last executing test programs:

16.740287756s ago: executing program 2 (id=1057):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1b0000001e006b00003fe30400007ea60800"/27, 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8810)

16.740082739s ago: executing program 0 (id=1058):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)="2e0000002c008146ecdb4c0000853d50f4fb44000980ec00f402100000026e7600"/46, 0x2e}], 0x1}, 0x0)

16.739868582s ago: executing program 0 (id=1059):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x3}}, 0x80, 0x0}, 0x0)

16.739769766s ago: executing program 2 (id=1060):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x11, 0x0, 0x0)

16.67347871s ago: executing program 2 (id=1061):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c)

16.673237443s ago: executing program 0 (id=1062):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8)

16.673079345s ago: executing program 0 (id=1063):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000600000000000000f6ffffff18110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000b", @ANYRES8], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

16.590743824s ago: executing program 2 (id=1064):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100e64, 0xc78, 0x200000, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x69}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x14140)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

16.590459095s ago: executing program 1 (id=1065):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f80000000000000001000000b7040000010000008500000082"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33)

16.511385517s ago: executing program 1 (id=1066):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r0, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x5}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002880)="c2", 0x1}], 0x1}, 0x4c810)

16.511126437s ago: executing program 1 (id=1067):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590214000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xd6a3}], 0x4}, 0x0)

16.25986442s ago: executing program 2 (id=1068):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

16.189019712s ago: executing program 2 (id=1069):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}})
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0x4f, 0x1c, &(0x7f0000000040)="a4f94b8c234e4016a2fe1b0be138d1a24fa77ff01a649e726c278f5b60f10594e69c41ed9a29a45b052929eed13f8e2708077bfd7f65cfcdaf7a75f72ff7a31ad7fd3c2fdaf8b0db40faa000e5024c", &(0x7f00000000c0)=""/28, 0xffffffff, 0x0, 0xf2, 0x67, &(0x7f00000001c0)="bd52932cd47c26c471d3b950f69bbbbe1af1bd207ef5d6f0a488984a69ca74e60459ead7cda99a5de1e3a7d2d432e2d37384f4d7282807803d405a7f3507e060e0171822af00941c0b31a5a51076a9811d63d8ab573ccdaf8525bedadb4e89780b7b3dd08363112621f05d6ecb41b675162b53f19ebe607a4d4b4087185af2dd70ed7bd1d94d2d985d4839a182d09acea8b54ef1fca362195bc386a0d8aa037304a89f6ddcb8f77296121be46e6c7e6a09864f753dcfb9860af546417c7df414c783a6cdbeeed4752400ff91663e87833ded37b49de825002198cf636f0bae890c0a1921170f18d51f3e5c53ce4d0678f30a", &(0x7f00000002c0)="f479b8480774c916819b9e33d15fe07d2d68be98fd042276325625ca10010cea0375687b9c6f2a7db3bc1c1fefcee9e559a03dd833cd5705a7396db49546b4198c81af8ee177602af59d33e4e9f1db2cfbd930abe0e67165e1e3a59387a8c4a8ac808a07afd219", 0x2, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400})
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)
recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x12f20}, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="140000004f", 0x5}, {&(0x7f0000000080)='\x00'/10, 0xa}], 0x2}, 0x800)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

16.188655916s ago: executing program 1 (id=1070):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

16.067404828s ago: executing program 0 (id=1071):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffc0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x102, &(0x7f00000008c0)=""/258}, 0x94)

16.067087675s ago: executing program 0 (id=1072):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880), 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r5 = socket$kcm(0xf, 0x3, 0x2)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r6, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000", 0x8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.991423434s ago: executing program 1 (id=1073):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

15.929831316s ago: executing program 1 (id=1074):
r0 = socket$kcm(0x25, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

346.442996ms ago: executing program 32 (id=1072):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880), 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r5 = socket$kcm(0xf, 0x3, 0x2)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r6, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000", 0x8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

