last executing test programs:

656.067244ms ago: executing program 2 (id=909):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x40000001}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/194, 0xc2}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000000a40)=""/4118, 0x1016}, {&(0x7f00000006c0)=""/220, 0xdc}], 0x4}, 0x7ffffffc}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003e00)=""/4108, 0x100c}, {&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000480)=""/96, 0x60}, {&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f0000002e00)=""/4089, 0xff9}, {&(0x7f0000000900)=""/261, 0x105}], 0x6}, 0xb0}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r1=>0x0)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={0x0, @nfc={0x27, r1, 0x1, 0x3}, @ethernet={0x1, @remote}, @l2={0x1f, 0x7, @none, 0x6, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000500)='ip_vti0\x00', 0xa, 0xa73a, 0x6})

654.807441ms ago: executing program 2 (id=911):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432})
readv(r2, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
getsockopt$inet6_mreq(r1, 0x29, 0x1d, 0x0, &(0x7f0000000640))
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x67, "e724b2a54aff045ba4419726d43d9d2ac11e68f533ac5bbcaa8885b4c29a5021d51900d8e92662d4118a6fadaf5755c82d17db576b97abb20082a20770c22d", 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0)
accept4(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000180)=0x80, 0x800)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

487.066186ms ago: executing program 1 (id=914):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22433, 0xffffffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x88a8}]}}}, @IFLA_NET_NS_FD={0x8}]}, 0x4c}}, 0x4000040)

485.369849ms ago: executing program 0 (id=915):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbb0000000008004500001c000000000011907800000000e000000100004e2000089078"], 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
close(0x3)

484.934178ms ago: executing program 1 (id=916):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000808", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES16=r1], 0x80}}, 0x800)
sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000ff6000"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=<r2=>0x0, @ANYRES64=0x2710, @ANYBLOB='\x00 '], 0x48}}, 0x20040004)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0xa, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4)
accept4(r4, 0x0, 0x0, 0x80000)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001e40), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r8)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc0881}, 0x0)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r9)
sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r10, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040080)
r11 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000200)=0x80, 0x800)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1f, 0x12, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7183059fdffffffba10ffffffffffff18000000000800000000000004000000800100000200000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0x2e50, 0xa7, &(0x7f0000000f00)=""/167, 0x41000, 0x40, '\x00', 0x0, @fallback=0xa, r13, 0x8, &(0x7f0000000a80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0xe, 0x9, 0x13}, 0x10, 0x0, r3, 0x4, 0x0, &(0x7f0000000b40)=[{0x5, 0x4, 0x2, 0x5}, {0x0, 0x5, 0x0, 0x3}, {0x5, 0x3, 0xc, 0x5}, {0x5, 0x4, 0x4, 0x8}], 0x10, 0xffff72f4}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r14=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYRES64=r1, @ANYRES16=r11, @ANYBLOB="100025bd7000fddbdf25010000000c00020000000000000000000c00080000000080000000000c000200030000000000000005000a002a0000000c00080004000000000000000c0004000400000000000000340007800c00018008000100", @ANYRESDEC=r9, @ANYBLOB="0c11225c00000000b55148bc701d5316790adda0195af46b1ef29db40902a78d9ab930326763b19eaf6af9519a206e4e97aae5e30aed147daab886e33a1695070869f82d204ee6e6876d212dbbe5673983be3fb0e04dd4c5de9d9352d6a97058516b69fa5f639ffbea093181fd63fb0cecba6eeecdd8e1399ad10522e8036e66493ccf3ac74e50aacab503a2635d607d76f7c42b8ff89dc7e0018421aa59407e4c395f6e885ffbb7f800e873bc36a885ca6a54b67272090b3162394fd1619ba8295bf1faeba97274cebcb3beeb3c", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r14, @ANYRES8=r2], 0xa4}}, 0x20000000)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)

361.755558ms ago: executing program 1 (id=917):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000400000056000000060000003c30000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

361.388875ms ago: executing program 2 (id=918):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000420000000700000008000000000000", @ANYBLOB="00000000000000000000000000000000000000005a55a9a14924"], 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c020000000000000000170000000000000000000000000000ac1414bb0000000000000000000900000000000f3b10d900020000003c000000000000000000004dd39cec9f6ff177b89ce370a806c2ebab800a9128a712d8d2836ca54c95a89a4a8c9bfc641b5b7eb17710a057b0e48ad85308341a4704873cfada32985049e62a74353cff38aee4580b9c28a0b9db91a97073c803d8831a2910b1b8b0987a25ffa52b98f080e14c30d92a460fa980131349f807c2056109b02daddacb13d2976db3d6cbd3006b88c1dfe5741ab65a7b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000ff00000000000000010000000000000084010500fe8000000000000000000000000000bb000004d53c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d43c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000ff010000000000000000000000000001000000006c"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000100ff02000000000000000000000000000100000000022f3f70ea6544862c585c2080b6eed7a15726e3fe6ac52025088e88a287e3310d0d3fd386cb2ee8"], 0x38}}, 0x4040)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0)

310.088501ms ago: executing program 0 (id=919):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d0020070000ff", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0)

309.364487ms ago: executing program 1 (id=920):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40004)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, &(0x7f00000000c0), 0x12)
close(r3)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x82)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8971, &(0x7f0000000280)={'wg2\x00'})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20004884}, 0x20000044)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="16050000", @ANYRES16=0x0, @ANYBLOB="040027bd7000fddbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="0a001a00ffffffffffff00000a001a000802110000000000"], 0x34}}, 0x10)

309.166181ms ago: executing program 0 (id=921):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0xc10, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x40000001}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/194, 0xc2}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000000a40)=""/4118, 0x1016}, {&(0x7f00000006c0)=""/220, 0xdc}], 0x4}, 0x7ffffffc}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003e00)=""/4108, 0x100c}, {&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000480)=""/96, 0x60}, {&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f0000002e00)=""/4089, 0xff9}, {&(0x7f0000000900)=""/261, 0x105}], 0x6}, 0xb0}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x0, 0x0)

250.950891ms ago: executing program 2 (id=922):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001e40), 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x80}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x110062, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x20008000)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

250.715831ms ago: executing program 0 (id=923):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0xec0, r2, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)

158.809305ms ago: executing program 0 (id=924):
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="018d000000eb"})
listen(r0, 0x0)
r2 = socket(0x1e, 0x805, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000140)={r6}, &(0x7f0000000180)=0x8)
sendmmsg$inet_sctp(r1, &(0x7f0000000580)=[{&(0x7f0000000340)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000380)="da7d94fe55d79ec680b0d01cf04136ae4044c86549f25f97709d571df473da4d9fc9c46f4bd56632681dffbf551de07754102708c9ae810eab3773cbdbd1f4b287ebd665b164715b7bc133bbcc815b921a98578a4c8c419cd786b325118219b59e696bfc246808d502944847dc2e03fefc8b26cb36e6281572982cce315af607c97271a50315876c2d11b28f924f34f4877903", 0x93}], 0x1, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0x3ff, 0x7, r6}}, @init={0x18, 0x84, 0x0, {0x7f, 0x1, 0x7}}], 0x38, 0x8000}], 0x1, 0x801)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0)
sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x40, 0x2}, 0x1c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f00000001c0)={0x18db8, 0x10000000})
epoll_wait(r8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x800)
accept4$inet6(r0, 0x0, 0x0, 0x800)
sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x101)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4110000000000006111480000000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)

