last executing test programs:

1.71944874s ago: executing program 2 (id=21008):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x5450, &(0x7f00000000c0))

1.63787837s ago: executing program 2 (id=21010):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000f50000"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x5, &(0x7f00000001c0)=0xd, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
write$tun(r8, &(0x7f00000008c0)={@void, @val={0x2, 0x3, 0x0, 0x4, 0xff, 0x5e}, @x25={0x3, 0x40, 0xf7, "a95f6d33c22b413e3be10983589ebe8b50b062486b0433bf221a5e2eccd79eef831f0b2279af48fcaaedeb0fcc712c7fb8bb259fc225479a7b14086f17a92215fc7294b404a8dcc828b1743af8b0db0468a0f60f5c3e440f514e86fa770d6b9ea10c8fc6797b03100e45a082e1e6eceeeb4ac360dd7fc200779ef691c28e2d"}}, 0x8c)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_DEL(r10, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa0, 0xa, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_macvtap\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x200}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc800}, 0x48000)
sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r9], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r12, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x4, r11, 0x1, 0x12, 0x6, @broadcast}, 0x14)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40084}, 0x800)
close(r3)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x1, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x4}]}, 0x38}}, 0x4000010)
r15 = socket$inet6(0xa, 0x1, 0x0)
listen(r15, 0xb)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000080), &(0x7f0000000840)=r3}, 0x20)
close(r15)

947.277538ms ago: executing program 2 (id=21020):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10900848}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x27}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20004084)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r0, 0x4, r0}, 0x10)
r6 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f0000000200)=""/224, &(0x7f0000000300)=0xe0)

769.792881ms ago: executing program 0 (id=21022):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

769.287401ms ago: executing program 2 (id=21023):
unshare(0x22020600) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000580)={'ip_vti0\x00', <r0=>0x0, 0x80, 0x8000, 0x80000000, 0x80, {{0x2f, 0x4, 0x1, 0x0, 0xbc, 0x65, 0x0, 0x81, 0x4, 0x0, @empty, @multicast1, {[@timestamp_addr={0x44, 0x24, 0x76, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@multicast1, 0x7}, {@multicast2, 0x400}, {@remote, 0x7}]}, @noop, @lsrr={0x83, 0x27, 0xcc, [@private=0xa010101, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x29}]}, @end, @timestamp={0x44, 0x18, 0xf3, 0x0, 0x4, [0x401, 0x7fffffff, 0x0, 0x6aef, 0x3]}, @lsrr={0x83, 0xf, 0xb5, [@local, @remote, @multicast2]}, @cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x7, 