212.755828ms ago: executing program 33 (id=1074):
r0 = socket$kcm(0x25, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 34 (id=1069):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}})
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0x4f, 0x1c, &(0x7f0000000040)="a4f94b8c234e4016a2fe1b0be138d1a24fa77ff01a649e726c278f5b60f10594e69c41ed9a29a45b052929eed13f8e2708077bfd7f65cfcdaf7a75f72ff7a31ad7fd3c2fdaf8b0db40faa000e5024c", &(0x7f00000000c0)=""/28, 0xffffffff, 0x0, 0xf2, 0x67, &(0x7f00000001c0)="bd52932cd47c26c471d3b950f69bbbbe1af1bd207ef5d6f0a488984a69ca74e60459ead7cda99a5de1e3a7d2d432e2d37384f4d7282807803d405a7f3507e060e0171822af00941c0b31a5a51076a9811d63d8ab573ccdaf8525bedadb4e89780b7b3dd08363112621f05d6ecb41b675162b53f19ebe607a4d4b4087185af2dd70ed7bd1d94d2d985d4839a182d09acea8b54ef1fca362195bc386a0d8aa037304a89f6ddcb8f77296121be46e6c7e6a09864f753dcfb9860af546417c7df414c783a6cdbeeed4752400ff91663e87833ded37b49de825002198cf636f0bae890c0a1921170f18d51f3e5c53ce4d0678f30a", &(0x7f00000002c0)="f479b8480774c916819b9e33d15fe07d2d68be98fd042276325625ca10010cea0375687b9c6f2a7db3bc1c1fefcee9e559a03dd833cd5705a7396db49546b4198c81af8ee177602af59d33e4e9f1db2cfbd930abe0e67165e1e3a59387a8c4a8ac808a07afd219", 0x2, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400})
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)
recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x12f20}, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="140000004f", 0x5}, {&(0x7f0000000080)='\x00'/10, 0xa}], 0x2}, 0x800)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:34039' (ED25519) to the list of known hosts.
syzkaller login: [   41.082252][ T5759] cgroup: Unknown subsys name 'net'
[   41.199594][ T5759] cgroup: Unknown subsys name 'cpuset'
[   41.204139][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.504244][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.773762][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.777519][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.780188][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.783067][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.785787][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.848632][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.851372][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.854003][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.857484][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.860210][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.878941][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.885798][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.894393][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.897784][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.900446][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.991347][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   46.105915][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   46.141411][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.144330][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.147039][ T5826] bridge_slave_0: entered allmulticast mode
[   46.149836][ T5826] bridge_slave_0: entered promiscuous mode
[   46.153421][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.155706][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.158615][ T5826] bridge_slave_1: entered allmulticast mode
[   46.161386][ T5826] bridge_slave_1: entered promiscuous mode
[   46.183619][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   46.197606][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.212521][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.259570][ T5826] team0: Port device team_slave_0 added
[   46.261777][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.264123][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.267082][ T5832] bridge_slave_0: entered allmulticast mode
[   46.269761][ T5832] bridge_slave_0: entered promiscuous mode
[   46.272946][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.275303][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.277802][ T5832] bridge_slave_1: entered allmulticast mode
[   46.280538][ T5832] bridge_slave_1: entered promiscuous mode
[   46.288132][ T5826] team0: Port device team_slave_1 added
[   46.331146][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.333490][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.342022][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.355242][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.360049][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.370048][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.373073][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.384129][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.396394][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.399796][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.402927][ T5835] bridge_slave_0: entered allmulticast mode
[   46.407019][ T5835] bridge_slave_0: entered promiscuous mode
[   46.419416][ T5832] team0: Port device team_slave_0 added
[   46.422162][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.425334][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.428733][ T5835] bridge_slave_1: entered allmulticast mode
[   46.432682][ T5835] bridge_slave_1: entered promiscuous mode
[   46.449390][ T5832] team0: Port device team_slave_1 added
[   46.493437][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.497658][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.499923][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.509044][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.515427][ T5826] hsr_slave_0: entered promiscuous mode
[   46.518373][ T5826] hsr_slave_1: entered promiscuous mode
[   46.522750][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.526064][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.528657][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.537003][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.570801][ T5835] team0: Port device team_slave_0 added
[   46.588043][ T5835] team0: Port device team_slave_1 added
[   46.619271][ T5832] hsr_slave_0: entered promiscuous mode
[   46.621664][ T5832] hsr_slave_1: entered promiscuous mode
[   46.623827][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.626447][ T5832] Cannot create hsr debugfs directory
[   46.631881][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.634248][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.642992][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.654692][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.657340][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.665668][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.739086][ T5835] hsr_slave_0: entered promiscuous mode
[   46.741452][ T5835] hsr_slave_1: entered promiscuous mode
[   46.743626][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.746166][ T5835] Cannot create hsr debugfs directory
[   46.842741][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.852590][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.865963][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.876412][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.901724][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.913896][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.916301][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.919033][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.921356][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.932145][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.948594][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.952746][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.975013][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.980397][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.984451][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.989136][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.015827][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.018303][ T5835] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.020783][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.023111][ T5835] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.034288][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.037823][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.040796][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.046196][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.049321][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.067253][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   47.075194][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.077709][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.096870][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.099408][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.159328][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.169578][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.182861][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   47.193681][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.196085][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.208897][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   47.219015][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.221420][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.225673][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.228130][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.234791][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.237217][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.263600][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.300753][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.331135][ T5826] veth0_vlan: entered promiscuous mode
[   47.336252][ T5826] veth1_vlan: entered promiscuous mode
[   47.368414][ T5826] veth0_macvtap: entered promiscuous mode
[   47.372295][ T5826] veth1_macvtap: entered promiscuous mode
[   47.381287][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.392935][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.398422][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.401311][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.404125][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.410383][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.464101][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.474992][  T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.480032][  T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.484849][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.508301][ T5832] veth0_vlan: entered promiscuous mode
[   47.527155][ T5832] veth1_vlan: entered promiscuous mode
[   47.536550][  T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.540114][  T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.552710][ T5832] veth0_macvtap: entered promiscuous mode
[   47.557305][ T5832] veth1_macvtap: entered promiscuous mode
[   47.579204][ T5835] veth0_vlan: entered promiscuous mode
[   47.586169][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.593835][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.596540][ T5835] veth1_vlan: entered promiscuous mode
[   47.602386][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.629372][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.632682][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.635450][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.642603][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.653554][ T5835] veth0_macvtap: entered promiscuous mode
[   47.670232][ T5835] veth1_macvtap: entered promiscuous mode
[   47.704670][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.728220][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.752510][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.755400][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.764779][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.768364][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.773940][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.776543][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.811674][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.815157][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.819935][   T54] Bluetooth: hci0: command tx timeout
[   47.867412][  T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.873535][  T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.895340][  T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.898907][   T54] Bluetooth: hci1: command tx timeout
[   47.901352][  T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.967319][   T54] Bluetooth: hci2: command tx timeout
[   48.011541][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.017470][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0
[   48.053716][    C1] hrtimer: interrupt took 476962 ns
[   48.234895][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.242049][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.447206][ T5920] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12'.
[   49.888205][   T54] Bluetooth: hci0: command tx timeout
[   49.966937][   T54] Bluetooth: hci1: command tx timeout
[   50.048217][   T54] Bluetooth: hci2: command tx timeout
[   50.455060][ T5955] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.28'.
[   50.458934][ T5955] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   50.462015][ T5955] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   50.658438][ T5964] netlink: 'syz.1.31': attribute type 64 has an invalid length.
[   51.672723][ T6000] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.49'.
[   51.967579][   T54] Bluetooth: hci0: command tx timeout
[   52.046937][   T54] Bluetooth: hci1: command tx timeout
[   52.133050][   T54] Bluetooth: hci2: command tx timeout
[   52.937530][ T6028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.983056][ T6030] netlink: 'syz.1.56': attribute type 3 has an invalid length.
[   52.990963][ T6030] netlink: 'syz.1.56': attribute type 1 has an invalid length.
[   52.995945][ T6030] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.56'.
[   53.493290][ T6062] netlink: 14 bytes leftover after parsing attributes in process `syz.1.76'.
[   53.499656][ T6062] hsr_slave_0: left promiscuous mode
[   53.503577][ T6062] hsr_slave_1: left promiscuous mode
[   53.993947][ T6095] Illegal XDP return value 4294967274 on prog  (id 28) dev N/A, expect packet loss!
[   54.056855][   T54] Bluetooth: hci0: command tx timeout
[   54.136842][   T54] Bluetooth: hci1: command tx timeout
[   54.189294][ T6109] netlink: 'syz.1.98': attribute type 4 has an invalid length.
[   54.208177][   T54] Bluetooth: hci2: command tx timeout
[   54.888073][ T6159] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.122'.
[   55.066367][ T6166] netlink: 'syz.1.124': attribute type 2 has an invalid length.
[   55.076074][ T6166] netlink: 'syz.1.124': attribute type 8 has an invalid length.
[   55.084030][ T6166] netlink: 132 bytes leftover after parsing attributes in process `syz.1.124'.
[   55.368893][ T6183] warning: `syz.1.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.832184][ T6209] netlink: 'syz.1.145': attribute type 39 has an invalid length.
[   55.992670][ T6209] Zero length message leads to an empty skb
[   56.063177][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'.
[   57.082877][ T6236] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.158'.
[   57.121230][ T6241] netlink: 'syz.2.159': attribute type 29 has an invalid length.
[   57.127987][ T6241] netlink: 'syz.2.159': attribute type 29 has an invalid length.
[   57.131383][ T6241] netlink: 'syz.2.159': attribute type 29 has an invalid length.
[   57.985233][ T6262] netlink: 'syz.1.167': attribute type 29 has an invalid length.
[   57.991557][ T6262] netlink: 'syz.1.167': attribute type 29 has an invalid length.
[   58.012665][ T6262] syzkaller0: entered promiscuous mode
[   58.015108][ T6262] syzkaller0: entered allmulticast mode
[   58.447177][ T6281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   58.451166][ T6281] IPv6: NLM_F_CREATE should be set when creating new route
[   58.454117][ T6281] IPv6: NLM_F_CREATE should be set when creating new route
[   58.457035][ T6281] IPv6: NLM_F_CREATE should be set when creating new route
[   58.879737][   T54] Bluetooth: hci0: unexpected event 0x08 length: 151 > 4
[   60.830683][ T6399] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.226'.
[   61.118983][ T6422] netlink: 14 bytes leftover after parsing attributes in process `syz.2.238'.