158.20987ms ago: executing program 2 (id=925):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x0, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x2b}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x1, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x1c, 0x80000)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000001c0))

89.075166ms ago: executing program 1 (id=926):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0a0a0e050800"})
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd75243cb9a65f8e", 0xa}], 0x3)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e24, 0x80, @local, 0x28eac313}}, 0xfffffffc, 0x8001, 0x0, 0x4, 0x2a}, 0x9c)

88.555627ms ago: executing program 2 (id=927):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffff5692}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6tnl0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r12)
r13 = socket$unix(0x1, 0x1, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x4}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.023405ms ago: executing program 0 (id=928):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="ca", 0x1)
poll(&(0x7f0000000040), 0x0, 0x5)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001e40), 0x2, 0x0)

0s ago: executing program 1 (id=929):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000c000380040003800400040018000180140002007665746830000000004a000000000000500cab4803e6ac8b2f994d91b791bb080abd6ecaf8dcb0873a620b8fdb1ccd5da4549717787d32b7db2030ea595def289e2ac0197700000000e60762423217e73d9e6dc2341107f4db5ba0c3e8b00ac72a04f8e9c4c722a691227d5ec77c4f9d7984e53a03b62135840f662db4cb42742b124bf96b44e3077b848060d73ff63a0ec0cdd8259131e2158106ca76c4c00562ac27978be74c76e98014b2bc045d3f1bc07e52b35b5f98"], 0x38}}, 0x0) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x90) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000140)=r1}, 0x20) (async)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x10001, '\x00', r8, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r5], 0x23c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x0, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x2, 0x6}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40840}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36263' (ED25519) to the list of known hosts.
syzkaller login: [   56.538778][ T5830] cgroup: Unknown subsys name 'net'
[   56.664611][ T5830] cgroup: Unknown subsys name 'cpuset'
[   56.672136][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.598858][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.389629][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.393608][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.396924][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.400373][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.403271][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.404802][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.410769][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.420025][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.423103][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.427048][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.455986][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.461234][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.464571][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.468931][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.472965][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.733295][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   63.767213][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   63.868399][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.872053][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.874966][ T5845] bridge_slave_0: entered allmulticast mode
[   63.878019][ T5845] bridge_slave_0: entered promiscuous mode
[   63.887098][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.889800][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.892436][ T5845] bridge_slave_1: entered allmulticast mode
[   63.895563][ T5845] bridge_slave_1: entered promiscuous mode
[   63.915065][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   63.965048][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.968162][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.971598][ T5849] bridge_slave_0: entered allmulticast mode
[   63.975491][ T5849] bridge_slave_0: entered promiscuous mode
[   63.990141][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.996939][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.002561][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.004949][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.007519][ T5849] bridge_slave_1: entered allmulticast mode
[   64.011317][ T5849] bridge_slave_1: entered promiscuous mode
[   64.072814][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.089416][ T5845] team0: Port device team_slave_0 added
[   64.098811][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.112429][ T5845] team0: Port device team_slave_1 added
[   64.132783][ T5849] team0: Port device team_slave_0 added
[   64.136527][ T5849] team0: Port device team_slave_1 added
[   64.201222][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.203366][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.212417][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.217186][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.222298][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.225299][ T5854] bridge_slave_0: entered allmulticast mode
[   64.228697][ T5854] bridge_slave_0: entered promiscuous mode
[   64.234020][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.236339][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.244688][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.249738][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.252107][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.260957][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.264539][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.266981][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.270716][ T5854] bridge_slave_1: entered allmulticast mode
[   64.274233][ T5854] bridge_slave_1: entered promiscuous mode
[   64.285818][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.288093][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.296413][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.336579][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.368173][ T5849] hsr_slave_0: entered promiscuous mode
[   64.371431][ T5849] hsr_slave_1: entered promiscuous mode
[   64.376281][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.408340][ T5845] hsr_slave_0: entered promiscuous mode
[   64.411880][ T5845] hsr_slave_1: entered promiscuous mode
[   64.414882][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   64.417244][ T5845] Cannot create hsr debugfs directory
[   64.432965][ T5854] team0: Port device team_slave_0 added
[   64.437156][ T5854] team0: Port device team_slave_1 added
[   64.495761][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.498061][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.506673][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.535301][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.538192][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.548220][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.605498][ T5854] hsr_slave_0: entered promiscuous mode
[   64.607945][ T5854] hsr_slave_1: entered promiscuous mode
[   64.610357][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   64.612344][ T5854] Cannot create hsr debugfs directory
