last executing test programs:

340.524003ms ago: executing program 2 (id=1531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000003d000701fcffffff00000000047c0080240000000c000380"], 0x24}}, 0x8004)

340.39246ms ago: executing program 2 (id=1532):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x0)

291.140345ms ago: executing program 2 (id=1534):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc01000019000143ae00000001000000fe880000000000000000000000000101ac1414bb0000000000000000000000000000000000000000020000000000000025a5dedd7f2a801a384ce65399", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000004010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c0000000a000000fc000000000000000000000000000000000000000500"/372], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x2000c000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0)
sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000180)={0xa, 0x1, 0x3, @rand_addr=' \x01\x00', 0x8}, 0xfffffdcd)
setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000080)=0x2, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf13000000000000850000002a000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee87"], 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xff80, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r5, 0x0, 0x24000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38)

290.747163ms ago: executing program 1 (id=1536):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

190.590601ms ago: executing program 0 (id=1537):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)

190.4091ms ago: executing program 0 (id=1538):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0)

190.147825ms ago: executing program 2 (id=1539):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x201, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x10}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x4000000)

119.818633ms ago: executing program 1 (id=1540):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x20}, @IFLA_LINKMODE={0x5, 0x11, 0xf}]}, 0x40}}, 0x0)

119.224203ms ago: executing program 2 (id=1541):
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1d, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty, '\x00'}}}}}, 0x0)

119.079555ms ago: executing program 0 (id=1542):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

118.962024ms ago: executing program 2 (id=1543):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000380)='syz1\x00', 0x1ff)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)

118.785073ms ago: executing program 1 (id=1544):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1b, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044)

71.298851ms ago: executing program 0 (id=1545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000000202010f0000000000000000020000092c00028006000340000400001400018008000100ac1414aa080002000a0101000c0002"], 0x40}, 0x1, 0x0, 0x0, 0x4c800}, 0x40000)

71.148736ms ago: executing program 1 (id=1546):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000000000000200000d000000000300000002000000020000000200000000000000000000050000000000006161007a039b38632a136289ad534caf3647c531521ee1ef6097247a85476401032d87084d5b2410880e2ffb00821b4ff5ca1bcac015a93b2351a0602b2b64835e6ae3fbff1d23e941b04db7a738654d1d337b732cd4752c480988625e11fde55bf0f3f2aa26a45c0ef3103ca05df78b9d59422cc93e45e7e45a6555"], &(0x7f0000001640)=""/182, 0x45, 0xb6, 0x1}, 0x1f)

71.079307ms ago: executing program 0 (id=1547):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x300)

70.789882ms ago: executing program 1 (id=1548):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000080000000010003200ffff0000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa000000000000000003000600000000000200"], 0x80}}, 0x0)

450.066µs ago: executing program 1 (id=1549):
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0xffffffffffffffff}, 0x18)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000180))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)