[   61.162898][ T6425] syz.1.240 uses obsolete (PF_INET,SOCK_PACKET)
[   61.169451][ T6425] netlink: 'syz.1.240': attribute type 10 has an invalid length.
[   61.216134][ T6425] team0: Device ipvlan1 failed to register rx_handler
[   61.375161][ T6441] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   61.529629][ T6459] netlink: 'syz.0.255': attribute type 21 has an invalid length.
[   61.532264][ T6459] IPv6: NLM_F_CREATE should be specified when creating new route
[   61.535039][ T6459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   61.537590][ T6459] IPv6: NLM_F_CREATE should be set when creating new route
[   61.540051][ T6459] IPv6: NLM_F_CREATE should be set when creating new route
[   61.542459][ T6459] IPv6: NLM_F_CREATE should be set when creating new route
[   61.586134][ T6464] netlink: 'syz.2.258': attribute type 2 has an invalid length.
[   61.593859][ T6464] netlink: 'syz.2.258': attribute type 1 has an invalid length.
[   61.650513][ T6471] netlink: 168 bytes leftover after parsing attributes in process `syz.1.263'.
[   61.770568][ T6485] netlink: 'syz.2.268': attribute type 10 has an invalid length.
[   61.823344][ T6491] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.272'.
[   62.002609][ T6507] netlink: 'syz.2.280': attribute type 2 has an invalid length.
[   62.007091][ T6507] netlink: 51 bytes leftover after parsing attributes in process `syz.2.280'.
[   62.161983][ T6519] netlink: 'syz.2.286': attribute type 12 has an invalid length.
[   62.164535][ T6519] netlink: 132 bytes leftover after parsing attributes in process `syz.2.286'.
[   62.221497][ T6509] netlink: 'syz.0.281': attribute type 25 has an invalid length.
[   62.858777][ T6570] netlink: 'syz.0.310': attribute type 13 has an invalid length.
[   62.866048][ T6570] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.310'.
[   62.937405][ T6575] delete_channel: no stack
[   62.949794][ T6578] netlink: 'syz.1.315': attribute type 10 has an invalid length.
[   62.960544][ T6578] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   63.160417][ T6596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.323'.
[   63.279807][ T6602] netlink: 152 bytes leftover after parsing attributes in process `syz.0.326'.
[   63.373970][ T6609] sctp: [Deprecated]: syz.2.327 (pid 6609) Use of struct sctp_assoc_value in delayed_ack socket option.
[   63.373970][ T6609] Use struct sctp_sack_info instead
[   63.382711][ T6607] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.329'.
[   63.438522][ T6608] sit0: entered allmulticast mode
[   63.539754][ T6608] sit0: entered promiscuous mode
[   67.061269][ T6678] validate_nla: 4 callbacks suppressed
[   67.061326][ T6678] netlink: 'syz.0.356': attribute type 10 has an invalid length.
[   67.069656][ T6678] veth1_vlan: entered allmulticast mode
[   67.092299][ T6678] team0: Device veth1_vlan failed to register rx_handler
[   67.258869][ T6695] netlink: 'syz.1.363': attribute type 10 has an invalid length.
[   67.262723][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.266233][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.273075][ T6696] cgroup: fork rejected by pids controller in /syz0
[   67.284281][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.287119][ T6695] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.289958][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.292578][ T6695] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.302036][ T6695] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   67.598779][ T5875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.650167][ T5875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.684725][ T5875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.748329][ T5875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.830657][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.834617][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.838953][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.843593][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.847583][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.924471][ T5875] bridge_slave_1: left allmulticast mode
[   67.926512][ T5875] bridge_slave_1: left promiscuous mode
[   67.930727][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.939236][ T5875] bridge_slave_0: left allmulticast mode
[   67.941292][ T5875] bridge_slave_0: left promiscuous mode
[   67.943183][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.229724][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.248221][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.259028][ T5875] bond0 (unregistering): Released all slaves
[   68.515660][ T6709] chnl_net:caif_netlink_parms(): no params data found
[   68.690679][ T5875] hsr_slave_0: left promiscuous mode
[   68.698630][ T5875] hsr_slave_1: left promiscuous mode
[   68.710772][ T5875] veth1_macvtap: left promiscuous mode
[   68.713063][ T5875] veth0_macvtap: left promiscuous mode
[   68.725247][ T5875] veth0_vlan: left promiscuous mode
[   69.405224][ T5875] team0 (unregistering): Port device team_slave_1 removed
[   69.433960][ T5875] team0 (unregistering): Port device team_slave_0 removed
[   69.650806][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.653367][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.655869][ T6709] bridge_slave_0: entered allmulticast mode
[   69.661513][ T6709] bridge_slave_0: entered promiscuous mode
[   69.673014][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.676236][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.680913][ T6709] bridge_slave_1: entered allmulticast mode
[   69.683777][ T6709] bridge_slave_1: entered promiscuous mode
[   69.709876][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.714515][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.789816][ T6709] team0: Port device team_slave_0 added
[   69.793620][ T6709] team0: Port device team_slave_1 added
[   69.848064][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.854795][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.869750][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.888593][ T5828] Bluetooth: hci2: command tx timeout
[   69.912611][ T6760] syzkaller0: entered promiscuous mode
[   69.914504][ T6760] syzkaller0: entered allmulticast mode
[   69.915584][ T6765] Dead loop on virtual device ip6_vti0, fix it urgently!
[   69.920799][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.933294][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.943314][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.065370][ T6774] netlink: 17 bytes leftover after parsing attributes in process `syz.2.389'.
[   70.068588][ T6774] netlink: zone id is out of range
[   70.070546][ T6774] netlink: zone id is out of range
[   70.072432][ T6774] netlink: zone id is out of range
[   70.074216][ T6774] netlink: zone id is out of range
[   70.075956][ T6774] netlink: zone id is out of range
[   70.078390][ T6774] netlink: zone id is out of range
[   70.080150][ T6774] netlink: zone id is out of range
[   70.081967][ T6774] netlink: zone id is out of range
[   70.083739][ T6774] netlink: zone id is out of range
[   70.779263][ T6709] hsr_slave_0: entered promiscuous mode
[   70.784718][ T6709] hsr_slave_1: entered promiscuous mode
[   70.815160][ T6786] bridge0: port 3(ip6gretap0) entered blocking state
[   70.818733][ T6786] bridge0: port 3(ip6gretap0) entered disabled state
[   70.821967][ T6786] ip6gretap0: entered allmulticast mode
[   70.827630][ T6786] ip6gretap0: entered promiscuous mode
[   70.834481][ T6786] bridge0: port 3(ip6gretap0) entered blocking state
[   70.837091][ T6786] bridge0: port 3(ip6gretap0) entered forwarding state
[   70.849560][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.851832][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.914091][ T6790] netlink: 'syz.2.397': attribute type 10 has an invalid length.
[   71.019451][ T6790] team0: Device ipvlan1 failed to register rx_handler
[   71.243089][ T6812] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.402'.
[   71.257236][ T6812] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.402'.