0x4, "00bb"}, {0x2, 0x11, "8ec78ce414147c93ce1e330a3089d9"}, {0x0, 0x12, "93759f8bed262302b990ed9e9212f659"}]}, @ra={0x94, 0x4}]}}}}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES16=0x0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', r0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r2], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x10, &(0x7f0000000700)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200040}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r4, 0x35, 0x0, 0x6, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r2, 0x26, 0x0, @val=@tcx={@void, @value=r1, @void, @void, r5}}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r1, 0x4, r1}, 0x6)

720.450943ms ago: executing program 1 (id=21024):
syz_clone(0x40089100, &(0x7f0000000180)="2795be32b03e4e2c9dcc8bb89431b7ba71921f71bb976d696fbe31d89da64146", 0x20, &(0x7f0000000400), &(0x7f00000004c0), &(0x7f0000000500)="f881d4a8c0052c6a6e9a6389061942e50efc417944e2138a36db28e61e1a117b7fee10620d14fb6e6e2b4d")

719.74837ms ago: executing program 0 (id=21025):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001100)={'vxcan1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001100)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x18, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x18, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_remove_cig={{0x2065, 0x1}, {0x2}}}, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1200008004000000080000000b0000b3b271fc98", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="00000000000000560005000000000000000000000000000000000000cbd94435828157df4b2ac8f1e4ed4b550aba1269ac61f8f904b70ca14f1d04252c457423ae1b24cd448d937133b8433958fa8479c554cae108609c07bab1994fede2064feddee61d470a8d3319013741b30aff8f7633d8b09e0b947bd2a5f4421357b42be40c7bd8035ecf4f4b3269e4343e782f02e79245550270405b49e484213fb458d16e72958711c4a6b6a3a75a7c18d50e0e56b9ddad9e954e0ea87331a714b2525c000000"], 0x50)
r3 = socket$kcm(0x29, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000bc0)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000180)="d12ee8400b905209fdce91d2f41abb2d0c3d5e2f04110a438f7d184a502cd2abda01249a784d0fbef2f748715bf030c9d12b8e78da883d087ca61c477eda10e70107dab8242381b94aecb86b68d26519f06a851c52b2afebea7d3d7b7a55409d93ba2920c9b96a275d360ad095c0ea494c32a81bf275befcf38f0bb3d95a1ba5998bf51899ba52ef5eaa780d3d3a0d153bf6a9071034e2368fb2c2d474a4ce106652cbf9988b1a3fc1cadaea130c8359266c9005f140c830a803b1473d91d1ba1f604e14f0c2f99ddfdf8e310f15e49e14daa50e7d644b5de05bb3f116df5b1f2ebf91b852cbffec6d435ea8952737b1e1a6a003e752e55792c4ae8603c6a0", 0xff}, {&(0x7f0000000280)="8cea0c94f2b09e5b9beb2c041595c38bb72e6cd23f2c0964640ea5aa87ff1d6e8b9b7b42f5a91efcaa9aaf828dce37bbca871d770dfbab601b8950a0ab140f5b863c08501e1ecfa919a6459135ff366c0d246bca0a1d12036b46b543aa1d323bc0dda9b8106324fafc96ac41a3b754d98c83f034ebb2f34a0f8ea5592763d1b9c64cd042f131768e2417cbbad3dcaa76f03e9973278f2b8ad6e72711cf9757a892408bcffe3294b7d5c3bc1d4c18f871788afa80b8bcafcb3a42758d227f3d3443bcc23509b8ef1e747e3c4628", 