0s ago: executing program 0 (id=1550):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x9, [{0x1}]}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x34, 0x0, 0x1, 0x3ff}, 0x28)
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x4)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r1)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000801)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0080)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x8)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)="88b0bae0e826425499f4d4ddb99bbe211a", 0x11}, 0x1, 0x0, 0x0, 0x8004}, 0x24044044)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000080001"], 0xe0}}, 0x0)
r6 = socket(0x28, 0x5, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r7, 0x0, 0x0)
setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f0000000140)=0xdf6, 0x4)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r8, &(0x7f0000000440), 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r9)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r12=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x7a8670e044eced78}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10001}]}, 0x4c}}, 0x4000080)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, r10, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004850}, 0x4044014)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x8, 0x2, {{0x39, 0x4, 0x1, 0x8, 0xe4, 0x68, 0x0, 0x9, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@ssrr={0x89, 0x7, 0x51, [@empty]}, @noop, @cipso={0x86, 0x5f, 0x1, [{0x5, 0xd, "7e0d4edd7ff9c6fbaccea5"}, {0x0, 0x12, "ce1372b71c6978d0546012f0965492c9"}, {0x2, 0xe, "9d7f654e047faffc6ecb48c0"}, {0x5, 0x5, "106e75"}, {0x5, 0xa, "8684b1b7ee80b2bb"}, {0x6, 0xb, "51e9c746c45f44325e"}, {0x7, 0x12, "3073da82ff4d8427d2bb9582ab72611f"}]}, @timestamp_addr={0x44, 0x2c, 0xe2, 0x1, 0xd, [{@local, 0x6f2}, {@empty, 0x700001}, {@local, 0xa}, {@local, 0x1ff}, {@remote, 0x2}]}, @noop, @timestamp={0x44, 0x1c, 0xc5, 0x0, 0x0, [0x0, 0xff1, 0x10, 0x2, 0x6, 0xfff]}, @ssrr={0x89, 0x7, 0x81, [@empty]}, @timestamp={0x44, 0x18, 0xe9, 0x0, 0x7, [0x4, 0x0, 0x2005, 0x5, 0x9]}]}}}}})
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45792' (ED25519) to the list of known hosts.
syzkaller login: [   46.878484][ T5814] cgroup: Unknown subsys name 'net'
[   46.966241][ T5814] cgroup: Unknown subsys name 'cpuset'
[   46.970280][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   48.624495][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.579276][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.582430][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.595059][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.597474][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.601005][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.603410][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.605928][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.608870][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.611640][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.618483][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.624261][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.634230][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.645628][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.648140][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.651798][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.866702][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   52.941838][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   52.997068][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.999499][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.002387][ T5853] bridge_slave_0: entered allmulticast mode
[   53.005826][ T5853] bridge_slave_0: entered promiscuous mode
[   53.024574][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   53.033918][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.036173][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.038397][ T5853] bridge_slave_1: entered allmulticast mode
[   53.041076][ T5853] bridge_slave_1: entered promiscuous mode
[   53.085612][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.115752][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.122849][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.125581][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.127857][ T5845] bridge_slave_0: entered allmulticast mode
[   53.130661][ T5845] bridge_slave_0: entered promiscuous mode
[   53.150725][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.154190][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.156581][ T5845] bridge_slave_1: entered allmulticast mode
[   53.159478][ T5845] bridge_slave_1: entered promiscuous mode
[   53.181250][ T5853] team0: Port device team_slave_0 added
[   53.202197][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.206829][ T5853] team0: Port device team_slave_1 added
[   53.226542][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.229581][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.231860][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.234631][ T5843] bridge_slave_0: entered allmulticast mode
[   53.237368][ T5843] bridge_slave_0: entered promiscuous mode
[   53.258780][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.261050][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.263806][ T5843] bridge_slave_1: entered allmulticast mode
[   53.266445][ T5843] bridge_slave_1: entered promiscuous mode
[   53.278926][ T5845] team0: Port device team_slave_0 added
[   53.281383][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.284640][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.292583][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.306504][ T5845] team0: Port device team_slave_1 added
[   53.316824][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.319042][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.329540][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.342910][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.365120][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.368544][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.371377][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.380440][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.385729][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.387927][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.396295][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.437829][ T5843] team0: Port device team_slave_0 added
[   53.444541][ T5853] hsr_slave_0: entered promiscuous mode
[   53.447278][ T5853] hsr_slave_1: entered promiscuous mode
[   53.451841][ T5843] team0: Port device team_slave_1 added
[   53.489464][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.491802][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.500534][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.508315][ T5845] hsr_slave_0: entered promiscuous mode
[   53.510663][ T5845] hsr_slave_1: entered promiscuous mode
[   53.514931][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   53.516843][ T5845] Cannot create hsr debugfs directory
[   53.527450][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.529647][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.538022][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.622044][ T5843] hsr_slave_0: entered promiscuous mode
[   53.624557][ T5843] hsr_slave_1: entered promiscuous mode
[   53.626901][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   53.628703][ T5843] Cannot create hsr debugfs directory