[   64.875013][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.889924][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.896536][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.904768][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.993523][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.010625][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.018503][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.041075][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.117358][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.133329][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.153753][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.161971][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.228082][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.271315][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   65.286612][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.289349][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.302276][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.304975][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.326815][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.360636][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   65.369632][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.386733][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.389059][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.408336][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.411027][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.417065][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   65.432643][  T191] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.434957][  T191] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.462737][  T191] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.465097][  T191] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.489874][ T5848] Bluetooth: hci2: command tx timeout
[   65.491921][ T5848] Bluetooth: hci0: command tx timeout
[   65.491977][ T5851] Bluetooth: hci1: command tx timeout
[   65.537545][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.613992][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.672193][ T5845] veth0_vlan: entered promiscuous mode
[   65.682765][ T5845] veth1_vlan: entered promiscuous mode
[   65.716160][ T5845] veth0_macvtap: entered promiscuous mode
[   65.728614][ T5845] veth1_macvtap: entered promiscuous mode
[   65.737563][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.753888][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.766085][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.777486][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.800299][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.806644][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.809920][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.822622][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.851260][ T5849] veth0_vlan: entered promiscuous mode
[   65.906769][ T5854] veth0_vlan: entered promiscuous mode
[   65.927209][ T5849] veth1_vlan: entered promiscuous mode
[   65.945238][ T5854] veth1_vlan: entered promiscuous mode
[   65.957138][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.971448][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.023419][ T5849] veth0_macvtap: entered promiscuous mode
[   66.031108][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.035492][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.043990][ T5849] veth1_macvtap: entered promiscuous mode
[   66.062533][ T5854] veth0_macvtap: entered promiscuous mode
[   66.071493][ T5854] veth1_macvtap: entered promiscuous mode
[   66.096113][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.101550][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.117308][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.123052][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.134836][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.138783][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.166165][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.168971][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.179630][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.242868][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.276269][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.280678][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.295434][ T5910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.357927][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'.
[   66.361737][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.364070][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.367367][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'.
[   66.422018][  T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.431762][  T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.493601][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.515188][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.523507][ T5919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.543008][ T5919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.565376][  T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.572371][  T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.663821][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   66.794966][ T5936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12'.
[   67.154224][ T5955] netlink: 'syz.1.16': attribute type 1 has an invalid length.
[   67.156807][ T5955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16'.
[   67.163064][ T5955] netlink: 'syz.1.16': attribute type 1 has an invalid length.
[   67.166179][ T5955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16'.
[   67.569514][ T5851] Bluetooth: hci0: command tx timeout
[   67.579666][ T5848] Bluetooth: hci2: command tx timeout
[   67.581726][ T5851] Bluetooth: hci1: command tx timeout
[   67.658966][ T5975] netlink: 104 bytes leftover after parsing attributes in process `syz.1.24'.
[   67.777298][ T5987] netlink: 27 bytes leftover after parsing attributes in process `syz.2.27'.
[   68.229264][ T6007] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET)
[   68.694002][ T6034] warning: `syz.2.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.317174][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.46'.
[   69.616895][ T6062] netlink: 'syz.2.51': attribute type 1 has an invalid length.
[   69.619644][ T6062] netlink: 36 bytes leftover after parsing attributes in process `syz.2.51'.
[   69.636712][ T6061] vlan2: entered promiscuous mode
[   69.638891][ T6061] bond0: entered promiscuous mode
[   69.645822][ T6061] bond_slave_0: entered promiscuous mode
[   69.647910][ T6061] bond_slave_1: entered promiscuous mode
[   69.650692][ T5851] Bluetooth: hci1: command tx timeout
[   69.652468][ T5851] Bluetooth: hci2: command tx timeout
[   69.655084][ T5848] Bluetooth: hci0: command tx timeout
[   69.660129][ T6061] vlan2: entered allmulticast mode
[   69.664113][ T6061] bond0: entered allmulticast mode
[   69.665831][ T6061] bond_slave_0: entered allmulticast mode
[   69.667719][ T6061] bond_slave_1: entered allmulticast mode
[   70.244590][ T6092] Zero length message leads to an empty skb
[   70.274531][ T6094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.477981][ T6106] bridge1: port 1(veth3) entered blocking state
[   70.481005][ T6106] bridge1: port 1(veth3) entered disabled state
[   70.483785][ T6106] veth3: entered allmulticast mode
[   70.486944][ T6106] veth3: entered promiscuous mode
[   70.502844][ T6106] bridge1: port 2(veth0_to_bond) entered blocking state
[   70.505739][ T6106] bridge1: port 2(veth0_to_bond) entered disabled state
[   70.508673][ T6106] veth0_to_bond: entered allmulticast mode
[   70.513051][ T6106] veth0_to_bond: entered promiscuous mode
[   70.522649][ T6105] vlan3: entered allmulticast mode
[   70.524565][ T6105] veth1: entered allmulticast mode
[   70.526732][ T6105] bridge1: port 3(vlan3) entered blocking state
[   70.528937][ T6105] bridge1: port 3(vlan3) entered disabled state
[   70.536678][ T6105] vlan3: entered promiscuous mode
[   70.540364][ T6105] veth1: entered promiscuous mode
[   71.129067][ T6136] pimreg: entered allmulticast mode
[   71.177710][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.180634][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.471538][ T6143] netlink: 'syz.1.84': attribute type 7 has an invalid length.
[   71.479873][ T6143] __nla_validate_parse: 6 callbacks suppressed
[   71.479889][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'.
[   71.644380][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'.
[   71.727362][ T6148] sctp: [Deprecated]: syz.1.87 (pid 6148) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.727362][ T6148] Use struct sctp_sack_info instead
