has an invalid length.
[  111.395887][ T7303] tap0: tun_chr_ioctl cmd 1074025677
[  111.397973][ T7303] tap0: linktype set to 769
[  112.360156][   T54] Bluetooth: hci1: command tx timeout
[  113.739044][ T7271] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.784742][ T7309] Q6`Ҙ: renamed from lo (while UP)
[  113.913436][ T7271] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.978884][ T7271] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.994103][ T7318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.601'.
[  113.996910][ T7318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.601'.
[  114.068328][ T7271] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.170419][ T7324] netlink: 'syz.1.603': attribute type 10 has an invalid length.
[  114.239587][ T7324] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  114.338357][ T7271] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  114.440136][   T54] Bluetooth: hci1: command tx timeout
[  114.629488][ T7271] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  114.642217][ T7271] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  114.652119][ T7271] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  114.655900][ T7271] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  114.664646][ T7271] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  114.668413][ T7271] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  114.675973][ T7271] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  114.732695][ T7324] syz.1.603 (7324) used greatest stack depth: 19216 bytes left
[  114.777760][ T7271] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.800221][ T7271] 8021q: adding VLAN 0 to HW filter on device team0
[  114.806140][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.808273][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.825663][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.827917][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.859018][ T7339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.608'.
[  115.556206][ T7368] netlink: 762 bytes leftover after parsing attributes in process `syz.1.615'.
[  115.572891][ T7271] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.636187][ T7271] veth0_vlan: entered promiscuous mode
[  115.645832][ T7271] veth1_vlan: entered promiscuous mode
[  115.672098][ T7271] veth0_macvtap: entered promiscuous mode
[  115.676988][ T7271] veth1_macvtap: entered promiscuous mode
[  115.689666][ T7271] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.700761][ T7271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.708552][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.714900][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.720848][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.772823][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.829820][ T7376] netlink: 112 bytes leftover after parsing attributes in process `syz.1.620'.
[  115.833454][ T7376] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  115.889544][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.898046][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.926119][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.931532][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.272344][ T7404] cgroup: fork rejected by pids controller in /syz1
[  116.520637][   T54] Bluetooth: hci1: command tx timeout
[  117.332151][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'.
[  117.466183][ T5004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  117.471163][ T5004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  117.492773][ T5004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  117.499583][ T5004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  117.503902][ T5004] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  117.624283][ T7430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.643'.
[  117.628946][ T7430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.643'.
[  117.681144][ T7427] netlink: 'syz.0.642': attribute type 13 has an invalid length.
[  118.243695][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'.
[  118.600458][   T54] Bluetooth: hci1: command tx timeout
[  118.845841][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.850053][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.852730][ T7424] bridge_slave_0: entered allmulticast mode
[  118.857327][ T7424] bridge_slave_0: entered promiscuous mode
[  118.866594][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.874228][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.880298][ T7424] bridge_slave_1: entered allmulticast mode
[  118.887561][ T7424] bridge_slave_1: entered promiscuous mode
[  118.917366][ T7424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.924180][ T7424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.962325][ T7424] team0: Port device team_slave_0 added
[  118.969622][ T7424] team0: Port device team_slave_1 added
[  118.999571][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.007221][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.025145][ T7424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.035382][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.037848][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.047915][ T7424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.065021][ T7490] netlink: 168 bytes leftover after parsing attributes in process `syz.2.663'.
[  119.068589][ T7490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'.
[  119.073665][ T7490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'.
[  119.077067][ T7490] netlink: 1 bytes leftover after parsing attributes in process `syz.2.663'.
[  119.114964][ T7424] hsr_slave_0: entered promiscuous mode
[  119.117552][ T7424] hsr_slave_1: entered promiscuous mode
[  119.120810][ T7424] debugfs: 'hsr0' already exists in 'hsr'
[  119.127371][ T7424] Cannot create hsr debugfs directory
[  119.560424][   T54] Bluetooth: hci0: command tx timeout
[  121.640960][   T54] Bluetooth: hci0: command tx timeout
[  122.607771][ T7512] netlink: zone id is out of range
[  122.609728][ T7512] netlink: zone id is out of range
[  122.612549][ T7512] netlink: zone id is out of range
[  122.614184][ T7512] netlink: zone id is out of range
[  122.616050][ T7512] netlink: zone id is out of range
[  122.617926][ T7512] netlink: zone id is out of range
[  122.619622][ T7512] netlink: zone id is out of range
[  122.621318][ T7512] netlink: zone id is out of range
[  122.623048][ T7512] netlink: zone id is out of range
[  122.625319][ T7512] netlink: zone id is out of range
[  123.730240][   T54] Bluetooth: hci0: command tx timeout
[  124.591117][ T7524] netlink: 128 bytes leftover after parsing attributes in process `syz.0.678'.