[   53.821456][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.837484][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.842278][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.861980][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.890211][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.896635][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.902838][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.916403][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.957741][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.964199][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.969412][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.976642][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.076191][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.084409][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.105005][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.111786][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   54.120158][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   54.125708][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.128414][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.137354][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.139579][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.148871][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.151157][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.157438][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.159678][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.166403][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   54.180464][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.182654][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.189503][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.191612][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.365166][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.371803][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.415214][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.428411][ T5845] veth0_vlan: entered promiscuous mode
[   54.441695][ T5853] veth0_vlan: entered promiscuous mode
[   54.448949][ T5853] veth1_vlan: entered promiscuous mode
[   54.455851][ T5845] veth1_vlan: entered promiscuous mode
[   54.512235][ T5853] veth0_macvtap: entered promiscuous mode
[   54.519754][ T5845] veth0_macvtap: entered promiscuous mode
[   54.525486][ T5843] veth0_vlan: entered promiscuous mode
[   54.533047][ T5853] veth1_macvtap: entered promiscuous mode
[   54.540376][ T5845] veth1_macvtap: entered promiscuous mode
[   54.550266][ T5843] veth1_vlan: entered promiscuous mode
[   54.561780][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.567205][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.570295][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.586976][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.591937][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.595528][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.602530][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.607695][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.624039][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.631659][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.637914][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.640827][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.644270][   T54] Bluetooth: hci2: command tx timeout
[   54.649629][ T5843] veth0_macvtap: entered promiscuous mode
[   54.666741][ T5843] veth1_macvtap: entered promiscuous mode
[   54.701638][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.718163][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.724285][   T54] Bluetooth: hci1: command tx timeout
[   54.726157][   T54] Bluetooth: hci0: command tx timeout
[   54.729172][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.733798][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.741357][ T5875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.746261][ T5875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.749039][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.751747][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.789845][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.792334][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.830580][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.834831][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.839198][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.842624][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.889064][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.891414][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.899458][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.927080][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.932963][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.264008][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'.
[   55.416365][ T5939] veth1_to_bond: entered allmulticast mode
[   55.453999][ T5939] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.458129][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'.
[   55.489194][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'.
[   55.495191][ T5939] bond0: (slave bond_slave_1): Releasing backup interface
[   55.512889][ T5939] veth1_to_bond (unregistering): left allmulticast mode
[   55.583583][ T5943] block nbd0: server does not support multiple connections per device.
[   55.587386][ T5943] block nbd0: shutting down sockets
[   55.772207][ T5956] Zero length message leads to an empty skb
[   56.582159][ T6014] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET)
[   56.713969][   T54] Bluetooth: hci2: command tx timeout
[   56.794370][   T54] Bluetooth: hci0: command tx timeout
[   56.796130][ T5854] Bluetooth: hci1: command tx timeout
[   57.196247][ T6074] netlink: 68 bytes leftover after parsing attributes in process `syz.1.63'.
[   57.200225][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'.
[   57.207088][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'.
[   57.276552][ T6083] warning: `syz.0.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.569423][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'.
[   57.770468][ T6135] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   57.776834][ T6133] IPVS: stopping master sync thread 6135 ...
[   57.940770][ T6153] Illegal XDP return value 4294967274 on prog  (id 9) dev N/A, expect packet loss!
[   58.003947][ T6158] netlink: 47 bytes leftover after parsing attributes in process `syz.2.100'.
[   58.158553][ T6170] TCP: TCP_TX_DELAY enabled
[   58.414562][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.111'.
[   58.795181][   T54] Bluetooth: hci2: command tx timeout
[   58.873489][   T54] Bluetooth: hci0: command tx timeout
[   58.875304][ T5854] Bluetooth: hci1: command tx timeout
[   59.652742][ T6255] netlink: 'syz.0.146': attribute type 4 has an invalid length.
[   59.763780][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   60.488710][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'.
[   60.577152][ T6314] netlink: 92 bytes leftover after parsing attributes in process `syz.2.173'.
[   60.875900][   T54] Bluetooth: hci2: command tx timeout
[   60.953450][ T5854] Bluetooth: hci1: command tx timeout
[   60.955409][   T54] Bluetooth: hci0: command tx timeout
[   61.095381][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'.
[   61.111472][ T6338] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   61.246660][ T6345] netlink: 'syz.2.186': attribute type 1 has an invalid length.
[   61.439179][ T6365] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.449925][ T6365] netlink: 'syz.2.196': attribute type 58 has an invalid length.
[   61.452337][ T6365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.196'.
[   61.501705][ T6366] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   61.827659][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'.
[   61.830605][ T6404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.002136][ T6460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.241'.
[   63.021165][ T6460] tipc: Started in network mode
[   63.025698][ T6460] tipc: Node identity ac14140f, cluster identity 4711
[   63.032901][ T6460] tipc: New replicast peer: 255.255.255.255
