last executing test programs:

1m57.121343798s ago: executing program 0 (id=750):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2003, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x902d, 0x0, 0x0, 0x7, 0xe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m57.044630914s ago: executing program 0 (id=753):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000000905000000000000000000020000050900010073797a3000000000080005400000001c0c00048008000144fffffff7240002001400018008000100ac1414aa08000200e00000020c0002"], 0x58}, 0x1, 0x0, 0x0, 0x24000800}, 0x4040040)

1m56.994895897s ago: executing program 0 (id=754):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0dac0f0004ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1m56.934182352s ago: executing program 0 (id=756):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x106d4c8, 0x0)

1m56.887862506s ago: executing program 0 (id=759):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r0, r0, 0x2f}, 0x20)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r0, r1, 0x2f, 0x1c, 0x4, @void, @value=r0}, 0x20)

1m56.600122753s ago: executing program 0 (id=766):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000), 0xc)

1m56.459196572s ago: executing program 32 (id=766):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000), 0xc)

1m53.459588573s ago: executing program 3 (id=796):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x0)

1m53.439764132s ago: executing program 3 (id=797):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114815, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000050e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)
perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0xba, 0x6, 0x3, 0x0, 0x5, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x85b, 0x2}, 0x80, 0x1, 0x3, 0x5, 0x2, 0x6, 0x3, 0x0, 0x101, 0x0, 0x2}, r2, 0x4, 0xffffffffffffffff, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)

1m51.976660662s ago: executing program 3 (id=803):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0)
r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, r2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x2004c080)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010)

1m49.395143081s ago: executing program 3 (id=808):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400"], 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
socketpair(0x1e, 0x1, 0x0, 0x0)

1m49.233517499s ago: executing program 3 (id=816):
r0 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)

1m49.070339566s ago: executing program 3 (id=820):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0x1}]}]}, {0x0, [0x61]}}, 0x0, 0x3f, 0x0, 0x9}, 0x28)

1m33.965796447s ago: executing program 33 (id=820):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x1}, {0x1}]}]}, {0x0, [0x61]}}, 0x0, 0x3f, 0x0, 0x9}, 0x28)

1m11.33282125s ago: executing program 4 (id=1176):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg1\x00', 0x8000})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x81, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000040)=0x10)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x7)
ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000000)={'netdevsim0\x00'})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10320, 0x0, 0x8, 0x5, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040))

1m10.811803557s ago: executing program 4 (id=1182):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0xa, 0x3, 0xff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x20040004)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x84, 0x30, 0x1, 0xe501, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)

1m10.403980001s ago: executing program 4 (id=1186):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000)
setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4)

1m10.203977249s ago: executing program 4 (id=1187):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000004785937a978bcfb56b54d6d0669c000000000000001d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xc, 0x0, &(0x7f0000000000)="0306eaa1d78ad62ceef18843", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x22100, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xb0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000012c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="d74b", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x100010, 0x0)

1m4.854881347s ago: executing program 4 (id=1189):
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003", 0x39}], 0x1, 0x0, 0x0, 0x6000}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

1m4.733009843s ago: executing program 4 (id=1193):
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf301})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032c004d8c71ef2885634a8270e7112f00"/29, @ANYRESOCT=r1], 0xffdd)

1m3.844017547s ago: executing program 2 (id=1200):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='GPL\x00', 0xc, 0xd9, &(0x7f0000000480)=""/217, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

1m3.767405627s ago: executing program 2 (id=1201):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1m3.76519371s ago: executing program 1 (id=1202):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000001a40)="10", 0x1}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x61, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @local}}}], 0x20}, 0x24004084)

1m3.692274543s ago: executing program 1 (id=1203):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x41, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf474, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)

1m2.873604234s ago: executing program 2 (id=1204):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="d8000000", 0x4}], 0x1}, 0x10002)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x90)

1m2.873118321s ago: executing program 1 (id=1205):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe64375a6e91cf281, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000300)='syzkaller\x00', 0x1}, 0x94)

1m2.823054846s ago: executing program 2 (id=1206):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x80, 0x0, 0xd8, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x83, &(0x7f0000000000)=r3, 0x8)

1m2.822733449s ago: executing program 1 (id=1207):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00090700000026bd7000fbdbdf2505001a00ac14141c000000000000000000000000e0000002000000000000000000000000030084"], 0x38}}, 0x20000000)

1m2.822455881s ago: executing program 2 (id=1208):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0xbafa, 0x8, 0x98, 0x0, 0x2, 0xfffff26f, 0xfffb, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28)
mkdir(&(0x7f00000000c0)='./cgroup/file0/file0\x00', 0x81)

1m2.822318471s ago: executing program 1 (id=1209):
unlink(&(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00')

1m2.714038025s ago: executing program 1 (id=1210):
r0 = getpid()
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$kcm(0x2, 0x5, 0x84)
syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/pid_for_children\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d)
r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000101020000090000000000000000070600124000040000"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20040004)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4'], 0xa)
perf_event_open$cgroup(&(0x7f0000000e40)={0x2, 0x80, 0x16, 0x1, 0x0, 0x2, 0x0, 0xffffffffffffffc, 0x12420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, @perf_config_ext={0x9, 0x4}, 0x2040, 0x5, 0x0, 0xb, 0x0, 0x1, 0xfffc, 0x0, 0x2}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8)
socket$kcm(0x11, 0x200000000000002, 0x300)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40086602, &(0x7f0000000180)=0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
close(0xffffffffffffffff)

1m2.650355455s ago: executing program 2 (id=1211):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