[   71.736951][ T6157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.90'.
[   71.740724][ T5848] Bluetooth: hci2: command tx timeout
[   71.740760][ T5848] Bluetooth: hci1: command tx timeout
[   71.826618][ T6164] tipc: Started in network mode
[   71.828677][ T6164] tipc: Node identity ca2f0cffa36c, cluster identity 4711
[   71.836709][ T6164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.843968][ T6164] syzkaller0: entered promiscuous mode
[   71.846215][ T6164] syzkaller0: entered allmulticast mode
[   71.873003][ T6164] tipc: Resetting bearer <eth:syzkaller0>
[   71.900053][ T6163] tipc: Resetting bearer <eth:syzkaller0>
[   71.921583][ T6163] tipc: Disabling bearer <eth:syzkaller0>
[   72.026659][ T6181] openvswitch: netlink: VXLAN extension 274 out of range max 1
[   72.252846][ T6201] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[   72.458094][ T5874] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   73.336564][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'.
[   73.600927][ T6243] can: request_module (can-proto-5) failed.
[   74.331983][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'.
[   74.449283][ T5851] Bluetooth: hci2: command tx timeout
[   74.677781][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'.
[   74.685579][ T6290] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[   74.688209][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'.
[   75.319081][ T6325] syz.2.139 (6325) used greatest stack depth: 18648 bytes left
[   75.456389][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'.
[   75.805339][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'.
[   75.814960][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.846575][ T6375] bridge_slave_1 (unregistering): left allmulticast mode
[   75.849075][ T6375] bridge_slave_1 (unregistering): left promiscuous mode
[   75.851631][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.914059][ T6377] netlink: 40 bytes leftover after parsing attributes in process `syz.1.157'.
[   76.617817][ T6415] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   76.747395][ T6415] netlink: 1 bytes leftover after parsing attributes in process `syz.0.169'.
[   76.811233][ T6419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.993576][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'.
[   77.008511][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.056432][ T6437] bridge_slave_1 (unregistering): left allmulticast mode
[   77.062772][ T6437] bridge_slave_1 (unregistering): left promiscuous mode
[   77.066564][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.145994][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'.
[   77.181330][ T6444] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.195666][ T6444] bond0: (slave rose0): Enslaving as an active interface with an up link
[   77.410185][ T6458] netlink: 'syz.1.183': attribute type 1 has an invalid length.
[   77.421726][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'.
[   77.429310][ T6453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.183'.
[   77.447775][ T6453] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   77.460939][ T6453] gretap1: entered promiscuous mode
[   77.674332][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.186'.
[   77.907618][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.188'.
[   77.914970][ T6483] netlink: 44 bytes leftover after parsing attributes in process `syz.1.188'.
[   77.962050][ T6485] delete_channel: no stack
[   77.981625][ T6486] IPv4: Oversized IP packet from 127.202.26.0
[   78.472610][ T6505] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   79.186600][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'.
[   79.495514][ T6563] netlink: 172 bytes leftover after parsing attributes in process `syz.2.207'.
[   79.710159][ T6523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.106578][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.164622][ T6584] bridge_slave_1 (unregistering): left allmulticast mode
[   80.167190][ T6584] bridge_slave_1 (unregistering): left promiscuous mode
[   80.170663][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.342036][ T6599] delete_channel: no stack
[   80.541952][ T6599] sock: sock_timestamping_bind_phc: sock not bind to device
[   80.578412][ T6621] netlink: 'syz.0.229': attribute type 1 has an invalid length.
[   80.608039][ T6621] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.628702][ T6621] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.632022][ T6621] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   80.637795][ T6621] bond1: (slave vcan1): Error -95 calling set_mac_address
[   80.674728][ T6628] gretap1: entered promiscuous mode
[   80.682013][ T6628] bond1: (slave gretap1): making interface the new active one
[   80.686020][ T6628] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   80.703510][ T6621] macvlan2: entered promiscuous mode
[   80.705713][ T6621] macvlan2: entered allmulticast mode
[   80.708996][ T6621] bond1: entered promiscuous mode
[   80.713528][ T6621] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   80.719615][ T6621] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   80.724934][ T6621] bond1: left promiscuous mode
[   81.103990][ T6642] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   81.109715][ T6642] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   81.632205][ T6669] netlink: 'syz.2.245': attribute type 11 has an invalid length.
[   81.739504][   T33] audit: type=1800 audit(1755192377.124:2): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.246" name=CB54 dev="tmpfs" ino=466 res=0 errno=0
[   81.810969][ T6684] __nla_validate_parse: 6 callbacks suppressed
[   81.810989][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'.
[   81.817062][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'.
[   83.043615][ T6721] netlink: 76 bytes leftover after parsing attributes in process `syz.2.261'.
[   83.275836][ T6732] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.281617][ T6729] netlink: 'syz.1.264': attribute type 2 has an invalid length.
[   83.284045][ T6732] Bluetooth: MGMT ver 1.23
[   83.284877][ T6729] netlink: 'syz.1.264': attribute type 1 has an invalid length.
[   83.321681][ T6729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.326197][ T6729] syzkaller0: entered promiscuous mode
[   83.328434][ T6729] syzkaller0: entered allmulticast mode
[   83.375433][ T6729] tipc: Resetting bearer <eth:syzkaller0>
[   83.409398][ T6729] tipc: Resetting bearer <eth:syzkaller0>
[   83.422473][ T6729] tipc: Disabling bearer <eth:syzkaller0>
[   83.840145][ T6761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.274'.
[   84.420715][ T6787] netlink: 212316 bytes leftover after parsing attributes in process `syz.0.283'.
[   84.749846][ T6820] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   84.825813][ T6820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.294'.
[   85.434802][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'.
[   85.442012][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'.
[   85.538053][ T6851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.303'.
[   85.618384][ T6853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.808201][ T6863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.811469][ T6863] IPv6: NLM_F_CREATE should be set when creating new route
[   86.089762][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'.
[   86.516167][ T6879] Bluetooth: MGMT ver 1.23
[   86.545403][ T1271] cfg80211: failed to load regulatory.db
[   86.612543][ T6885] netlink: 'syz.0.317': attribute type 12 has an invalid length.
[   86.813956][ T6900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.819713][ T6900] syzkaller0: entered promiscuous mode
[   86.821954][ T6900] syzkaller0: entered allmulticast mode
[   86.955038][ T6904] tipc: Resetting bearer <eth:syzkaller0>
[   86.968048][ T6899] tipc: Resetting bearer <eth:syzkaller0>
[   86.984967][ T6899] tipc: Disabling bearer <eth:syzkaller0>
[   87.198214][ T6917] netlink: 'syz.0.329': attribute type 1 has an invalid length.
[   87.205876][ T6917] __nla_validate_parse: 2 callbacks suppressed
[   87.205894][ T6917] netlink: 224 bytes leftover after parsing attributes in process `syz.0.329'.