[   63.036921][ T6460] tipc: Enabled bearer <udp:syz2>, priority 10
[   63.045025][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'.
[   63.053475][ T6460] tipc: Disabling bearer <udp:syz2>
[   63.057814][ T6462] openvswitch: netlink: Missing key (keys=40, expected=80)
[   63.220373][ T6473] veth0_to_bridge: entered promiscuous mode
[   63.224233][ T6473] veth0_to_bridge: left promiscuous mode
[   63.227171][ T6475] netlink: ct family unspecified
[   63.234952][ T6475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.404016][ T6492] netlink: 'syz.1.254': attribute type 1 has an invalid length.
[   63.418787][ T6492] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.463730][ T6492] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.470567][ T6492] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   63.484968][ T6492] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   63.531574][ T6501] bond1: (slave bridge1): Enslaving as an active interface with a down link
[   63.632538][ T6510] geneve2: entered promiscuous mode
[   63.643319][ T6510] geneve2: entered allmulticast mode
[   63.778106][ T6525] netlink: 'syz.2.268': attribute type 4 has an invalid length.
[   64.007515][ T6552] netlink: 108 bytes leftover after parsing attributes in process `syz.2.282'.
[   64.014876][ T6553] syzkaller1: entered promiscuous mode
[   64.016631][ T6553] syzkaller1: entered allmulticast mode
[   64.109128][ T6560] tipc: Started in network mode
[   64.110690][ T6560] tipc: Node identity 16f163b7dd54, cluster identity 4711
[   64.113642][ T6560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.116745][ T6560] syzkaller0: entered promiscuous mode
[   64.118465][ T6560] syzkaller0: entered allmulticast mode
[   64.156652][ T6560] tipc: Resetting bearer <eth:syzkaller0>
[   64.159801][ T6559] tipc: Resetting bearer <eth:syzkaller0>
[   64.190296][ T6559] tipc: Disabling bearer <eth:syzkaller0>
[   64.201017][ T6572] netlink: 'syz.2.291': attribute type 3 has an invalid length.
[   64.208219][ T6572] netlink: 3 bytes leftover after parsing attributes in process `syz.2.291'.
[   64.287455][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.293'.
[   64.312853][ T6580] netlink: 'syz.2.294': attribute type 1 has an invalid length.
[   64.347429][ T6582] openvswitch: netlink: IP tunnel dst address not specified
[   64.375839][ T6586] IPv6: Can't replace route, no match found
[   64.907227][ T6605] syzkaller0: entered promiscuous mode
[   64.909621][ T6605] syzkaller0: entered allmulticast mode
[   65.999466][ T6631] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[   66.037331][ T6636] netlink: 'syz.1.314': attribute type 1 has an invalid length.
[   66.083821][ T6639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.315'.
[   66.086967][ T6639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.100612][ T6640] bond2: (slave gretap1): making interface the new active one
[   66.103986][ T6640] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   66.157848][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'.
[   66.163957][ T6640] syz.1.314 (6640) used greatest stack depth: 19848 bytes left
[   66.317530][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'.
[   66.515206][ T6685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.665499][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'.
[   66.725218][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[   67.003300][ T6719] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.348'.
[   67.106930][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'.
[   67.151267][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'.
[   67.192067][ T6732] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[   67.559646][ T6762] netlink: 48 bytes leftover after parsing attributes in process `syz.2.368'.
[   67.569367][ T6764] netlink: 'syz.0.369': attribute type 42 has an invalid length.
[   67.840616][ T6786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.846848][ T6786] syzkaller0: entered promiscuous mode
[   67.849017][ T6786] syzkaller0: entered allmulticast mode
[   67.857670][ T6786] tipc: Resetting bearer <eth:syzkaller0>
[   67.866807][ T6785] tipc: Resetting bearer <eth:syzkaller0>
[   67.881168][ T6785] tipc: Disabling bearer <eth:syzkaller0>
[   67.915252][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   67.935820][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'.
[   68.255738][ T6822] vlan0: entered promiscuous mode
[   68.258632][ T6822] vlan0: entered allmulticast mode
[   68.260455][ T6822] hsr_slave_1: entered allmulticast mode
[   68.612210][ T6828] netlink: 'syz.1.400': attribute type 4 has an invalid length.
[   69.393602][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.396482][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.492756][ T6890] netlink: 'syz.1.427': attribute type 1 has an invalid length.
[   69.499289][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.508358][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.702942][ T5875] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.709705][ T5875] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.712498][ T5875] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.737398][ T5875] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.745131][ T6896] netlink: 'syz.1.430': attribute type 1 has an invalid length.
[   69.767299][ T6896] bridge2: the hash_elasticity option has been deprecated and is always 16
[   70.310111][ T6930] batadv1: entered promiscuous mode
[   70.581095][ T6946] Bluetooth: MGMT ver 1.23
[   70.618172][ T6948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.682314][ T6948] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   70.687779][ T5911] IPVS: starting estimator thread 0...
[   70.694507][ T6951] tipc: Failed to remove unknown binding: 66,1,1/0:1826736095/1826736097
[   70.719506][ T6948] tipc: Failed to remove unknown binding: 66,1,1/0:1826736095/1826736097
[   70.722240][ T6948] tipc: Failed to remove unknown binding: 66,1,1/0:1826736095/1826736097
[   70.774061][ T6952] IPVS: using max 61 ests per chain, 146400 per kthread
[   71.072064][ T6970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.076595][ T6970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.080346][ T6970] bond0 (unregistering): Released all slaves
[   71.111697][ T6978] __nla_validate_parse: 6 callbacks suppressed
[   71.111711][ T6978] netlink: 48 bytes leftover after parsing attributes in process `syz.1.467'.
[   71.127071][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.129232][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.175082][ T6978] nbd0: detected capacity change from 0 to 875674160
[   71.297090][ T6990] tipc: New replicast peer: 255.255.255.255
[   71.299951][ T6990] tipc: Enabled bearer <udp:syz2>, priority 10
[   71.314983][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'.
[   71.324089][ T6990] tipc: Disabling bearer <udp:syz2>
[   71.429341][    C1] vcan0: j1939_tp_rxtimer: 0xffff888106f1e400: rx timeout, send abort
[   71.929966][    C1] vcan0: j1939_tp_rxtimer: 0xffff888106f1e800: rx timeout, send abort
[   71.932524][    C1] vcan0: j1939_tp_rxtimer: 0xffff888106f1e400: abort rx timeout. Force session deactivation
[   71.938500][   T56] block nbd0: Receive control failed (result -104)
[   72.176892][ T6996] netlink: 566 bytes leftover after parsing attributes in process `syz.2.474'.
[   72.226490][ T5911] IPVS: starting estimator thread 0...
[   72.314661][ T7001] IPVS: using max 61 ests per chain, 146400 per kthread
[   72.432477][    C1] vcan0: j1939_tp_rxtimer: 0xffff888106f1e800: abort rx timeout. Force session deactivation
[   72.536854][ T7022] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[   72.539366][ T7022] netlink: 244 bytes leftover after parsing attributes in process `syz.0.485'.
[   72.704765][ T7037] macvlan0: entered allmulticast mode
[   72.706468][ T7037] veth1_vlan: entered allmulticast mode