0s ago: executing program 34 (id=1193):
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf301})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032c004d8c71ef2885634a8270e7112f00"/29, @ANYRESOCT=r1], 0xffdd)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:34894' (ED25519) to the list of known hosts.
syzkaller login: [   55.723140][ T5812] cgroup: Unknown subsys name 'net'
[   55.834213][ T5812] cgroup: Unknown subsys name 'cpuset'
[   55.840922][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.144835][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.134183][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.272341][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.279162][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.282529][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.287932][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.291981][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.314704][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.318308][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.325504][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.328352][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.330979][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.333906][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.336931][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.340280][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.342687][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.347505][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.637851][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   62.698466][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   62.861592][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.864908][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.868075][ T5864] bridge_slave_0: entered allmulticast mode
[   62.871186][ T5864] bridge_slave_0: entered promiscuous mode
[   62.887183][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.889343][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.894049][ T5864] bridge_slave_1: entered allmulticast mode
[   62.898113][ T5864] bridge_slave_1: entered promiscuous mode
[   62.902294][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.905333][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.908659][ T5867] bridge_slave_0: entered allmulticast mode
[   62.912273][ T5867] bridge_slave_0: entered promiscuous mode
[   62.932183][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.934645][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.937320][ T5867] bridge_slave_1: entered allmulticast mode
[   62.940739][ T5867] bridge_slave_1: entered promiscuous mode
[   62.948523][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   62.955482][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.971576][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.012392][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.027265][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.031426][ T5864] team0: Port device team_slave_0 added
[   63.059454][ T5864] team0: Port device team_slave_1 added
[   63.111413][ T5867] team0: Port device team_slave_0 added
[   63.131257][ T5867] team0: Port device team_slave_1 added
[   63.134024][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.136984][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.146808][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.169559][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.171849][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.180202][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.192372][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.195991][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.198368][ T5868] bridge_slave_0: entered allmulticast mode
[   63.200900][ T5868] bridge_slave_0: entered promiscuous mode
[   63.211430][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.213680][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.223560][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.228270][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.231539][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.234142][ T5868] bridge_slave_1: entered allmulticast mode
[   63.238373][ T5868] bridge_slave_1: entered promiscuous mode
[   63.253665][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.256482][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.266470][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.283083][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.302976][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.349670][ T5864] hsr_slave_0: entered promiscuous mode
[   63.352967][ T5864] hsr_slave_1: entered promiscuous mode
[   63.371825][ T5867] hsr_slave_0: entered promiscuous mode
[   63.374843][ T5867] hsr_slave_1: entered promiscuous mode
[   63.378195][ T5867] debugfs: 'hsr0' already exists in 'hsr'
[   63.380425][ T5867] Cannot create hsr debugfs directory
[   63.384964][ T5868] team0: Port device team_slave_0 added
[   63.392107][ T5868] team0: Port device team_slave_1 added
[   63.463006][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.465202][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.475280][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.491472][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.494062][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.503577][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.609055][ T5868] hsr_slave_0: entered promiscuous mode
[   63.612340][ T5868] hsr_slave_1: entered promiscuous mode
[   63.615235][ T5868] debugfs: 'hsr0' already exists in 'hsr'
[   63.617702][ T5868] Cannot create hsr debugfs directory
[   63.777731][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.798371][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.803306][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.817728][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.863584][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.875650][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.883041][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.890342][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.967925][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.973732][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.984382][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.998684][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.017950][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.054309][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   64.076830][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.079985][ T4797] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.100384][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.103336][ T4797] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.133527][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.175600][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   64.197549][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.202060][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.204771][ T4797] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.231495][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.234297][ T4797] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.262197][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   64.300333][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.303175][ T4797] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.310537][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.313433][ T4797] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.371153][ T5220] Bluetooth: hci2: command tx timeout
[   64.371668][ T5865] Bluetooth: hci0: command tx timeout
[   64.378636][ T5870] Bluetooth: hci1: command tx timeout
[   64.431145][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.466048][ T5864] veth0_vlan: entered promiscuous mode
[   64.500773][ T5864] veth1_vlan: entered promiscuous mode
[   64.510209][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.568812][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.583421][ T5864] veth0_macvtap: entered promiscuous mode
[   64.593276][ T5867] veth0_vlan: entered promiscuous mode
[   64.598634][ T5864] veth1_macvtap: entered promiscuous mode
[   64.614217][ T5867] veth1_vlan: entered promiscuous mode
[   64.641405][ T5868] veth0_vlan: entered promiscuous mode
[   64.648227][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.658477][ T5868] veth1_vlan: entered promiscuous mode
[   64.663554][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.686386][ T5894] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.693914][ T5894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.700024][ T5894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.703465][ T5894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.712297][ T5867] veth0_macvtap: entered promiscuous mode
[   64.721123][ T5867] veth1_macvtap: entered promiscuous mode
[   64.756518][ T5868] veth0_macvtap: entered promiscuous mode
[   64.769155][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.781354][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.784107][ T5868] veth1_macvtap: entered promiscuous mode
[   64.798591][ T5894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.803811][ T5894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.809192][ T5894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.821514][ T5894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.832608][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.844888][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.851664][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.858462][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.877088][ T5915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.880623][ T5915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.898762][ T5915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.902247][ T5915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.906061][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.908506][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.936718][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.939257][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.998676][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.005457][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.066094][ T4802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.069180][ T4802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.135020][ T5934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.145368][ T4802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.155250][ T4802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.343860][ T5865] Bluetooth: hci0: Malformed LE Event: 0x0d