[  124.652746][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'.
[  124.798592][ T7424] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  124.807025][ T7424] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  124.812114][ T7424] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  124.818703][ T7424] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  124.822907][ T7424] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  124.828313][ T7424] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  124.834770][ T7424] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  124.849946][ T7424] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  124.944544][ T7424] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.958802][ T7424] 8021q: adding VLAN 0 to HW filter on device team0
[  124.967827][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.970140][ T5886] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.979674][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.981929][ T5886] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.556870][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.630305][ T7424] veth0_vlan: entered promiscuous mode
[  125.643181][ T7424] veth1_vlan: entered promiscuous mode
[  125.690003][ T7424] veth0_macvtap: entered promiscuous mode
[  125.694994][ T7424] veth1_macvtap: entered promiscuous mode
[  125.727841][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.752859][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.770952][ T5673] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.803474][   T54] Bluetooth: hci0: command tx timeout
[  125.817989][ T5673] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.826953][ T5673] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.865960][ T5673] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.964494][ T5886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.975050][ T5886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.995856][ T5869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.000173][ T5869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.230112][ T7574] xt_limit: Overflow, try lower: 324398827/4200216962
[  127.628185][ T7605] net_ratelimit: 28 callbacks suppressed
[  127.628299][ T7605] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  127.766388][ T7605] netlink: 'syz.2.702': attribute type 13 has an invalid length.
[  128.676871][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.712569][ T7630] bridge_slave_0 (unregistering): left allmulticast mode
[  128.726123][ T7630] bridge_slave_0 (unregistering): left promiscuous mode
[  128.734193][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.896596][ T7641] netlink: 'syz.1.719': attribute type 2 has an invalid length.
[  129.460788][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'.
[  129.463494][ T7647] openvswitch: netlink: Flow actions attr not present in new flow.
[  129.483593][ T7647] netlink: 'syz.1.720': attribute type 1 has an invalid length.
[  129.706329][ T7652] netlink: 'syz.2.722': attribute type 17 has an invalid length.
[  130.002438][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  130.482402][ T7683] Cannot find set identified by id 0 to match
[  130.629324][ T7703] netlink: 'syz.2.744': attribute type 7 has an invalid length.
[  130.816068][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  131.236847][ T7730] netlink: 56 bytes leftover after parsing attributes in process `syz.2.757'.
[  131.285642][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'.
[  131.292926][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'.
[  131.370662][ T7733] netlink: 14 bytes leftover after parsing attributes in process `syz.1.758'.
[  131.933260][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'.
[  132.344552][ T7749] netlink: 312 bytes leftover after parsing attributes in process `syz.1.762'.
[  132.554284][ T7765] netlink: 44 bytes leftover after parsing attributes in process `syz.1.770'.
[  132.557307][ T7765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.770'.
[  132.562618][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'.
[  132.651078][ T7768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.672677][ T7768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.705973][ T7768] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[  132.722221][ T7768] bond0 (unregistering): Released all slaves
[  134.455319][ T7855] tmpfs: Bad value for 'gid'
[  134.456813][ T7855] tmpfs: Bad value for 'gid'
[  135.288351][ T7897] netlink: 'syz.0.804': attribute type 21 has an invalid length.
[  135.982008][ T7931] __nla_validate_parse: 12 callbacks suppressed
[  135.982025][ T7931] netlink: 128 bytes leftover after parsing attributes in process `syz.2.822'.
[  136.011249][ T7931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.118179][ T7943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.827'.
[  136.432302][ T7965] netlink: 'syz.0.838': attribute type 13 has an invalid length.
[  136.434976][ T7965] netlink: 172 bytes leftover after parsing attributes in process `syz.0.838'.
[  136.441752][ T7965] erspan0: refused to change device tx_queue_len
[  136.472067][ T7967] netlink: 'syz.1.839': attribute type 28 has an invalid length.
[  136.474704][ T7967] netlink: 'syz.1.839': attribute type 3 has an invalid length.
[  136.477184][ T7967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.839'.
[  136.557603][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'.
[  136.565613][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'.
[  136.904903][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'.
[  138.286871][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  138.289616][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  139.231102][ T8036] netlink: 'syz.1.870': attribute type 2 has an invalid length.
[  139.234319][ T8036] netlink: 'syz.1.870': attribute type 2 has an invalid length.
[  139.496068][ T8051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.876'.
[  139.585147][ T8066] netlink: 11 bytes leftover after parsing attributes in process `syz.0.882'.
[  139.588838][ T8066] netlink: 11 bytes leftover after parsing attributes in process `syz.0.882'.
[  139.590953][ T8062] netlink: 'syz.1.880': attribute type 6 has an invalid length.