[   72.738515][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'.
[   72.742458][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'.
[   73.232122][ T7074] Bluetooth: MGMT ver 1.23
[   73.317875][ T7082] syzkaller1: entered promiscuous mode
[   73.319817][ T7082] syzkaller1: entered allmulticast mode
[   73.450890][ T7096] lo: entered allmulticast mode
[   73.454539][ T7096] lo: left allmulticast mode
[   73.474930][ T7091] nbd: must specify at least one socket
[   73.621301][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'.
[   73.784596][ T7128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.533'.
[   73.804429][ T7130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.534'.
[   73.865151][ T7137] hsr0: entered promiscuous mode
[   73.866774][ T7137] hsr0: entered allmulticast mode
[   73.868265][ T7137] hsr_slave_0: entered allmulticast mode
[   73.869991][ T7137] hsr_slave_1: entered allmulticast mode
[   74.019165][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'.
[   74.189244][ T7164] vlan2: entered promiscuous mode
[   74.190850][ T7164] bridge0: entered promiscuous mode
[   74.322738][ T7177] tc_dump_action: action bad kind
[   74.475727][ T7196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.478383][ T7196] syzkaller0: entered promiscuous mode
[   74.480228][ T7196] syzkaller0: entered allmulticast mode
[   74.492854][ T7196] tipc: Resetting bearer <eth:syzkaller0>
[   74.497001][ T7200] netlink: 'syz.1.567': attribute type 7 has an invalid length.
[   74.499800][ T7195] tipc: Resetting bearer <eth:syzkaller0>
[   74.507621][ T7195] tipc: Disabling bearer <eth:syzkaller0>
[   74.765018][ T7228] netlink: 'syz.0.580': attribute type 1 has an invalid length.
[   74.810314][ T7234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.812973][ T7234] syzkaller0: entered promiscuous mode
[   74.816122][ T7234] syzkaller0: entered allmulticast mode
[   74.836428][ T7234] tipc: Resetting bearer <eth:syzkaller0>
[   74.841577][ T7232] tipc: Resetting bearer <eth:syzkaller0>
[   74.849713][ T7232] tipc: Disabling bearer <eth:syzkaller0>
[   74.905171][ T7244] netlink: 'syz.1.589': attribute type 7 has an invalid length.
[   74.907961][ T7244] netlink: 'syz.1.589': attribute type 8 has an invalid length.
[   74.928791][ T7244] gretap0: entered promiscuous mode
[   74.933636][ T7244] batadv_slave_1: entered promiscuous mode
[   74.943845][ T7244] erspan0: entered promiscuous mode
[   75.078685][ T7266] netlink: 'syz.0.600': attribute type 6 has an invalid length.
[   75.081918][ T7266] netlink: 'syz.0.600': attribute type 4 has an invalid length.
[   75.118672][ T7271] tipc: Started in network mode
[   75.120404][ T7271] tipc: Node identity 02a8e3cc758b, cluster identity 4711
[   75.125130][ T7271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.128569][ T7271] syzkaller0: entered promiscuous mode
[   75.130427][ T7271] syzkaller0: entered allmulticast mode
[   75.136862][ T7272] netlink: 'syz.0.603': attribute type 4 has an invalid length.
[   75.150389][ T7271] tipc: Resetting bearer <eth:syzkaller0>
[   75.157518][ T7269] tipc: Resetting bearer <eth:syzkaller0>
[   75.171314][ T7269] tipc: Disabling bearer <eth:syzkaller0>
[   75.210441][ T7280] sctp: [Deprecated]: syz.0.606 (pid 7280) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.210441][ T7280] Use struct sctp_sack_info instead
[   75.225417][ T7280] sctp: [Deprecated]: syz.0.606 (pid 7280) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.225417][ T7280] Use struct sctp_sack_info instead
[   75.299032][ T7288] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   76.131820][ T7389] trusted_key: syz.0.654 sent an empty control message without MSG_MORE.
[   76.338313][ T5875] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.341930][ T5875] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.347901][ T5875] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.350861][ T5875] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.560282][ T7418] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   76.917054][ T7455] __nla_validate_parse: 11 callbacks suppressed
[   76.917067][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'.
[   77.279941][   T33] audit: type=1804 audit(1754977058.419:2): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.684" name="/newroot/232/cgroup.controllers" dev="tmpfs" ino=1189 res=1 errno=0
[   77.288236][   T33] audit: type=1800 audit(1754977058.419:3): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.684" name="cgroup.controllers" dev="tmpfs" ino=1189 res=0 errno=0
[   77.425238][ T7470] netlink: 'syz.1.687': attribute type 2 has an invalid length.
[   77.691235][ T7497] netlink: 104 bytes leftover after parsing attributes in process `syz.1.700'.
[   77.961331][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'.
[   77.964304][ T7530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.138500][ T7549] netlink: 36 bytes leftover after parsing attributes in process `syz.0.724'.
[   78.246330][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'.
[   78.358364][ T7576] netlink: 'syz.2.737': attribute type 1 has an invalid length.
[   78.553499][   T54] Bluetooth: hci2: command tx timeout
[   78.562404][ T7600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.749'.
[   78.596343][ T7605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.752'.
[   78.732723][ T7625] netlink: 'syz.1.760': attribute type 2 has an invalid length.
[   78.797504][ T7634] netlink: 1 bytes leftover after parsing attributes in process `syz.1.763'.
[   78.804436][ T7631] netlink: 'syz.2.764': attribute type 7 has an invalid length.
[   78.806855][ T7631] netlink: 'syz.2.764': attribute type 8 has an invalid length.
[   78.865122][ T7642] netlink: 'syz.1.767': attribute type 11 has an invalid length.
[   78.867725][ T7642] netlink: 'syz.1.767': attribute type 12 has an invalid length.
[   78.870087][ T7642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.767'.
[   78.898140][ T7644] netlink: 'syz.2.769': attribute type 1 has an invalid length.
[   78.900854][ T7644] netlink: 236 bytes leftover after parsing attributes in process `syz.2.769'.
[   79.030486][ T7652] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   79.295052][ T7687] netlink: 'syz.0.790': attribute type 12 has an invalid length.
[   79.473423][ T7710] vxcan0: tx address claim with dlc 0
[   79.690269][ T7732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.694538][ T7732] syzkaller0: entered promiscuous mode
[   79.696309][ T7732] syzkaller0: entered allmulticast mode
[   79.712229][ T7732] tipc: Resetting bearer <eth:syzkaller0>
[   79.719808][ T7731] tipc: Resetting bearer <eth:syzkaller0>
[   79.737103][ T7731] tipc: Disabling bearer <eth:syzkaller0>
[   80.423932][ T7766] netlink: 'syz.2.825': attribute type 5 has an invalid length.
[   80.825378][ T7804] geneve2: entered promiscuous mode
[   80.827178][ T7804] geneve2: entered allmulticast mode
[   80.832725][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.839995][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.845537][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.848271][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.060659][ T7823] netlink: 'syz.0.850': attribute type 8 has an invalid length.
[   81.115704][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   81.363783][   T47] cfg80211: failed to load regulatory.db
[   82.182232][ T7894] __nla_validate_parse: 15 callbacks suppressed
[   82.182244][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'.
[   82.200826][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'.
[   82.298326][ T5846] IPVS: starting estimator thread 0...
[   82.384240][ T7897] IPVS: using max 61 ests per chain, 146400 per kthread
[   82.830781][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'.
[   83.024572][ T7943] IPVS: Scheduler module ip_vs_sip not found
[   83.028063][ T7943] IPVS: length: 8 != 446622349272