[   65.484158][ T5955] netlink: 132 bytes leftover after parsing attributes in process `syz.2.28'.
[   65.799594][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'.
[   65.830860][ T5967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.33'.
[   65.865518][ T5971] netlink: 'syz.0.35': attribute type 1 has an invalid length.
[   66.011012][ T5981] bridge0: entered promiscuous mode
[   66.013174][ T5981] bridge0: entered allmulticast mode
[   66.446728][ T5870] Bluetooth: hci2: command tx timeout
[   66.446809][ T5220] Bluetooth: hci1: command tx timeout
[   66.448969][ T5865] Bluetooth: hci0: command tx timeout
[   66.688423][ T6017] warning: `syz.0.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.090574][ T6029] delete_channel: no stack
[   67.158815][    C1] hrtimer: interrupt took 56004 ns
[   67.242306][ T6061] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   67.798198][ T6070] netlink: 156 bytes leftover after parsing attributes in process `syz.0.80'.
[   68.060972][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'.
[   68.193803][ T5865] Bluetooth: hci0: SCO packet too small
[   68.276038][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'.
[   68.278969][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'.
[   68.371542][ T6108] netlink: 188 bytes leftover after parsing attributes in process `syz.1.98'.
[   68.527404][ T5865] Bluetooth: hci1: command tx timeout
[   68.528142][ T5220] Bluetooth: hci0: command tx timeout
[   68.529809][ T5870] Bluetooth: hci2: command tx timeout
[   68.711958][ T6128] openvswitch: netlink: Key type 29 is not supported
[   68.791328][ T6131] netlink: 'syz.1.109': attribute type 29 has an invalid length.
[   68.803052][ T6126] netlink: 236 bytes leftover after parsing attributes in process `syz.0.107'.
[   70.599320][ T6184] netlink: 212320 bytes leftover after parsing attributes in process `syz.0.133'.
[   70.603200][ T6184] openvswitch: netlink: Port 7041905 exceeds max allowable 65535
[   70.606641][ T5870] Bluetooth: hci2: command tx timeout
[   70.608897][ T5865] Bluetooth: hci1: command tx timeout
[   70.648922][ T5865] Bluetooth: hci0: command tx timeout
[   71.267648][ T6192] Illegal XDP return value 2733341875 on prog  (id 42) dev N/A, expect packet loss!
[   71.498834][ T6197] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.713352][ T6205] Zero length message leads to an empty skb
[   72.230073][ T6231] netlink: 'syz.1.153': attribute type 6 has an invalid length.
[   72.233331][ T6231] netlink: 332 bytes leftover after parsing attributes in process `syz.1.153'.
[   73.305552][ T6263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.167'.
[   73.737575][ T6272] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.170'.
[   73.740440][ T6272] netlink: 'syz.2.170': attribute type 1 has an invalid length.
[   73.742949][ T6272] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.170'.
[   73.941065][ T6278] netlink: 'syz.2.173': attribute type 1 has an invalid length.
[   74.009658][ T6280] netlink: 6 bytes leftover after parsing attributes in process `syz.0.174'.
[   74.430168][ T6295] netlink: 56 bytes leftover after parsing attributes in process `syz.1.179'.
[   74.616960][ T6308] netlink: 'syz.0.185': attribute type 46 has an invalid length.
[   74.620464][ T6308] netlink: 'syz.0.185': attribute type 28 has an invalid length.
[   74.623816][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'.
[   75.272991][ T6331] =======================================================
[   75.272991][ T6331] WARNING: The mand mount option has been deprecated and
[   75.272991][ T6331]          and is ignored by this kernel. Remove the mand
[   75.272991][ T6331]          option from the mount to silence this warning.
[   75.272991][ T6331] =======================================================
[   75.844685][ T6360] netlink: 'syz.1.210': attribute type 21 has an invalid length.
[   75.847391][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'.
[   76.117465][ T6374] netlink: 'syz.0.217': attribute type 3 has an invalid length.
[   76.120705][ T6374] netlink: 'syz.0.217': attribute type 1 has an invalid length.
[   76.123917][ T6374] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.217'.
[   76.203915][ T6383] TCP: TCP_TX_DELAY enabled
[   76.728219][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.225'.
[   76.731840][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.225'.
[   76.735148][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.225'.
[   76.740305][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.225'.
[   76.852761][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   76.854935][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   77.272098][ T6409] netlink: 164 bytes leftover after parsing attributes in process `syz.0.230'.
[   77.513016][ T6413] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   77.679552][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.232'.
[   77.806676][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.809445][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.817508][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.820032][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.534110][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'.
[   79.373419][ T6459] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.250'.
[   79.693538][ T6477] netlink: 'syz.0.257': attribute type 11 has an invalid length.
[   80.618305][ T6506] syz.2.271: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   80.640703][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.2.271 Not tainted syzkaller #0 PREEMPT(full) 
[   80.640765][ T6506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   80.640774][ T6506] Call Trace:
[   80.640790][ T6506]  <TASK>
[   80.640799][ T6506]  dump_stack_lvl+0xe8/0x150
[   80.640833][ T6506]  warn_alloc+0x249/0x340
[   80.640858][ T6506]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   80.640894][ T6506]  ? __pfx_warn_alloc+0x10/0x10
[   80.640939][ T6506]  ? kasan_save_track+0x4f/0x80
[   80.640953][ T6506]  ? kasan_save_track+0x3e/0x80
[   80.640966][ T6506]  ? __kasan_kmalloc+0x93/0xb0
[   80.640979][ T6506]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[   80.640993][ T6506]  ? xskq_create+0x56/0x170
[   80.641015][ T6506]  ? xsk_setsockopt+0x603/0x990
[   80.641031][ T6506]  ? do_sock_setsockopt+0x17c/0x1b0
[   80.641043][ T6506]  ? __x64_sys_setsockopt+0x13d/0x1b0
[   80.641055][ T6506]  ? do_syscall_64+0xe2/0xf80
[   80.641080][ T6506]  __vmalloc_node_range_noprof+0x132/0x1730
[   80.641196][ T6506]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   80.641236][ T6506]  ? __kasan_kmalloc+0x93/0xb0
[   80.641273][ T6506]  vmalloc_user_noprof+0xad/0xe0
[   80.641293][ T6506]  ? xskq_create+0xbf/0x170
[   80.641317][ T6506]  xskq_create+0xbf/0x170
[   80.641349][ T6506]  xsk_init_queue+0xad/0x110
[   80.641378][ T6506]  xsk_setsockopt+0x603/0x990
[   80.641409][ T6506]  ? __pfx_xsk_setsockopt+0x10/0x10
[   80.641431][ T6506]  ? __pfx_aa_sk_perm+0x10/0x10
[   80.641489][ T6506]  ? __fget_files+0x2a/0x420
[   80.641507][ T6506]  ? aa_sock_opt_perm+0xff/0x1a0
[   80.641540][ T6506]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   80.641555][ T6506]  ? __pfx_xsk_setsockopt+0x10/0x10
[   80.641584][ T6506]  do_sock_setsockopt+0x17c/0x1b0
[   80.641621][ T6506]  __x64_sys_setsockopt+0x13d/0x1b0
[   80.641658][ T6506]  do_syscall_64+0xe2/0xf80
[   80.641675][ T6506]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.641687][ T6506]  ? trace_irq_disable+0x37/0x100
[   80.641747][ T6506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.641764][ T6506] RIP: 0033:0x7f23e159acb9
[   80.641787][ T6506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.641800][ T6506] RSP: 002b:00007f23e23be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   80.641816][ T6506] RAX: ffffffffffffffda RBX: 00007f23e1815fa0 RCX: 00007f23e159acb9
[   80.641825][ T6506] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[   80.641833][ T6506] RBP: 00007f23e1608bf7 R08: 0000000000000004 R09: 0000000000000000
[   80.641843][ T6506] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   80.641850][ T6506] R13: 00007f23e1816038 R14: 00007f23e1815fa0 R15: 00007ffeabff2398
[   80.641920][ T6506]  </TASK>
[   80.642148][ T6506] Mem-Info:
[   80.832805][ T6509] netlink: 'syz.1.272': attribute type 1 has an invalid length.
[   80.835885][ T6509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.996099][ T6506] active_anon:5196 inactive_anon:0 isolated_anon:0
[   80.996099][ T6506]  active_file:10979 inactive_file:38319 isolated_file:0
[   80.996099][ T6506]  unevictable:1768 dirty:1543 writeback:0
[   80.996099][ T6506]  slab_reclaimable:9927 slab_unreclaimable:80599
[   80.996099][ T6506]  mapped:18061 shmem:2431 pagetables:1075
[   80.996099][ T6506]  sec_pagetables:0 bounce:0
[   80.996099][ T6506]  kernel_misc_reclaimable:0
[   80.996099][ T6506]  free:1135156 free_pcp:20941 free_cma:0
[   81.022025][ T6506] Node 0 active_anon:7476kB inactive_anon:0kB active_file:2376kB inactive_file:15640kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24544kB dirty:744kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7256kB pagetables:2308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.034126][ T6506] Node 1 active_anon:13308kB inactive_anon:0kB active_file:41540kB inactive_file:137636kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47700kB dirty:5428kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5080kB pagetables:1992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.046653][ T6506] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.058371][ T6506] lowmem_reserve[]: 0 1590 2121 2121 2121
[   81.061370][ T6506] Node 0 DMA32 free:1617244kB boost:0kB min:25072kB low:31340kB high:37608kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1628460kB mlocked:0kB bounce:0kB free_pcp:11208kB local_pcp:376kB free_cma:0kB
[   81.073846][ T6506] lowmem_reserve[]: 0 0 531 531 531
[   81.076532][ T6506] Node 0 Normal free:66612kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7448kB inactive_anon:0kB active_file:2376kB inactive_file:15640kB unevictable:3536kB writepending:744kB zspages:0kB present:1572868kB managed:543876kB mlocked:0kB bounce:0kB free_pcp:11140kB local_pcp:11004kB free_cma:0kB