0xcd}, {&(0x7f0000000380)="b002dad2e61da4efad8180849956c8883cf3b0fd10aa0eb036452222033dd35149fb14cf759877ca5bdbe609ab04645d14a1c9c1c33a343c413496bae32dff9051d60dbac64415742de78cbbc14b8a45963880765c7b98907d1f8f10ee8d785c6de0930ec317b905bd301e1350f8fd9cc4519796d3b3397df5bb5fe1b7bdccc7871c2debd800f533aa4b3a6590062e1eac19b4bed407eba3d55f617071b65b916bc4eeb3fb9fe03d444dc27fec7db8787405d000f3deaa3bbb6b", 0xba}, {&(0x7f0000000440)="f88e5f32a1d40d4b6dd793d6a2f1dca2d4e4842f14611b2d727ce4f63eba8c2abf02dd", 0x23}, {&(0x7f0000000480)="3bbae8b0d2334f19fcbbdfd22291424465a716f3ba9ccf035fd66eb1e64f35318031fc48fbd14ed858ecc2bb0ad34abd2dc144c81dfceabc8d99d54c718f4c2793339f5dd085abeaf0326a8f9e4be2862f0e366251b46fe76a62d270f46306e191f26c3ee5837ec56875038d4da541980658a523a3a53cfd715ad6262f53139ccbd43dd64c8293ffea2f1c4d0915bfab92fb315b17ae535755c5329f9da0aca37cee6577e703f982fff8738b58b293b01f9c775b911fd6504ffa5492e64c19ebf3ebdd6c4fb17a0ae8708f24e62de707e45c1a9b8ad8f4cf504e23398200917ddefc9e3ec5c40c0b2aeb3353149c3bf1f32b1a", 0xf3}, {&(0x7f0000000580)="1b3427dbd841f1a89adf6b383f75e72aab8265aa5dfbc2ba6e9d039edfe3ad68df91bcb30fb95fa5827730189a60034842292ac3a72878321f", 0x39}, {&(0x7f00000005c0)="a88b6c129d08ac349739ac496dbee4bcedcf9e0523fc8c25f17edeb21a1b25c5c757329442c836092bdb082945633fecbd029c942afc09e9a006b3b1253beb4ae28bb264c0c5ee998abd3e507f137f24fc94d02526c197c7225e62230310ad76e2ee0d92a4b50227036e97052a8e212a72fbb6f2955d035a2990b33f696d67b722a1b91b9ab3662cf703dc2fbf4d7663b1eb8878ac91119b849a281ecd90486f836ee96f418bf875e8eb92c6c1f6cbfb15", 0xb1}], 0x7, &(0x7f00000007c0)=[{0x38, 0x29, 0x1, "5092351c348123edc3e8b7fada31ca26c9f3214ec13d7381c52e0af7ee0a5d59b37324e34b478c1c"}, {0xb8, 0x104, 0x8, "7e1d27fa2b5f7e396c882e6576826a0ec2d61b6fc8184c2252075a19072cc390893c610f047aab81191b68c0aa89eb5739d1c6ddc0b0274b27ce43c4a555d60e76998a81ad3f8416db4d6d4b6eab0a55df789e6c978ad3789b8655e9e2a66de892dd5d003d18b2b0559591880dacd5c4ec1a91bbe2b35a6c1394edaf4b96434dd3b374b97c95e86cb7a2b97a8b599d578dc4af26daffbfd5cb1ef3ba20fa60d4f507"}, {0xd8, 0x118, 0x8, "a51c875591c5751debe8c1b4ed3bbb98648545d0f07d6f2bba15c3f201527254f1fc562dcead124ccc52e7e860aa771416b60a1d202d0323e5367310ad6ee1e9c3414eb26d978dc37c1ac0f04307f6504491e07494c651748d8340ed1d4e8f8d7db43e08f51bc97baea272ef88c0e2547f084d889a277bf2047f7666a4960bfa58dea77a757d442b5583c20ac402a016c22bcc20fc725f255a8547ea89b161a9f4b5f123026a1269f293d03af2efc29ec3a5b5e3c1e095c24d7ba014b8756205571673feeffa"}, {0x108, 0x111, 0x5, "69c2938b1fb5b76ed84cebf24608ca715c0ba50547b682b29e1348c0ccffddcb455a592959da23e3e860dc7fcf18f60c45425fa76ce5fdcf9bb326f895283247eaa2b0577bb7860ce40e4623d7f14c690e4774526294327253be835af82ce1937f64f70d20630a16a6f6e29b27ca18decc3857c338bae06950dd3a503f6cbb584d742cd72b19299f5e01b4e90e10973fbfc8ffcae4d55149ea756ed3b4de445a8993d497c3eb23e9c4f96271c320e833e6b4258109be153fdabb7a51986ebcd5ed792d69b8e9fe095a5f7ab015215c538ae60e1868888f53416174ae7132d2fb4b72d3191d2dca90a35f1bfea068722cad85"}, {0xd0, 