[  139.600261][ T8062] nbd: must specify a device to reconfigure
[  140.069653][ T8086] netlink: 'syz.1.890': attribute type 10 has an invalid length.
[  140.250388][ T8086] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  140.260836][ T8086] bridge0: port 3(netdevsim1) entered blocking state
[  140.263976][ T8086] bridge0: port 3(netdevsim1) entered disabled state
[  140.273657][ T8086] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  141.171638][ T8117] __nla_validate_parse: 3 callbacks suppressed
[  141.171657][ T8117] netlink: 48 bytes leftover after parsing attributes in process `syz.2.903'.
[  141.335544][ T8128] netlink: 348 bytes leftover after parsing attributes in process `syz.2.907'.
[  141.339181][ T8128] netlink: 348 bytes leftover after parsing attributes in process `syz.2.907'.
[  141.936945][ T8153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.920'.
[  142.053048][ T8153] netlink: 'syz.2.920': attribute type 12 has an invalid length.
[  142.056624][ T8153] netlink: 132 bytes leftover after parsing attributes in process `syz.2.920'.
[  142.103719][ T8165] netlink: 132 bytes leftover after parsing attributes in process `syz.0.925'.
[  142.357705][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'.
[  145.756015][ T8195] netlink: 'syz.1.938': attribute type 10 has an invalid length.
[  146.218098][ T8225] netlink: 'syz.1.949': attribute type 2 has an invalid length.
[  146.243186][ T8228] netlink: 168 bytes leftover after parsing attributes in process `syz.0.950'.
[  146.519592][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.955'.
[  146.533059][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'.
[  146.544227][ T8243] netlink: 31 bytes leftover after parsing attributes in process `syz.2.955'.
[  146.547883][ T8243] netlink: 'syz.2.955': attribute type 3 has an invalid length.
[  146.557522][ T8243] netlink: 'syz.2.955': attribute type 2 has an invalid length.
[  146.561584][ T8243] netlink: 31 bytes leftover after parsing attributes in process `syz.2.955'.
[  146.566288][ T8243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.955'.
[  146.596211][   T54] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6
[  146.668397][ T8250] C: renamed from veth1_to_team (while UP)
[  146.677542][ T8250] netlink: 'syz.2.956': attribute type 4 has an invalid length.
[  146.681674][ T8250] netlink: 116 bytes leftover after parsing attributes in process `syz.2.956'.
[  146.685209][ T8250] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  147.064749][ T8268] netlink: 'syz.1.964': attribute type 21 has an invalid length.
[  147.067821][ T8268] IPv6: NLM_F_CREATE should be specified when creating new route
[  147.071346][ T8268] IPv6: Can't replace route, no match found
[  147.205880][ T8273] netlink: 2 bytes leftover after parsing attributes in process `syz.2.966'.
[  148.093760][ T8330] netlink: 156 bytes leftover after parsing attributes in process `syz.1.992'.
[  148.194404][ T8338] netlink: 'syz.0.996': attribute type 10 has an invalid length.
[  148.207039][ T8338] bond0: (slave bond_slave_0): Releasing backup interface
[  148.216308][ T8338] team0: Port device bond_slave_0 added
[  148.376473][ T8352] netlink: 'syz.1.1003': attribute type 10 has an invalid length.
[  148.386616][ T8352] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  148.631581][ T8362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1007'.
[  149.102899][ T8376] netlink: 'syz.0.1013': attribute type 21 has an invalid length.
[  149.637203][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.658223][ T8411] bridge_slave_0 (unregistering): left allmulticast mode
[  149.666992][ T8411] bridge_slave_0 (unregistering): left promiscuous mode
[  149.671122][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.748288][ T8417] netlink: 'syz.2.1031': attribute type 2 has an invalid length.
[  151.064252][ T8486] : port 1(vlan1) entered blocking state
[  151.070011][ T8486] : port 1(vlan1) entered disabled state
[  151.072456][ T8486] vlan1: entered allmulticast mode
[  151.074435][ T8486] veth0_vlan: entered allmulticast mode
[  151.078631][ T8486] vlan1: entered promiscuous mode
[  151.128622][ T8487] : port 1(vlan1) entered blocking state
[  151.131176][ T8487] : port 1(vlan1) entered forwarding state
[  151.603666][ T8498] openvswitch: netlink: IP tunnel dst address not specified
[  152.203599][ T8501] __nla_validate_parse: 8 callbacks suppressed
[  152.203615][ T8501] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.1068'.
[  152.233722][ T8503] netlink: 'syz.0.1069': attribute type 4 has an invalid length.
[  152.236787][ T8503] netlink: 'syz.0.1069': attribute type 17 has an invalid length.
[  152.314494][ T8506] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1067'.