[   81.089239][ T6506] lowmem_reserve[]: 0 0 0 0 0
[   81.091191][ T6506] Node 1 Normal free:2841408kB boost:0kB min:56280kB low:70348kB high:84416kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13308kB inactive_anon:0kB active_file:41540kB inactive_file:137636kB unevictable:3536kB writepending:5428kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:61316kB local_pcp:27124kB free_cma:0kB
[   81.109577][ T6506] lowmem_reserve[]: 0 0 0 0 0
[   81.111541][ T6506] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   81.116603][ T6506] Node 0 DMA32: 5*4kB (UM) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 5*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 4*2048kB (UM) 391*4096kB (M) = 1617244kB
[   81.123371][ T6506] Node 0 Normal: 84*4kB (UE) 239*8kB (UE) 410*16kB (UE) 124*32kB (UME) 16*64kB (UM) 13*128kB (UME) 7*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 4*2048kB (UM) 9*4096kB (M) = 66408kB
[   81.142951][ T6506] Node 1 Normal: 200*4kB (M) 196*8kB (UME) 134*16kB (UME) 427*32kB (UM) 158*64kB (UME) 89*128kB (UME) 4*256kB (UM) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (ME) 682*4096kB (M) = 2841344kB
[   81.176111][ T6506] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.179619][ T6506] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.183239][ T6506] 51729 total pagecache pages
[   81.185253][ T6506] 0 pages in swap cache
[   81.187010][ T6506] Free swap  = 124996kB
[   81.188550][ T6506] Total swap = 124996kB
[   81.191464][ T6506] 1834877 pages RAM
[   81.193563][ T6506] 0 pages HighMem/MovableOnly
[   81.196356][ T6506] 389280 pages reserved
[   81.198336][ T6506] 0 pages cma reserved
[   81.454196][ T6523] netlink: 'syz.1.275': attribute type 10 has an invalid length.
[   81.467594][ T6525] __nla_validate_parse: 2 callbacks suppressed
[   81.467653][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.279'.
[   81.467886][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.279'.
[   81.745125][ T6528] netlink: 45 bytes leftover after parsing attributes in process `syz.0.280'.
[   82.125571][ T6523] team0: Port device geneve1 added
[   82.166939][ T6523] syz.1.275 (6523) used greatest stack depth: 19624 bytes left
[   82.198256][ T6540] netlink: 'syz.0.286': attribute type 2 has an invalid length.
[   83.362547][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'.
[   83.366346][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'.
[   83.985922][ T6613] netlink: zone id is out of range
[   83.987920][ T6613] netlink: zone id is out of range
[   83.990064][ T6613] netlink: zone id is out of range
[   83.992152][ T6613] netlink: zone id is out of range
[   84.133246][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'.
[   84.160523][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'.
[   84.189104][ T6624] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   84.192083][ T6624] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   84.556827][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'.
[   84.622355][ T6629] netlink: 60 bytes leftover after parsing attributes in process `syz.1.323'.
[   84.776414][ T6635] netlink: 60 bytes leftover after parsing attributes in process `syz.1.323'.
[   86.047684][ T6674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.057428][ T6676] 0: renamed from batadv_slave_1 (while UP)
[   86.267684][ T5865] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[   86.267743][ T5865] Bluetooth: unknown link type 110
[   86.272764][ T5865] Bluetooth: hci2: connection err: -111
[   86.441961][ T6702] openvswitch: netlink: IP tunnel TTL not specified.
[   86.768787][ T6712] netlink: 'syz.0.351': attribute type 39 has an invalid length.
[   86.935764][ T6718] __nla_validate_parse: 7 callbacks suppressed
[   86.945852][ T6718] netlink: 132 bytes leftover after parsing attributes in process `syz.1.354'.
[   87.089179][   T10] cfg80211: failed to load regulatory.db
[   87.361722][ T6748] netlink: 'syz.1.367': attribute type 5 has an invalid length.
[   87.673389][ T6763] netlink: 22 bytes leftover after parsing attributes in process `syz.0.374'.
[   87.725565][ T6767] netlink: 'syz.0.376': attribute type 5 has an invalid length.
[   88.215711][ T6774] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.427608][ T6784] m1Ie5n: entered promiscuous mode
[   89.710592][ T5865] Bluetooth: hci2: Unable to find connection for big 0x00
[   90.347480][ T6849] netlink: 'syz.0.402': attribute type 10 has an invalid length.
[   90.476278][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'.
[   90.919449][ T6849] team0: Port device geneve1 added
[   91.076773][ T6867] netlink: 'syz.2.412': attribute type 21 has an invalid length.
[   91.079992][ T6867] netlink: 164 bytes leftover after parsing attributes in process `syz.2.412'.
[   91.155436][ T6871] netlink: 'syz.1.414': attribute type 1 has an invalid length.
[   92.057537][ T6921] netlink: 'syz.2.431': attribute type 1 has an invalid length.
[   92.108253][ T6923] netlink: 'syz.1.432': attribute type 31 has an invalid length.
[   92.134142][ T6921] netlink: 80 bytes leftover after parsing attributes in process `syz.2.431'.
[   92.138951][ T6921] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   92.509528][ T6946] netlink: 'syz.1.443': attribute type 32 has an invalid length.
[   93.270398][ T6968] IPv6: NLM_F_CREATE should be specified when creating new route
[   93.420579][ T6977] netlink: 'syz.2.455': attribute type 4 has an invalid length.
[   93.486246][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.520191][ T6986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.460'.
[   93.523139][ T6986] netlink: 43 bytes leftover after parsing attributes in process `syz.1.460'.
[   93.531303][ T6986] netlink: 'syz.1.460': attribute type 5 has an invalid length.
[   93.533928][ T6986] netlink: 43 bytes leftover after parsing attributes in process `syz.1.460'.
[   93.569804][ T6988] netlink: 80 bytes leftover after parsing attributes in process `syz.0.461'.
[   93.573395][ T6988] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   93.884761][ T7010] netlink: 'syz.1.471': attribute type 1 has an invalid length.
[   93.977994][ T7014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.474'.
[   94.076775][ T7024] netlink: 'syz.1.479': attribute type 1 has an invalid length.
[   94.079321][ T7024] netlink: 'syz.1.479': attribute type 3 has an invalid length.
[   94.082106][ T7024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.479'.
[   94.091871][ T7026] netlink: 830 bytes leftover after parsing attributes in process `syz.2.480'.
[   95.133009][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'.
[   95.138643][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'.
[   95.614504][ T7102] netlink: 'syz.0.513': attribute type 10 has an invalid length.
[   95.637805][ T7102] team0: Device ipvlan1 failed to register rx_handler
[   97.126603][ T7149] syzkaller0: entered allmulticast mode
[   97.267114][ T7167] netlink: 'syz.0.540': attribute type 3 has an invalid length.
[   97.270777][ T7167] __nla_validate_parse: 9 callbacks suppressed
[   97.270791][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.540'.
[   97.611354][ T7193] netlink: 'syz.0.553': attribute type 4 has an invalid length.
[   97.695424][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'.
[   97.700685][ T7202] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   98.148270][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'.
[   98.285727][ T7240] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.575'.
[   98.646710][ T7267] netlink: 44 bytes leftover after parsing attributes in process `syz.1.587'.
[   99.136406][ T7283] netlink: 'syz.1.595': attribute type 2 has an invalid length.
[   99.138840][ T7283] netlink: 'syz.1.595': attribute type 9 has an invalid length.
[   99.141504][ T7283] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.595'.
[   99.167583][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'.
[   99.856613][ T7298] delete_channel: no stack
[   99.912916][ T7292] delete_channel: no stack
[  101.103870][ T7331] netlink: 'syz.2.617': attribute type 21 has an invalid length.
[  101.107630][ T7331] netlink: 132 bytes leftover after parsing attributes in process `syz.2.617'.
[  101.271353][ T7343] netlink: 116 bytes leftover after parsing attributes in process `syz.0.623'.
[  101.804685][ T7372] netlink: 'syz.1.636': attribute type 5 has an invalid length.
[  101.811272][ T7372] netlink: 176 bytes leftover after parsing attributes in process `syz.1.636'.
[  101.928135][ T7379] netlink: zone id is out of range
[  101.930239][ T7379] netlink: zone id is out of range
[  101.932307][ T7379] netlink: zone id is out of range
[  101.934394][ T7379] netlink: zone id is out of range
[  101.937120][ T7379] netlink: zone id is out of range
[  101.939245][ T7379] netlink: zone id is out of range
[  101.941332][ T7379] netlink: zone id is out of range
[  101.944010][ T7379] netlink: zone id is out of range
[  101.954067][ T7379] netlink: zone id is out of range
[  101.995079][ T7383] netlink: 'syz.1.641': attribute type 7 has an invalid length.
[  103.332256][ T7453] netlink: 'syz.2.672': attribute type 21 has an invalid length.
[  103.335318][ T7453] IPv6: NLM_F_CREATE should be specified when creating new route
[  107.034227][ T5865] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  107.367919][ T7567] __nla_validate_parse: 1 callbacks suppressed
[  107.367941][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.1.709'.
[  107.378125][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.1.709'.
[  107.382228][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.1.709'.
[  108.113263][ T7626] delete_channel: no stack
[  108.306821][ T7643] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.727'.
[  108.315910][ T7643] net_ratelimit: 79 callbacks suppressed
[  108.315918][ T7643] netlink: Conntrack attr has 4 unknown bytes
[  111.650580][ T6414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.761059][ T7701] netlink: 'syz.0.753': attribute type 1 has an invalid length.
[  111.775761][ T7701] netlink: 'syz.0.753': attribute type 2 has an invalid length.
[  112.080528][ T7720] wg2: entered promiscuous mode
[  112.082531][ T7720] wg2: entered allmulticast mode
[  112.256317][ T6414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.320075][ T5865] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  112.452214][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'.