[   83.071758][ T7950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.908'.
[   83.181331][ T7962] netlink: 'syz.1.915': attribute type 25 has an invalid length.
[   83.185994][ T7962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.915'.
[   83.432708][ T7986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.594356][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.927'.
[   83.792674][ T8006] netlink: 'syz.0.932': attribute type 2 has an invalid length.
[   83.796179][ T8006] netlink: 244 bytes leftover after parsing attributes in process `syz.0.932'.
[   83.914251][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.041727][ T8022] bridge: RTM_NEWNEIGH with invalid ether address
[   84.961505][ T8054] veth3: entered promiscuous mode
[   84.991483][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'.
[   85.172992][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'.
[   85.305322][ T8100] netlink: 'syz.1.975': attribute type 1 has an invalid length.
[   85.346749][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.976'.
[   85.489479][ T8117] netlink: 'syz.1.983': attribute type 1 has an invalid length.
[   85.628929][ T8127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.632204][ T8127] syzkaller0: entered promiscuous mode
[   85.636368][ T8127] syzkaller0: entered allmulticast mode
[   85.657559][ T8127] tipc: Resetting bearer <eth:syzkaller0>
[   85.660839][ T8126] tipc: Resetting bearer <eth:syzkaller0>
[   85.668454][ T8126] tipc: Disabling bearer <eth:syzkaller0>
[   85.846694][ T8151] netlink: 'syz.1.1000': attribute type 3 has an invalid length.
[   85.849077][ T8151] netlink: 'syz.1.1000': attribute type 1 has an invalid length.
[   86.090938][ T8174] nbd: couldn't find device at index 536870912
[   86.203043][ T8190] openvswitch: netlink: IP tunnel dst address not specified
[   86.598132][ T8235] netlink: 'syz.0.1039': attribute type 1 has an invalid length.
[   87.099082][ T8259] bridge_slave_1: left allmulticast mode
[   87.101076][ T8259] bridge_slave_1: left promiscuous mode
[   87.106105][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.111002][ T8259] bridge_slave_0: left allmulticast mode
[   87.113263][ T8259] bridge_slave_0: left promiscuous mode
[   87.115482][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.377857][ T8279] __nla_validate_parse: 10 callbacks suppressed
[   87.377868][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1058'.
[   87.401361][ T8279] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1058'.
[   87.490832][ T8288] netlink: 'syz.0.1061': attribute type 16 has an invalid length.
[   87.494481][ T8288] netlink: 'syz.0.1061': attribute type 17 has an invalid length.
[   87.498890][ T8288] veth1_vlan: left allmulticast mode
[   87.521885][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.531133][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.539045][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'.
[   87.542282][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.547293][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.550673][ T8288] IPv6: NLM_F_REPLACE set, but no existing node found!
[   87.716693][ T8302] netlink: 'syz.1.1069': attribute type 12 has an invalid length.
[   88.013743][ T8319] netlink: 'syz.2.1076': attribute type 1 has an invalid length.
[   88.016190][ T8319] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1076'.
[   88.260272][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'.
[   88.296280][ T8334] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   88.298690][ T8334] tipc: Enabled bearer <udp:syz2>, priority 10
[   88.317482][ T8335] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.342540][ T8335] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.346452][ T8335] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[   88.351134][ T8335] bond0: (slave vxcan3): Error -95 calling set_mac_address
[   88.391287][ T8341] veth3: entered promiscuous mode
[   88.400137][ T8341] bond0: (slave veth3): Enslaving as an active interface with a down link
[   88.418681][ T8335] erspan0: entered allmulticast mode
[   88.429278][ T8335] bond0: (slave erspan0): making interface the new active one
[   88.432150][ T8335] bond0: (slave erspan0): Enslaving as an active interface with an up link
[   88.434600][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   88.440056][ T8340] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   88.573249][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   88.672834][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'.
[   88.693712][ T8370] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.713304][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   88.853857][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   88.993256][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   89.133235][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   89.273238][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   89.414150][ T5910] tipc: Node number set to 3416613815
[   89.553340][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   89.787042][ T8430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   89.823374][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   89.860031][ T8452] openvswitch: netlink: Actions may not be safe on all matching packets
[   90.190191][ T8491] pimreg: tun_chr_ioctl cmd 2147767506
[   90.262643][ T8498] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   90.345800][ T8498] nbd1: detected capacity change from 0 to 127
[   90.353590][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   90.359334][   T56] block nbd1: Receive control failed (result -104)
[   90.719539][ T8511] validate_nla: 3 callbacks suppressed
[   90.719565][ T8511] netlink: 'syz.0.1158': attribute type 13 has an invalid length.
[   91.045605][ T8521] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1160'.
[   91.099468][ T8523] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1161'.
[   91.221025][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1165'.
[   91.247832][ T8531] veth1: entered promiscuous mode
[   91.250166][ T8531] bridge3: entered promiscuous mode
[   91.252719][ T8531] hsr2: entered promiscuous mode
[   91.339974][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1168'.
[   91.433874][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   91.442232][ T8545] ieee802154 phy0 wpan0: encryption failed: -90
[   91.501179][ T8555] sit0: entered promiscuous mode
[   91.625697][ T8564] Unsupported ieee802154 address type: 0
[   92.473386][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   92.521173][ T8645] __nla_validate_parse: 7 callbacks suppressed
[   92.521185][ T8645] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1219'.
[   92.949781][ T8678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.952409][ T8678] syzkaller0: entered promiscuous mode
[   92.954665][ T8678] syzkaller0: entered allmulticast mode
[   92.967778][ T8678] tipc: Resetting bearer <eth:syzkaller0>
[   92.971183][ T8677] tipc: Resetting bearer <eth:syzkaller0>
[   92.981653][ T8677] tipc: Disabling bearer <eth:syzkaller0>
[   93.513382][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   93.676515][ T8714] netlink: 'syz.0.1248': attribute type 1 has an invalid length.
[   93.775258][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1252'.
[   93.807229][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1254'.
[   93.936955][ T8735] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1258'.
[   94.071831][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1264'.
[   94.365845][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'.
[   94.554255][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   94.624644][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1271'.
[   95.195370][ T8774] bond0: (slave bond_slave_0): Releasing backup interface
[   95.207379][ T8779] netlink: 'syz.1.1272': attribute type 1 has an invalid length.