[  152.506673][ T8520] : renamed from bond_slave_0 (while UP)
[  152.512441][ T8521] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1077'.
[  152.516502][ T8521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  152.766963][ T8535] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1084'.
[  152.975120][ T8545] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  153.105223][ T8555] sit0: entered allmulticast mode
[  153.357393][ T8555] sit0: entered promiscuous mode
[  153.871871][ T8572] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1097'.
[  153.884128][ T8572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.974086][ T8576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1099'.
[  156.034795][ T8625] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1121'.
[  156.057493][ T8627] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  156.061853][ T8627] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  156.287020][ T8636] netlink: 'syz.1.1126': attribute type 1 has an invalid length.
[  156.292358][ T8636] netlink: 'syz.1.1126': attribute type 2 has an invalid length.
[  157.315718][ T8654] syzkaller0: entered promiscuous mode
[  157.317489][ T8654] syzkaller0: entered allmulticast mode
[  157.375150][ T8660] netlink: 'syz.1.1135': attribute type 21 has an invalid length.
[  158.372920][ T8697] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1151'.
[  158.376869][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'.
[  158.644295][ T8711] netlink: 'syz.0.1160': attribute type 2 has an invalid length.
[  158.934328][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.051408][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.253906][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode
[  159.261407][   T12] bridge0: port 3(netdevsim1) entered disabled state
[  159.270802][ T5004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  159.276276][ T5004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  159.282368][ T5004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  159.288526][ T5004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  159.290556][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.300852][ T5004] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  159.453625][ T8729] netlink: 'syz.2.1166': attribute type 21 has an invalid length.
[  159.472518][   T12] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.486047][ T8729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1166'.
[  159.497419][ T8729] netlink: 'syz.2.1166': attribute type 1 has an invalid length.
[  159.916705][   T12] bridge_slave_1: left allmulticast mode
[  159.920796][   T12] bridge_slave_1: left promiscuous mode
[  159.925406][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.942506][   T12] bridge_slave_0: left allmulticast mode
[  159.944717][   T12] bridge_slave_0: left promiscuous mode
[  159.948941][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.394894][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.404251][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.413716][   T12] bond0 (unregistering): Released all slaves
[  160.425510][ T5361] 8021q: adding VLAN 0 to HW filter on device eth1
[  160.746658][ T5361] 8021q: adding VLAN 0 to HW filter on device eth2
[  161.020335][   T12] hsr_slave_0: left promiscuous mode
[  161.022927][   T12] hsr_slave_1: left promiscuous mode
[  161.025480][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.026032][ T8792] netlink: 'syz.0.1183': attribute type 1 has an invalid length.
[  161.027875][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.036659][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.039047][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.047005][   T12] veth1_macvtap: left promiscuous mode
[  161.048995][   T12] veth0_macvtap: left promiscuous mode
[  161.054448][   T12] veth1_vlan: left promiscuous mode
[  161.058061][   T12] veth0_vlan: left promiscuous mode
[  161.343235][   T12] team0 (unregistering): Port device team_slave_1 removed
[  161.371280][   T12] team0 (unregistering): Port device team_slave_0 removed
[  161.401413][   T54] Bluetooth: hci0: command tx timeout
[  161.511580][ T5361] 8021q: adding VLAN 0 to HW filter on device eth3
[  161.626015][ T8805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1184'.
[  161.707342][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.726941][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.735128][ T8723] bridge_slave_0: entered allmulticast mode
[  161.738445][ T8723] bridge_slave_0: entered promiscuous mode
[  161.754786][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.768567][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.781471][ T8723] bridge_slave_1: entered allmulticast mode
[  161.792983][ T8723] bridge_slave_1: entered promiscuous mode
[  161.914572][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.937116][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.974040][   T54] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  161.978112][ T5361] 8021q: adding VLAN 0 to HW filter on device eth4
[  162.002148][ T8723] team0: Port device team_slave_0 added
[  162.006199][ T8723] team0: Port device team_slave_1 added
[  162.026428][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.028600][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  162.042919][ T8723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.061150][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.067028][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  162.086111][ T8723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.176876][ T8723] hsr_slave_0: entered promiscuous mode
[  162.183045][ T8723] hsr_slave_1: entered promiscuous mode
[  162.187359][ T8723] debugfs: 'hsr0' already exists in 'hsr'
[  162.189372][ T8723] Cannot create hsr debugfs directory
[  162.604149][ T8723] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  162.617861][ T8723] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  162.623812][ T8723] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  162.637834][ T8723] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  162.699256][ T8723] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  162.712594][ T8723] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  162.723643][ T8723] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  162.744746][ T8723] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  162.944805][ T8723] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.005284][ T8723] 8021q: adding VLAN 0 to HW filter on device team0
[  163.024317][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.027171][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.044061][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.046255][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.118093][ T8723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  163.232035][ T8862] netlink: 'syz.0.1199': attribute type 21 has an invalid length.