[  112.455118][ T7733] openvswitch: netlink: Missing key (keys=40, expected=80)
[  112.465115][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.469662][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.472417][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.475671][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.479856][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.603518][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.773'.
[  112.618507][ T7744] netlink: 56 bytes leftover after parsing attributes in process `syz.1.773'.
[  112.672728][ T7734] chnl_net:caif_netlink_parms(): no params data found
[  112.713841][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.716783][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.720072][ T7734] bridge_slave_0: entered allmulticast mode
[  112.723251][ T7734] bridge_slave_0: entered promiscuous mode
[  112.727828][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.730787][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.733507][ T7734] bridge_slave_1: entered allmulticast mode
[  112.736875][ T7734] bridge_slave_1: entered promiscuous mode
[  112.752892][ T7734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.757967][ T7734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.774057][ T7734] team0: Port device team_slave_0 added
[  112.777531][ T7734] team0: Port device team_slave_1 added
[  112.790764][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.793067][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.802461][ T7734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.806893][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.808953][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.817220][ T7734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.841176][ T7734] hsr_slave_0: entered promiscuous mode
[  112.843534][ T7734] hsr_slave_1: entered promiscuous mode
[  112.847413][ T7734] debugfs: 'hsr0' already exists in 'hsr'
[  112.849310][ T7734] Cannot create hsr debugfs directory
[  112.954672][ T7734] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  113.770808][ T7734] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  113.782074][ T7734] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  113.788904][ T7734] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  113.879962][ T7734] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.893340][ T7734] 8021q: adding VLAN 0 to HW filter on device team0
[  113.899903][ T2091] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.902150][ T2091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.909006][ T2091] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.911261][ T2091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.122456][ T7734] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.189213][ T7734] veth0_vlan: entered promiscuous mode
[  114.201184][ T7734] veth1_vlan: entered promiscuous mode
[  114.245666][ T7734] veth0_macvtap: entered promiscuous mode
[  114.251401][ T7734] veth1_macvtap: entered promiscuous mode
[  114.271717][ T7734] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.287862][ T7734] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.293736][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.298248][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.526148][ T5865] Bluetooth: hci1: command tx timeout
[  114.638420][ T7798] netlink: 68 bytes leftover after parsing attributes in process `syz.1.791'.
[  115.065154][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.078069][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.208289][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.210805][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.226970][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.229645][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.445299][ T7814] netlink: 'syz.3.797': attribute type 10 has an invalid length.
[  115.472708][ T7814] team0: Port device dummy0 added
[  115.486939][ T7814] netlink: 'syz.3.797': attribute type 10 has an invalid length.
[  115.617790][   T34] audit: type=1107 audit(1769760032.786:2): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  116.093217][ T7814] team0: Port device dummy0 removed
[  116.133237][ T7814] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  116.528295][ T7816] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  116.534488][ T7816] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  116.606020][ T5865] Bluetooth: hci1: command tx timeout
[  116.744966][ T7819] netlink: 'syz.1.800': attribute type 3 has an invalid length.
[  116.752894][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'.
[  116.797499][ T7825] netlink: zone id is out of range
[  116.799544][ T7825] netlink: zone id is out of range
[  116.805938][ T7825] netlink: zone id is out of range
[  116.807755][ T7825] netlink: zone id is out of range
[  116.809683][ T7825] netlink: zone id is out of range
[  116.812007][ T7825] netlink: zone id is out of range
[  116.814037][ T7825] netlink: zone id is out of range
[  116.816764][ T7825] netlink: zone id is out of range
[  116.819055][ T7825] netlink: zone id is out of range
[  116.821101][ T7825] netlink: zone id is out of range
[  116.884661][ T7831] tc_dump_action: action bad kind
[  118.686396][ T5865] Bluetooth: hci1: command tx timeout
[  119.454463][ T7841] sock: sock_timestamping_bind_phc: sock not bind to device
[  119.828255][ T7871] netlink: 7 bytes leftover after parsing attributes in process `syz.2.821'.
[  120.419293][ T7914] netlink: 'syz.2.825': attribute type 10 has an invalid length.
[  120.447918][ T7914] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.465012][ T7914] team0: Port device bond0 added
[  120.766714][ T5865] Bluetooth: hci1: command tx timeout
[  121.319518][ T7952] xt_HMARK: spi-set and port-set can't be combined
[  121.395015][ T7957] netlink: 180 bytes leftover after parsing attributes in process `syz.1.840'.
[  121.401785][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'.
[  124.211610][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'.
[  124.226110][ T7967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.844'.
[  124.229115][ T7967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.844'.
[  124.845969][    C1] net_ratelimit: 24 callbacks suppressed
[  124.845982][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.090993][ T8019] netlink: 'syz.1.860': attribute type 1 has an invalid length.
[  126.172445][ T8028] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.862'.
[  126.570442][ T8055] netlink: 'syz.1.876': attribute type 16 has an invalid length.
[  126.573646][ T8055] netlink: 152 bytes leftover after parsing attributes in process `syz.1.876'.
[  126.829006][ T8067] netlink: 60 bytes leftover after parsing attributes in process `syz.2.881'.
[  126.865883][ T8067] netlink: 60 bytes leftover after parsing attributes in process `syz.2.881'.
[  127.978897][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  127.982847][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.987694][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.992261][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.997061][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  128.196941][ T8100] chnl_net:caif_netlink_parms(): no params data found
[  128.317791][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.320963][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.324092][ T8100] bridge_slave_0: entered allmulticast mode
[  128.328837][ T8100] bridge_slave_0: entered promiscuous mode
[  128.333915][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.337308][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.340432][ T8100] bridge_slave_1: entered allmulticast mode
[  128.344390][ T8100] bridge_slave_1: entered promiscuous mode
[  128.376625][ T8100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.383365][ T8100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.414297][ T8100] team0: Port device team_slave_0 added
[  128.420389][ T8100] team0: Port device team_slave_1 added
[  128.452538][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.455524][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  128.466434][ T8100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.472717][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.475672][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  128.485116][ T8100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.535171][ T8100] hsr_slave_0: entered promiscuous mode
[  128.538960][ T8100] hsr_slave_1: entered promiscuous mode
[  128.542020][ T8100] debugfs: 'hsr0' already exists in 'hsr'
[  128.544460][ T8100] Cannot create hsr debugfs directory
[  128.767298][ T8100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.862420][ T8100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.923757][ T8100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.983765][ T8100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.070314][ T8118] netlink: 1 bytes leftover after parsing attributes in process `syz.1.899'.
[  129.122147][ T8100] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  129.138307][ T8100] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  129.143597][ T8100] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  129.150939][ T8100] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  129.218286][ T8100] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.226817][ T8100] 8021q: adding VLAN 0 to HW filter on device team0
[  129.231750][ T4869] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.234006][ T4869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.241933][ T4869] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.244773][ T4869] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.340681][ T8100] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.362959][ T8100] veth0_vlan: entered promiscuous mode
[  129.368052][ T8100] veth1_vlan: entered promiscuous mode
[  129.381667][ T8100] veth0_macvtap: entered promiscuous mode
[  129.397517][ T8100] veth1_macvtap: entered promiscuous mode
