last executing test programs:

17.657137812s ago: executing program 0 (id=1926):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000880)="f47c49e889a3e27cc93ec90fe798", 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

17.465356292s ago: executing program 0 (id=1930):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c0008000800114004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0)

17.405424563s ago: executing program 0 (id=1932):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x7ffffffe}, 0x48)

17.405082936s ago: executing program 1 (id=1933):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r3, 0x24, 0x0, 0x3, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

17.404896581s ago: executing program 0 (id=1934):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000014006b03000000d86e6c1d00028409fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6aee6d700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84)

17.256880549s ago: executing program 1 (id=1938):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080))

16.736517147s ago: executing program 2 (id=1941):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg0\x00', 0x2})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x4000000007ff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x101, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xa, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000300)={'ip6_vti0\x00', 0x600})
socket$kcm(0x2, 0x3, 0x84)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x5282, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x209aa, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x109c8, 0x2e, 0xfffffbff, 0x7, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={<r3=>r2})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r3})
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000580)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x11, 0x25, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r4})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080))

16.474587432s ago: executing program 0 (id=1942):
r0 = socket$kcm(0x2, 0x200000000000004, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
close(r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000804)
setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000040), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

16.342511578s ago: executing program 1 (id=1943):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000)
close(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000140), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc0400"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'cpuset'}, {0x2b, 'pids'}]}, 0x62)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x42, &(0x7f0000000040), 0xcf)

16.341987885s ago: executing program 2 (id=1944):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

16.277110996s ago: executing program 0 (id=1945):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001040)=""/4095, 0xfff}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259aa673f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000f40)={0x3, 0x80, 0xfc, 0xe7, 0xfa, 0x9, 0x0, 0x4, 0x301e4, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x1}, 0x4a11, 0x200000000000007, 0x6, 0x0, 0x80a, 0x7, 0x4, 0x0, 0x8fc, 0x0, 0x3})
r6 = socket$kcm(0x10, 0x3, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})
ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000a80)=r1)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x7, 0x2}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x44, 0x4}, @volatile={0xf, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x30, 0x2e]}}, &(0x7f0000000700)=""/183, 0x49, 0xb7, 0x0, 0x8}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r3], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0x6, <r9=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x9, 0x20, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6921, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x1d}, @ldst={0x3, 0x0, 0x3, 0xa, 0xf633ffa04e149eaf, 0xfffffffffffffffe, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb3}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000200)='syzkaller\x00', 0xb, 0xdc, &(0x7f0000000500)=""/220, 0x41100, 0x58, '\x00', 0x0, @fallback=0x11, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x3, 0x9, 0x0, 0xa8d8}, 0x10, r9, 0xffffffffffffffff, 0x2, &(0x7f0000000900)=[r4, 0xffffffffffffffff, r2, r4, r4], &(0x7f0000000940)=[{0x0, 0x1, 0x9, 0x2}, {0x5, 0x3, 0xa, 0x3}], 0x10, 0x2}, 0x94)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

16.27666121s ago: executing program 1 (id=1946):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.194445169s ago: executing program 1 (id=1947):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000900))

16.194065247s ago: executing program 2 (id=1948):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94)

16.126787729s ago: executing program 1 (id=1949):
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x3040}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
close(r0)
socket$kcm(0x1e, 0x5, 0x0)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r2)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000540), &(0x7f0000000200)}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x10cfa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2a, 0x2, 0x0)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x84, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004700)=""/4074, 0xfea}, {0x0}, {&(0x7f0000000380)=""/38, 0x26}], 0x3}, 0x100)
recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x1a0)

16.074624095s ago: executing program 2 (id=1950):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200004400400e000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0)

16.006198748s ago: executing program 2 (id=1951):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/time\x00')

15.009743635s ago: executing program 2 (id=1952):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081024e81f783db4cb9040a1d080006007c09e8fc55a10a0015000400142603600e1209000f0000000601a8000960040008400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

977.878522ms ago: executing program 32 (id=1945):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001040)=""/4095, 0xfff}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259aa673f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000f40)={0x3, 0x80, 0xfc, 0xe7, 0xfa, 0x9, 0x0, 0x4, 0x301e4, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x1}, 0x4a11, 0x200000000000007, 0x6, 0x0, 0x80a, 0x7, 0x4, 0x0, 0x8fc, 0x0, 0x3})
r6 = socket$kcm(0x10, 0x3, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})
ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000a80)=r1)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x7, 0x2}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x44, 0x4}, @volatile={0xf, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x30, 0x2e]}}, &(0x7f0000000700)=""/183, 0x49, 0xb7, 0x0, 0x8}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r3], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0x6, <r9=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x9, 0x20, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6921, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x1d}, @ldst={0x3, 0x0, 0x3, 0xa, 0xf633ffa04e149eaf, 0xfffffffffffffffe, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb3}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000200)='syzkaller\x00', 0xb, 0xdc, &(0x7f0000000500)=""/220, 0x41100, 0x58, '\x00', 0x0, @fallback=0x11, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x3, 0x9, 0x0, 0xa8d8}, 0x10, r9, 0xffffffffffffffff, 0x2, &(0x7f0000000900)=[r4, 0xffffffffffffffff, r2, r4, r4], &(0x7f0000000940)=[{0x0, 0x1, 0x9, 0x2}, {0x5, 0x3, 0xa, 0x3}], 0x10, 0x2}, 0x94)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

915.85715ms ago: executing program 33 (id=1949):
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x3040}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
close(r0)
socket$kcm(0x1e, 0x5, 0x0)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r2)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000540), &(0x7f0000000200)}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x10cfa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2a, 0x2, 0x0)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x84, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004700)=""/4074, 0xfea}, {0x0}, {&(0x7f0000000380)=""/38, 0x26}], 0x3}, 0x100)
recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x1a0)