[  163.278092][ T8866] netlink: 'syz.0.1200': attribute type 1 has an invalid length.
[  163.480146][   T54] Bluetooth: hci0: command tx timeout
[  163.484101][ T8723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.534393][ T8723] veth0_vlan: entered promiscuous mode
[  163.544961][ T8723] veth1_vlan: entered promiscuous mode
[  163.568944][ T8723] veth0_macvtap: entered promiscuous mode
[  163.578367][ T8723] veth1_macvtap: entered promiscuous mode
[  163.601477][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.627118][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.637380][ T5673] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.642146][ T5673] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.650090][ T5673] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.654193][ T5673] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.834136][ T8885] netlink: 'syz.2.1205': attribute type 21 has an invalid length.
[  163.834980][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.847407][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.847847][ T8885] IPv6: NLM_F_CREATE should be specified when creating new route
[  163.865800][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.871044][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.244331][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'.
[  164.999142][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1222'.
[  165.006921][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1222'.
[  165.246550][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.266106][ T8932] netlink: 'syz.0.1226': attribute type 2 has an invalid length.
[  165.280350][ T8932] tipc: Started in network mode
[  165.282502][ T8932] tipc: Node identity 1340008, cluster identity 4711
[  165.285201][ T8932] tipc: Node number set to 20185096
[  165.421405][ T5004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  165.429868][ T5004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  165.433689][ T5004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  165.443006][ T5004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  165.449436][ T5004] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  165.496530][ T8945] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1230'.
[  166.074117][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.076702][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.079583][ T8940] bridge_slave_0: entered allmulticast mode
[  166.083698][ T8940] bridge_slave_0: entered promiscuous mode
[  166.087818][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.090826][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.093464][ T8940] bridge_slave_1: entered allmulticast mode
[  166.096590][ T8940] bridge_slave_1: entered promiscuous mode
[  166.125386][ T8940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.131658][ T8940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.167050][ T8940] team0: Port device team_slave_0 added
[  166.175360][ T8940] team0: Port device team_slave_1 added
[  166.216741][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.219810][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.230397][ T8940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.237308][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.240919][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.251900][ T8940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.317056][ T8940] hsr_slave_0: entered promiscuous mode
[  166.321509][ T8940] hsr_slave_1: entered promiscuous mode
[  166.324728][ T8940] debugfs: 'hsr0' already exists in 'hsr'
[  166.327176][ T8940] Cannot create hsr debugfs directory
[  166.743106][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.967943][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.115479][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.374866][   T12] bridge_slave_1: left allmulticast mode
[  167.391712][   T12] bridge_slave_1: left promiscuous mode
[  167.397806][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.400502][ T5082] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec
[  167.412214][   T12] bridge_slave_0: left allmulticast mode
[  167.416512][   T12] bridge_slave_0: left promiscuous mode
[  167.421449][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.484651][ T5004] Bluetooth: hci0: command tx timeout
[  167.703894][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.708321][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.718259][   T12] bond0 (unregistering): Released all slaves
[  167.790433][ T5361] 8021q: adding VLAN 0 to HW filter on device eth5
[  167.935084][ T9018] netlink: 65035 bytes leftover after parsing attributes in process `syz.0.1254'.
[  168.111137][ T5361] 8021q: adding VLAN 0 to HW filter on device eth6
[  168.220512][   T12] hsr_slave_0: left promiscuous mode
[  168.226758][   T12] hsr_slave_1: left promiscuous mode
[  168.235527][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.246109][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.284313][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.287107][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.322322][   T12] veth1_macvtap: left promiscuous mode
[  168.330712][   T12] veth0_macvtap: left promiscuous mode
[  168.333122][   T12] veth1_vlan: left promiscuous mode
[  168.334979][   T12] veth0_vlan: left promiscuous mode
[  168.449665][ T9050] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  168.486164][ T9050] netlink: 'syz.2.1263': attribute type 1 has an invalid length.
[  168.495037][ T9050] netlink: 'syz.2.1263': attribute type 2 has an invalid length.
[  168.497721][ T9050] netlink: 'syz.2.1263': attribute type 3 has an invalid length.