[   95.210573][ T8774] bond0: (slave bond_slave_1): Releasing backup interface
[   95.228260][ T8774] team0: Port device team_slave_0 removed
[   95.240948][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'.
[   95.244671][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'.
[   95.245703][ T8774] team0: Port device team_slave_1 removed
[   95.249322][ T8774] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.259710][ T8774] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.293989][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'.
[   95.406393][ T8797] netlink: 'syz.1.1281': attribute type 3 has an invalid length.
[   95.425322][ T8799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.468442][ T8804] netlink: 'syz.2.1284': attribute type 2 has an invalid length.
[   95.525742][ T8812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.531416][ T8812] syzkaller0: entered promiscuous mode
[   95.533984][ T8812] syzkaller0: entered allmulticast mode
[   95.558465][ T8812] tipc: Resetting bearer <eth:syzkaller0>
[   95.561632][ T8811] tipc: Resetting bearer <eth:syzkaller0>
[   95.569767][ T8811] tipc: Disabling bearer <eth:syzkaller0>
[   95.593335][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   95.647833][ T8818] sctp: [Deprecated]: syz.2.1291 (pid 8818) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.647833][ T8818] Use struct sctp_sack_info instead
[   95.852795][ T8836] netlink: 'syz.1.1299': attribute type 3 has an invalid length.
[   95.886353][ T8841] netlink: 'syz.2.1301': attribute type 1 has an invalid length.
[   95.890357][ T8841] netlink: 'syz.2.1301': attribute type 1 has an invalid length.
[   95.951683][ T8836] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.955417][ T8836] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.064264][ T8836] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.075136][ T8836] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.169985][ T8836] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.173495][ T8836] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.249700][ T8836] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.252856][ T8836] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.328614][ T5875] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.331058][ T5875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.343641][ T5875] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.346411][ T5875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.369786][ T5875] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.372360][ T5875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.375404][ T5875] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.377995][ T5875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.633228][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   97.409676][ T8977] netlink: 'syz.1.1362': attribute type 1 has an invalid length.
[   97.673315][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   98.713287][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   98.851217][ T9032] __nla_validate_parse: 7 callbacks suppressed
[   98.851228][ T9032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1387'.
[   98.862579][ T9032] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   98.907503][ T9038] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1390'.
[   99.082523][ T9056] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1398'.
[   99.763244][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   99.832232][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'.
[  100.079268][ T9095] macsec1: entered promiscuous mode
[  100.081442][ T9095] team0: entered promiscuous mode
[  100.088354][ T9095] team_slave_0: entered promiscuous mode
[  100.098935][ T9095] team_slave_1: entered promiscuous mode
[  100.236719][ T9107] syzkaller1: entered promiscuous mode
[  100.238393][ T9107] syzkaller1: entered allmulticast mode
[  100.349245][ T9119] syzkaller1: entered promiscuous mode
[  100.351119][ T9119] syzkaller1: entered allmulticast mode
[  100.385084][ T9123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1427'.
[  100.469726][ T9131] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1431'.
[  100.502945][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1434'.
[  100.669877][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'.
[  100.715976][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1441'.
[  100.719166][ T9152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1441'.
[  100.729440][ T9152] bridge0: port 1(vlan2) entered blocking state
[  100.732359][ T9152] bridge0: port 1(vlan2) entered disabled state
[  100.742623][ T9152] vlan2: entered allmulticast mode
[  100.744655][ T9152] bridge0: entered allmulticast mode
[  100.747815][ T9152] vlan2: left allmulticast mode
[  100.749338][ T9152] bridge0: left allmulticast mode
[  100.793353][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  101.205786][   T97] block nbd0: Possible stuck request ffff888021118000: control (read@0,4096B). Runtime 30 seconds
[  101.833290][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  101.845201][ T9248] erspan0: left allmulticast mode
[  101.888404][ T9248] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.891108][ T9248] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.990756][ T9248] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.001507][ T9248] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.100029][ T9248] veth3: left promiscuous mode
[  102.107785][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.110445][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.117286][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.119973][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.807620][ T9300] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.812177][ T9300] 8021q: adding VLAN 0 to HW filter on device team0
[  102.820658][ T9300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.845394][ T9300] veth0_to_team: entered promiscuous mode
[  102.847361][ T9300] veth0_to_team: entered allmulticast mode
[  102.873299][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  103.357123][ T9337] netlink: 'syz.0.1511': attribute type 9 has an invalid length.
[  103.359739][ T9337] netlink: 'syz.0.1511': attribute type 9 has an invalid length.
[  103.397799][ T9335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.400730][ T9335] syzkaller0: entered promiscuous mode
[  103.402426][ T9335] syzkaller0: entered allmulticast mode
[  103.409935][ T9332] tipc: Resetting bearer <eth:syzkaller0>
[  103.421578][ T9332] tipc: Disabling bearer <eth:syzkaller0>
[  103.539872][ T9352] netlink: 'syz.2.1517': attribute type 12 has an invalid length.
[  103.887216][ T9366] __nla_validate_parse: 5 callbacks suppressed
[  103.887226][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'.
[  103.892792][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'.
[  103.913320][    C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  103.946886][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1523'.
[  104.134865][ T9393] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  104.134989][ T9392] IPVS: stopping backup sync thread 9393 ...
[  104.142595][ T9392] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1534'.
[  104.147204][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1534'.
[  104.150012][ T9392] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1534'.
[  104.358696][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'.
[  104.472064][ T9429] ieee802154 phy0 wpan0: encryption failed: -22
[  104.475245][ T9429] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1550'.
[  104.555777][ T9429] veth0_to_team: left promiscuous mode
[  104.559886][ T9429] geneve2: left promiscuous mode
Connection to localhost closed by remote host.
[  105.638748][   T12] bond0 (unregistering): Released all slaves
[  105.646028][   T12] bond1 (unregistering): Released all slaves