0s ago: executing program 34 (id=1952):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081024e81f783db4cb9040a1d080006007c09e8fc55a10a0015000400142603600e1209000f0000000601a8000960040008400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30689' (ED25519) to the list of known hosts.
syzkaller login: [   48.150955][ T5798] cgroup: Unknown subsys name 'net'
[   48.255234][ T5798] cgroup: Unknown subsys name 'cpuset'
[   48.262173][ T5798] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.679516][ T5798] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.481529][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.485925][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.491272][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.501869][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.506040][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.526891][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   59.708887][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.712907][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.716191][ T5831] bridge_slave_0: entered allmulticast mode
[   59.720858][ T5831] bridge_slave_0: entered promiscuous mode
[   59.731022][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.734304][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.737503][ T5831] bridge_slave_1: entered allmulticast mode
[   59.742571][ T5831] bridge_slave_1: entered promiscuous mode
[   59.785454][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.794418][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.807678][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.860135][ T5831] team0: Port device team_slave_0 added
[   59.920818][ T5831] team0: Port device team_slave_1 added
[   59.963277][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.965718][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.974720][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.980109][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.982486][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.992120][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.020662][ T5831] hsr_slave_0: entered promiscuous mode
[   60.023874][ T5831] hsr_slave_1: entered promiscuous mode
[   60.124427][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.131214][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.136473][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.142082][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.161932][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.164460][ T5831] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.167326][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.169837][ T5831] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.201702][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.213968][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.217026][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.225674][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   60.233272][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.235838][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.242912][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.245437][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.268097][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   60.275658][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.355107][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.378692][ T5831] veth0_vlan: entered promiscuous mode
[   60.384436][ T5831] veth1_vlan: entered promiscuous mode
[   60.402203][ T5831] veth0_macvtap: entered promiscuous mode
[   60.406266][ T5831] veth1_macvtap: entered promiscuous mode
[   60.416270][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.424226][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.429443][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.432531][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.435526][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.438478][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.970920][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.975388][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.980351][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.984838][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.989298][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.015324][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.039374][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.043262][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.047719][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.051258][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.104199][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.108219][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.113646][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.120830][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.124118][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.241979][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   61.288679][ T5846] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.342698][ T5846] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.459991][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.463332][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.466704][ T5875] bridge_slave_0: entered allmulticast mode
[   61.475414][ T5875] bridge_slave_0: entered promiscuous mode
[   61.503509][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.506648][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.509564][ T5875] bridge_slave_1: entered allmulticast mode
[   61.512963][ T5875] bridge_slave_1: entered promiscuous mode
[   61.516263][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   61.602750][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.639514][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.710269][ T5882] chnl_net:caif_netlink_parms(): no params data found
[   61.733797][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.736496][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.739246][ T5877] bridge_slave_0: entered allmulticast mode
[   61.744298][ T5877] bridge_slave_0: entered promiscuous mode
[   61.753408][ T5875] team0: Port device team_slave_0 added
[   61.778494][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.782716][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.785938][ T5877] bridge_slave_1: entered allmulticast mode
[   61.790013][ T5877] bridge_slave_1: entered promiscuous mode
[   61.813307][ T5875] team0: Port device team_slave_1 added
[   61.817459][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.851696][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.920456][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.923746][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.934525][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.942313][ T5877] team0: Port device team_slave_0 added
[   61.945359][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.948319][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.961047][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.965937][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.970008][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.973239][ T5882] bridge_slave_0: entered allmulticast mode
[   61.977152][ T5882] bridge_slave_0: entered promiscuous mode
[   61.982575][ T5877] team0: Port device team_slave_1 added
[   61.985173][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.988180][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.991448][ T5882] bridge_slave_1: entered allmulticast mode
[   61.995282][ T5882] bridge_slave_1: entered promiscuous mode
[   62.070826][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.073580][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.085836][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.094523][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.098661][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.102465][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.113250][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.138309][ T5875] hsr_slave_0: entered promiscuous mode
[   62.141761][ T5875] hsr_slave_1: entered promiscuous mode
[   62.145028][ T5875] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.148379][ T5875] Cannot create hsr debugfs directory
[   62.153283][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.235956][ T5882] team0: Port device team_slave_0 added
[   62.263719][ T5877] hsr_slave_0: entered promiscuous mode
[   62.266203][ T5877] hsr_slave_1: entered promiscuous mode
[   62.268674][ T5877] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.273670][ T5877] Cannot create hsr debugfs directory
[   62.277531][ T5882] team0: Port device team_slave_1 added
[   62.323566][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.326367][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.335638][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.365558][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.368535][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.380451][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.481159][ T5882] hsr_slave_0: entered promiscuous mode
[   62.483870][ T5882] hsr_slave_1: entered promiscuous mode
[   62.486234][ T5882] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.488964][ T5882] Cannot create hsr debugfs directory
[   62.632800][ T5846] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.672161][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.682227][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.692554][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.698369][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.746911][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.758643][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   62.766163][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.768765][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.776425][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.778833][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.901337][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.935900][ T5875] veth0_vlan: entered promiscuous mode
[   62.944842][ T5875] veth1_vlan: entered promiscuous mode
[   62.969677][ T5875] veth0_macvtap: entered promiscuous mode
[   62.974752][ T5875] veth1_macvtap: entered promiscuous mode
[   62.986868][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.993449][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.999436][ T5875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.002642][ T5875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.006294][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.010407][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.060476][ T5878] Bluetooth: hci0: command tx timeout
[   63.067075][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.070226][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.095761][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.098680][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.139701][ T5878] Bluetooth: hci1: command tx timeout
[   63.219771][ T5878] Bluetooth: hci2: command tx timeout
[   63.271356][ T5918] netlink: 'syz.1.11': attribute type 10 has an invalid length.
[   63.274615][ T5918] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11'.
[   64.410126][ T5846] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.520261][ T5846] bridge_slave_1: left allmulticast mode
[   64.523238][ T5846] bridge_slave_1: left promiscuous mode
[   64.527381][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.535110][ T5846] bridge_slave_0: left allmulticast mode
[   64.537902][ T5846] bridge_slave_0: left promiscuous mode
[   64.541944][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.839444][ T5846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.845895][ T5846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.852222][ T5846] bond0 (unregistering): Released all slaves
[   64.974286][ T5846] hsr_slave_0: left promiscuous mode
[   64.977392][ T5846] hsr_slave_1: left promiscuous mode
[   64.982650][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.986156][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.991201][ T5846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.994544][ T5846] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.009010][ T5846] veth1_macvtap: left promiscuous mode
[   65.012510][ T5846] veth0_macvtap: left promiscuous mode
[   65.015510][ T5846] veth1_vlan: left promiscuous mode
[   65.018110][ T5846] veth0_vlan: left promiscuous mode
[   65.149410][ T5878] Bluetooth: hci0: command tx timeout
[   65.229374][ T5878] Bluetooth: hci1: command tx timeout
[   65.299387][ T5878] Bluetooth: hci2: command tx timeout
[   65.347099][ T5846] team0 (unregistering): Port device team_slave_1 removed
[   65.383657][ T5846] team0 (unregistering): Port device team_slave_0 removed