0x117, 0xd, "a12596e152d50ef374b46a656551c289893349a2945a68e065deba001a2eb6ec5ea17fd3a53087f5f506c97961b60c3aaae72125d3f895f164f65c84e63169b2be63f4d71fbca8a9fdb07ff049b881a2d5070bd6bc42135d6ae179f8a334d2228890b6e1fae80cde291bdf0a603dd484857eeb0c28a733fb62caec7215d55548c578b2c1407cfb19bc09d20b22e36e07326174d4cabd9da137158720b5a225caa9fbc40598ef4753010c5ead68702527323557dfc1a244d637f03bace2c31b"}, {0x60, 0x113, 0x6, "cb27bf795880163c2c9a0145ad7a231a50beb70c72a0e46a5aa2deb9fc1cd6824e91fc01c050af8a7bc835e7a97832164ea4be83bdf235fa0e16f9cf7bfd625b06279139bafa043e5cc853521fca"}], 0x400}, 0x20000) (async)
sendmsg$kcm(r3, &(0x7f0000000bc0)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000180)="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", 0xff}, {&(0x7f0000000280)="8cea0c94f2b09e5b9beb2c041595c38bb72e6cd23f2c0964640ea5aa87ff1d6e8b9b7b42f5a91efcaa9aaf828dce37bbca871d770dfbab601b8950a0ab140f5b863c08501e1ecfa919a6459135ff366c0d246bca0a1d12036b46b543aa1d323bc0dda9b8106324fafc96ac41a3b754d98c83f034ebb2f34a0f8ea5592763d1b9c64cd042f131768e2417cbbad3dcaa76f03e9973278f2b8ad6e72711cf9757a892408bcffe3294b7d5c3bc1d4c18f871788afa80b8bcafcb3a42758d227f3d3443bcc23509b8ef1e747e3c4628", 0xcd}, {&(0x7f0000000380)="b002dad2e61da4efad8180849956c8883cf3b0fd10aa0eb036452222033dd35149fb14cf759877ca5bdbe609ab04645d14a1c9c1c33a343c413496bae32dff9051d60dbac64415742de78cbbc14b8a45963880765c7b98907d1f8f10ee8d785c6de0930ec317b905bd301e1350f8fd9cc4519796d3b3397df5bb5fe1b7bdccc7871c2debd800f533aa4b3a6590062e1eac19b4bed407eba3d55f617071b65b916bc4eeb3fb9fe03d444dc27fec7db8787405d000f3deaa3bbb6b", 0xba}, {&(0x7f0000000440)="f88e5f32a1d40d4b6dd793d6a2f1dca2d4e4842f14611b2d727ce4f63eba8c2abf02dd", 0x23}, {&(0x7f0000000480)="3bbae8b0d2334f19fcbbdfd22291424465a716f3ba9ccf035fd66eb1e64f35318031fc48fbd14ed858ecc2bb0ad34abd2dc144c81dfceabc8d99d54c718f4c2793339f5dd085abeaf0326a8f9e4be2862f0e366251b46fe76a62d270f46306e191f26c3ee5837ec56875038d4da541980658a523a3a53cfd715ad6262f53139ccbd43dd64c8293ffea2f1c4d0915bfab92fb315b17ae535755c5329f9da0aca37cee6577e703f982fff8738b58b293b01f9c775b911fd6504ffa5492e64c19ebf3ebdd6c4fb17a0ae8708f24e62de707e45c1a9b8ad8f4cf504e23398200917ddefc9e3ec5c40c0b2aeb3353149c3bf1f32b1a", 0xf3}, {&(0x7f0000000580)="1b3427dbd841f1a89adf6b383f75e72aab8265aa5dfbc2ba6e9d039edfe3ad68df91bcb30fb95fa5827730189a60034842292ac3a72878321f", 0x39}, {&(0x7f00000005c0)="a88b6c129d08ac349739ac496dbee4bcedcf9e0523fc8c25f17edeb21a1b25c5c757329442c836092bdb082945633fecbd029c942afc09e9a006b3b1253beb4ae28bb264c0c5ee998abd3e507f137f24fc94d02526c197c7225e62230310ad76e2ee0d92a4b50227036e97052a8e212a72fbb6f2955d035a2990b33f696d67b722a1b91b9ab3662cf703dc2fbf4d7663b1eb8878ac91119b849a281ecd90486f836ee96f418bf875e8eb92c6c1f6cbfb15", 