[  129.408739][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.427901][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.434637][ T5894] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.444795][ T5894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.448832][ T5894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.452851][ T5894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.537755][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.540259][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.570625][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.573094][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.677971][ T8137] netlink: 132 bytes leftover after parsing attributes in process `syz.2.902'.
[  130.054354][ T5865] Bluetooth: hci0: command tx timeout
[  130.452455][ T8171] syz.1.918 uses obsolete (PF_INET,SOCK_PACKET)
[  130.563256][ T8174] syzkaller0: entered promiscuous mode
[  130.565673][ T8174] syzkaller0: entered allmulticast mode
[  131.476853][ T8177] delete_channel: no stack
[  131.979896][ T8195] netlink: 'syz.2.928': attribute type 3 has an invalid length.
[  132.126797][ T5865] Bluetooth: hci0: command tx timeout
[  132.299798][ T8204] netlink: 'syz.2.931': attribute type 3 has an invalid length.
[  132.302704][ T8204] netlink: 132 bytes leftover after parsing attributes in process `syz.2.931'.
[  134.208619][ T5865] Bluetooth: hci0: command tx timeout
[  134.985665][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  134.991912][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  134.995168][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  134.999202][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  135.002161][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  135.182646][ T8212] chnl_net:caif_netlink_parms(): no params data found
[  135.233035][ T8227] netlink: 'syz.2.939': attribute type 7 has an invalid length.
[  135.282756][ T8212] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.285200][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.289557][ T8212] bridge_slave_0: entered allmulticast mode
[  135.292787][ T8212] bridge_slave_0: entered promiscuous mode
[  135.297352][ T8212] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.300278][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.303104][ T8212] bridge_slave_1: entered allmulticast mode
[  135.306046][ T8212] bridge_slave_1: entered promiscuous mode
[  135.324044][ T8212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.329305][ T8212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.349202][ T8212] team0: Port device team_slave_0 added
[  135.353151][ T8212] team0: Port device team_slave_1 added
[  135.370781][ T8212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.373447][ T8212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.383035][ T8212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.387837][ T8212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.390072][ T8212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.400915][ T8212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.438859][ T8212] hsr_slave_0: entered promiscuous mode
[  135.441320][ T8212] hsr_slave_1: entered promiscuous mode
[  135.443576][ T8212] debugfs: 'hsr0' already exists in 'hsr'
[  135.445383][ T8212] Cannot create hsr debugfs directory
[  135.468446][ T8237] netlink: 68 bytes leftover after parsing attributes in process `syz.2.941'.
[  135.636311][ T8212] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  135.651324][ T8212] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  135.658938][ T8212] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  135.664472][ T8212] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  135.676756][ T8248] netlink: 80 bytes leftover after parsing attributes in process `syz.1.947'.
[  135.682952][ T8248] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  135.749409][ T5894] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.804692][ T5894] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.881448][ T5894] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.902600][ T8266] netlink: 763 bytes leftover after parsing attributes in process `syz.2.951'.
[  135.915368][ T8212] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.935186][ T5894] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.965660][ T8212] 8021q: adding VLAN 0 to HW filter on device team0
[  135.973633][  T280] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.976060][  T280] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.984925][  T280] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.987310][  T280] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.158456][ T8264] delete_channel: no stack
[  136.161660][ T5894] bridge_slave_1: left allmulticast mode
[  136.164417][ T5894] bridge_slave_1: left promiscuous mode
[  136.169163][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.191279][ T5894] bridge_slave_0: left allmulticast mode
[  136.193624][ T5894] bridge_slave_0: left promiscuous mode
[  136.206361][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.287381][ T5870] Bluetooth: hci0: command tx timeout
[  136.838710][ T5894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.856428][ T5894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.874096][ T5894] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  136.889315][ T5894] bond0 (unregistering): Released all slaves
[  137.135988][ T5870] Bluetooth: hci3: command tx timeout
[  137.523248][ T8306] netlink: 'syz.2.968': attribute type 13 has an invalid length.
[  137.621508][ T8309] syz.1.969 (8309) used greatest stack depth: 18000 bytes left
[  137.773067][ T8330] netlink: 422 bytes leftover after parsing attributes in process `syz.1.973'.
[  137.784027][ T8330] bond0: vlans aren't supported yet for dev_uc|mc_add()
[  137.792023][ T8212] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.867637][ T5894] hsr_slave_0: left promiscuous mode
[  137.872478][ T5894] hsr_slave_1: left promiscuous mode
[  137.875037][ T5894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.878045][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.881229][ T5894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.883645][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.893280][ T5894] veth1_macvtap: left promiscuous mode
[  137.895461][ T5894] veth0_macvtap: left promiscuous mode
[  137.897827][ T5894] veth1_vlan: left promiscuous mode
[  137.899942][ T5894] veth0_vlan: left promiscuous mode
[  138.012836][ T8340] netlink: 'syz.2.976': attribute type 11 has an invalid length.
[  138.017028][ T8340] netlink: 140 bytes leftover after parsing attributes in process `syz.2.976'.
[  138.280370][ T5894] team0 (unregistering): Port device team_slave_1 removed
[  138.303131][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  138.312869][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  138.319176][ T5894] team0 (unregistering): Port device team_slave_0 removed
[  138.771909][ T8356] netlink: 'syz.2.979': attribute type 7 has an invalid length.
[  138.807933][ T8360] netlink: 'syz.1.981': attribute type 6 has an invalid length.
[  138.814540][ T8212] veth0_vlan: entered promiscuous mode
[  138.840243][ T8212] veth1_vlan: entered promiscuous mode
[  138.875384][ T8212] veth0_macvtap: entered promiscuous mode
[  138.884604][ T8212] veth1_macvtap: entered promiscuous mode
[  138.905750][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.918480][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'.
[  138.922687][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'.
[  138.949929][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.968116][ T5915] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.972912][ T5915] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.984979][ T5915] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.992841][ T5915] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.092648][ T4121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.095163][ T4121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.126489][  T293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.129454][  T293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.134095][ T8379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.986'.
[  139.178545][ T5870] Bluetooth: hci3: command tx timeout
[  139.214723][ T8388] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.989'.
[  139.242569][ T8391] netlink: 4432 bytes leftover after parsing attributes in process `syz.1.990'.
[  139.523053][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.527041][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.533244][ T8405] bridge0: entered allmulticast mode
[  140.385233][ T8413] IPv6: Can't replace route, no match found
[  140.724278][ T8429] netlink: 822 bytes leftover after parsing attributes in process `syz.1.1006'.
[  140.728955][ T8429] bridge: RTM_NEWNEIGH with unconfigured vlan 265 on bridge0
[  141.281957][ T5870] Bluetooth: hci3: command tx timeout
[  141.734856][ T8481] netlink: 'syz.4.1029': attribute type 10 has an invalid length.
[  141.748309][ T8481] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  141.908459][ T8484] netlink: 'syz.4.1030': attribute type 21 has an invalid length.
[  141.912381][ T8484] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1030'.
[  141.918588][ T8484] netlink: 'syz.4.1030': attribute type 4 has an invalid length.
[  141.998130][ T8463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.787339][ T8532] netlink: 'syz.1.1052': attribute type 23 has an invalid length.
[  142.917707][ T8546] netlink: 'syz.2.1058': attribute type 18 has an invalid length.
[  143.108191][ T8555] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1063'.
[  143.212728][ T8566] netlink: 'syz.1.1068': attribute type 23 has an invalid length.
[  143.327922][ T5870] Bluetooth: hci3: command tx timeout
[  143.440368][ T8582] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1076'.
[  146.481184][ T8597] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1080'.
[  146.524093][ T8601] netlink: 720 bytes leftover after parsing attributes in process `syz.4.1082'.
[  146.812909][ T8621] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  146.896455][ T8625] delete_channel: no stack
[  146.898147][ T8625] delete_channel: no stack
[  147.313678][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.379560][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.437216][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.493616][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  147.496726][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  147.510024][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.510772][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  147.518906][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  147.521555][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  147.652148][   T12] bridge_slave_1: left allmulticast mode