[   71.528549][ T6709] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.557313][ T6709] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.564113][ T6828] netlink: 'syz.2.407': attribute type 39 has an invalid length.
[   71.564877][ T6709] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.574984][ T6709] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.716123][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.730813][ T6709] 8021q: adding VLAN 0 to HW filter on device team0
[   71.747484][  T750] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.749950][  T750] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.801590][  T750] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.804518][  T750] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.967637][ T5828] Bluetooth: hci2: command tx timeout
[   72.012912][ T6709] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.019637][ T6871] netlink: 'syz.2.418': attribute type 25 has an invalid length.
[   72.023138][ T6871] netlink: 'syz.2.418': attribute type 28 has an invalid length.
[   72.048669][ T6709] veth0_vlan: entered promiscuous mode
[   72.063153][ T6709] veth1_vlan: entered promiscuous mode
[   72.105305][ T6709] veth0_macvtap: entered promiscuous mode
[   72.113961][ T6709] veth1_macvtap: entered promiscuous mode
[   72.139934][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.154664][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.159609][ T6709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.163400][ T6709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.172871][ T6709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.175879][ T6709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.241442][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.244600][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.292509][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.297596][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.759822][ T6977] netlink: 10 bytes leftover after parsing attributes in process `syz.0.458'.
[   74.057057][ T5828] Bluetooth: hci2: command tx timeout
[   74.212979][ T7012] syz.1.473: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   74.230394][ T7012] CPU: 1 UID: 0 PID: 7012 Comm: syz.1.473 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[   74.230408][ T7012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.230413][ T7012] Call Trace:
[   74.230417][ T7012]  <TASK>
[   74.230421][ T7012]  dump_stack_lvl+0x189/0x250
[   74.230437][ T7012]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.230447][ T7012]  ? __pfx__printk+0x10/0x10
[   74.230459][ T7012]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   74.230469][ T7012]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   74.230480][ T7012]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   74.230492][ T7012]  warn_alloc+0x214/0x310
[   74.230501][ T7012]  ? stack_depot_save_flags+0x429/0x900
[   74.230514][ T7012]  ? __pfx_warn_alloc+0x10/0x10
[   74.230524][ T7012]  ? kasan_save_track+0x4f/0x80
[   74.230570][ T7012]  ? xskq_create+0x56/0x170
[   74.230578][ T7012]  ? xsk_init_queue+0xb0/0x110
[   74.230587][ T7012]  ? xsk_setsockopt+0x4de/0x710
[   74.230596][ T7012]  ? do_sock_setsockopt+0x17c/0x1b0
[   74.230604][ T7012]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   74.230612][ T7012]  ? do_syscall_64+0xfa/0x3b0
[   74.230623][ T7012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.230634][ T7012]  __vmalloc_node_range_noprof+0x125/0x12f0
[   74.230663][ T7012]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   74.230675][ T7012]  ? __kasan_kmalloc+0x93/0xb0
[   74.230693][ T7012]  vmalloc_user_noprof+0xad/0xf0
[   74.230702][ T7012]  ? xskq_create+0xbf/0x170
[   74.230712][ T7012]  xskq_create+0xbf/0x170
[   74.230724][ T7012]  xsk_init_queue+0xb0/0x110
[   74.230735][ T7012]  xsk_setsockopt+0x4de/0x710
[   74.230745][ T7012]  ? __pfx_xsk_setsockopt+0x10/0x10
[   74.230756][ T7012]  ? __fget_files+0x2a/0x420
[   74.230765][ T7012]  ? aa_sock_opt_perm+0x74/0x110
[   74.230776][ T7012]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   74.230787][ T7012]  ? __pfx_xsk_setsockopt+0x10/0x10
[   74.230796][ T7012]  do_sock_setsockopt+0x17c/0x1b0
[   74.230807][ T7012]  __x64_sys_setsockopt+0x13f/0x1b0
[   74.230819][ T7012]  do_syscall_64+0xfa/0x3b0
[   74.230829][ T7012]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.230838][ T7012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.230846][ T7012]  ? exc_page_fault+0x9f/0xf0
[   74.230857][ T7012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.230864][ T7012] RIP: 0033:0x7f9aa7d8eb69
[   74.230874][ T7012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.230880][ T7012] RSP: 002b:00007f9aa8b26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   74.230916][ T7012] RAX: ffffffffffffffda RBX: 00007f9aa7fb5fa0 RCX: 00007f9aa7d8eb69
[   74.230922][ T7012] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[   74.230927][ T7012] RBP: 00007f9aa7e11df1 R08: 0000000000000004 R09: 0000000000000000
[   74.230932][ T7012] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   74.230936][ T7012] R13: 0000000000000000 R14: 00007f9aa7fb5fa0 R15: 00007ffee917c0a8
[   74.230957][ T7012]  </TASK>
[   74.234460][ T7012] Mem-Info:
[   74.391035][ T7012] active_anon:13389 inactive_anon:0 isolated_anon:0
[   74.391035][ T7012]  active_file:13092 inactive_file:38220 isolated_file:0
[   74.391035][ T7012]  unevictable:1768 dirty:209 writeback:0
[   74.391035][ T7012]  slab_reclaimable:9204 slab_unreclaimable:53561
[   74.391035][ T7012]  mapped:18093 shmem:2441 pagetables:1054
[   74.391035][ T7012]  sec_pagetables:0 bounce:0
[   74.391035][ T7012]  kernel_misc_reclaimable:0
[   74.391035][ T7012]  free:276780 free_pcp:20888 free_cma:0
[   74.409069][ T7012] Node 0 active_anon:42132kB inactive_anon:0kB active_file:29760kB inactive_file:144572kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:57136kB dirty:616kB writeback:0kB shmem:4764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7712kB pagetables:2768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   74.422884][ T7012] Node 1 active_anon:11424kB inactive_anon:0kB active_file:22608kB inactive_file:8308kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:15236kB dirty:220kB writeback:0kB shmem:5000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3524kB pagetables:1448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   74.436110][ T7012] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   74.452282][ T7012] lowmem_reserve[]: 0 812 812 812 812
[   74.454639][ T7012] Node 0 DMA32 free:136744kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42132kB inactive_anon:0kB active_file:29760kB inactive_file:144572kB unevictable:3536kB writepending:616kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:46756kB local_pcp:16112kB free_cma:0kB
[   74.467816][ T7012] lowmem_reserve[]: 0 0 0 0 0
[   74.469908][ T7012] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   74.481662][ T7012] lowmem_reserve[]: 0 0 854 854 854
[   74.484187][ T7012] Node 1 Normal free:495920kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11424kB inactive_anon:0kB active_file:22608kB inactive_file:8308kB unevictable:3536kB writepending:220kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:37276kB local_pcp:14912kB free_cma:0kB
[   74.497174][ T7012] lowmem_reserve[]: 0 0 0 0 0
[   74.499363][ T7012] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   74.504360][ T7012] Node 0 DMA32: 414*4kB (UME) 176*8kB (ME) 151*16kB (ME) 132*32kB (UM) 23*64kB (UME) 17*128kB (UM) 4*256kB (UM) 3*512kB (M) 30*1024kB (UME) 8*2048kB (UM) 18*4096kB (UM) = 136744kB
[   74.511926][ T7012] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   74.518798][ T7012] Node 1 Normal: 1228*4kB (UME) 514*8kB (UE) 605*16kB (UE) 389*32kB (UME) 409*64kB (UME) 99*128kB (UM) 46*256kB (UME) 53*512kB (UME) 30*1024kB (UME) 32*2048kB (UME) 71*4096kB (UM) = 495984kB
[   74.526032][ T7012] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   74.530411][ T7012] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   74.534025][ T7012] 53753 total pagecache pages
[   74.535951][ T7012] 0 pages in swap cache
[   74.538642][ T7012] Free swap  = 124996kB
[   74.540442][ T7012] Total swap = 124996kB
[   74.542222][ T7012] 786301 pages RAM