[   87.335815][ T6918] netlink: 'syz.0.329': attribute type 1 has an invalid length.
[   87.346751][ T6918] netlink: 224 bytes leftover after parsing attributes in process `syz.0.329'.
[   87.393946][ T6925] tipc: Can't bind to reserved service type 2
[   87.613347][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'.
[   88.363803][ T6959] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   88.628525][ T6980] netlink: 'syz.2.348': attribute type 2 has an invalid length.
[   88.637947][ T6980] netlink: 'syz.2.348': attribute type 1 has an invalid length.
[   88.642825][ T6980] netlink: 'syz.2.348': attribute type 1 has an invalid length.
[   88.705022][ T6985] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.349'.
[   88.711304][ T6985] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   89.177195][ T5910] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[   89.182831][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'.
[   89.186725][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'.
[   89.270567][ T7004] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   89.275525][ T7004] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   89.316661][ T7005] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   89.320645][ T7005] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   89.529787][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'.
[   89.821703][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'.
[   90.148644][ T7046] vlan0: entered promiscuous mode
[   90.163216][ T7046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.366'.
[   90.167183][ T7046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'.
[   91.008107][ T7073] netlink: 'syz.1.374': attribute type 7 has an invalid length.
[   91.011635][ T7073] netlink: 'syz.1.374': attribute type 8 has an invalid length.
[   91.018682][ T7073] ip6gretap0: entered promiscuous mode
[   91.023052][ T7073] ip6gretap0: left promiscuous mode
[   92.366359][ T7152] netlink: 'syz.1.402': attribute type 21 has an invalid length.
[   92.372664][ T7152] __nla_validate_parse: 7 callbacks suppressed
[   92.372681][ T7152] netlink: 128 bytes leftover after parsing attributes in process `syz.1.402'.
[   92.378664][ T7152] netlink: 'syz.1.402': attribute type 5 has an invalid length.
[   92.382085][ T7152] netlink: 3 bytes leftover after parsing attributes in process `syz.1.402'.
[   93.586669][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'.
[   93.642752][ T7186] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   93.846029][ T7207] xt_policy: too many policy elements
[   94.003816][ T7215] netlink: 'syz.2.421': attribute type 3 has an invalid length.
[   94.151652][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'.
[   94.166894][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.167009][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'.
[   94.174683][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.181461][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.185110][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.380959][ T7244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.430'.
[   94.482094][ T7252] bridge_slave_0: left allmulticast mode
[   94.484497][ T7252] bridge_slave_0: left promiscuous mode
[   94.486997][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.493956][ T7252] veth0_to_bond: left allmulticast mode
[   94.495852][ T7252] veth0_to_bond: left promiscuous mode
[   94.497970][ T7252] bridge1: port 2(veth0_to_bond) entered disabled state
[   94.505234][ T7252] bond0: (slave bond_slave_0): Releasing backup interface
[   94.508136][ T7252] bond_slave_0: left promiscuous mode
[   94.511407][ T7252] bond_slave_0: left allmulticast mode
[   94.516396][ T7252] bond0: (slave bond_slave_1): Releasing backup interface
[   94.520068][ T7252] bond_slave_1: left promiscuous mode
[   94.521909][ T7252] bond_slave_1: left allmulticast mode
[   94.534264][ T7252] team0: Port device team_slave_0 removed
[   94.543533][ T7252] team0: Port device team_slave_1 removed
[   94.546567][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.550483][ T7252] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.554870][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.557242][ T7252] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.566921][ T7252] veth3: left allmulticast mode
[   94.568598][ T7252] veth3: left promiscuous mode
[   94.570945][ T7252] bridge1: port 1(veth3) entered disabled state
[   94.575252][ T7252] vlan3: left promiscuous mode
[   94.576922][ T7252] veth1: left promiscuous mode
[   94.578824][ T7252] bridge1: port 3(vlan3) entered disabled state
[   94.994067][ T7271] netlink: 'syz.2.440': attribute type 4 has an invalid length.
[   96.039486][ T7312] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   96.044511][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'.
[   96.053821][ T7312] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   96.056962][ T7312] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.074340][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'.
[   96.078596][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'.
[   96.124786][ T7323] syzkaller1: entered promiscuous mode
[   96.126794][ T7323] syzkaller1: entered allmulticast mode
[   96.156396][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'.
[   96.482337][ T7354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.801979][ T7366] tipc: Started in network mode
[   96.803717][ T7366] tipc: Node identity 7, cluster identity 1
[   96.805793][ T7366] tipc: Node number set to 7
[   96.807852][ T7366] tipc: Cannot configure node identity twice
[   96.935659][ T7375] netlink: 'syz.2.475': attribute type 3 has an invalid length.
[   97.400090][ T7396] bridge_slave_0: left allmulticast mode
[   97.402919][ T7396] bridge_slave_0: left promiscuous mode
[   97.405923][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.418136][ T7396] bond0: (slave bond_slave_0): Releasing backup interface
[   97.431560][ T7396] bond0: (slave bond_slave_1): Releasing backup interface
[   97.444954][ T7396] team0: Port device team_slave_0 removed
[   97.452837][ T7396] team0: Port device team_slave_1 removed
[   97.457254][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.461048][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.466178][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.470608][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.484388][ T7396] bond1: (slave gretap1): Releasing active interface
[   97.495610][ T7397] team0: Mode changed to "broadcast"
[   97.501879][ T7398] team0: Port device vlan0 added
[   97.564486][ T7400] __nla_validate_parse: 9 callbacks suppressed
[   97.564505][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'.
[   97.877916][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'.
[   98.218983][ T7452] IPv4: Oversized IP packet from 127.202.26.0
[   98.273587][ T7459] Unsupported ieee802154 address type: 0
[   98.277945][ T7461] sctp: [Deprecated]: syz.2.501 (pid 7461) Use of int in maxseg socket option.
[   98.277945][ T7461] Use struct sctp_assoc_value instead
[   98.284733][ T7461] netlink: 'syz.2.501': attribute type 9 has an invalid length.
[   98.291741][ T7461] netlink: 'syz.2.501': attribute type 7 has an invalid length.
[   98.295874][ T7461] netlink: 'syz.2.501': attribute type 8 has an invalid length.
[   98.371208][ T7470] netlink: 'syz.0.507': attribute type 21 has an invalid length.
[   98.377103][ T7470] syz.0.507 uses old SIOCAX25GETINFO
[   98.613951][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'.
[   98.882170][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'.
[   98.886172][ T7502] nbd: must specify a size in bytes for the device
[   99.041369][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'.
[   99.047036][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'.
[   99.048711][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'.
[   99.079002][ T7514] netlink: 'syz.1.521': attribute type 4 has an invalid length.
[   99.332185][ T7539] erspan1: entered promiscuous mode
[   99.608012][ T7558] netlink: 'syz.0.533': attribute type 10 has an invalid length.
[   99.612747][ T7558] macvlan0: entered promiscuous mode