[   65.749613][ T5930] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.082041][ T5877] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.092830][ T5877] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.114955][ T5877] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.146297][ T5877] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.233869][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.252747][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.270154][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.281918][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.305333][ T5946] netlink: 'syz.1.18': attribute type 10 has an invalid length.
[   66.315162][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.377476][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.409102][    C1] hrtimer: interrupt took 64731 ns
[   66.480871][ T5946] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   66.583442][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.605822][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   66.616300][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.618859][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.630704][ T5946] syz.1.18 (5946) used greatest stack depth: 17088 bytes left
[   66.650970][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.655719][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.658622][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.726278][ T5882] 8021q: adding VLAN 0 to HW filter on device team0
[   66.757191][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.761154][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.792929][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.796565][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.947838][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.038257][ T5877] veth0_vlan: entered promiscuous mode
[   67.056243][ T5877] veth1_vlan: entered promiscuous mode
[   67.095369][ T5877] veth0_macvtap: entered promiscuous mode
[   67.101795][ T5877] veth1_macvtap: entered promiscuous mode
[   67.121424][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.136424][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.146069][ T5877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.152169][ T5877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.156119][ T5877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.161057][ T5877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.240076][ T5878] Bluetooth: hci0: command tx timeout
[   67.299362][ T5878] Bluetooth: hci1: command tx timeout
[   67.336035][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.344462][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.352061][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.394037][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.397990][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.412743][ T5878] Bluetooth: hci2: command tx timeout
[   67.912368][ T5882] veth0_vlan: entered promiscuous mode
[   67.936278][ T5882] veth1_vlan: entered promiscuous mode
[   67.978709][ T5882] veth0_macvtap: entered promiscuous mode
[   68.003280][ T5882] veth1_macvtap: entered promiscuous mode
[   68.040805][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.070830][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.078231][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.084396][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.087543][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.090987][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.194730][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.207736][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.253701][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.257399][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.321935][ T5878] Bluetooth: hci0: command tx timeout
[   69.389503][ T5878] Bluetooth: hci1: command tx timeout
[   69.461948][ T5878] Bluetooth: hci2: command tx timeout
[   69.570429][ T6039] netlink: 'syz.1.45': attribute type 8 has an invalid length.
[   69.583266][ T6039] netlink: 156 bytes leftover after parsing attributes in process `syz.1.45'.
[   70.045634][ T6061] syz.2.55: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   70.064128][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.2.55 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[   70.064142][ T6061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.064147][ T6061] Call Trace:
[   70.064151][ T6061]  <TASK>
[   70.064155][ T6061]  dump_stack_lvl+0x189/0x250
[   70.064170][ T6061]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.064180][ T6061]  ? __pfx__printk+0x10/0x10
[   70.064192][ T6061]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   70.064202][ T6061]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   70.064214][ T6061]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   70.064225][ T6061]  warn_alloc+0x214/0x310
[   70.064236][ T6061]  ? stack_depot_save_flags+0x429/0x900
[   70.064247][ T6061]  ? __pfx_warn_alloc+0x10/0x10
[   70.064257][ T6061]  ? kasan_save_track+0x4f/0x80
[   70.064268][ T6061]  ? xskq_create+0x56/0x170
[   70.064277][ T6061]  ? xsk_init_queue+0xb0/0x110
[   70.064285][ T6061]  ? xsk_setsockopt+0x4de/0x710
[   70.064294][ T6061]  ? do_sock_setsockopt+0x17c/0x1b0
[   70.064302][ T6061]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   70.064309][ T6061]  ? do_syscall_64+0xfa/0x3b0
[   70.064320][ T6061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.064330][ T6061]  __vmalloc_node_range_noprof+0x125/0x12f0
[   70.064350][ T6061]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   70.064360][ T6061]  ? xskq_create+0x56/0x170
[   70.064370][ T6061]  ? __kasan_kmalloc+0x93/0xb0
[   70.064380][ T6061]  vmalloc_user_noprof+0xad/0xf0
[   70.064388][ T6061]  ? xskq_create+0xbf/0x170
[   70.064397][ T6061]  xskq_create+0xbf/0x170
[   70.064407][ T6061]  xsk_init_queue+0xb0/0x110
[   70.064417][ T6061]  xsk_setsockopt+0x4de/0x710
[   70.064426][ T6061]  ? __pfx_xsk_setsockopt+0x10/0x10
[   70.064436][ T6061]  ? __fget_files+0x2a/0x420
[   70.064445][ T6061]  ? aa_sock_opt_perm+0x74/0x110
[   70.064456][ T6061]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   70.064466][ T6061]  ? __pfx_xsk_setsockopt+0x10/0x10
[   70.064475][ T6061]  do_sock_setsockopt+0x17c/0x1b0
[   70.064485][ T6061]  __x64_sys_setsockopt+0x13f/0x1b0
[   70.064495][ T6061]  do_syscall_64+0xfa/0x3b0
[   70.064504][ T6061]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.064513][ T6061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.064520][ T6061]  ? exc_page_fault+0x9f/0xf0
[   70.064530][ T6061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.064537][ T6061] RIP: 0033:0x7f079818eb69
[   70.064545][ T6061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.064551][ T6061] RSP: 002b:00007f0798fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   70.064560][ T6061] RAX: ffffffffffffffda RBX: 00007f07983b5fa0 RCX: 00007f079818eb69
[   70.064566][ T6061] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[   70.064571][ T6061] RBP: 00007f0798211df1 R08: 0000000000000004 R09: 0000000000000000
[   70.064577][ T6061] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   70.064619][ T6061] R13: 0000000000000000 R14: 00007f07983b5fa0 R15: 00007ffc35243b88
[   70.064631][ T6061]  </TASK>
[   70.064635][ T6061] Mem-Info:
[   70.201339][ T6064] netlink: 'syz.0.56': attribute type 25 has an invalid length.
[   70.211542][ T6061] active_anon:9163 inactive_anon:0 isolated_anon:0
[   70.211542][ T6061]  active_file:931 inactive_file:38221 isolated_file:0
[   70.211542][ T6061]  unevictable:1768 dirty:1405 writeback:0
[   70.211542][ T6061]  slab_reclaimable:9105 slab_unreclaimable:52948
[   70.211542][ T6061]  mapped:19057 shmem:2437 pagetables:975
[   70.211542][ T6061]  sec_pagetables:0 bounce:0
[   70.211542][ T6061]  kernel_misc_reclaimable:0
[   70.211542][ T6061]  free:295836 free_pcp:21149 free_cma:0
[   70.211578][ T6061] Node 0 active_anon:30476kB inactive_anon:0kB active_file:1884kB inactive_file:136344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:59648kB dirty:4600kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8484kB pagetables:2656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   70.211627][ T6061] Node 1 active_anon:6176kB inactive_anon:0kB active_file:1840kB inactive_file:16540kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16580kB dirty:1020kB writeback:0kB shmem:4828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3112kB pagetables:1244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   70.211648][ T6061] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   70.211673][ T6061] lowmem_reserve[]: 0 812 812 812 812
[   70.211692][ T6061] Node 0 DMA32 free:211180kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30476kB inactive_anon:0kB active_file:1884kB inactive_file:136344kB unevictable:3536kB writepending:4600kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:35440kB local_pcp:18292kB free_cma:0kB
[   70.211718][ T6061] lowmem_reserve[]: 0 0 0 0 0
[   70.211736][ T6061] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   70.211759][ T6061] lowmem_reserve[]: 0 0 854 854 854
[   70.211778][ T6061] Node 1 Normal free:498312kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6176kB inactive_anon:0kB active_file:1840kB inactive_file:16540kB unevictable:3536kB writepending:1020kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:49040kB local_pcp:26444kB free_cma:0kB
[   70.211811][ T6061] lowmem_reserve[]: 0 0 0 0 0
[   70.211830][ T6061] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   70.211896][ T6061] Node 0 DMA32: 2*4kB (UE) 1*8kB (U) 1*16kB (E) 281*32kB (UE) 37*64kB (U) 3*128kB (UE) 3*256kB (UME) 2*512kB (UM) 3*1024kB (UME) 5*2048kB (UM) 45*4096kB (M) = 211200kB
[   70.211976][ T6061] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   70.212056][ T6061] Node 1 Normal: 2*4kB (E) 2*8kB (UM) 1*16kB (E) 5*32kB (ME) 2*64kB (UE) 0*128kB 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (M) 120*4096kB (M) = 498248kB
[   70.212135][ T6061] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   70.212142][ T6061] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   70.212150][ T6061] 41589 total pagecache pages
[   70.212153][ T6061] 0 pages in swap cache
[   70.212158][ T6061] Free swap  = 124996kB
[   70.212161][ T6061] Total swap = 124996kB
[   70.212165][ T6061] 786301 pages RAM
[   70.212168][ T6061] 0 pages HighMem/MovableOnly
[   70.212171][ T6061] 241075 pages reserved
[   70.212174][ T6061] 0 pages cma reserved
[   70.653371][ T6064] netlink: 'syz.0.56': attribute type 28 has an invalid length.
[   70.856965][ T6071] netlink: 'syz.1.58': attribute type 37 has an invalid length.
[   70.880045][ T6073] netlink: 'syz.0.60': attribute type 6 has an invalid length.
[   70.882779][ T6073] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.60'.
[   71.144665][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.147817][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   73.079685][ T5878] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   73.140299][ T6145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.92'.
[   73.195450][ T6151] netlink: 'syz.0.95': attribute type 21 has an invalid length.
[   73.198232][ T6151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.95'.
[   73.480050][ T6166] netlink: 10 bytes leftover after parsing attributes in process `syz.1.102'.
[   73.599937][ T6176] netlink: 'syz.0.107': attribute type 27 has an invalid length.
[   73.730097][ T6188] netlink: 'syz.0.113': attribute type 21 has an invalid length.
[   73.806980][ T6192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.241848][ T6221] netlink: 'syz.2.129': attribute type 2 has an invalid length.
[   74.244724][ T6221] netlink: 'syz.2.129': attribute type 1 has an invalid length.
[   74.247384][ T6221] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.129'.
[   74.251322][ T6221] block nbd5: not configured, cannot reconfigure
[   74.293430][ T6226] tap0: tun_chr_ioctl cmd 1074025672
[   74.295316][ T6226] tap0: ignored: set checksum enabled
[   75.139852][ T5845] Bluetooth: hci0: command tx timeout
[   78.680473][ T6261] sctp: [Deprecated]: syz.2.146 (pid 6261) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.680473][ T6261] Use struct sctp_sack_info instead
[   78.987491][ T6285] netlink: 'syz.0.157': attribute type 10 has an invalid length.
[   78.999247][ T6285] netlink: 55 bytes leftover after parsing attributes in process `syz.0.157'.
[   79.007018][ T6287] netlink: 22 bytes leftover after parsing attributes in process `syz.2.158'.
[   79.335247][ T6308] netlink: 'syz.0.168': attribute type 29 has an invalid length.
[   79.338985][ T6308] netlink: 'syz.0.168': attribute type 29 has an invalid length.
[   79.347991][ T6308] netlink: 'syz.0.168': attribute type 29 has an invalid length.
[   79.356647][ T6308] netlink: 'syz.0.168': attribute type 29 has an invalid length.
[   79.396549][ T6312] netlink: 'syz.1.170': attribute type 2 has an invalid length.
[   79.403299][ T6312] netlink: 164 bytes leftover after parsing attributes in process `syz.1.170'.
[   79.423614][ T6312] netlink: 'syz.1.170': attribute type 2 has an invalid length.
[   79.426697][ T6312] netlink: 164 bytes leftover after parsing attributes in process `syz.1.170'.
[   79.661782][ T6331] netlink: 'syz.1.180': attribute type 29 has an invalid length.