[   74.543865][ T7012] 0 pages HighMem/MovableOnly
[   74.545813][ T7012] 241075 pages reserved
[   74.547918][ T7012] 0 pages cma reserved
[   75.066008][ T7025] sit0: entered allmulticast mode
[   75.072113][ T7025] sit0: entered promiscuous mode
[   76.126879][ T5828] Bluetooth: hci2: command tx timeout
[   76.576268][ T7076] netlink: 'syz.2.499': attribute type 10 has an invalid length.
[   76.831769][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   76.932387][ T7096] netlink: 'syz.2.509': attribute type 13 has an invalid length.
[   76.935040][ T7096] netlink: 'syz.2.509': attribute type 58 has an invalid length.
[   76.937668][ T7096] netlink: 152 bytes leftover after parsing attributes in process `syz.2.509'.
[   77.114930][ T7105] netlink: 'syz.1.512': attribute type 10 has an invalid length.
[   77.118765][ T7105] netlink: 'syz.1.512': attribute type 19 has an invalid length.
[   77.121338][ T7105] netlink: 156 bytes leftover after parsing attributes in process `syz.1.512'.
[   77.542878][ T7147] net_ratelimit: 75 callbacks suppressed
[   77.542887][ T7147] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   78.503098][ T7167] netlink: 'syz.2.540': attribute type 10 has an invalid length.
[   78.505766][ T7167] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.537453][ T7167] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.671402][ T7167] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   78.821371][ T7174] netlink: 'syz.2.543': attribute type 10 has an invalid length.
[   78.829221][ T7174] team0: Cannot enslave team device to itself
[   79.156151][ T7188] C: renamed from team_slave_0 (while UP)
[   79.161594][ T7188] netlink: 'syz.2.550': attribute type 3 has an invalid length.
[   79.164061][ T7188] netlink: 144 bytes leftover after parsing attributes in process `syz.2.550'.
[   79.171817][ T7188] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   79.243118][ T7192] netlink: 'syz.1.551': attribute type 10 has an invalid length.
[   79.245722][ T7192] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.551'.
[   79.514159][ T7209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.560'.
[   79.623457][ T7216] netlink: 'syz.1.563': attribute type 27 has an invalid length.
[   79.626078][ T7216] netlink: 164 bytes leftover after parsing attributes in process `syz.1.563'.
[   79.715616][ T7226] netlink: 3 bytes leftover after parsing attributes in process `syz.1.568'.
[   79.983160][ T7234] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   80.459456][ T7274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.589'.
[   80.798424][ T7286] bridge0: port 3(netdevsim0) entered blocking state
[   80.802009][ T7286] bridge0: port 3(netdevsim0) entered disabled state
[   80.812181][ T7286] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   80.822070][ T7286] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   80.824930][ T7286] bridge0: port 3(netdevsim0) entered blocking state
[   80.827399][ T7286] bridge0: port 3(netdevsim0) entered forwarding state
[   81.088427][    T9] cfg80211: failed to load regulatory.db
[   81.229471][ T7304] bridge0: port 3(netdevsim0) entered disabled state
[   81.232160][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.235198][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.265862][ T7304] bridge0: port 3(netdevsim0) entered blocking state
[   81.268518][ T7304] bridge0: port 3(netdevsim0) entered forwarding state
[   81.271846][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.274388][ T7304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.277366][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.279926][ T7304] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.290028][ T7304] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   81.741698][ T5828] Bluetooth: hci1: Malformed LE Event: 0x0d
[   82.086418][ T7336] validate_nla: 4 callbacks suppressed
[   82.086428][ T7336] netlink: 'syz.0.617': attribute type 21 has an invalid length.
[   82.092703][ T7336] netlink: 168 bytes leftover after parsing attributes in process `syz.0.617'.
[   82.198656][ T7340] netlink: 'syz.0.619': attribute type 21 has an invalid length.
[   82.751492][ T7367] netlink: 'syz.2.631': attribute type 28 has an invalid length.
[   83.372383][ T7411] netlink: 'syz.1.652': attribute type 21 has an invalid length.
[   83.374990][ T7411] netlink: 156 bytes leftover after parsing attributes in process `syz.1.652'.
[   83.424235][ T7414] netlink: 'syz.1.653': attribute type 39 has an invalid length.
[   84.373768][ T7431] netlink: 22 bytes leftover after parsing attributes in process `syz.2.661'.
[   84.814514][ T7454] netlink: 176 bytes leftover after parsing attributes in process `syz.1.673'.
[   85.108084][ T7483] netlink: 'syz.1.685': attribute type 21 has an invalid length.
[   85.236164][ T7494] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.690'.
[   85.308018][ T7499] bridge0: port 3(ip6gretap0) entered disabled state
[   85.311508][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.315109][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.325875][ T7503] netlink: 'syz.2.694': attribute type 2 has an invalid length.
[   85.328541][ T7499] bridge0: entered allmulticast mode
[   85.340736][ T7503] netlink: 'syz.2.694': attribute type 1 has an invalid length.
[   85.346322][ T7503] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.694'.
[   85.362976][ T7499] bridge0: port 3(ip6gretap0) entered blocking state
[   85.365609][ T7499] bridge0: port 3(ip6gretap0) entered forwarding state
[   85.369206][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.372309][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.375725][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.378699][ T7499] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.390648][ T7499] bridge0: entered promiscuous mode
[   85.549414][ T7525] netlink: 10 bytes leftover after parsing attributes in process `syz.2.704'.
[   85.649970][ T7536] netlink: 164 bytes leftover after parsing attributes in process `syz.0.710'.
[   85.699785][ T7540] netlink: 'syz.0.713': attribute type 29 has an invalid length.
[   86.707376][ T7564] syzkaller0: entered promiscuous mode
[   86.710012][ T7564] syzkaller0: entered allmulticast mode
[   86.818843][ T7573] netlink: 208016 bytes leftover after parsing attributes in process `syz.0.726'.
[   86.821821][ T7573] openvswitch: netlink: Message has 4 unknown bytes.
[   87.234452][ T7588] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.733'.
[   87.237916][ T7588] openvswitch: netlink: Message has 6 unknown bytes.
[   88.000828][ T7613] netlink: 'syz.2.746': attribute type 10 has an invalid length.
[   88.019459][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.022721][ T7613] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   88.037877][ T7613] netlink: 'syz.2.746': attribute type 10 has an invalid length.
[   88.044951][ T7613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.746'.
[   88.050434][ T7613] batadv0: entered promiscuous mode
[   88.052151][ T7613] batadv0: entered allmulticast mode
[   88.054803][ T7613] bond0: (slave batadv0): Releasing backup interface
[   88.058675][ T7613] bridge0: port 3(batadv0) entered blocking state
[   88.060895][ T7613] bridge0: port 3(batadv0) entered disabled state
[   88.199594][ T5875] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   88.202680][ T5875] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   88.731298][ T7642] netlink: 'syz.0.758': attribute type 46 has an invalid length.
[   88.734808][ T7642] netlink: 55 bytes leftover after parsing attributes in process `syz.0.758'.
[   88.823088][ T7647] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.759'.
[   89.009456][ T7654] tap0: tun_chr_ioctl cmd 1074025672
[   89.011641][ T7654] tap0: ignored: set checksum enabled
[   89.129996][ T7663] netlink: 180 bytes leftover after parsing attributes in process `syz.1.768'.
[   89.206115][ T7670] C: renamed from team_slave_0 (while UP)
[   89.209712][ T7670] netlink: 'syz.1.771': attribute type 3 has an invalid length.
[   89.212138][ T7670] netlink: 'syz.1.771': attribute type 1 has an invalid length.
[   89.214681][ T7670] netlink: 116 bytes leftover after parsing attributes in process `syz.1.771'.