[   99.618390][ T7558] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   99.630564][ T7561] netlink: 'syz.0.533': attribute type 10 has an invalid length.
[   99.684792][ T7563] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   99.959749][ T7578] 8021q: VLANs not supported on wg0
[  100.017939][ T7580] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  100.026051][ T7580] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  100.052077][ T7580] bond2: (slave bridge1): making interface the new active one
[  100.055409][ T7580] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  100.178670][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'.
[  101.179601][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'.
[  101.215457][ T7621] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  101.227544][ T7621] netlink: 'syz.0.553': attribute type 9 has an invalid length.
[  101.232988][ T7621] netlink: 224 bytes leftover after parsing attributes in process `syz.0.553'.
[  101.246381][ T7623] syzkaller1: entered promiscuous mode
[  101.248272][ T7623] syzkaller1: entered allmulticast mode
[  101.255282][ T7623] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  101.485971][ T7641] pim6reg0: tun_chr_ioctl cmd 1074025677
[  101.488354][ T7641] pim6reg0: linktype set to 768
[  101.847464][ T7674] tipc: Started in network mode
[  101.849228][ T7674] tipc: Node identity ce3173b3e86, cluster identity 4711
[  101.854830][ T7674] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.860056][ T7674] syzkaller0: entered promiscuous mode
[  101.861770][ T7674] syzkaller0: entered allmulticast mode
[  101.888693][ T7674] tipc: Resetting bearer <eth:syzkaller0>
[  101.893901][ T7672] tipc: Resetting bearer <eth:syzkaller0>
[  101.904878][ T7672] tipc: Disabling bearer <eth:syzkaller0>
[  102.337533][ T7704] macsec1: entered promiscuous mode
[  102.339366][ T7704] macsec1: entered allmulticast mode
[  102.608174][ T7717] __nla_validate_parse: 6 callbacks suppressed
[  102.608187][ T7717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.583'.
[  102.614402][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'.
[  102.712964][ T7720] netlink: 132 bytes leftover after parsing attributes in process `syz.1.584'.
[  102.798155][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'.
[  102.892192][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.588'.
[  102.940903][ T7732] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  103.006725][ T7732] team0: Port device vlan0 removed
[  103.014199][ T7732] bond0: (slave macvlan0): Releasing backup interface
[  103.025609][ T7732] bond2: (slave bridge1): Releasing active interface
[  103.069341][ T7732] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  103.162805][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.172079][ T7732] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  103.271281][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.595'.
[  103.278922][ T7747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.595'.
[  103.342656][ T7756] validate_nla: 1 callbacks suppressed
[  103.342688][ T7756] netlink: 'syz.0.599': attribute type 13 has an invalid length.
[  103.346696][ T7756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.599'.
[  103.355320][ T7756] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  103.435343][ T7754] delete_channel: no stack
[  104.623560][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'.
[  105.133824][ T7801] netlink: 16530 bytes leftover after parsing attributes in process `syz.1.613'.
[  105.873993][ T7852] gretap0: entered promiscuous mode
[  106.115851][ T7868] sctp: [Deprecated]: syz.1.637 (pid 7868) Use of int in max_burst socket option deprecated.
[  106.115851][ T7868] Use struct sctp_assoc_value instead
[  106.213198][ T7872] netlink: 'syz.1.638': attribute type 2 has an invalid length.
[  106.357743][ T7883] : renamed from bond_slave_0 (while UP)
[  106.376095][ T7883] gre1: entered allmulticast mode
[  107.716589][ T7943] __nla_validate_parse: 3 callbacks suppressed
[  107.716608][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.657'.
[  107.723151][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.657'.
[  107.731146][ T7942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.736888][ T7942] syzkaller0: entered promiscuous mode
[  107.743403][ T7942] syzkaller0: entered allmulticast mode
[  107.754510][ T7942] tipc: Resetting bearer <eth:syzkaller0>
[  107.756916][ T7942] syzkaller0: tun_net_xmit 90
[  107.760119][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.659'.
[  107.768998][ T7942] tipc: Resetting bearer <eth:syzkaller0>
[  107.791195][ T7942] tipc: Disabling bearer <eth:syzkaller0>
[  107.947001][ T7953] netlink: 'syz.0.663': attribute type 22 has an invalid length.
[  107.951549][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'.
[  107.965472][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.969565][ T7953] netlink: 'syz.0.663': attribute type 22 has an invalid length.
[  107.972992][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.976522][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'.
[  107.981473][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.987805][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.049511][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.668'.
[  108.053112][ T7965] netlink: 84 bytes leftover after parsing attributes in process `syz.0.668'.
[  108.067935][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.073400][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.088064][ T7981] netlink: 'syz.0.674': attribute type 4 has an invalid length.
[  109.091853][ T7981] netlink: 152 bytes leftover after parsing attributes in process `syz.0.674'.
[  109.095460][ T7981] wlan1: mtu less than device minimum
[  109.241440][ T7989] netlink: 164 bytes leftover after parsing attributes in process `syz.1.677'.
[  109.244348][ T7989] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  109.254763][ T7992] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 3, id = 0
[  109.285681][ T7994] netlink: 'syz.2.679': attribute type 1 has an invalid length.
[  109.317441][ T7994] vlan4: entered allmulticast mode
[  109.321436][ T7994] batadv0: entered allmulticast mode
[  109.611053][ T8034] netlink: 'syz.1.691': attribute type 1 has an invalid length.
[  109.642364][ T8034] bond2: (slave bridge3): making interface the new active one
[  109.646134][ T8034] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  109.701810][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'.
[  109.734978][ T8047] batadv_slave_0: entered promiscuous mode
[  109.737693][ T8047] batadv_slave_0: left promiscuous mode
[  110.223063][ T8096] netlink: 'syz.0.711': attribute type 4 has an invalid length.
[  110.228924][ T8096] netlink: 'syz.0.711': attribute type 4 has an invalid length.
[  111.169006][ T8120] batman_adv: batadv0: Adding interface: dummy0
[  111.171342][ T8120] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.180041][ T8120] batman_adv: batadv0: Interface activated: dummy0
[  111.191744][ T8120] batadv0: mtu less than device minimum
[  111.196448][ T8120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.200766][ T8120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.204819][ T8120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.208997][ T8120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.213601][ T8120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.217688][ T8120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.221714][ T8120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.029034][ T8167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.059953][ T8167] syzkaller0: entered promiscuous mode
[  112.061713][ T8167] syzkaller0: entered allmulticast mode
[  112.063900][ T8167] tipc: Resetting bearer <eth:syzkaller0>
[  112.070940][ T8166] tipc: Resetting bearer <eth:syzkaller0>
[  112.937133][ T8166] tipc: Disabling bearer <eth:syzkaller0>
[  113.151003][ T8205] __nla_validate_parse: 4 callbacks suppressed
[  113.151015][ T8205] netlink: 132 bytes leftover after parsing attributes in process `syz.1.744'.
[  116.221944][ T8236] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  116.226833][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'.