[  105.709644][   T12] tipc: Disabling bearer <udp:syz2>
[  105.715879][   T12] tipc: Left network mode
[  105.889932][   T12] hsr_slave_0: left promiscuous mode
[  105.892206][   T12] hsr_slave_1: left promiscuous mode
[  106.626280][   T12] IPVS: stop unused estimator thread 0...
[  106.638280][   T12] ------------[ cut here ]------------
[  106.640025][   T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  106.643037][   T12] Modules linked in:
[  106.645068][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  106.649936][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.653717][   T12] Workqueue: netns cleanup_net
[  106.655274][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  106.657011][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 28 c1 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 7e e2 f7 e8 71 56 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 63 56 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  106.662982][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  106.665500][   T12] RAX: ffffffff8a21553f RBX: ffff88810f740000 RCX: ffff88801c685640
[  106.668192][   T12] RDX: 0000000000000000 RSI: ffffffff8dba3969 RDI: ffff88801c685640
[  106.670636][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  106.673400][   T12] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8f62d760
[  106.675826][   T12] R13: 1ffff9200001ef40 R14: ffff88810f741480 R15: dffffc0000000000
[  106.678248][   T12] FS:  0000000000000000(0000) GS:ffff8880b8621000(0000) knlGS:0000000000000000
[  106.680980][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  106.682995][   T12] CR2: 00007f2f459c9440 CR3: 000000011043e000 CR4: 00000000000006f0
[  106.685999][   T12] Call Trace:
[  106.687066][   T12]  <TASK>
[  106.688001][   T12]  xfrm_net_exit+0x2d/0x70
[  106.689596][   T12]  ops_undo_list+0x49a/0x990
[  106.691191][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  106.692796][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  106.695112][   T12]  cleanup_net+0x4c5/0x800
[  106.696647][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  106.698143][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.699712][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  106.701473][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  106.703613][   T12]  process_scheduled_works+0xae1/0x17b0
[  106.705547][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  106.707501][   T12]  worker_thread+0x8a0/0xda0
[  106.709014][   T12]  kthread+0x711/0x8a0
[  106.710307][   T12]  ? __pfx_worker_thread+0x10/0x10
[  106.711928][   T12]  ? __pfx_kthread+0x10/0x10
[  106.713627][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.715184][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.716866][   T12]  ? __pfx_kthread+0x10/0x10
[  106.718362][   T12]  ret_from_fork+0x3fc/0x770
[  106.719774][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  106.721326][   T12]  ? __switch_to_asm+0x39/0x70
[  106.722745][   T12]  ? __switch_to_asm+0x33/0x70
[  106.724427][   T12]  ? __pfx_kthread+0x10/0x10
[  106.725798][   T12]  ret_from_fork_asm+0x1a/0x30
[  106.727335][   T12]  </TASK>
[  106.728342][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  106.730554][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  106.734200][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.737286][   T12] Workqueue: netns cleanup_net
[  106.738800][   T12] Call Trace:
[  106.739798][   T12]  <TASK>
[  106.740681][   T12]  dump_stack_lvl+0x99/0x250
[  106.742079][   T12]  ? __asan_memcpy+0x40/0x70
[  106.743524][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.745083][   T12]  ? __pfx__printk+0x10/0x10
[  106.746469][   T12]  vpanic+0x281/0x750
[  106.747809][   T12]  ? __pfx__printk+0x10/0x10
[  106.749249][   T12]  ? __pfx_vpanic+0x10/0x10
[  106.750664][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  106.752302][   T12]  panic+0xb9/0xc0
[  106.753509][   T12]  ? __pfx_panic+0x10/0x10
[  106.754899][   T12]  __warn+0x31b/0x4b0
[  106.756173][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  106.757686][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  106.759170][   T12]  report_bug+0x2be/0x4f0
[  106.760525][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  106.762001][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  106.763579][   T12]  ? xfrm_state_fini+0x272/0x2f0
[  106.765116][   T12]  handle_bug+0x84/0x160
[  106.766437][   T12]  exc_invalid_op+0x1a/0x50
[  106.767894][   T12]  asm_exc_invalid_op+0x1a/0x20
[  106.769490][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  106.771158][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 28 c1 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 7e e2 f7 e8 71 56 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 63 56 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  106.776915][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  106.778807][   T12] RAX: ffffffff8a21553f RBX: ffff88810f740000 RCX: ffff88801c685640
[  106.781186][   T12] RDX: 0000000000000000 RSI: ffffffff8dba3969 RDI: ffff88801c685640
[  106.783604][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  106.785967][   T12] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8f62d760
[  106.788347][   T12] R13: 1ffff9200001ef40 R14: ffff88810f741480 R15: dffffc0000000000
[  106.790766][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  106.792552][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  106.794341][   T12]  xfrm_net_exit+0x2d/0x70
[  106.795716][   T12]  ops_undo_list+0x49a/0x990
[  106.797189][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  106.798798][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  106.800397][   T12]  cleanup_net+0x4c5/0x800
[  106.801791][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  106.803367][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.805043][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  106.806816][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  106.808585][   T12]  process_scheduled_works+0xae1/0x17b0
[  106.810327][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  106.812180][   T12]  worker_thread+0x8a0/0xda0
[  106.813646][   T12]  kthread+0x711/0x8a0
[  106.814936][   T12]  ? __pfx_worker_thread+0x10/0x10
[  106.816561][   T12]  ? __pfx_kthread+0x10/0x10
[  106.818034][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.819731][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.821405][   T12]  ? __pfx_kthread+0x10/0x10
[  106.822908][   T12]  ret_from_fork+0x3fc/0x770
[  106.824563][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  106.826164][   T12]  ? __switch_to_asm+0x39/0x70
[  106.827673][   T12]  ? __switch_to_asm+0x33/0x70
[  106.829186][   T12]  ? __pfx_kthread+0x10/0x10
[  106.830669][   T12]  ret_from_fork_asm+0x1a/0x30
[  106.832124][   T12]  </TASK>
[  106.833695][   T12] Kernel Offset: disabled
[  106.835033][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:38:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7030
R8 =ffff88801fa30237 R9 =1ffff11003f46046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48cc R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2f459c9440 CR3=000000011043e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000033 00302d2f312f0030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000ff0000
XMM08=ffffffffffffff00 ff0000000000ff00 XMM09=6c6c696b66722f33 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000202 RCX=0000000080000000 RDX=ffffc9000329f301
RSI=ffffffff8d9c8440 RDI=ffffffff8be32680 RBP=dffffc0000000000 RSP=ffffc9000329f198
R8 =ffffc9000329ff48 R9 =0000000000000000 R10=ffffc9000329f358 R11=fffff52000653e6d
R12=ffffc9000329ff58 R13=ffffffff8172c195 R14=ffffffff8e139ee0 R15=ffff888109e53980
RIP=ffffffff8b78d1ac RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005557c2af3e48 CR3=00000001249a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