[  168.546186][ T9050] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  168.551592][ T9050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.649032][   T12] team0 (unregistering): Port device team_slave_1 removed
[  168.674173][   T12] team0 (unregistering): Port device team_slave_0 removed
[  169.172305][ T8940] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  169.184043][ T8940] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  169.187938][ T8940] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  169.194587][ T8940] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  169.201386][ T8940] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  169.207750][ T8940] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  169.214149][ T8940] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  169.234381][ T8940] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  169.346111][ T8940] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.359616][ T8940] 8021q: adding VLAN 0 to HW filter on device team0
[  169.368303][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.370578][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.387068][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.389837][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.560619][ T5004] Bluetooth: hci0: command tx timeout
[  169.652285][ T8940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.689476][ T8940] veth0_vlan: entered promiscuous mode
[  169.700580][ T8940] veth1_vlan: entered promiscuous mode
[  169.722426][ T8940] veth0_macvtap: entered promiscuous mode
[  169.728180][ T8940] veth1_macvtap: entered promiscuous mode
[  169.738214][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.746909][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.765754][ T5728] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.769431][ T5728] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.778739][ T5728] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.786601][ T5728] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.878930][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.883465][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.938080][ T5866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.944953][ T5866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.079366][ T9134] netlink: 'syz.3.1285': attribute type 16 has an invalid length.
[  170.088175][ T9134] netlink: 'syz.3.1285': attribute type 17 has an invalid length.
[  170.430742][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.606575][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.992570][ T9147] netlink: 'syz.0.1290': attribute type 2 has an invalid length.
[  171.398220][ T9171] netlink: 'syz.0.1297': attribute type 41 has an invalid length.
[  171.427891][ T9174] netlink: 'syz.2.1298': attribute type 13 has an invalid length.
[  171.440199][ T9174] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1298'.
[  171.445410][ T9174] syz_tun: refused to change device tx_queue_len
[  171.448727][ T9174] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  171.644450][ T9171] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  171.648480][ T9171] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  171.652604][ T5004] Bluetooth: hci0: command tx timeout
[  172.576838][ T9208] netlink: 'syz.0.1312': attribute type 29 has an invalid length.
[  172.583654][ T9208] netlink: 'syz.0.1312': attribute type 29 has an invalid length.
[  173.749847][ T5004] Bluetooth: hci0: command tx timeout
[  173.831393][ T9257] syzkaller1: tun_chr_ioctl cmd 1074812118
[  174.044438][ T9279] validate_nla: 1 callbacks suppressed
[  174.044449][ T9279] netlink: 'syz.3.1336': attribute type 28 has an invalid length.
[  174.263467][ T9295] netlink: 'syz.0.1342': attribute type 5 has an invalid length.
[  175.321471][ T9331] netlink: 'syz.3.1356': attribute type 10 has an invalid length.
[  175.386403][ T9331] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  175.513339][ T9349] netlink: 'syz.3.1364': attribute type 21 has an invalid length.
[  175.517342][ T9349] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1364'.
[  191.564852][ T5004] Bluetooth: hci2: command 0x0406 tx timeout
[  196.624304][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  196.645747][ T9428] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  196.658887][ T9428] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  196.664130][ T9428] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  196.673073][ T9428] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  196.692506][ T9428] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.695776][ T9428] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  196.703382][ T9428] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  196.709843][ T9428] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.713199][ T9428] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  196.717380][ T9428] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  196.723910][ T9428] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  196.728386][ T9428] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  196.732281][ T9428] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  196.735441][ T9428] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  197.798718][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.801365][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.803892][ T9421] bridge_slave_0: entered allmulticast mode
[  197.806801][ T9421] bridge_slave_0: entered promiscuous mode