[   89.221542][ T7670] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   89.512445][ T7684] netlink: 'syz.0.776': attribute type 8 has an invalid length.
[   89.515060][ T7684] netlink: 'syz.0.776': attribute type 6 has an invalid length.
[   89.526322][ T7684] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.776'.
[   90.229624][ T7716] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.788'.
[   90.232898][ T7716] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   90.235585][ T7716] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   90.342773][ T7720] sit0: entered allmulticast mode
[   90.945392][ T7763] netlink: 48 bytes leftover after parsing attributes in process `syz.0.809'.
[   91.320835][ T7771] : port 1(vlan0) entered blocking state
[   91.331547][ T7771] : port 1(vlan0) entered disabled state
[   91.337312][ T7771] vlan0: entered allmulticast mode
[   91.342498][ T7771] veth0_vlan: entered allmulticast mode
[   91.352727][ T7771] vlan0: entered promiscuous mode
[   91.542152][ T7775] netlink: 'syz.0.813': attribute type 2 has an invalid length.
[   91.544840][ T7775] netlink: 'syz.0.813': attribute type 1 has an invalid length.
[   91.547513][ T7775] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.813'.
[   91.550608][ T7775] nbd: couldn't find a device at index 149
[   91.885722][ T7787] netlink: 'syz.1.819': attribute type 10 has an invalid length.
[   91.893745][ T7787] veth1_vlan: entered allmulticast mode
[   91.898837][ T7787] team0: Device veth1_vlan failed to register rx_handler
[   92.667296][ T7828] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[   92.672170][ T7828] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[   92.905705][ T7854] lo: entered promiscuous mode
[   93.341442][ T7863] netlink: 61955 bytes leftover after parsing attributes in process `syz.1.853'.
[   93.346236][ T7863] netlink: 2 bytes leftover after parsing attributes in process `syz.1.853'.
[   94.148687][ T7902] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.870'.
[   94.260975][ T7909] nr0: tun_chr_ioctl cmd 1074025677
[   94.263027][ T7909] nr0: linktype set to 778
[   94.273187][ T7911] validate_nla: 1 callbacks suppressed
[   94.273196][ T7911] netlink: 'syz.0.873': attribute type 10 has an invalid length.
[   94.287613][ T7911] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.290301][ T7911] bridge_slave_1: left allmulticast mode
[   94.292244][ T7911] bridge_slave_1: left promiscuous mode
[   94.297448][ T7911] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.303859][ T7911] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   94.399341][ T7917] netlink: 830 bytes leftover after parsing attributes in process `syz.1.877'.
[   94.582909][ T7929] C: renamed from team_slave_0 (while UP)
[   94.586313][ T7929] netlink: 'syz.0.882': attribute type 3 has an invalid length.
[   94.589547][ T7929] netlink: 'syz.0.882': attribute type 1 has an invalid length.
[   94.591996][ T7929] netlink: 116 bytes leftover after parsing attributes in process `syz.0.882'.
[   94.595243][ T7929] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   94.835188][ T7956] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.895'.
[   94.855713][ T7957] bridge0: port 2(syz_tun) entered blocking state
[   94.860244][ T7957] bridge0: port 2(syz_tun) entered disabled state
[   94.863721][ T7957] syz_tun: entered allmulticast mode
[   94.866252][ T7957] syz_tun: entered promiscuous mode
[   94.874835][ T7957] bridge0: port 2(syz_tun) entered blocking state
[   94.877222][ T7957] bridge0: port 2(syz_tun) entered forwarding state
[   95.041204][ T7976] netlink: 'syz.1.904': attribute type 10 has an invalid length.
[   95.103447][ T7976] team0 (unregistering): Port device C removed
[   95.111641][ T7976] team0 (unregistering): Port device team_slave_1 removed
[   95.334659][ T7993] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.912'.
[   95.493202][ T8003] netlink: 'syz.2.917': attribute type 21 has an invalid length.
[   95.495768][ T8003] netlink: 128 bytes leftover after parsing attributes in process `syz.2.917'.
[   95.503002][ T8005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.918'.
[   95.510545][ T8003] netlink: 'syz.2.917': attribute type 5 has an invalid length.
[   95.513781][ T8003] netlink: 'syz.2.917': attribute type 6 has an invalid length.
[   95.516274][ T8003] netlink: 3 bytes leftover after parsing attributes in process `syz.2.917'.
[   95.582881][ T8013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.665824][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.756289][ T8015] bridge_slave_0 (unregistering): left allmulticast mode
[   95.773034][ T8015] bridge_slave_0 (unregistering): left promiscuous mode
[   95.775959][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.921661][ T8043] netlink: 'syz.0.937': attribute type 41 has an invalid length.
[   97.360965][ T8070] netlink: 'syz.1.949': attribute type 29 has an invalid length.
[   97.363776][ T8070] netlink: 'syz.1.949': attribute type 3 has an invalid length.
[   97.615449][ T8079] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[   97.619854][ T8079] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[   97.705394][ T8083] bridge0: port 2(syz_tun) entered disabled state
[   97.709352][ T8083] bridge0: port 3(netdevsim0) entered disabled state
[   97.713380][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.722603][ T8083] bridge0: entered allmulticast mode
[   97.747193][ T8083] bridge0: port 2(syz_tun) entered blocking state
[   97.749735][ T8083] bridge0: port 2(syz_tun) entered forwarding state
[   97.752677][ T8083] bridge0: port 3(netdevsim0) entered blocking state
[   97.755586][ T8083] bridge0: port 3(netdevsim0) entered forwarding state
[   97.759120][ T8083] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.762594][ T8083] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.770527][ T8083] bridge0: entered promiscuous mode
[   98.513750][ T8122] __nla_validate_parse: 5 callbacks suppressed
[   98.513761][ T8122] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.973'.
[   98.690861][ T8139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.981'.
[   98.727447][ T8144] netlink: 42496 bytes leftover after parsing attributes in process `syz.1.983'.
[   98.958394][ T8169] TCP: TCP_TX_DELAY enabled
[   99.015278][ T8176] netlink: 132 bytes leftover after parsing attributes in process `syz.1.998'.
[   99.162353][ T8193] pim6reg1: entered promiscuous mode
[   99.164170][ T8193] pim6reg1: entered allmulticast mode
[   99.267560][ T8203] netlink: 130500 bytes leftover after parsing attributes in process `syz.0.1011'.
[   99.417493][ T8222] netlink: 825 bytes leftover after parsing attributes in process `syz.2.1020'.
[   99.422669][ T8222] netlink: 130144 bytes leftover after parsing attributes in process `syz.2.1020'.
[   99.428878][ T8223] delete_channel: no stack
[  100.283803][ T8268] tap0: tun_chr_ioctl cmd 1074025678
[  100.287557][ T8268] tap0: group set to 0
[  100.640118][ T8301] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1058'.
[  100.709081][ T8310] tap0: tun_chr_ioctl cmd 1074025677
[  100.711156][ T8310] tap0: linktype set to 780
[  100.834681][ T8316] validate_nla: 5 callbacks suppressed
[  100.834691][ T8316] netlink: 'syz.1.1065': attribute type 2 has an invalid length.
[  117.336923][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  117.340073][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  117.342760][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  117.346066][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  117.349294][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  117.587489][ T5217] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  117.591195][ T5217] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  117.594363][ T5217] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  117.600254][ T5217] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  117.603168][ T5217] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  117.605810][ T5217] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  117.609567][ T5217] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  117.612067][ T5217] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  117.615056][ T5217] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  117.617948][ T5217] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  117.758807][ T8341] chnl_net:caif_netlink_parms(): no params data found