[   79.667277][ T6331] netlink: 'syz.1.180': attribute type 29 has an invalid length.
[   79.678607][ T6332] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.179'.
[   79.687926][ T6331] netlink: 'syz.1.180': attribute type 29 has an invalid length.
[   79.837255][ T6343] Zero length message leads to an empty skb
[   79.982312][ T6352] netlink: 531 bytes leftover after parsing attributes in process `syz.0.188'.
[   80.986117][ T6379] Driver unsupported XDP return value 0 on prog  (id 61) dev N/A, expect packet loss!
[   81.390776][   T10] cfg80211: failed to load regulatory.db
[   81.921120][ T6404] netlink: 156 bytes leftover after parsing attributes in process `syz.1.211'.
[   81.936754][ T6404] IPv6: NLM_F_CREATE should be specified when creating new route
[   81.948763][ T6404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.952350][ T6404] IPv6: NLM_F_CREATE should be set when creating new route
[   81.955663][ T6404] IPv6: NLM_F_CREATE should be set when creating new route
[   81.959175][ T6404] IPv6: NLM_F_CREATE should be set when creating new route
[   82.393578][ T6404] team0: Device hsr_slave_0 failed to register rx_handler
[   82.586150][ T6417] syz.0.217 uses obsolete (PF_INET,SOCK_PACKET)
[   82.589744][ T6416] netlink: 128 bytes leftover after parsing attributes in process `syz.2.216'.
[   82.595871][ T6416] netlink: 3 bytes leftover after parsing attributes in process `syz.2.216'.
[   83.150421][ T6437] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.224'.
[   83.154488][ T6437] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   83.834769][ T6453] warn_alloc: 1 callbacks suppressed
[   83.834818][ T6453] syz.0.232: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   83.845954][ T6453] CPU: 0 UID: 0 PID: 6453 Comm: syz.0.232 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[   83.845968][ T6453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.845974][ T6453] Call Trace:
[   83.845978][ T6453]  <TASK>
[   83.845983][ T6453]  dump_stack_lvl+0x189/0x250
[   83.846000][ T6453]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.846011][ T6453]  ? __pfx__printk+0x10/0x10
[   83.846024][ T6453]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   83.846036][ T6453]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   83.846048][ T6453]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   83.846060][ T6453]  warn_alloc+0x214/0x310
[   83.846073][ T6453]  ? stack_depot_save_flags+0x40/0x900
[   83.846087][ T6453]  ? __pfx_warn_alloc+0x10/0x10
[   83.846097][ T6453]  ? kasan_save_track+0x4f/0x80
[   83.846111][ T6453]  ? xskq_create+0x56/0x170
[   83.846121][ T6453]  ? xsk_init_queue+0xb0/0x110
[   83.846130][ T6453]  ? xsk_setsockopt+0x4de/0x710
[   83.846138][ T6453]  ? do_sock_setsockopt+0x17c/0x1b0
[   83.846147][ T6453]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   83.846155][ T6453]  ? do_syscall_64+0xfa/0x3b0
[   83.846165][ T6453]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.846177][ T6453]  __vmalloc_node_range_noprof+0x125/0x12f0
[   83.846199][ T6453]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   83.846211][ T6453]  ? __kasan_kmalloc+0x93/0xb0
[   83.846220][ T6453]  vmalloc_user_noprof+0xad/0xf0
[   83.846230][ T6453]  ? xskq_create+0xbf/0x170
[   83.846241][ T6453]  xskq_create+0xbf/0x170
[   83.846254][ T6453]  xsk_init_queue+0xb0/0x110
[   83.846265][ T6453]  xsk_setsockopt+0x4de/0x710
[   83.846276][ T6453]  ? __pfx_xsk_setsockopt+0x10/0x10
[   83.846287][ T6453]  ? __fget_files+0x2a/0x420
[   83.846296][ T6453]  ? aa_sock_opt_perm+0x74/0x110
[   83.846308][ T6453]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   83.846319][ T6453]  ? __pfx_xsk_setsockopt+0x10/0x10
[   83.846328][ T6453]  do_sock_setsockopt+0x17c/0x1b0
[   83.846339][ T6453]  __x64_sys_setsockopt+0x13f/0x1b0
[   83.846350][ T6453]  do_syscall_64+0xfa/0x3b0
[   83.846361][ T6453]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.846368][ T6453]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   83.846379][ T6453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.846386][ T6453] RIP: 0033:0x7f63f658eb69
[   83.846395][ T6453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.846402][ T6453] RSP: 002b:00007f63f63f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   83.846412][ T6453] RAX: ffffffffffffffda RBX: 00007f63f67b5fa0 RCX: 00007f63f658eb69
[   83.846417][ T6453] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[   83.846422][ T6453] RBP: 00007f63f6611df1 R08: 0000000000000004 R09: 0000000000000000
[   83.846427][ T6453] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   83.846431][ T6453] R13: 0000000000000000 R14: 00007f63f67b5fa0 R15: 00007fff3b15c5a8
[   83.846444][ T6453]  </TASK>
[   83.846497][ T6453] Mem-Info:
[   84.018480][ T6453] active_anon:11627 inactive_anon:0 isolated_anon:0
[   84.018480][ T6453]  active_file:11138 inactive_file:38226 isolated_file:0
[   84.018480][ T6453]  unevictable:1768 dirty:355 writeback:0
[   84.018480][ T6453]  slab_reclaimable:9135 slab_unreclaimable:53093
[   84.018480][ T6453]  mapped:18110 shmem:2442 pagetables:988
[   84.018480][ T6453]  sec_pagetables:0 bounce:0
[   84.018480][ T6453]  kernel_misc_reclaimable:0
[   84.018480][ T6453]  free:280192 free_pcp:23355 free_cma:0
[   84.087459][ T6453] Node 0 active_anon:27440kB inactive_anon:0kB active_file:8240kB inactive_file:136348kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:55616kB dirty:492kB writeback:0kB shmem:4924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8464kB pagetables:2824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.102977][ T6453] Node 1 active_anon:19068kB inactive_anon:0kB active_file:36312kB inactive_file:16556kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16824kB dirty:928kB writeback:0kB shmem:4844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3032kB pagetables:1060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.137933][ T6453] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.180082][ T6453] lowmem_reserve[]: 0 812 812 812 812
[   84.183997][ T6453] Node 0 DMA32 free:201344kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27304kB inactive_anon:0kB active_file:8240kB inactive_file:136348kB unevictable:3536kB writepending:492kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:34752kB local_pcp:21448kB free_cma:0kB
[   84.233969][ T6453] lowmem_reserve[]: 0 0 0 0 0
[   84.239449][ T6453] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   84.255445][ T6453] lowmem_reserve[]: 0 0 854 854 854
[   84.258421][ T6453] Node 1 Normal free:443940kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19272kB inactive_anon:0kB active_file:36312kB inactive_file:16556kB unevictable:3536kB writepending:928kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:60664kB local_pcp:18044kB free_cma:0kB
[   84.279894][ T6453] lowmem_reserve[]: 0 0 0 0 0
[   84.284270][ T6453] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   84.291529][ T6453] Node 0 DMA32: 820*4kB (UME) 206*8kB (UM) 125*16kB (UME) 169*32kB (UME) 175*64kB (UM) 61*128kB (UME) 16*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 2*2048kB (UM) 37*4096kB (UM) = 199792kB
[   84.321825][ T6453] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   84.347978][ T6453] Node 1 Normal: 1702*4kB (UME) 1052*8kB (UME) 837*16kB (UME) 547*32kB (UME) 283*64kB (UME) 21*128kB (U) 4*256kB (UE) 7*512kB (UME) 3*1024kB (UME) 0*2048kB 90*4096kB (M) = 443240kB
[   84.357799][ T6453] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.366922][ T6453] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.373406][ T6453] 51806 total pagecache pages
[   84.376100][ T6453] 0 pages in swap cache
[   84.377817][ T6453] Free swap  = 124996kB
[   84.381352][ T6453] Total swap = 124996kB
[   84.383238][ T6453] 786301 pages RAM
[   84.385989][ T6453] 0 pages HighMem/MovableOnly
[   84.388056][ T6453] 241075 pages reserved
[   84.391841][ T6453] 0 pages cma reserved
[   84.626172][ T6480] netlink: 164 bytes leftover after parsing attributes in process `syz.1.244'.
[   84.633131][ T6480] netlink: 164 bytes leftover after parsing attributes in process `syz.1.244'.
[   84.806105][ T6487] netlink: 176 bytes leftover after parsing attributes in process `syz.1.246'.
[   85.568389][ T6520] validate_nla: 7 callbacks suppressed
[   85.568406][ T6520] netlink: 'syz.1.259': attribute type 10 has an invalid length.
[   85.581108][ T6520] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.586134][ T6520] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   85.737038][ T6519] bond0: entered promiscuous mode
[   85.753049][ T6519] bond_slave_0: entered promiscuous mode
[   85.762069][ T6519] bond_slave_1: entered promiscuous mode
[   85.804924][ T6519] batadv_slave_0: entered promiscuous mode
[   85.813233][ T6519] batadv0: entered promiscuous mode
[   85.953149][ T6531] netlink: 'syz.0.263': attribute type 21 has an invalid length.
[   86.073762][ T6541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.268'.
[   86.169701][ T6543] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   86.476162][ T6564] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.281'.
[   86.562110][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'.
[   86.890370][ T6605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.292'.
[   86.893400][ T6605] veth1_macvtap: entered allmulticast mode
[   87.183742][ T6616] netlink: 60 bytes leftover after parsing attributes in process `syz.2.303'.
[   87.187280][ T6612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.303'.
[   87.199219][ T6616] netlink: 60 bytes leftover after parsing attributes in process `syz.2.303'.
[   87.476563][ T6638] tun0: tun_chr_ioctl cmd 1074025677
[   87.479448][ T6638] tun0: linktype set to 270
[   88.646606][ T6696] netlink: 'syz.1.337': attribute type 31 has an invalid length.
[   89.325033][ T6743] netlink: 'syz.2.358': attribute type 49 has an invalid length.
[   89.945698][ T6778] __nla_validate_parse: 1 callbacks suppressed
[   89.945714][ T6778] netlink: 40 bytes leftover after parsing attributes in process `syz.0.373'.
[   90.074969][ T6795] netlink: 60 bytes leftover after parsing attributes in process `syz.0.378'.
[   90.082289][ T6788] netlink: 60 bytes leftover after parsing attributes in process `syz.0.378'.
[   90.143046][ T5845] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[   90.230989][ T6805] syzkaller0: entered promiscuous mode
[   90.237674][ T6805] syzkaller0: entered allmulticast mode
[   91.227641][ T6812] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.389'.
[   91.280874][ T6827] netlink: 160 bytes leftover after parsing attributes in process `syz.1.397'.
[   91.283983][ T6829] netlink: 703 bytes leftover after parsing attributes in process `syz.0.398'.
[   91.377479][ T6839] netlink: 'syz.1.402': attribute type 21 has an invalid length.
[   91.380875][ T6839] netlink: 168 bytes leftover after parsing attributes in process `syz.1.402'.
[   91.483943][ T6853] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.410'.
[   91.526882][ T6856] netlink: 'syz.2.411': attribute type 10 has an invalid length.
[   91.542685][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'.
[   91.666089][ T6862] C: renamed from team_slave_0 (while UP)
[   91.674134][ T6857] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   91.674956][ T6862] netlink: 'syz.2.414': attribute type 3 has an invalid length.
[   91.681542][ T6862] netlink: 'syz.2.414': attribute type 1 has an invalid length.
[   91.684528][ T6862] netlink: 116 bytes leftover after parsing attributes in process `syz.2.414'.
[   91.723397][ T6866] sit0: entered allmulticast mode
[   91.730068][ T6866] sit0: entered promiscuous mode
[   91.891088][ T6874] netlink: 'syz.2.420': attribute type 33 has an invalid length.
[   91.894802][ T6874] netlink: 'syz.2.420': attribute type 3 has an invalid length.
[   92.390970][ T6917] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   92.393731][ T6917] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   92.750531][ T6938] netlink: 'syz.2.449': attribute type 1 has an invalid length.
[   93.637492][ T6958] netlink: 'syz.1.456': attribute type 3 has an invalid length.
[   97.666012][ T6999] IPv6: NLM_F_CREATE should be specified when creating new route
[   97.671427][ T7001] __nla_validate_parse: 3 callbacks suppressed
[   97.671437][ T7001] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.473'.
[   98.394337][ T7049] netlink: 'syz.1.491': attribute type 39 has an invalid length.
[   99.009520][ T7061] Dead loop on virtual device ip6_vti0, fix it urgently!
[  100.656399][ T5845] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28
[  100.660119][ T5845] Bluetooth: hci2: Unable to find connection with handle 0x0000
[  100.668753][ T7134] netlink: 'syz.2.528': attribute type 10 has an invalid length.
[  100.674149][ T7134] netlink: 2 bytes leftover after parsing attributes in process `syz.2.528'.
[  100.677506][ T7134] bond0: entered promiscuous mode
[  100.683973][ T7134] bond_slave_0: entered promiscuous mode
[  100.687075][ T7134] bond_slave_1: entered promiscuous mode
[  100.696766][ T7134] bridge0: port 3(bond0) entered blocking state
[  100.699937][ T7134] bridge0: port 3(bond0) entered disabled state