[  197.810282][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.813224][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.816977][ T9421] bridge_slave_1: entered allmulticast mode
[  197.820334][ T9421] bridge_slave_1: entered promiscuous mode
[  197.898948][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.902498][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.905453][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.908385][ T9426] bridge_slave_0: entered allmulticast mode
[  197.913106][ T9426] bridge_slave_0: entered promiscuous mode
[  197.923953][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.927366][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.930643][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.933026][ T9426] bridge_slave_1: entered allmulticast mode
[  197.936196][ T9426] bridge_slave_1: entered promiscuous mode
[  197.982264][ T9421] team0: Port device team_slave_0 added
[  197.988642][ T9426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.994444][ T9426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.998685][ T9421] team0: Port device team_slave_1 added
[  198.038528][ T9426] team0: Port device team_slave_0 added
[  198.041500][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.044208][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  198.053254][ T9421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.058667][ T9426] team0: Port device team_slave_1 added
[  198.063709][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.066322][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  198.080303][ T9421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.132503][ T9426] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.134865][ T9426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  198.146274][ T9426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.166658][ T9426] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.168812][ T9426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  198.181523][ T9426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.217672][ T9421] hsr_slave_0: entered promiscuous mode
[  198.220772][ T9421] hsr_slave_1: entered promiscuous mode
[  198.223672][ T9421] debugfs: 'hsr0' already exists in 'hsr'
[  198.227467][ T9421] Cannot create hsr debugfs directory
[  198.257403][ T9426] hsr_slave_0: entered promiscuous mode
[  198.260606][ T9426] hsr_slave_1: entered promiscuous mode
[  198.263337][ T9426] debugfs: 'hsr0' already exists in 'hsr'
[  198.265581][ T9426] Cannot create hsr debugfs directory
[  207.500840][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  207.503433][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  232.525123][ T9433] Bluetooth: hci1: command 0x0406 tx timeout
[  257.425834][ T9486] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  257.444483][ T9493] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  257.458898][ T9493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  257.462012][ T9493] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  257.468720][ T9493] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  257.471238][ T9493] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  257.476043][ T9493] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  257.479789][ T9493] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  257.482935][ T9493] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  257.486666][ T9493] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  257.494409][ T9493] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  257.497477][ T9493] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  257.502403][ T9425] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  257.521782][ T9425] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  257.526669][ T9425] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  273.005562][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  273.008222][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  285.549910][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  285.552149][    C1] rcu: 	1-....: (616 ticks this GP) idle=70fc/1/0x4000000000000000 softirq=31288/31288 fqs=5140
[  285.556352][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  285.558361][    C1] rcu: 	 number:   149014          2            0
[  285.560270][    C1] rcu: 	cputime:      906       5243            3   ==> 6150(ms)
[  285.562544][    C1] rcu: 	(t=10500 jiffies g=27557 q=7533 ncpus=2)
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  285.564434][    C1] CPU: 1 UID: 0 PID: 9414 Comm: syz.3.1393 Not tainted syzkaller #0 PREEMPT(full) 
[  285.564444][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  285.564449][    C1] RIP: 0010:fib6_node_lookup_1+0x0/0x8b0
[  285.564468][    C1] Code: 89 ff e8 93 7d dc f7 e9 4c ff ff ff 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 48 89 fb 49 bc
[  285.564473][    C1] RSP: 0018:ffffc90000a083f8 EFLAGS: 00000246
[  285.564481][    C1] RAX: ffffc90000a08460 RBX: 1ffff92000141084 RCX: 0000000000000000
[  285.564486][    C1] RDX: 0000000000000000 RSI: ffffc90000a08440 RDI: ffff888116752058
[  285.564491][    C1] RBP: ffffc90000a084f0 R08: ffffc90000a0846f R09: 0000000000000000
[  285.564496][    C1] R10: ffffc90000a08460 R11: fffff5200014108e R12: ffffc90000a08440
[  285.564501][    C1] R13: ffff888116752058 R14: ffffc90000a08978 R15: ffffc90000a08968
[  285.564508][    C1] FS:  00007f06e7cda6c0(0000) GS:ffff8882a92b8000(0000) knlGS:0000000000000000
[  285.564515][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  285.564519][    C1] CR2: 000000110c34626d CR3: 00000001129ec000 CR4: 00000000000006f0