[  116.370940][ T8244] syzkaller1: entered promiscuous mode
[  116.372791][ T8244] syzkaller1: entered allmulticast mode
[  117.152684][ T8262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.156513][ T8262] syzkaller0: entered promiscuous mode
[  117.158283][ T8262] syzkaller0: entered allmulticast mode
[  117.206662][ T8262] tipc: Resetting bearer <eth:syzkaller0>
[  117.275815][ T8261] tipc: Resetting bearer <eth:syzkaller0>
[  117.283871][ T8261] tipc: Disabling bearer <eth:syzkaller0>
[  117.342466][ T8264] bridge2: entered promiscuous mode
[  117.466381][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'.
[  117.576750][ T8286] netlink: 36 bytes leftover after parsing attributes in process `syz.0.767'.
[  117.588082][ T8288] netlink: 'syz.2.769': attribute type 1 has an invalid length.
[  117.591503][ T8288] netlink: 128 bytes leftover after parsing attributes in process `syz.2.769'.
[  117.595040][ T8288] netlink: 'syz.2.769': attribute type 2 has an invalid length.
[  117.598149][ T8288] netlink: 'syz.2.769': attribute type 1 has an invalid length.
[  117.616787][ T8292] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  117.623101][ T8292] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  117.965749][ T8318] syzkaller1: entered promiscuous mode
[  117.968577][ T8318] syzkaller1: entered allmulticast mode
[  118.290570][ T5851] Bluetooth: hci0: command tx timeout
[  118.434799][ T8338] syzkaller1: entered promiscuous mode
[  118.437109][ T8338] syzkaller1: entered allmulticast mode
[  118.662920][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'.
[  119.129015][ T8359] syzkaller1: entered promiscuous mode
[  119.138408][ T8359] syzkaller1: entered allmulticast mode
[  119.470142][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'.
[  119.505395][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'.
[  119.576650][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'.
[  119.579769][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'.
[  119.621176][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'.
[  119.624404][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'.
[  119.629821][ T8391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.805'.
[  119.644152][ T8391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.805'.
[  119.813245][ T8395] syzkaller1: entered promiscuous mode
[  119.815453][ T8395] syzkaller1: entered allmulticast mode
[  119.997983][ T8407] netlink: 64 bytes leftover after parsing attributes in process `syz.0.814'.
[  120.001803][ T8407] syzkaller1: entered promiscuous mode
[  120.003618][ T8407] syzkaller1: entered allmulticast mode
[  121.009419][ T8434] netlink: 'syz.0.821': attribute type 1 has an invalid length.
[  121.021361][ T8434] netlink: 'syz.0.821': attribute type 1 has an invalid length.
[  121.030993][ T8434] netlink: 'syz.0.821': attribute type 2 has an invalid length.
[  121.051393][ T8434] netlink: 'syz.0.821': attribute type 1 has an invalid length.
[  121.271445][ T8451] syzkaller1: entered promiscuous mode
[  121.273348][ T8451] syzkaller1: entered allmulticast mode
[  121.837382][ T8467] syzkaller1: entered promiscuous mode
[  121.841590][ T8467] syzkaller1: entered allmulticast mode
[  121.980767][ T8478] netlink: 'syz.2.835': attribute type 5 has an invalid length.
[  121.984141][ T8478] netlink: 'syz.2.835': attribute type 5 has an invalid length.
[  121.996035][   T47] IPVS: starting estimator thread 0...
[  122.091155][ T8480] IPVS: using max 41 ests per chain, 98400 per kthread
[  122.252331][ T8484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.492883][ T8518] netlink: 'syz.0.845': attribute type 4 has an invalid length.
[  122.497149][ T8518] lo speed is unknown, defaulting to 1000
[  122.503243][ T8518] lo speed is unknown, defaulting to 1000
[  122.506442][ T8518] lo speed is unknown, defaulting to 1000
[  122.640230][ T8523] net_ratelimit: 14 callbacks suppressed
[  122.640260][ T8523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  122.684215][  T794] lo speed is unknown, defaulting to 1000
[  122.686179][  T794] syz0: Port: 1 Link ACTIVE
[  122.688735][ T8518] infiniband syz0: set active
[  122.691830][ T8518] infiniband syz0: added lo
[  122.741497][ T8518] RDS/IB: syz0: added
[  122.743272][ T8518] smc: adding ib device syz0 with port count 1
[  122.745339][ T8518] smc:    ib device syz0 port 1 has pnetid 
[  122.748472][  T794] lo speed is unknown, defaulting to 1000
[  122.756181][ T8518] lo speed is unknown, defaulting to 1000
[  122.899890][ T8518] lo speed is unknown, defaulting to 1000
[  123.113453][ T8559] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  123.123495][ T8518] lo speed is unknown, defaulting to 1000
[  123.337574][ T8570] lo speed is unknown, defaulting to 1000
[  123.915767][ T8588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.924397][ T8588] __nla_validate_parse: 10 callbacks suppressed
[  123.924413][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.865'.
[  124.307521][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'.
[  124.379166][ T8606] netlink: 'syz.1.871': attribute type 83 has an invalid length.
[  124.385614][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.871'.
[  124.571755][ T8610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.873'.
[  124.733597][ T8623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.879'.
[  124.884570][ T8627] vti0: entered promiscuous mode
[  124.981610][ T8636] lo speed is unknown, defaulting to 1000
[  125.255717][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'.
[  125.267143][ T8656] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:02:00:97:76
[  125.272692][ T8656] trusted_key: syz.1.891 sent an empty control message without MSG_MORE.
[  125.702875][ T8670] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[  125.745377][ T8673] netlink: 2 bytes leftover after parsing attributes in process `syz.0.898'.
[  125.910767][ T8679] netlink: 'syz.0.901': attribute type 1 has an invalid length.
[  125.928891][ T8679] 8021q: adding VLAN 0 to HW filter on device bond3
[  125.972073][ T8679] bond3: (slave geneve2): making interface the new active one
[  125.977220][ T8679] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  126.146285][  T794] lo speed is unknown, defaulting to 1000
[  126.148639][  T794] syz0: Port: 1 Link DOWN
[  126.157449][  T794] lo speed is unknown, defaulting to 1000
[  127.052526][ T8696] netlink: 208128 bytes leftover after parsing attributes in process `syz.2.907'.
[  127.056379][ T8696] openvswitch: netlink: Message has 4 unknown bytes.
[  127.287853][ T8708] netlink: 'syz.1.910': attribute type 1 has an invalid length.
[  127.308800][ T8708] netlink: 136 bytes leftover after parsing attributes in process `syz.1.910'.
[  127.312932][ T8708] netlink: 'syz.1.910': attribute type 2 has an invalid length.
[  127.315640][ T8708] netlink: 'syz.1.910': attribute type 1 has an invalid length.
[  127.318653][ T8709] netlink: 'syz.1.910': attribute type 1 has an invalid length.
[  127.322094][ T8709] netlink: 136 bytes leftover after parsing attributes in process `syz.1.910'.
[  127.325481][ T8709] netlink: 'syz.1.910': attribute type 2 has an invalid length.
[  127.328362][ T8709] netlink: 'syz.1.910': attribute type 1 has an invalid length.
[  127.813965][ T8752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.818317][ T8752] syzkaller0: entered promiscuous mode
[  127.822914][ T8752] syzkaller0: entered allmulticast mode
[  127.857679][ T8752] tipc: Resetting bearer <eth:syzkaller0>
[  127.862997][ T8750] tipc: Resetting bearer <eth:syzkaller0>
[  127.895936][ T8750] tipc: Disabling bearer <eth:syzkaller0>
Connection to localhost closed by remote host.
[  128.558104][ T5910] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.563502][ T5910] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.635091][ T5910] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.638727][ T5910] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.682723][ T5910] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.686129][ T5910] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.755761][ T5910] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.759413][ T5910] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.229826][ T5910] bond0 (unregistering): Released all slaves