[  100.703517][ T7134] bond0: entered allmulticast mode
[  100.705600][ T7134] bond_slave_0: entered allmulticast mode
[  100.707736][ T7134] bond_slave_1: entered allmulticast mode
[  100.747371][ T7134] bridge0: port 3(bond0) entered blocking state
[  100.751424][ T7134] bridge0: port 3(bond0) entered forwarding state
[  100.816217][ T7139] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.530'.
[  100.858964][ T5845] Bluetooth: hci2: Malformed HCI Event: 0x22
[  101.005731][ T7147] syzkaller0: entered promiscuous mode
[  101.007726][ T7147] syzkaller0: entered allmulticast mode
[  102.112139][ T7153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.537'.
[  102.404431][ T7169] bridge_slave_1: left allmulticast mode
[  102.414406][ T7169] bridge_slave_1: left promiscuous mode
[  102.429440][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.595968][ T7169] bridge_slave_0: left allmulticast mode
[  102.607295][ T7169] bridge_slave_0: left promiscuous mode
[  102.621015][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.424711][ T7210] netlink: 'syz.1.564': attribute type 27 has an invalid length.
[  103.428301][ T7210] netlink: 'syz.1.564': attribute type 3 has an invalid length.
[  103.433635][ T7210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.564'.
[  103.501756][ T7216] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.658168][ T7230] netlink: 'syz.0.573': attribute type 5 has an invalid length.
[  103.660980][ T7230] netlink: 168 bytes leftover after parsing attributes in process `syz.0.573'.
[  103.847312][ T7240] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.577'.
[  104.919624][ T7262] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.588'.
[  104.973632][ T7264] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.589'.
[  104.977846][ T7264] netlink: 61819 bytes leftover after parsing attributes in process `syz.1.589'.
[  105.873331][ T5845] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7
[  106.413840][ T7332] netlink: 'syz.2.620': attribute type 3 has an invalid length.
[  106.419795][ T7332] netlink: 'syz.2.620': attribute type 1 has an invalid length.
[  106.422966][ T7332] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.620'.
[  107.265417][ T7376] netlink: 180 bytes leftover after parsing attributes in process `syz.2.639'.
[  107.265665][ T7377] netlink: 'syz.1.641': attribute type 4 has an invalid length.
[  107.274262][ T7377] netlink: 152 bytes leftover after parsing attributes in process `syz.1.641'.
[  107.278841][ T7377] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  107.508806][ T7390] netlink: 'syz.2.647': attribute type 1 has an invalid length.
[  107.534419][ T7390] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.647'.
[  109.878767][ T7466] netlink: 'syz.2.681': attribute type 10 has an invalid length.
[  109.974536][ T7466] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  109.980893][ T7466] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  109.988525][ T7466] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  110.316536][ T7481] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.686'.
[  110.323375][ T7481] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  110.328115][ T7481] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  110.527724][ T7495] netlink: 156 bytes leftover after parsing attributes in process `syz.1.692'.
[  110.895645][ T7511] syzkaller0: entered promiscuous mode
[  110.897670][ T7511] syzkaller0: entered allmulticast mode
[  111.009110][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  111.086133][ T7517] syzkaller0: entered promiscuous mode
[  111.088487][ T7517] syzkaller0: entered allmulticast mode
[  111.239563][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'.
[  111.314842][ T7527] netlink: 'syz.1.706': attribute type 33 has an invalid length.
[  111.317500][ T7527] netlink: 'syz.1.706': attribute type 3 has an invalid length.
[  111.329201][ T7527] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.706'.
[  113.359991][ T7572] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.727'.
[  113.562212][ T7574] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.728'.
[  113.566639][ T7574] openvswitch: netlink: Message has 6 unknown bytes.
[  113.636100][ T7580] netlink: 'syz.2.730': attribute type 10 has an invalid length.
[  113.638816][ T7580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.730'.
[  113.685013][ T7582] netlink: 'syz.2.731': attribute type 2 has an invalid length.
[  113.688366][ T7582] netlink: 'syz.2.731': attribute type 8 has an invalid length.
[  113.700088][ T7575] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  113.703315][ T7575] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  113.704493][ T7582] netlink: 44 bytes leftover after parsing attributes in process `syz.2.731'.
[  113.905269][ T7590] netlink: 'syz.2.735': attribute type 4 has an invalid length.
[  113.911650][ T7590] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.735'.
[  114.767660][ T7623] : renamed from pim6reg1
[  114.780607][ T7625] syzkaller0: left promiscuous mode
[  114.782688][ T7625] syzkaller0: left allmulticast mode
[  118.168983][ T7654] netlink: 56 bytes leftover after parsing attributes in process `syz.1.763'.
[  118.174223][ T7654] netlink: 56 bytes leftover after parsing attributes in process `syz.1.763'.
[  118.178151][ T7654] netlink: 56 bytes leftover after parsing attributes in process `syz.1.763'.
[  118.461741][ T7661] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  118.478789][ T7661] netlink: 'syz.1.766': attribute type 4 has an invalid length.
[  118.495422][ T7661] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.766'.
[  119.292717][ T7668] netlink: 'syz.2.769': attribute type 3 has an invalid length.
[  119.325574][ T7675] netlink: 'syz.2.772': attribute type 10 has an invalid length.
[  119.328235][ T7675] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.772'.
[  119.372923][ T7682] netlink: 'syz.1.776': attribute type 1 has an invalid length.
[  119.438170][ T7689] netlink: 'syz.1.780': attribute type 11 has an invalid length.
[  119.443715][ T7689] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.780'.
[  119.448244][ T7689] netlink: 'syz.1.780': attribute type 10 has an invalid length.
[  119.471772][ T7689] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  119.474652][ T7689] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  119.481087][ T7688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.754787][ T7715] netlink: 3 bytes leftover after parsing attributes in process `syz.0.792'.
[  119.774836][ T7717] netlink: 132 bytes leftover after parsing attributes in process `syz.1.793'.
[  119.875288][ T7727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.798'.
[  119.884438][ T5845] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12
[  120.867869][ T7747] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.807'.
[  121.939179][ T5845] Bluetooth: hci2: command tx timeout
[  121.956521][ T7771] !: renamed from dummy0 (while UP)
[  123.338176][ T7804] netlink: 830 bytes leftover after parsing attributes in process `syz.1.832'.
[  124.064454][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  124.363787][ T7858] netlink: 14 bytes leftover after parsing attributes in process `syz.1.855'.
[  124.741791][ T7873] netlink: 'syz.1.860': attribute type 10 has an invalid length.
[  124.933996][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'.
[  124.937138][ T7885] netlink: 33 bytes leftover after parsing attributes in process `syz.1.863'.
[  124.944783][ T7885] netlink: 33 bytes leftover after parsing attributes in process `syz.1.863'.
[  125.091795][ T7891] netlink: 10 bytes leftover after parsing attributes in process `syz.1.867'.
[  125.356708][ T7907] netlink: 'syz.1.873': attribute type 17 has an invalid length.
[  125.362223][ T7907] netlink: 'syz.1.873': attribute type 16 has an invalid length.
[  125.365848][ T7907] netlink: 152 bytes leftover after parsing attributes in process `syz.1.873'.
[  125.772308][ T7929] netlink: 'syz.0.883': attribute type 17 has an invalid length.
[  125.817779][ T7933] delete_channel: no stack
[  125.824471][ T7933] delete_channel: no stack
[  126.099465][ T5878] Bluetooth: hci1: command tx timeout
[  127.326565][ T8014] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.921'.
[  127.330678][ T8014] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  127.333953][ T8014] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  127.396975][ T8016] Dead loop on virtual device ip6_vti0, fix it urgently!
[  127.435317][ T8018] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.923'.
[  127.749387][ T8049] netlink: 'syz.0.937': attribute type 1 has an invalid length.
[  127.752488][ T8049] netlink: 17 bytes leftover after parsing attributes in process `syz.0.937'.
[  127.808888][ T8054] netlink: 'syz.2.940': attribute type 10 has an invalid length.
[  128.100205][ T8070] netlink: 'syz.2.947': attribute type 29 has an invalid length.
[  128.130685][ T8070] netlink: 'syz.2.947': attribute type 29 has an invalid length.
[  128.153410][ T8070] netlink: 'syz.2.947': attribute type 29 has an invalid length.
[  128.165199][ T8070] netlink: 'syz.2.947': attribute type 29 has an invalid length.
[  128.490290][ T8085] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.954'.
[  128.971431][ T8101] netlink: 132 bytes leftover after parsing attributes in process `syz.1.961'.
[  129.080967][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'.
[  129.449907][ T8125] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.973'.
[  129.836237][ T8147] validate_nla: 2 callbacks suppressed
[  129.836252][ T8147] netlink: 'syz.1.984': attribute type 39 has an invalid length.
[  129.843945][ T8147] veth0_macvtap: left promiscuous mode
[  131.004851][ T8180] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  131.007628][ T8180] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  131.244493][ T8197] netlink: 'syz.1.1005': attribute type 10 has an invalid length.
[  131.554282][ T8203] netlink: 'syz.2.1008': attribute type 2 has an invalid length.
[  131.558057][ T8203] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1008'.
[  131.898534][ T8219] netlink: 'syz.1.1015': attribute type 3 has an invalid length.
[  131.902195][ T8219] netlink: 'syz.1.1015': attribute type 4 has an invalid length.
[  131.903509][ T8220] netlink: 'syz.2.1016': attribute type 9 has an invalid length.
[  131.905266][ T8219] netlink: 'syz.1.1015': attribute type 5 has an invalid length.
[  131.905280][ T8219] netlink: 'syz.1.1015': attribute type 6 has an invalid length.
[  131.905286][ T8219] netlink: 'syz.1.1015': attribute type 7 has an invalid length.
[  131.905292][ T8219] netlink: 'syz.1.1015': attribute type 7 has an invalid length.
[  131.905298][ T8219] netlink: 12902 bytes leftover after parsing attributes in process `syz.1.1015'.
[  131.926671][ T8220] netlink: 143452 bytes leftover after parsing attributes in process `syz.2.1016'.
[  132.004923][ T8228] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1020'.
[  132.155548][ T8243] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1028'.
[  132.156302][ T8241] delete_channel: no stack
[  132.593679][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.595907][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.041539][ T8299] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1053'.
[  133.506793][ T8320] sock: sock_timestamping_bind_phc: sock not bind to device
[  133.929026][ T8355] team0 (unregistering): Port device team_slave_0 removed
[  133.937730][ T8355] team0 (unregistering): Port device team_slave_1 removed
[  135.626136][ T8419] __nla_validate_parse: 1 callbacks suppressed
[  135.626151][ T8419] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1101'.
[  135.905429][ T8439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  135.908795][ T8439] IPv6: NLM_F_CREATE should be set when creating new route
[  135.911539][ T8439] IPv6: NLM_F_CREATE should be set when creating new route
[  135.972944][ T5878] Bluetooth: hci1: Malformed HCI Event
[  136.077082][ T8453] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1117'.
[  136.413919][ T8468] validate_nla: 5 callbacks suppressed
[  136.414011][ T8468] netlink: 'syz.2.1124': attribute type 22 has an invalid length.
[  136.431303][ T8468] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1124'.
[  137.932528][ T8544] tap0: tun_chr_ioctl cmd 1074812118
[  138.128008][ T8558] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1164'.
[  138.275689][ T8568] netlink: 'syz.2.1170': attribute type 21 has an invalid length.
[  138.278704][ T8568] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1170'.
[  138.288861][ T8568] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1170'.
[  138.412655][ T8580] netlink: 'syz.2.1175': attribute type 10 has an invalid length.
[  138.426668][ T8580] veth0_vlan: left promiscuous mode
[  138.432039][ T8580] veth0_vlan: entered promiscuous mode
[  138.438006][ T8580] team0: Device veth0_vlan failed to register rx_handler
[  138.485728][ T8584] sit0: entered allmulticast mode
[  138.496099][ T8584] sit0: entered promiscuous mode
[  138.518503][ T8586] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1174'.