[  147.654068][   T12] bridge_slave_1: left promiscuous mode
[  147.656589][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.660334][   T12] bridge_slave_0: left allmulticast mode
[  147.662105][   T12] bridge_slave_0: left promiscuous mode
[  147.666453][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.968310][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.983353][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.994867][   T12] bond0 (unregistering): Released all slaves
[  148.200870][ T8699] syzkaller0: entered promiscuous mode
[  148.203029][ T8699] syzkaller0: entered allmulticast mode
[  148.212307][ T8678] chnl_net:caif_netlink_parms(): no params data found
[  148.840158][ T8724] netlink: 'syz.4.1118': attribute type 2 has an invalid length.
[  148.843532][ T8724] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1118'.
[  149.694269][ T5865] Bluetooth: hci0: command tx timeout
[  150.572460][   T12] hsr_slave_0: left promiscuous mode
[  150.588010][   T12] hsr_slave_1: left promiscuous mode
[  150.598402][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.601414][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.608697][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.611392][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.640443][   T12] veth1_macvtap: left promiscuous mode
[  150.642275][   T12] veth0_macvtap: left promiscuous mode
[  150.644085][   T12] veth1_vlan: left promiscuous mode
[  150.654408][   T12] veth0_vlan: left promiscuous mode
[  151.275191][ T8750] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1128'.
[  151.278358][ T8750] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1128'.
[  151.304952][   T12] team0 (unregistering): Port device team_slave_1 removed
[  151.340647][   T12] team0 (unregistering): Port device team_slave_0 removed
[  151.730502][ T5865] Bluetooth: hci0: command tx timeout
[  151.761171][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.763423][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.765725][ T8678] bridge_slave_0: entered allmulticast mode
[  151.774265][ T8678] bridge_slave_0: entered promiscuous mode
[  151.778019][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.780307][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.782614][ T8678] bridge_slave_1: entered allmulticast mode
[  151.785224][ T8678] bridge_slave_1: entered promiscuous mode
[  151.828181][ T8678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.844065][ T8678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.905748][ T8678] team0: Port device team_slave_0 added
[  151.910861][ T8678] team0: Port device team_slave_1 added
[  151.957287][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.959636][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  151.971868][ T8678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.979114][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.981437][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  151.990290][ T8678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.025173][ T8678] hsr_slave_0: entered promiscuous mode
[  152.027776][ T8678] hsr_slave_1: entered promiscuous mode
[  152.030017][ T8678] debugfs: 'hsr0' already exists in 'hsr'
[  152.031934][ T8678] Cannot create hsr debugfs directory
[  152.417985][ T8778] netlink: 'syz.4.1134': attribute type 2 has an invalid length.
[  152.430081][ T8776] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1133'.
[  152.446990][ T8778] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1134'.
[  152.456597][ T8778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1134'.
[  152.622204][ T8778] lo speed is unknown, defaulting to 1000
[  152.645396][ T8778] lo speed is unknown, defaulting to 1000
[  153.102189][ T8778] lo speed is unknown, defaulting to 1000
[  153.176811][ T8778] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  153.268289][ T8678] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  153.277447][ T8778] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  153.286819][ T8678] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  153.308379][ T8678] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  153.319349][ T8678] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  153.342208][ T8778] lo speed is unknown, defaulting to 1000
[  153.353874][ T8778] lo speed is unknown, defaulting to 1000
[  153.357980][ T8778] lo speed is unknown, defaulting to 1000
[  153.362841][ T8778] lo speed is unknown, defaulting to 1000
[  153.365367][ T8778] lo speed is unknown, defaulting to 1000
[  153.420521][ T8834] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1147'.
[  153.444540][ T8678] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.479002][ T8678] 8021q: adding VLAN 0 to HW filter on device team0
[  153.498171][ T4731] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.500637][ T4731] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.513265][ T4731] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.516367][ T4731] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.686714][ T8851] netlink: 'syz.1.1151': attribute type 46 has an invalid length.
[  153.744880][ T8678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.797872][ T8678] veth0_vlan: entered promiscuous mode
[  153.806990][ T5865] Bluetooth: hci0: command tx timeout
[  153.807086][ T8678] veth1_vlan: entered promiscuous mode
[  153.837909][ T8678] veth0_macvtap: entered promiscuous mode
[  153.842108][ T8678] veth1_macvtap: entered promiscuous mode
[  153.859288][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.863809][ T8863] xt_socket: unknown flags 0x50
[  153.869336][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.907280][ T5894] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.910693][ T5894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.913571][ T5894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.945056][ T8869] nbd: socks must be embedded in a SOCK_ITEM attr
[  153.949387][ T5894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.041864][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.051332][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.078341][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.080847][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.129024][ T8880] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1103'.
[  154.132764][ T8880] netlink: 'syz.2.1103': attribute type 3 has an invalid length.
[  155.887872][ T5865] Bluetooth: hci0: command tx timeout
[  157.229768][ T8922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.288009][ T8960] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1183'.
[  158.966313][ T8969] netlink: 'syz.4.1187': attribute type 10 has an invalid length.
[  163.786092][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 5628040574 wd_nsec: 5628040606
[  163.910611][ T8969] team0: Device vxcan1 is of different type
[  163.993913][ T8971] netlink: 'syz.4.1189': attribute type 1 has an invalid length.
[  164.044387][ T8976] netlink: 1104 bytes leftover after parsing attributes in process `syz.2.1192'.
[  164.075008][ T8978] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  164.353860][ T8982] syzkaller0: entered promiscuous mode
[  164.358004][ T8982] syzkaller0: entered allmulticast mode
[  164.380362][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1196'.
[  164.434122][ T8992] openvswitch: netlink: Missing valid actions attribute.
[  164.439145][ T8992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.637820][ T5865] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[  179.377017][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  179.380132][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  179.382690][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  179.385283][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  179.387879][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.413244][ T5865] Bluetooth: hci1: command tx timeout
[  181.738320][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.769553][ T5220] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.773118][ T5220] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.777490][ T5220] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.780923][ T5220] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  181.784152][   T56] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  181.801967][   T56] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  181.815668][   T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  181.826961][   T56] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  181.830972][   T56] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.488800][   T56] Bluetooth: hci1: command tx timeout
[  183.885884][ T5870] Bluetooth: hci4: command tx timeout
[  183.888923][   T56] Bluetooth: hci5: command tx timeout
[  185.711939][   T56] Bluetooth: hci1: command tx timeout
[  185.965865][ T5220] Bluetooth: hci4: command tx timeout
[  185.968165][   T56] Bluetooth: hci5: command tx timeout
[  186.445915][   T56] Bluetooth: hci2: command 0x0406 tx timeout
[  187.725874][   T56] Bluetooth: hci1: command tx timeout
[  188.065869][ T5220] Bluetooth: hci4: command tx timeout
[  188.067641][   T56] Bluetooth: hci5: command tx timeout
[  189.486644][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.126051][ T5220] Bluetooth: hci4: command tx timeout
[  190.127832][   T56] Bluetooth: hci5: command tx timeout
[  198.594648][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 22367550466 wd_nsec: 22367550971
[  215.289656][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  215.292312][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  240.169778][ T5220] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  240.172893][ T5220] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  240.175400][ T5220] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  240.179577][ T5220] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  240.182337][ T5220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  242.474334][ T5865] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  242.478773][ T5865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  242.482168][ T5865] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  242.486858][ T5865] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  242.490367][ T5865] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  242.594631][ T9059] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  242.599343][ T9059] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  242.603091][ T9059] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  242.607442][ T9059] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  242.616616][ T9059] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  271.215780][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  271.218565][    C0] rcu: 	0-....: (10500 ticks this GP) idle=f0bc/1/0x4000000000000000 softirq=27265/27268 fqs=4917