[  285.564543][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  285.564549][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  285.564553][    C1] Call Trace:
[  285.564558][    C1]  <IRQ>
[  285.564561][    C1]  fib6_node_lookup+0xe4/0x1d0
[  285.564573][    C1]  ? kvm_clock_get_cycles+0x47/0x60
[  285.564586][    C1]  ? __pfx_fib6_node_lookup+0x10/0x10
[  285.564599][    C1]  ? __lock_acquire+0x683/0x2cd0
[  285.564609][    C1]  ? irqentry_exit+0x8a3/0x8e0
[  285.564622][    C1]  fib6_table_lookup+0xbc/0xae0
[  285.564635][    C1]  ? irqentry_exit+0x218/0x8e0
[  285.564645][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  285.564656][    C1]  ? irqentry_exit+0x218/0x8e0
[  285.564668][    C1]  ? ip6_pol_route+0x160/0x13d0
[  285.564677][    C1]  ? lock_acquire+0x106/0x350
[  285.564686][    C1]  ? __pfx_fib6_table_lookup+0x10/0x10
[  285.564701][    C1]  ip6_pol_route+0x228/0x13d0
[  285.564710][    C1]  ? ip6_pol_route+0x160/0x13d0
[  285.564720][    C1]  ? clockevents_program_event+0x491/0x630
[  285.564730][    C1]  ? __pfx_ip6_pol_route+0x10/0x10
[  285.564742][    C1]  ? irqentry_exit+0x8a3/0x8e0
[  285.564757][    C1]  fib6_rule_lookup+0x556/0x730
[  285.564767][    C1]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  285.564776][    C1]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  285.564797][    C1]  ip6_route_input+0x78d/0xb20
[  285.564810][    C1]  ? __pfx_ip6_route_input+0x10/0x10
[  285.564818][    C1]  ? irqentry_exit+0x218/0x8e0
[  285.564843][    C1]  ? ip6_rcv_finish_core+0x222/0x420
[  285.564852][    C1]  ip6_rcv_finish+0x141/0x280
[  285.564861][    C1]  NF_HOOK+0x336/0x3c0
[  285.564869][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  285.564876][    C1]  ? NF_HOOK+0x9e/0x3c0
[  285.564882][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  285.564890][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  285.564904][    C1]  process_backlog+0x774/0x1860
[  285.564917][    C1]  ? process_backlog+0x3c3/0x1860
[  285.564933][    C1]  __napi_poll+0xaa/0x330
[  285.564944][    C1]  net_rx_action+0x61d/0xf50
[  285.564960][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  285.564986][    C1]  handle_softirqs+0x225/0x840
[  285.564996][    C1]  ? __irq_exit_rcu+0xca/0x220
[  285.565007][    C1]  __irq_exit_rcu+0xca/0x220
[  285.565015][    C1]  irq_exit_rcu+0x9/0x30
[  285.565022][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  285.565033][    C1]  </IRQ>
[  285.565036][    C1]  <TASK>
[  285.565039][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  285.565047][    C1] RIP: 0010:preempt_schedule_irq+0x48/0xa0
[  285.565058][    C1] Code: 49 be 00 00 00 00 00 fc ff df eb 09 48 f7 03 10 00 00 00 74 53 bf 01 00 00 00 e8 d3 17 f0 f5 e8 5e 13 2a f6 fb bf 01 00 00 00 <e8> f3 a1 ff ff 9c 58 fa a9 00 02 00 00 74 05 e8 24 15 2a f6 bf 01
[  285.565064][    C1] RSP: 0018:ffffc900042bfbd8 EFLAGS: 00000202
[  285.565070][    C1] RAX: 00000000000006a7 RBX: 0000000000000000 RCX: 0000000000000001
[  285.565075][    C1] RDX: 0000000000000007 RSI: ffffffff8dfa1050 RDI: 0000000000000001
[  285.565079][    C1] RBP: 0000000000000000 R08: ffffffff902f72f7 R09: 1ffffffff205ee5e
[  285.565083][    C1] R10: dffffc0000000000 R11: fffffbfff205ee5f R12: 0000000000000000
[  285.565088][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[  285.565102][    C1]  ? preempt_schedule_irq+0x42/0xa0
[  285.565112][    C1]  irqentry_exit+0x14f/0x8e0
[  285.565122][    C1]  ? trace_irq_disable+0x3b/0x140
[  285.565136][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  285.565144][    C1] RIP: 0010:fd_install+0x0/0x3d0
[  285.565153][    C1] Code: 5d ff ff ff 4c 89 f7 e8 1e 63 e5 ff e9 50 ff ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 41 55 41 54 53 50 49 89 f6 41 89 fd 48
[  285.565158][    C1] RSP: 0018:ffffc900042bfcf8 EFLAGS: 00000246
[  285.565163][    C1] RAX: 6fd59bc3847d5900 RBX: 0000000000000006 RCX: ffffffff8ba3940e
[  285.565168][    C1] RDX: 0000000000000001 RSI: ffff888177eba800 RDI: 0000000000000006
[  285.565172][    C1] RBP: ffffc900042bfee0 R08: ffffc900042bfc87 R09: 1ffff92000857f90
[  285.565177][    C1] R10: dffffc0000000000 R11: fffff52000857f91 R12: 1ffff92000857fb0
[  285.565182][    C1] R13: ffff8881705695b8 R14: ffff88817056b4d0 R15: 1ffff110370d7664
[  285.565192][    C1]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  285.565208][    C1]  __se_sys_perf_event_open+0x1a9a/0x1d40
[  285.565226][    C1]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  285.565244][    C1]  ? rcu_is_watching+0x15/0xb0
[  285.565258][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  285.565268][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.565276][    C1]  do_syscall_64+0x174/0x580
[  285.565287][    C1]  ? trace_irq_disable+0x3b/0x140
[  285.565300][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.565307][    C1] RIP: 0033:0x7f06e6d9ce59
[  285.565316][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.565321][    C1] RSP: 002b:00007f06e7cda028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  285.565328][    C1] RAX: ffffffffffffffda RBX: 00007f06e7015fa0 RCX: 00007f06e6d9ce59
[  285.565333][    C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040
[  285.565337][    C1] RBP: 00007f06e6e32e6f R08: 0000000000000000 R09: 0000000000000000
[  285.565341][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  285.565346][    C1] R13: 00007f06e7016038 R14: 00007f06e7015fa0 R15: 00007ffecc618878
[  285.565360][    C1]  </TASK>
[  286.764676][    C1] sched: DL replenish lagged too much
[  288.846482][ T9496] Bluetooth: hci0: command 0x0406 tx timeout