[  138.526630][ T8582] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1174'.
[  138.533476][ T8586] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1174'.
[  139.246985][ T8600] netlink: 'syz.0.1181': attribute type 21 has an invalid length.
[  139.252629][ T8600] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1181'.
[  139.903552][ T8616] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.906296][ T8616] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.070032][ T8616] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.072951][ T8616] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.970839][ T8640] __nla_validate_parse: 2 callbacks suppressed
[  140.971150][ T8640] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1200'.
[  141.054331][ T8640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.095206][ T8644] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1202'.
[  141.098765][ T8644] netlink: zone id is out of range
[  141.110675][ T8644] netlink: zone id is out of range
[  141.112849][ T8644] netlink: zone id is out of range
[  141.114728][ T8644] netlink: zone id is out of range
[  141.116571][ T8644] netlink: zone id is out of range
[  141.118513][ T8644] netlink: zone id is out of range
[  141.123182][ T8644] netlink: zone id is out of range
[  141.125611][ T8644] netlink: zone id is out of range
[  141.127958][ T8644] netlink: zone id is out of range
[  141.294631][ T8654] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1206'.
[  141.322207][ T8656] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1208'.
[  141.336639][ T8658] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.1207'.
[  141.341302][ T8658] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1207'.
[  141.345221][ T8658] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.1207'.
[  141.599607][ T8673] bridge_slave_1: left allmulticast mode
[  141.603899][ T8673] bridge_slave_1: left promiscuous mode
[  141.607180][ T8673] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.632502][ T8673] bridge_slave_0: left promiscuous mode
[  141.635922][ T8673] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.886497][ T8703] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1229'.
[  141.893180][ T8701] netlink: 'syz.2.1228': attribute type 6 has an invalid length.
[  141.896820][ T8701] netlink: 'syz.2.1228': attribute type 22 has an invalid length.
[  141.915030][ T8701] netlink: 'syz.2.1228': attribute type 23 has an invalid length.
[  141.918078][ T8701] netlink: 'syz.2.1228': attribute type 26 has an invalid length.
[  141.930762][ T8701] netlink: 'syz.2.1228': attribute type 28 has an invalid length.
[  141.933554][ T8701] netlink: 'syz.2.1228': attribute type 29 has an invalid length.
[  141.940644][ T8701] netlink: 'syz.2.1228': attribute type 31 has an invalid length.
[  141.945921][ T8707] netlink: 'syz.1.1231': attribute type 4 has an invalid length.
[  141.948789][ T8707] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.1231'.
[  142.192407][ T8724] netlink: 'syz.2.1240': attribute type 30 has an invalid length.
[  142.390374][ T8732] netlink: 'syz.1.1244': attribute type 10 has an invalid length.
[  143.591937][ T8742] syzkaller0: entered allmulticast mode
[  144.626927][ T8755] : renamed from gre0 (while UP)
[  146.506929][ T8813] sit0: left promiscuous mode
[  146.589983][ T8813] sit0: entered promiscuous mode
[  147.580728][ T8842] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1289'.
[  147.636484][ T8850] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1293'.
[  147.736317][ T8860] validate_nla: 1 callbacks suppressed
[  147.736334][ T8860] netlink: 'syz.2.1298': attribute type 29 has an invalid length.
[  147.744344][ T8860] netlink: 'syz.2.1298': attribute type 29 has an invalid length.
[  147.748196][ T8860] netlink: 'syz.2.1298': attribute type 29 has an invalid length.
[  147.995900][ T8877] delete_channel: no stack
[  148.062452][ T8881] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1308'.
[  148.178860][ T5878] Bluetooth: hci0: unexpected subevent 0x01 length: 14 < 18
[  148.202239][ T8890] netlink: 'syz.2.1312': attribute type 1 has an invalid length.
[  148.205855][ T8890] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1312'.
[  148.269648][ T8892] netlink: 'syz.1.1313': attribute type 27 has an invalid length.
[  148.274490][ T8892] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1313'.
[  148.278380][ T8892] net_ratelimit: 74 callbacks suppressed
[  148.278390][ T8892] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  149.800975][ T8942] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1336'.
[  149.804574][ T8942] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1336'.
[  149.970005][ T8948] syzkaller0: entered promiscuous mode
[  149.972182][ T8948] syzkaller0: entered allmulticast mode
[  150.088964][ T8960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1344'.
[  150.120681][ T8962] ref_ctr_offset mismatch. inode: 0x90e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  150.453531][ T5878] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  151.712735][ T5845] Bluetooth: hci0: adv larger than maximum supported
[  152.598630][ T9011] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  152.605437][ T9025] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1369'.
[  152.614648][ T9024] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1369'.
[  152.618379][ T9026] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1369'.
[  152.766219][ T9032] sit0: entered allmulticast mode
[  152.850944][ T9037] sit0: entered promiscuous mode
[  153.678100][ T9055] netlink: 'syz.1.1381': attribute type 27 has an invalid length.
[  153.726697][ T9057] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1382'.
[  153.735949][ T9055] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1381'.
[  153.756407][ T9061] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1384'.
[  153.860237][ T9069] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  153.863761][ T9069] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  154.624836][ T9087] netlink: 'syz.1.1395': attribute type 2 has an invalid length.
[  154.628359][ T9087] netlink: 'syz.1.1395': attribute type 4 has an invalid length.
[  154.631675][ T9087] netlink: 'syz.1.1395': attribute type 8 has an invalid length.
[  154.635195][ T9087] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1395'.
[  154.794655][ T9098] netlink: 65019 bytes leftover after parsing attributes in process `syz.2.1400'.
[  155.267757][ T9104] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1403'.
[  155.279214][ T9104] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1403'.
[  155.315356][ T9108] netlink: 'syz.1.1405': attribute type 21 has an invalid length.
[  155.318281][ T9108] netlink: 'syz.1.1405': attribute type 4 has an invalid length.
[  155.401328][ T9114] netlink: 'syz.2.1408': attribute type 1 has an invalid length.
[  155.444061][ T9118] netlink: 'syz.0.1409': attribute type 2 has an invalid length.
[  155.494355][ T9118] netlink: 'syz.0.1409': attribute type 2 has an invalid length.
[  155.623310][ T9126] netlink: 'syz.2.1414': attribute type 10 has an invalid length.
[  155.824450][ T9126] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.852006][ T9126] batadv0: entered promiscuous mode
[  155.857723][ T9126] batadv0: entered allmulticast mode
[  155.870823][ T9126] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  156.051855][ T5902] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  156.056022][ T5902] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  157.148113][ T9168] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  157.154135][ T9168] openvswitch: netlink: Message has 6324 unknown bytes.
[  157.461358][ T9189] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  157.512656][ T9191] syzkaller0: entered promiscuous mode
[  157.515220][ T9191] syzkaller0: entered allmulticast mode
[  157.765148][ T9211] __nla_validate_parse: 7 callbacks suppressed
[  157.765171][ T9211] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.1454'.
[  157.917741][ T9216] netlink: 'syz.2.1456': attribute type 11 has an invalid length.
[  157.928801][ T9216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1456'.
[  157.936241][ T9216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.077731][ T9222] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1459'.
[  158.528673][ T9247] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1471'.
[  159.263680][ T9268] delete_channel: no stack
[  159.265422][ T9268] delete_channel: no stack
[  159.300184][ T9270] validate_nla: 3 callbacks suppressed
[  159.300199][ T9270] netlink: 'syz.2.1480': attribute type 3 has an invalid length.
[  159.305161][ T9270] netlink: 'syz.2.1480': attribute type 2 has an invalid length.
[  159.308212][ T9270] netlink: 198000 bytes leftover after parsing attributes in process `syz.2.1480'.
[  159.494173][ T9272] raw_sendmsg: syz.2.1481 forgot to set AF_INET. Fix it!
[  160.150789][ T9297] ksmbd: Unknown IPC event: 1, ignore.
[  160.165120][ T9304] netlink: 'syz.1.1495': attribute type 22 has an invalid length.
[  160.168182][ T9304] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1495'.
[  160.212645][ T9297] netlink: 'syz.0.1490': attribute type 29 has an invalid length.
[  160.294747][ T9313] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1499'.
[  160.779272][ T9336] netlink: 'syz.1.1509': attribute type 21 has an invalid length.
[  160.783448][ T9336] IPv6: NLM_F_CREATE should be specified when creating new route
[  160.856913][ T9339] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1510'.
[  160.879236][ T9339] netlink: zone id is out of range
[  160.881711][ T9339] netlink: zone id is out of range
[  160.894504][ T9339] netlink: zone id is out of range
[  160.896985][ T9339] netlink: zone id is out of range
[  160.902218][ T9339] netlink: zone id is out of range
[  160.904910][ T9339] netlink: zone id is out of range
[  160.907354][ T9339] netlink: zone id is out of range
[  160.918015][ T9339] netlink: zone id is out of range
[  160.995369][ T9347] netlink: 'syz.2.1515': attribute type 21 has an invalid length.
[  161.819320][ T9363] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1521'.
[  161.967082][ T5845] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5
[  162.459828][ T9407] syz.2.1541: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  162.477205][ T9407] CPU: 0 UID: 0 PID: 9407 Comm: syz.2.1541 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  162.477230][ T9407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.477239][ T9407] Call Trace:
[  162.477246][ T9407]  <TASK>
[  162.477254][ T9407]  dump_stack_lvl+0x189/0x250
[  162.477282][ T9407]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.477301][ T9407]  ? __pfx__printk+0x10/0x10
[  162.477322][ T9407]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  162.477340][ T9407]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  162.477359][ T9407]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  162.477378][ T9407]  warn_alloc+0x214/0x310
[  162.477395][ T9407]  ? stack_depot_save_flags+0x40/0x900
[  162.477419][ T9407]  ? __pfx_warn_alloc+0x10/0x10
[  162.477439][ T9407]  ? kasan_save_track+0x4f/0x80
[  162.477462][ T9407]  ? xskq_create+0x56/0x170
[  162.477480][ T9407]  ? xsk_init_queue+0xb0/0x110
[  162.477494][ T9407]  ? xsk_setsockopt+0x4de/0x710
[  162.477507][ T9407]  ? do_sock_setsockopt+0x17c/0x1b0
[  162.477522][ T9407]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  162.477536][ T9407]  ? do_syscall_64+0xfa/0x3b0
[  162.477554][ T9407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.477574][ T9407]  __vmalloc_node_range_noprof+0x125/0x12f0
[  162.477658][ T9407]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  162.477682][ T9407]  ? __kasan_kmalloc+0x93/0xb0
[  162.477700][ T9407]  vmalloc_user_noprof+0xad/0xf0
[  162.477717][ T9407]  ? xskq_create+0xbf/0x170
[  162.477738][ T9407]  xskq_create+0xbf/0x170
[  162.477758][ T9407]  xsk_init_queue+0xb0/0x110
[  162.477778][ T9407]  xsk_setsockopt+0x4de/0x710
[  162.477796][ T9407]  ? __pfx_xsk_setsockopt+0x10/0x10
[  162.477818][ T9407]  ? __fget_files+0x2a/0x420
[  162.477835][ T9407]  ? aa_sock_opt_perm+0x74/0x110
[  162.477866][ T9407]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  162.477886][ T9407]  ? __pfx_xsk_setsockopt+0x10/0x10
[  162.477904][ T9407]  do_sock_setsockopt+0x17c/0x1b0
[  162.477926][ T9407]  __x64_sys_setsockopt+0x13f/0x1b0
[  162.477948][ T9407]  do_syscall_64+0xfa/0x3b0
[  162.477967][ T9407]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.477986][ T9407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.478000][ T9407]  ? exc_page_fault+0x9f/0xf0
[  162.478024][ T9407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.478036][ T9407] RIP: 0033:0x7f079818eb69
[  162.478051][ T9407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.478064][ T9407] RSP: 002b:00007f0798fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  162.478082][ T9407] RAX: ffffffffffffffda RBX: 00007f07983b5fa0 RCX: 00007f079818eb69