[  271.223861][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  271.226487][    C0] rcu: 	 number:   960283          7            0
[  271.229114][    C0] rcu: 	cputime:    36416      16073           51   ==> 52500(ms)
[  271.232249][    C0] rcu: 	(t=10502 jiffies g=20077 q=2526 ncpus=2)
[  271.234746][    C0] CPU: 0 UID: 0 PID: 9024 Comm: syz.2.1211 Not tainted syzkaller #0 PREEMPT(full) 
[  271.234761][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.234768][    C0] RIP: 0010:unwind_next_frame+0x47c/0x23c0
[  271.234790][    C0] Code: 48 c7 c1 e0 cc 1b 8e 31 d2 84 c0 48 0f 45 d1 48 89 15 38 fd 60 11 48 85 d2 0f 84 40 02 00 00 4c 8d 62 04 4c 8d 6a 05 4c 89 e0 <48> c1 e8 03 0f b6 04 28 84 c0 0f 85 66 18 00 00 4c 89 e8 48 c1 e8
[  271.234800][    C0] RSP: 0018:ffffc90000006e58 EFLAGS: 00000286
[  271.234812][    C0] RAX: ffffffff9059bbb0 RBX: ffffffff8fe09ac4 RCX: ffffffff8fe09acc
[  271.234820][    C0] RDX: ffffffff9059bbac RSI: ffffffff9059bb76 RDI: ffffffff8be74020
[  271.234828][    C0] RBP: dffffc0000000000 R08: 0000000000000021 R09: ffffffff8e35a3a0
[  271.234836][    C0] R10: ffffc90000006f78 R11: ffffffff81ae5bd0 R12: ffffffff9059bbb0
[  271.234844][    C0] R13: ffffffff9059bbb1 R14: ffffc90000006f28 R15: ffffffff8fe09ac8
[  271.234852][    C0] FS:  00007feaad7166c0(0000) GS:ffff88818e328000(0000) knlGS:0000000000000000
[  271.234861][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  271.234869][    C0] CR2: 00007f7b156adff8 CR3: 00000001a49bc000 CR4: 00000000000006f0
[  271.234905][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  271.234913][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  271.234920][    C0] Call Trace:
[  271.234927][    C0]  <IRQ>
[  271.234939][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  271.234954][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  271.234967][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  271.234981][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  271.234999][    C0]  arch_stack_walk+0x11b/0x150
[  271.235018][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  271.235032][    C0]  stack_trace_save+0xa9/0x100
[  271.235049][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  271.235074][    C0]  ? kvm_clock_get_cycles+0x47/0x60
[  271.235135][    C0]  kasan_save_track+0x3e/0x80
[  271.235149][    C0]  ? kasan_save_track+0x3e/0x80
[  271.235159][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  271.235170][    C0]  ? __kmalloc_noprof+0x40c/0x7e0
[  271.235181][    C0]  ? cfg80211_inform_single_bss_data+0x934/0x1ab0
[  271.235195][    C0]  ? cfg80211_inform_bss_data+0x233/0x3bb0
[  271.235206][    C0]  ? cfg80211_inform_bss_frame_data+0x3c7/0x710
[  271.235218][    C0]  ? ieee80211_bss_info_update+0x794/0xa40
[  271.235231][    C0]  ? ieee80211_scan_rx+0x593/0xa20
[  271.235241][    C0]  ? ieee80211_rx_list+0x2508/0x3050
[  271.235255][    C0]  ? ieee80211_rx_napi+0x1b1/0x3e0
[  271.235267][    C0]  ? ieee80211_handle_queued_frames+0xe8/0x1e0
[  271.235278][    C0]  ? tasklet_action_common+0x2da/0x4b0
[  271.235291][    C0]  ? handle_softirqs+0x22a/0x7c0
[  271.235302][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  271.235311][    C0]  ? irq_exit_rcu+0x9/0x30
[  271.235321][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  271.235338][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  271.235348][    C0]  ? finish_task_switch+0x241/0x920
[  271.235364][    C0]  ? __schedule+0x14f7/0x4fb0
[  271.235378][    C0]  ? preempt_schedule_irq+0x4d/0xa0
[  271.235391][    C0]  ? irqentry_exit+0x597/0x620
[  271.235400][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  271.235436][    C0]  __kasan_kmalloc+0x93/0xb0
[  271.235450][    C0]  __kmalloc_noprof+0x40c/0x7e0
[  271.235462][    C0]  ? cfg80211_inform_single_bss_data+0x934/0x1ab0
[  271.235478][    C0]  cfg80211_inform_single_bss_data+0x934/0x1ab0
[  271.235498][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  271.235534][    C0]  cfg80211_inform_bss_data+0x233/0x3bb0
[  271.235550][    C0]  ? timerqueue_add+0x1d0/0x200
[  271.235566][    C0]  ? ktime_get+0x45/0x200
[  271.235582][    C0]  ? lock_acquire+0x106/0x330
[  271.235602][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  271.235617][    C0]  ? kvm_clock_get_cycles+0x47/0x60
[  271.235632][    C0]  ? ktime_get+0x1d2/0x200
[  271.235649][    C0]  ? lapic_next_event+0x11/0x20
[  271.235661][    C0]  ? clockevents_program_event+0x247/0x350
[  271.235676][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  271.235690][    C0]  ? sched_clock+0x3f/0x60
[  271.235707][    C0]  ? sched_clock_cpu+0x74/0x440
[  271.235724][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  271.235756][    C0]  cfg80211_inform_bss_frame_data+0x3c7/0x710
[  271.235776][    C0]  ieee80211_bss_info_update+0x794/0xa40
[  271.235794][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  271.235820][    C0]  ieee80211_scan_rx+0x593/0xa20
[  271.235837][    C0]  ieee80211_rx_list+0x2508/0x3050
[  271.235856][    C0]  ? sched_clock_cpu+0x74/0x440
[  271.235872][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  271.235886][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  271.235911][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  271.235927][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  271.235940][    C0]  ? ieee80211_rx_napi+0x118/0x3e0
[  271.235957][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  271.235970][    C0]  ieee80211_rx_napi+0x1b1/0x3e0
[  271.235986][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  271.236001][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  271.236017][    C0]  ? skb_dequeue+0x124/0x160
[  271.236036][    C0]  ieee80211_handle_queued_frames+0xe8/0x1e0
[  271.236052][    C0]  tasklet_action_common+0x2da/0x4b0
[  271.236077][    C0]  handle_softirqs+0x22a/0x7c0
[  271.236119][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  271.236136][    C0]  __irq_exit_rcu+0x5f/0x150
[  271.236148][    C0]  irq_exit_rcu+0x9/0x30
[  271.236159][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  271.236175][    C0]  </IRQ>
[  271.236179][    C0]  <TASK>
[  271.236183][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  271.236195][    C0] RIP: 0010:finish_task_switch+0x241/0x920
[  271.236211][    C0] Code: 0f 84 bd 01 00 00 48 85 db 0f 85 e4 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 29 82 e8 09 e8 64 84 37 00 fb 4c 8b 65 c0 <49> 8d bc 24 48 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  271.236220][    C0] RSP: 0018:ffffc900041e7818 EFLAGS: 00000202
[  271.236231][    C0] RAX: 0000000000000279 RBX: 0000000000000000 RCX: 0000000080000001
[  271.236237][    C0] RDX: 0000000000000006 RSI: ffffffff8dad37f0 RDI: ffffffff8be74080
[  271.236245][    C0] RBP: ffffc900041e7870 R08: ffffffff8fced877 R09: 1ffffffff1f9db0e
[  271.236252][    C0] R10: dffffc0000000000 R11: fffffbfff1f9db0f R12: ffff88810db2d7c0
[  271.236260][    C0] R13: dffffc0000000000 R14: ffff88816d720000 R15: ffff88812103b498
[  271.236279][    C0]  ? finish_task_switch+0x23c/0x920
[  271.236300][    C0]  __schedule+0x14f7/0x4fb0
[  271.236317][    C0]  ? perf_trace_preemptirq_template+0xab/0x340
[  271.236347][    C0]  ? trace_irq_disable+0x37/0x100
[  271.236362][    C0]  ? __pfx___schedule+0x10/0x10
[  271.236388][    C0]  preempt_schedule_irq+0x4d/0xa0
[  271.236404][    C0]  irqentry_exit+0x597/0x620
[  271.236419][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  271.236430][    C0] RIP: 0010:perf_install_in_context+0x5db/0x930
[  271.236443][    C0] Code: f5 81 4c 89 f2 b9 01 00 00 00 e8 00 6c c1 ff 89 c3 31 ff 89 c6 e8 b5 39 cd ff 85 db 74 0c e8 6c 35 cd ff 83 fb f5 74 13 eb 47 <e8> 60 35 cd ff 8b 9c 24 98 00 00 00 83 fb f5 75 36 e8 4f 35 cd ff
[  271.236451][    C0] RSP: 0018:ffffc900041e7ba0 EFLAGS: 00000246
[  271.236460][    C0] RAX: ffffffff81f5627b RBX: 0000000000000000 RCX: 0000000000000002
[  271.236467][    C0] RDX: ffff88810db2d7c0 RSI: 0000000000000000 RDI: 0000000000000000
[  271.236474][    C0] RBP: ffffc900041e7cf0 R08: ffffffff8fced877 R09: 1ffffffff1f9db0e
[  271.236481][    C0] R10: dffffc0000000000 R11: fffffbfff1f9db0f R12: 1ffff11021b65afa
[  271.236488][    C0] R13: ffff88810db2d7d4 R14: ffffc900041e7c20 R15: dffffc0000000000
[  271.236501][    C0]  ? perf_install_in_context+0x5cb/0x930
[  271.236526][    C0]  ? __pfx_perf_install_in_context+0x10/0x10
[  271.236538][    C0]  ? __pfx___perf_install_in_context+0x10/0x10
[  271.236559][    C0]  ? anon_inode_getfile+0x106/0x1a0
[  271.236570][    C0]  ? perf_event__header_size+0x168/0x230
[  271.236587][    C0]  __se_sys_perf_event_open+0x192f/0x1d60
[  271.236609][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  271.236629][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  271.236645][    C0]  ? rcu_is_watching+0x15/0xb0
[  271.236664][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  271.236678][    C0]  do_syscall_64+0xe2/0xf80
[  271.236688][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.236699][    C0]  ? trace_irq_disable+0x37/0x100
[  271.236715][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.236726][    C0] RIP: 0033:0x7feaac79acb9
[  271.236738][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  271.236746][    C0] RSP: 002b:00007feaad716028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  271.236757][    C0] RAX: ffffffffffffffda RBX: 00007feaaca15fa0 RCX: 00007feaac79acb9
[  271.236765][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000012c0
[  271.236772][    C0] RBP: 00007feaac808bf7 R08: 0000000000000000 R09: 0000000000000000
[  271.236778][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  271.236785][    C0] R13: 00007feaaca16038 R14: 00007feaaca15fa0 R15: 00007ffcabbc38f8
[  271.236804][    C0]  </TASK>
[  272.558129][    C0] sched: DL replenish lagged too much