[  129.240635][ T5910] bond1 (unregistering): Released all slaves
[  129.354417][ T5910] tipc: Left network mode
[  129.656952][ T5910] hsr_slave_0: left promiscuous mode
[  129.660424][ T5910] hsr_slave_1: left promiscuous mode
[  129.674204][ T5910] veth1_vlan: left promiscuous mode
[  129.676569][ T5910] veth0_vlan: left promiscuous mode
[  130.572984][ T5910] IPVS: stop unused estimator thread 0...
[  130.668296][ T5910] ------------[ cut here ]------------
[  130.670653][ T5910] WARNING: CPU: 0 PID: 5910 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  130.674535][ T5910] Modules linked in:
[  130.676501][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  130.682518][ T5910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.686836][ T5910] Workqueue: netns cleanup_net
[  130.688858][ T5910] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  130.692104][ T5910] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 28 c1 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 7e e2 f7 e8 71 56 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 63 56 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  130.700316][ T5910] RSP: 0018:ffffc900034df898 EFLAGS: 00010293
[  130.702772][ T5910] RAX: ffffffff8a21553f RBX: ffff8880121d8000 RCX: ffff88810e2ed640
[  130.705941][ T5910] RDX: 0000000000000000 RSI: ffffffff8dba3969 RDI: ffff88810e2ed640
[  130.709494][ T5910] RBP: ffffc900034df9b0 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  130.712861][ T5910] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8f62d760
[  130.715545][ T5910] R13: 1ffff9200069bf40 R14: ffff8880121d9480 R15: dffffc0000000000
[  130.718349][ T5910] FS:  0000000000000000(0000) GS:ffff8880b8621000(0000) knlGS:0000000000000000
[  130.721356][ T5910] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.723785][ T5910] CR2: 000055ad030dc358 CR3: 000000000df36000 CR4: 00000000000006f0
[  130.726403][ T5910] Call Trace:
[  130.727468][ T5910]  <TASK>
[  130.728375][ T5910]  xfrm_net_exit+0x2d/0x70
[  130.729826][ T5910]  ops_undo_list+0x49a/0x990
[  130.731262][ T5910]  ? __pfx_ops_undo_list+0x10/0x10
[  130.732875][ T5910]  ? do_raw_spin_unlock+0x4d/0x240
[  130.734419][ T5910]  cleanup_net+0x4c5/0x800
[  130.735749][ T5910]  ? __pfx_cleanup_net+0x10/0x10
[  130.737295][ T5910]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.739388][ T5910]  ? process_scheduled_works+0x9ef/0x17b0
[  130.741226][ T5910]  ? process_scheduled_works+0x9ef/0x17b0
[  130.743079][ T5910]  process_scheduled_works+0xae1/0x17b0
[  130.744845][ T5910]  ? __pfx_process_scheduled_works+0x10/0x10
[  130.747089][ T5910]  worker_thread+0x8a0/0xda0
[  130.748803][ T5910]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.750937][ T5910]  ? __kthread_parkme+0x7b/0x200
[  130.752590][ T5910]  kthread+0x711/0x8a0
[  130.754184][ T5910]  ? __pfx_worker_thread+0x10/0x10
[  130.756048][ T5910]  ? __pfx_kthread+0x10/0x10
[  130.757740][ T5910]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.759809][ T5910]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.761774][ T5910]  ? __pfx_kthread+0x10/0x10
[  130.763443][ T5910]  ret_from_fork+0x3fc/0x770
[  130.765252][ T5910]  ? __pfx_ret_from_fork+0x10/0x10
[  130.767189][ T5910]  ? __switch_to_asm+0x39/0x70
[  130.768941][ T5910]  ? __switch_to_asm+0x33/0x70
[  130.770914][ T5910]  ? __pfx_kthread+0x10/0x10
[  130.772819][ T5910]  ret_from_fork_asm+0x1a/0x30
[  130.774428][ T5910]  </TASK>
[  130.775502][ T5910] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  130.777881][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  130.782085][ T5910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.785212][ T5910] Workqueue: netns cleanup_net
[  130.786943][ T5910] Call Trace:
[  130.788146][ T5910]  <TASK>
[  130.789104][ T5910]  dump_stack_lvl+0x99/0x250
[  130.790574][ T5910]  ? __asan_memcpy+0x40/0x70
[  130.792142][ T5910]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.794048][ T5910]  ? __pfx__printk+0x10/0x10
[  130.795934][ T5910]  vpanic+0x281/0x750
[  130.797230][ T5910]  ? __pfx__printk+0x10/0x10
[  130.798861][ T5910]  ? __pfx_vpanic+0x10/0x10
[  130.800475][ T5910]  ? is_bpf_text_address+0x292/0x2b0
[  130.802246][ T5910]  panic+0xb9/0xc0
[  130.803387][ T5910]  ? __pfx_panic+0x10/0x10
[  130.804728][ T5910]  __warn+0x31b/0x4b0
[  130.805965][ T5910]  ? xfrm_state_fini+0x270/0x2f0
[  130.807779][ T5910]  ? xfrm_state_fini+0x270/0x2f0
[  130.809378][ T5910]  report_bug+0x2be/0x4f0
[  130.810862][ T5910]  ? xfrm_state_fini+0x270/0x2f0
[  130.812714][ T5910]  ? xfrm_state_fini+0x270/0x2f0
[  130.814356][ T5910]  ? xfrm_state_fini+0x272/0x2f0
[  130.816113][ T5910]  handle_bug+0x84/0x160
[  130.817692][ T5910]  exc_invalid_op+0x1a/0x50
[  130.819346][ T5910]  asm_exc_invalid_op+0x1a/0x20
[  130.821291][ T5910] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  130.823344][ T5910] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 28 c1 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 7e e2 f7 e8 71 56 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 63 56 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  130.829238][ T5910] RSP: 0018:ffffc900034df898 EFLAGS: 00010293
[  130.831808][ T5910] RAX: ffffffff8a21553f RBX: ffff8880121d8000 RCX: ffff88810e2ed640
[  130.834671][ T5910] RDX: 0000000000000000 RSI: ffffffff8dba3969 RDI: ffff88810e2ed640
[  130.837673][ T5910] RBP: ffffc900034df9b0 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  130.840696][ T5910] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8f62d760
[  130.843526][ T5910] R13: 1ffff9200069bf40 R14: ffff8880121d9480 R15: dffffc0000000000
[  130.846249][ T5910]  ? xfrm_state_fini+0x26f/0x2f0
[  130.848198][ T5910]  ? xfrm_state_fini+0x26f/0x2f0
[  130.850062][ T5910]  xfrm_net_exit+0x2d/0x70
[  130.851653][ T5910]  ops_undo_list+0x49a/0x990
[  130.853352][ T5910]  ? __pfx_ops_undo_list+0x10/0x10
[  130.855230][ T5910]  ? do_raw_spin_unlock+0x4d/0x240
[  130.857109][ T5910]  cleanup_net+0x4c5/0x800
[  130.858720][ T5910]  ? __pfx_cleanup_net+0x10/0x10
[  130.860541][ T5910]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.862528][ T5910]  ? process_scheduled_works+0x9ef/0x17b0
[  130.864359][ T5910]  ? process_scheduled_works+0x9ef/0x17b0
[  130.866334][ T5910]  process_scheduled_works+0xae1/0x17b0
[  130.868383][ T5910]  ? __pfx_process_scheduled_works+0x10/0x10
[  130.870509][ T5910]  worker_thread+0x8a0/0xda0
[  130.872143][ T5910]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.874539][ T5910]  ? __kthread_parkme+0x7b/0x200
[  130.876459][ T5910]  kthread+0x711/0x8a0
[  130.877882][ T5910]  ? __pfx_worker_thread+0x10/0x10
[  130.879762][ T5910]  ? __pfx_kthread+0x10/0x10
[  130.881230][ T5910]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.882910][ T5910]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.884484][ T5910]  ? __pfx_kthread+0x10/0x10
[  130.885901][ T5910]  ret_from_fork+0x3fc/0x770
[  130.887309][ T5910]  ? __pfx_ret_from_fork+0x10/0x10
[  130.889280][ T5910]  ? __switch_to_asm+0x39/0x70
[  130.891187][ T5910]  ? __switch_to_asm+0x33/0x70
[  130.893038][ T5910]  ? __pfx_kthread+0x10/0x10
[  130.894549][ T5910]  ret_from_fork_asm+0x1a/0x30
[  130.896063][ T5910]  </TASK>
[  130.897632][ T5910] Kernel Offset: disabled
[  130.899181][ T5910] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:27:06  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900034df030
R8 =ffff88801f4f8237 R9 =1ffff11003e9f046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48ce R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ad030dc358 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=00000000000001e1 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffffff XMM09=00000000000001e1 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=8478822b0d2b7200 RBX=ffffffff81968308 RCX=8478822b0d2b7200 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34730 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ad030e01b8 CR3=00000000265fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000135 0000000000003030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=6c6c696b66722f35 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