[  119.408183][   T54] Bluetooth: hci3: command tx timeout
[  119.658310][ T5217] Bluetooth: hci4: command tx timeout
[  119.661045][   T54] Bluetooth: hci5: command tx timeout
[  121.496832][   T54] Bluetooth: hci3: command tx timeout
[  121.726859][ T5217] Bluetooth: hci4: command tx timeout
[  121.729243][   T54] Bluetooth: hci5: command tx timeout
[  123.566790][   T54] Bluetooth: hci3: command tx timeout
[  123.816836][ T5217] Bluetooth: hci4: command tx timeout
[  123.818791][   T54] Bluetooth: hci5: command tx timeout
[  125.656813][   T54] Bluetooth: hci3: command tx timeout
[  125.886839][   T54] Bluetooth: hci5: command tx timeout
[  125.889001][   T54] Bluetooth: hci4: command tx timeout
[  170.206857][ T5828] Bluetooth: hci0: command 0x0406 tx timeout
[  170.209577][ T5828] Bluetooth: hci1: command 0x0406 tx timeout
[  178.608614][ T8373] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  178.611916][ T8373] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  178.614981][ T8373] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  178.621260][ T8373] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  178.624289][ T8373] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  178.627100][ T8373] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  178.629679][ T8373] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  178.632057][ T8373] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  178.634715][ T8373] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  178.658761][ T8351] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  178.661365][ T8351] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  178.663834][ T8351] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  178.667981][ T8351] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  178.671728][ T8351] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  178.679564][ T5828] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  206.336571][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  206.339064][    C0] rcu: 	0-....: (10499 ticks this GP) idle=8a2c/1/0x4000000000000000 softirq=24847/24847 fqs=4582
[  206.344345][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  206.346798][    C0] rcu: 	 number:   856744          0            0
[  206.349196][    C0] rcu: 	cputime:    28834      23654          106   ==> 52490(ms)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  206.352110][    C0] rcu: 	(t=10500 jiffies g=15685 q=3434 ncpus=2)
[  206.354618][    C0] CPU: 0 UID: 0 PID: 8334 Comm: syz.0.1072 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  206.354627][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.354632][    C0] RIP: 0010:__tlb_remove_table+0x267/0x3b0
[  206.354645][    C0] Code: 85 e4 75 16 e8 3a 82 b1 ff eb 15 e8 33 82 b1 ff e8 8e ed 5f 09 4d 85 e4 74 ea e8 24 82 b1 ff fb 49 bc 00 00 00 00 00 fc ff df <48> 89 df be 08 00 00 00 e8 1c a8 14 00 43 80 3c 27 00 74 08 48 89
[  206.354650][    C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000246
[  206.354657][    C0] RAX: ffffffff820e9b9c RBX: ffffea0000bacd40 RCX: ffff88810d443980
[  206.354662][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  206.354666][    C0] RBP: ffffc90000007b90 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  206.354670][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: dffffc0000000000
[  206.354675][    C0] R13: 1ffff92000000f5c R14: 0000000000000000 R15: 1ffffd40001759a8
[  206.354679][    C0] FS:  00007f4afd3f66c0(0000) GS:ffff8880b861f000(0000) knlGS:0000000000000000
[  206.354684][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.354689][    C0] CR2: 00002000000018c0 CR3: 0000000041f5e000 CR4: 00000000000006f0
[  206.354714][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  206.354719][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000602
[  206.354723][    C0] Call Trace:
[  206.354727][    C0]  <IRQ>
[  206.354730][    C0]  ? __pfx___tlb_remove_table+0x10/0x10
[  206.354746][    C0]  tlb_remove_table_rcu+0x85/0x100
[  206.354754][    C0]  ? __pfx_tlb_remove_table_rcu+0x10/0x10
[  206.354762][    C0]  ? rcu_core+0xc34/0x1710
[  206.354770][    C0]  rcu_core+0xca8/0x1710
[  206.354784][    C0]  ? __pfx_rcu_core+0x10/0x10
[  206.354795][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  206.354808][    C0]  ? run_timer_softirq+0x7c/0x180
[  206.354821][    C0]  handle_softirqs+0x286/0x870
[  206.354837][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  206.354847][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  206.354859][    C0]  __irq_exit_rcu+0xca/0x1f0
[  206.354866][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  206.354878][    C0]  irq_exit_rcu+0x9/0x30
[  206.354884][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  206.354894][    C0]  </IRQ>
[  206.354896][    C0]  <TASK>
[  206.354899][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  206.354906][    C0] RIP: 0010:__sys_socket+0xb6/0x1b0
[  206.354916][    C0] Code: 42 80 3c 28 00 74 08 4c 89 e7 e8 25 17 d8 f8 41 89 df 41 83 e7 0f 4d 8b 24 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 e7 e8 00 17 d8 f8 49 8b 3c 24 49 89 e0 89 ee 44 89 fa
[  206.354921][    C0] RSP: 0018:ffffc90002f27e80 EFLAGS: 00000246
[  206.354926][    C0] RAX: 1ffff11006fe18ae RBX: 0000000000000002 RCX: 0000000000000002
[  206.354930][    C0] RDX: ffff88810d443980 RSI: 0000000000000000 RDI: 0000000000000000
[  206.354934][    C0] RBP: 0000000000000010 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  206.354939][    C0] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffff888037f0c570
[  206.354943][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000002
[  206.354957][    C0]  __x64_sys_socket+0x7a/0x90
[  206.354967][    C0]  do_syscall_64+0xfa/0x3b0
[  206.354977][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.354983][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  206.354991][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.354997][    C0] RIP: 0033:0x7f4aff58eb69
[  206.355004][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.355009][    C0] RSP: 002b:00007f4afd3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  206.355015][    C0] RAX: ffffffffffffffda RBX: 00007f4aff7b5fa0 RCX: 00007f4aff58eb69
[  206.355019][    C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010
[  206.355023][    C0] RBP: 00007f4aff611df1 R08: 0000000000000000 R09: 0000000000000000
[  206.355027][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  206.355031][    C0] R13: 0000000000000000 R14: 00007f4aff7b5fa0 R15: 00007ffc5c20b548
[  206.355042][    C0]  </TASK>
[  206.500329][    C0] sched: DL replenish lagged too much
[  206.563278][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 105286592377 wd_nsec: 105286594784

VM DIAGNOSIS:
12:31:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006e10
R8 =ffff8881087f0237 R9 =1ffff110210fe046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58b5 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4afd3f66c0 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000018c0 CR3=0000000041f5e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000602
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4aff787498 00007f4aff787470 XMM03=00007f4aff7874a8 00007f4aff7874a0
XMM04=00007f4b002ed100 00007f4aff787460 XMM05=00007f4aff787478 00007f4aff7874c0
XMM06=00007f4aff7874b8 00007f4aff7874b0 XMM07=00007f4aff7874a8 00007f4aff7874a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4aff612f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007aa0000 RBX=1ffff110213c725a RCX=ffff888105db1cc0 RDX=0000000000010000
RSI=ffff888109e38000 RDI=0000000000000017 RBP=0000000000000083 RSP=ffffc900001e0da0
R8 =ffffffff8fa1e8f7 R9 =1ffffffff1f43d1e R10=dffffc0000000000 R11=ffffffff868f1670
R12=dffffc0000000000 R13=ffff888109e392d0 R14=ffff888109e38000 R15=dffffc0000000000
RIP=ffffffff868f16b8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd435ec1800 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd0d1dece8 CR3=0000000020892000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