[  162.478094][ T9407] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[  162.478104][ T9407] RBP: 00007f0798211df1 R08: 0000000000000004 R09: 0000000000000000
[  162.478112][ T9407] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  162.478121][ T9407] R13: 0000000000000000 R14: 00007f07983b5fa0 R15: 00007ffc35243b88
[  162.478145][ T9407]  </TASK>
[  162.478153][ T9407] Mem-Info:
[  162.570560][ T9415] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1544'.
[  162.604557][ T9407] active_anon:11369 inactive_anon:0 isolated_anon:0
[  162.604557][ T9407]  active_file:13536 inactive_file:38260 isolated_file:0
[  162.604557][ T9407]  unevictable:1768 dirty:237 writeback:0
[  162.604557][ T9407]  slab_reclaimable:9341 slab_unreclaimable:53408
[  162.604557][ T9407]  mapped:18055 shmem:2423 pagetables:1038
[  162.604557][ T9407]  sec_pagetables:0 bounce:0
[  162.604557][ T9407]  kernel_misc_reclaimable:0
[  162.604557][ T9407]  free:281486 free_pcp:15391 free_cma:0
[  162.665274][ T9407] Node 0 active_anon:25736kB inactive_anon:0kB active_file:10792kB inactive_file:136372kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:55776kB dirty:316kB writeback:0kB shmem:4760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8348kB pagetables:2816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  162.707393][ T9407] Node 1 active_anon:19596kB inactive_anon:0kB active_file:43352kB inactive_file:16668kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16420kB dirty:648kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3120kB pagetables:1232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  162.725573][ T9407] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  162.737398][ T9407] lowmem_reserve[]: 0 812 812 812 812
[  162.742683][ T9407] Node 0 DMA32 free:208408kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25736kB inactive_anon:0kB active_file:10792kB inactive_file:136372kB unevictable:3536kB writepending:316kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:24164kB local_pcp:17476kB free_cma:0kB
[  162.755501][ T9407] lowmem_reserve[]: 0 0 0 0 0
[  162.757458][ T9407] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  162.781015][ T9407] lowmem_reserve[]: 0 0 854 854 854
[  162.789349][ T9407] Node 1 Normal free:442968kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19460kB inactive_anon:0kB active_file:43352kB inactive_file:16668kB unevictable:3536kB writepending:648kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:39244kB local_pcp:17936kB free_cma:0kB
[  162.804100][ T9407] lowmem_reserve[]: 0 0 0 0 0
[  162.807674][ T9407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  162.816271][ T9407] Node 0 DMA32: 98*4kB (UME) 228*8kB (UME) 192*16kB (UME) 524*32kB (UME) 229*64kB (UME) 73*128kB (UME) 56*256kB (UME) 43*512kB (UM) 19*1024kB (UM) 10*2048kB (UM) 21*4096kB (UM) = 208360kB
[  162.834814][ T9407] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  162.841470][ T9407] Node 1 Normal: 464*4kB (UM) 455*8kB (UME) 1097*16kB (UME) 367*32kB (UME) 389*64kB (UME) 92*128kB (UME) 35*256kB (UM) 10*512kB (UM) 7*1024kB (UME) 1*2048kB (M) 85*4096kB (M) = 442920kB
[  162.848809][ T9407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  162.852408][ T9407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  162.855955][ T9407] 54204 total pagecache pages
[  162.858206][ T9407] 0 pages in swap cache
[  162.860430][ T9407] Free swap  = 124996kB
[  162.862310][ T9407] Total swap = 124996kB
[  162.863787][ T9407] 786301 pages RAM
[  162.865095][ T9407] 0 pages HighMem/MovableOnly
[  162.866707][ T9407] 241075 pages reserved
[  162.868184][ T9407] 0 pages cma reserved
[  163.005049][ T9431] pim6reg1: entered allmulticast mode
[  163.013223][ T9431] pim6reg1: left allmulticast mode
[  165.318075][ T9525] netlink: 'syz.2.1595': attribute type 4 has an invalid length.
[  165.322871][ T9525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1595'.
[  165.716856][ T9535] : renamed from bond0
[  165.732236][ T9535] : left promiscuous mode
[  165.734086][ T9535] bond_slave_0: left promiscuous mode
[  165.736441][ T9535] bond_slave_1: left promiscuous mode
[  165.738806][ T9535] batadv_slave_0: left promiscuous mode
[  165.741715][ T9535] batadv0: left promiscuous mode
[  165.744040][ T9535] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  166.612404][ T9559] netlink: 'syz.0.1610': attribute type 12 has an invalid length.
[  166.617076][ T9559] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1610'.
[  166.655543][ T9561] netlink: 'syz.1.1612': attribute type 1 has an invalid length.
[  166.844521][ T9575] veth1_macvtap: left promiscuous mode
[  166.847174][ T9575] macsec0: entered allmulticast mode
[  167.439748][ T9595] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.1627'.
[  167.641142][ T9601] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  167.645495][ T9601] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  167.832706][ T9609] syzkaller0: entered promiscuous mode
[  167.835284][ T9609] syzkaller0: entered allmulticast mode
[  170.825733][ T9615] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  170.841222][ T9615] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  171.233270][ T9629] netlink: 'syz.1.1641': attribute type 21 has an invalid length.
[  171.236999][ T9629] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1641'.
[  171.608233][ T9647] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1650'.
[  171.704494][ T9661] netlink: 'syz.1.1657': attribute type 16 has an invalid length.
[  174.267347][ T5845] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  174.860495][ T9768] delete_channel: no stack
[  175.085648][ T9789] netlink: 'syz.0.1709': attribute type 4 has an invalid length.
[  175.099213][ T9789] netlink: 'syz.0.1709': attribute type 3 has an invalid length.
[  175.102775][ T9789] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1709'.
[  175.489964][ T5878] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  175.498776][ T9806] netlink: 'syz.0.1716': attribute type 10 has an invalid length.
[  175.506410][ T5879] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  175.572721][ T9812] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1718'.
[  175.607205][ T5879] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6
[  175.644257][ T9818] netlink: 'syz.2.1722': attribute type 15 has an invalid length.
[  175.651776][ T9818] netlink: 'syz.2.1722': attribute type 7 has an invalid length.
[  175.659812][ T9818] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1722'.
[  176.369969][ T5879] Bluetooth: hci1: command 0x0406 tx timeout
[  176.724814][ T9857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.727822][ T9857] IPv6: NLM_F_CREATE should be set when creating new route
[  176.730506][ T9857] IPv6: NLM_F_CREATE should be set when creating new route
[  177.223237][ T9861] netlink: 'syz.0.1739': attribute type 2 has an invalid length.
[  177.226670][ T9860] netlink: 'syz.1.1738': attribute type 10 has an invalid length.
[  177.230011][ T9861] netlink: 'syz.0.1739': attribute type 8 has an invalid length.
[  177.232836][ T9860] veth1_macvtap: left allmulticast mode
[  177.233727][ T9861] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1739'.
[  177.435777][ T9874] netlink: 'syz.2.1746': attribute type 6 has an invalid length.
[  177.438496][ T9874] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1746'.
[  177.541649][ T5845] Bluetooth: hci0: command tx timeout
[  177.561924][ T9876] netlink: 96168 bytes leftover after parsing attributes in process `syz.0.1743'.
[  177.619393][ T9882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1747'.
[  177.623976][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1747'.
[  177.628318][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1747'.
[  179.883810][ T9921] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1761'.
[  180.775399][ T9950] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1776'.
[  181.610360][ T9962] netlink: 'syz.2.1781': attribute type 10 has an invalid length.
[  181.633346][ T9962] team0: Port device wlan1 added
[  182.186683][T10008] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1801'.
[  182.642042][T10031] netlink: 'syz.2.1810': attribute type 6 has an invalid length.
[  182.644801][T10031] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1810'.
[  184.207732][T10067] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1822'.
[  184.213229][T10057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1822'.
[  185.773782][T10134] netlink: 'syz.1.1855': attribute type 1 has an invalid length.
[  185.776472][T10134] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1855'.
[  185.860138][ T5220] Bluetooth: hci2: command 0x0406 tx timeout
[  185.862630][ T5220] Bluetooth: hci0: command 0x0406 tx timeout
[  185.864988][ T5220] Bluetooth: hci1: command 0x0406 tx timeout
[  186.159447][ T5878] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  186.388170][T10169] caif0: entered promiscuous mode
[  186.398932][T10169] caif0: entered allmulticast mode
[  187.196944][T10203] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1885'.
[  187.606622][T10221] syzkaller0: entered promiscuous mode
[  187.608649][T10221] syzkaller0: entered allmulticast mode
[  188.553142][ T5879] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  188.786839][T10243] netlink: 'syz.1.1903': attribute type 6 has an invalid length.
[  188.793522][T10243] netlink: 'syz.1.1903': attribute type 3 has an invalid length.
[  188.796268][T10243] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1903'.
[  189.508154][T10253] netlink: 'syz.2.1907': attribute type 10 has an invalid length.
[  189.514294][T10253] veth0_vlan: left promiscuous mode
[  189.516935][T10253] veth0_vlan: entered promiscuous mode
[  189.522482][T10253] team0: Device veth0_vlan failed to register rx_handler
[  189.525407][T10258] netlink: 'syz.1.1909': attribute type 11 has an invalid length.
[  189.527994][T10258] netlink: 'syz.1.1909': attribute type 11 has an invalid length.
[  189.531641][T10258] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1909'.
[  189.715343][T10272] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1916'.
[  189.718051][T10268] netlink: 'syz.1.1914': attribute type 4 has an invalid length.
[  189.721553][T10268] netlink: 209028 bytes leftover after parsing attributes in process `syz.1.1914'.
[  189.727284][T10272] bridge0: port 3(bond0) entered disabled state
[  189.841032][T10272] bond0 (unregistering): left allmulticast mode
[  189.843367][T10272] bond_slave_0: left allmulticast mode
[  189.845330][T10272] bond_slave_1: left allmulticast mode
[  189.847283][T10272] netdevsim netdevsim2 : left allmulticast mode
[  189.850672][T10272] batadv0: left allmulticast mode
[  189.852635][T10272] bridge0: port 3(bond0) entered disabled state
[  189.858563][T10272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.865198][T10272] bond_slave_0: left promiscuous mode
[  189.870172][T10272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.874034][T10272] bond_slave_1: left promiscuous mode
[  189.878543][T10272] bond0 (unregistering): (slave ): Releasing backup interface
[  189.882180][T10272] netdevsim netdevsim2 : left promiscuous mode
[  189.887279][T10272] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  189.892246][T10272] batadv0: left promiscuous mode
[  189.896075][T10272] bond0 (unregistering): Released all slaves
[  190.005711][T10288] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  190.208131][T10303] netlink: 'syz.0.1930': attribute type 21 has an invalid length.
[  190.212908][T10303] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1930'.
[  191.592188][T10351] netlink: 'syz.2.1950': attribute type 28 has an invalid length.
[  191.599204][T10351] netlink: 'syz.2.1950': attribute type 4 has an invalid length.
[  191.606841][T10351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1950'.
[  191.606951][T10352] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1945'.
[  191.637400][T10340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1945'.
[  191.715753][T10352] netlink: 'syz.0.1945': attribute type 3 has an invalid length.
[  191.718497][T10352] netlink: 'syz.0.1945': attribute type 3 has an invalid length.
[  191.721803][T10352] netlink: 'syz.0.1945': attribute type 2 has an invalid length.
[  191.724679][T10352] netlink: 127716 bytes leftover after parsing attributes in process `syz.0.1945'.
[  191.773170][T10360] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1952'.
[  191.777918][T10360] IPv6: NLM_F_CREATE should be specified when creating new route
[  191.783121][T10360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  191.786638][T10360] IPv6: NLM_F_CREATE should be set when creating new route
[  191.790210][T10360] IPv6: NLM_F_CREATE should be set when creating new route
[  191.793486][T10360] IPv6: NLM_F_CREATE should be set when creating new route
[  194.026333][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.029479][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  207.008980][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  207.011947][T10137] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  207.016147][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  207.018975][T10137] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  207.021743][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  207.025256][T10137] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  207.030112][T10137] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  207.032765][T10137] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  207.035784][T10137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  207.038303][T10137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  207.853404][ T5878] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  207.858292][ T5878] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  207.864893][ T5878] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  207.868493][ T5878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  207.872670][ T5878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  209.059333][ T5878] Bluetooth: hci3: command tx timeout
[  209.139435][ T5878] Bluetooth: hci4: command tx timeout
[  209.939506][ T5878] Bluetooth: hci5: command tx timeout
[  211.139629][ T5878] Bluetooth: hci3: command tx timeout
[  211.219463][ T5878] Bluetooth: hci4: command tx timeout
[  212.020422][ T5878] Bluetooth: hci5: command tx timeout
[  213.219347][ T5878] Bluetooth: hci3: command tx timeout
[  213.299313][ T5878] Bluetooth: hci4: command tx timeout
[  214.099299][ T5878] Bluetooth: hci5: command tx timeout
[  215.299267][ T5878] Bluetooth: hci3: command tx timeout
[  215.379294][ T5878] Bluetooth: hci4: command tx timeout
[  216.179367][ T5878] Bluetooth: hci5: command tx timeout
[  255.463604][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.466374][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  267.983150][ T5879] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  267.986503][ T5879] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  267.990660][ T5879] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  267.993614][ T5879] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  267.996233][ T5879] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  268.016163][ T5879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  268.020743][ T5879] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  268.023756][ T5879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  268.026786][ T5879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  268.030798][ T5879] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  268.855666][ T5879] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  268.858936][ T5879] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  268.862692][ T5879] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  268.865894][ T5879] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  268.868876][ T5879] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  270.019243][ T5879] Bluetooth: hci6: command tx timeout
[  270.099264][ T5879] Bluetooth: hci7: command tx timeout
[  270.899263][ T5879] Bluetooth: hci8: command tx timeout
[  272.099277][ T5879] Bluetooth: hci6: command tx timeout
[  272.179298][ T5879] Bluetooth: hci7: command tx timeout
[  272.979399][ T5879] Bluetooth: hci8: command tx timeout
[  274.179339][ T5879] Bluetooth: hci6: command tx timeout
[  274.260224][ T5879] Bluetooth: hci7: command tx timeout
[  275.059293][ T5879] Bluetooth: hci8: command tx timeout
[  276.259426][ T5879] Bluetooth: hci6: command tx timeout
[  276.339436][ T5879] Bluetooth: hci7: command tx timeout
[  277.139370][ T5879] Bluetooth: hci8: command tx timeout
[  296.739136][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  296.742043][    C0] rcu: 	0-....: (1 GPs behind) idle=ddfc/1/0x4000000000000000 softirq=32708/32710 fqs=5249
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  296.748614][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  296.751501][    C0] rcu: 	 number:   958082          0            0
[  296.754215][    C0] rcu: 	cputime:    24374      28115           93   ==> 52500(ms)
[  296.757328][    C0] rcu: 	(t=10502 jiffies g=25641 q=2145 ncpus=2)
[  296.759845][    C0] CPU: 0 UID: 0 PID: 10340 Comm: syz.0.1945 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  296.759859][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.759866][    C0] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  296.759888][    C0] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  296.759894][    C0] RSP: 0018:ffffc90000007600 EFLAGS: 00000206
[  296.759903][    C0] RAX: c1c4706053b37800 RBX: 1ffff92000000ec8 RCX: c1c4706053b37800
[  296.759909][    C0] RDX: 0000000000000000 RSI: ffffffff8d9987c6 RDI: ffffffff8be29f80
[  296.759914][    C0] RBP: ffffc900000076f8 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  296.759919][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: ffffffff8e144400
[  296.759924][    C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001
[  296.759929][    C0] FS:  00007f63f63f76c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  296.759935][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  296.759942][    C0] CR2: 0000200000000040 CR3: 000000003fd68000 CR4: 00000000000006f0
[  296.759981][    C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000082
[  296.759990][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  296.759997][    C0] Call Trace:
[  296.760006][    C0]  <IRQ>
[  296.760011][    C0]  ? __lock_acquire+0xab9/0xd20
[  296.760034][    C0]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  296.760055][    C0]  ? unwind_next_frame+0xa5/0x2390
[  296.760079][    C0]  __rcu_read_unlock+0x84/0xe0
[  296.760097][    C0]  ? unwind_next_frame+0xa5/0x2390
[  296.760108][    C0]  unwind_next_frame+0x19ae/0x2390
[  296.760127][    C0]  ? unwind_next_frame+0xa5/0x2390
[  296.760141][    C0]  ? alloc_file_pseudo+0x13d/0x210
[  296.760161][    C0]  ? rcu_core+0xc34/0x1710
[  296.760172][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  296.760189][    C0]  arch_stack_walk+0x11c/0x150
[  296.760210][    C0]  ? anon_inode_getfd+0xca/0x1b0
[  296.760229][    C0]  stack_trace_save+0x9c/0xe0
[  296.760245][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  296.760261][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  296.760276][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  296.760294][    C0]  kasan_save_track+0x3e/0x80
[  296.760310][    C0]  ? kasan_save_track+0x3e/0x80
[  296.760325][    C0]  ? kasan_save_free_info+0x46/0x50
[  296.760337][    C0]  ? __kasan_slab_free+0x62/0x70
[  296.760348][    C0]  ? slab_free_after_rcu_debug+0x129/0x2a0
[  296.760364][    C0]  ? rcu_core+0xca8/0x1710
[  296.760374][    C0]  ? handle_softirqs+0x286/0x870
[  296.760385][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  296.760397][    C0]  ? irq_exit_rcu+0x9/0x30
[  296.760408][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  296.760423][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  296.760434][    C0]  ? preempt_schedule_irq+0xb0/0x150
[  296.760447][    C0]  ? irqentry_exit+0x6f/0x90
[  296.760460][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  296.760472][    C0]  ? lock_release+0x2b5/0x3e0
[  296.760482][    C0]  ? kmem_cache_alloc_noprof+0x4b/0x3c0
[  296.760492][    C0]  ? security_file_alloc+0x34/0x330
[  296.760505][    C0]  ? init_file+0x93/0x2f0
[  296.760517][    C0]  ? alloc_empty_file+0x6e/0x1d0
[  296.760530][    C0]  ? alloc_file_pseudo+0x13d/0x210
[  296.760632][    C0]  kasan_save_free_info+0x46/0x50
[  296.760650][    C0]  __kasan_slab_free+0x62/0x70
[  296.760662][    C0]  slab_free_after_rcu_debug+0x129/0x2a0
[  296.760678][    C0]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  296.760692][    C0]  ? rcu_core+0xc34/0x1710
[  296.760706][    C0]  rcu_core+0xca8/0x1710
[  296.760717][    C0]  ? clockevents_program_event+0x24d/0x360
[  296.760752][    C0]  ? __pfx_rcu_core+0x10/0x10
[  296.760766][    C0]  ? __irq_exit_rcu+0xd8/0x1f0
[  296.760779][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  296.760799][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.760832][    C0]  handle_softirqs+0x286/0x870
[  296.760851][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  296.760870][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  296.760888][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  296.760910][    C0]  __irq_exit_rcu+0xca/0x1f0
[  296.760924][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  296.760946][    C0]  irq_exit_rcu+0x9/0x30
[  296.760958][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  296.760973][    C0]  </IRQ>
[  296.760978][    C0]  <TASK>
[  296.760983][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  296.760995][    C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  296.761010][    C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 5b 22 21 f6 e8 96 f5 57 f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  296.761019][    C0] RSP: 0018:ffffc90002f57780 EFLAGS: 00000282
[  296.761031][    C0] RAX: c1c4706053b37800 RBX: 0000000000000000 RCX: c1c4706053b37800
[  296.761039][    C0] RDX: 0000000000000000 RSI: ffffffff8d9987c6 RDI: 0000000000000001
[  296.761046][    C0] RBP: ffffc90002f57820 R08: ffffffff8fa1eaf7 R09: 1ffffffff1f43d5e
[  296.761054][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d5f R12: 0000000000000000
[  296.761062][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920005eaef0
[  296.761087][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  296.761109][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  296.761126][    C0]  irqentry_exit+0x6f/0x90
[  296.761141][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  296.761153][    C0] RIP: 0010:lock_release+0x2b5/0x3e0
[  296.761164][    C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 5b cc 01 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e
[  296.761172][    C0] RSP: 0018:ffffc90002f578e8 EFLAGS: 00000206
[  296.761181][    C0] RAX: c1c4706053b37800 RBX: 0000000000000287 RCX: c1c4706053b37800
[  296.761189][    C0] RDX: 0000000000000000 RSI: ffffffff8db864db RDI: ffffffff8be29f80
[  296.761196][    C0] RBP: ffff888024d627b0 R08: 0000000000000000 R09: ffffffff8215f91d
[  296.761204][    C0] R10: dffffc0000000000 R11: ffffed1004354901 R12: 0000000000000000
[  296.761211][    C0] R13: 0000000000000000 R14: ffffffff8e246a60 R15: ffff888024d61cc0
[  296.761225][    C0]  ? fs_reclaim_acquire+0x7d/0x100
[  296.761252][    C0]  ? kmem_cache_alloc_noprof+0x4b/0x3c0
[  296.761268][    C0]  kmem_cache_alloc_noprof+0x4b/0x3c0
[  296.761278][    C0]  ? security_file_alloc+0x34/0x330
[  296.761294][    C0]  security_file_alloc+0x34/0x330
[  296.761308][    C0]  init_file+0x93/0x2f0
[  296.761325][    C0]  alloc_empty_file+0x6e/0x1d0
[  296.761340][    C0]  alloc_file_pseudo+0x13d/0x210
[  296.761356][    C0]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  296.761381][    C0]  anon_inode_getfd+0xca/0x1b0
[  296.761397][    C0]  bpf_prog_load+0x1465/0x1930
[  296.761420][    C0]  ? __pfx_bpf_prog_load+0x10/0x10
[  296.761429][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  296.761460][    C0]  ? bpf_lsm_bpf+0x9/0x20
[  296.761469][    C0]  ? security_bpf+0x7e/0x300
[  296.761485][    C0]  __sys_bpf+0x528/0x870
[  296.761499][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  296.761533][    C0]  __x64_sys_bpf+0x7c/0x90
[  296.761551][    C0]  do_syscall_64+0xfa/0x3b0
[  296.761567][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.761604][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  296.761626][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.761636][    C0] RIP: 0033:0x7f63f658eb69
[  296.761647][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  296.761656][    C0] RSP: 002b:00007f63f63f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  296.761665][    C0] RAX: ffffffffffffffda RBX: 00007f63f67b5fa0 RCX: 00007f63f658eb69
[  296.761673][    C0] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005
[  296.761679][    C0] RBP: 00007f63f6611df1 R08: 0000000000000000 R09: 0000000000000000
[  296.761685][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.761691][    C0] R13: 0000000000000000 R14: 00007f63f67b5fa0 R15: 00007fff3b15c5a8
[  296.761713][    C0]  </TASK>
[  297.074290][    C0] sched: DL replenish lagged too much

VM DIAGNOSIS:
14:28:08  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006930
R8 =ffff888021bd8237 R9 =1ffff1100437b046 R10=dffffc0000000000 R11=ffffffff85472220
R12=dffffc0000000000 R13=ffffffff99af58be R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547229c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f63f63f76c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=000000003fd68000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f63f6612f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000014 RCX=ffffffff81c98965 RDX=0000000000000008
RSI=0000000000000000 RDI=ffffe8ffffc8000c RBP=0000000000000001 RSP=ffffc900033d7538
R8 =ffffe8ffffc80013 R9 =1ffffd1ffff90002 R10=dffffc0000000000 R11=fffff91ffff90003
R12=ffffffff8dbbec78 R13=dffffc0000000000 R14=ffffe8ffffc80000 R15=ffffffff8dbbec78
RIP=ffffffff8b6ead60 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc944ca0800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe3cefafe8 CR3=0000000028338000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