0xb1}], 0x7, &(0x7f00000007c0)=[{0x38, 0x29, 0x1, "5092351c348123edc3e8b7fada31ca26c9f3214ec13d7381c52e0af7ee0a5d59b37324e34b478c1c"}, {0xb8, 0x104, 0x8, "7e1d27fa2b5f7e396c882e6576826a0ec2d61b6fc8184c2252075a19072cc390893c610f047aab81191b68c0aa89eb5739d1c6ddc0b0274b27ce43c4a555d60e76998a81ad3f8416db4d6d4b6eab0a55df789e6c978ad3789b8655e9e2a66de892dd5d003d18b2b0559591880dacd5c4ec1a91bbe2b35a6c1394edaf4b96434dd3b374b97c95e86cb7a2b97a8b599d578dc4af26daffbfd5cb1ef3ba20fa60d4f507"}, {0xd8, 0x118, 0x8, "a51c875591c5751debe8c1b4ed3bbb98648545d0f07d6f2bba15c3f201527254f1fc562dcead124ccc52e7e860aa771416b60a1d202d0323e5367310ad6ee1e9c3414eb26d978dc37c1ac0f04307f6504491e07494c651748d8340ed1d4e8f8d7db43e08f51bc97baea272ef88c0e2547f084d889a277bf2047f7666a4960bfa58dea77a757d442b5583c20ac402a016c22bcc20fc725f255a8547ea89b161a9f4b5f123026a1269f293d03af2efc29ec3a5b5e3c1e095c24d7ba014b8756205571673feeffa"}, {0x108, 0x111, 0x5, "69c2938b1fb5b76ed84cebf24608ca715c0ba50547b682b29e1348c0ccffddcb455a592959da23e3e860dc7fcf18f60c45425fa76ce5fdcf9bb326f895283247eaa2b0577bb7860ce40e4623d7f14c690e4774526294327253be835af82ce1937f64f70d20630a16a6f6e29b27ca18decc3857c338bae06950dd3a503f6cbb584d742cd72b19299f5e01b4e90e10973fbfc8ffcae4d55149ea756ed3b4de445a8993d497c3eb23e9c4f96271c320e833e6b4258109be153fdabb7a51986ebcd5ed792d69b8e9fe095a5f7ab015215c538ae60e1868888f53416174ae7132d2fb4b72d3191d2dca90a35f1bfea068722cad85"}, {0xd0, 0x117, 0xd, "a12596e152d50ef374b46a656551c289893349a2945a68e065deba001a2eb6ec5ea17fd3a53087f5f506c97961b60c3aaae72125d3f895f164f65c84e63169b2be63f4d71fbca8a9fdb07ff049b881a2d5070bd6bc42135d6ae179f8a334d2228890b6e1fae80cde291bdf0a603dd484857eeb0c28a733fb62caec7215d55548c578b2c1407cfb19bc09d20b22e36e07326174d4cabd9da137158720b5a225caa9fbc40598ef4753010c5ead68702527323557dfc1a244d637f03bace2c31b"}, {0x60, 0x113, 0x6, "cb27bf795880163c2c9a0145ad7a231a50beb70c72a0e46a5aa2deb9fc1cd6824e91fc01c050af8a7bc835e7a97832164ea4be83bdf235fa0e16f9cf7bfd625b06279139bafa043e5cc853521fca"}], 0x400}, 0x20000)
r5 = socket(0x2, 0x80805, 0x0)
connect$rds(r5, &(0x7f0000000280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendto$inet(r5, &(0x7f00000002c0)="87b57beb7d2c4fc90f00b7680c10f16545550bee37137d383d7e18a9", 0x1c, 0x4, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$can_bcm(0x1d, 0x2, 0x2)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x400000000010, 0x3, 0x0) (async)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
socket$unix(0x1, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

600.204514ms ago: executing program 0 (id=21026):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@bridge_delneigh={0x44, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0xfc}}, @NDA_CACHEINFO={0x14, 0x3, {0x4, 0x7, 0x779, 0x3}}]}, 0x44}}, 0x20000000)
syz_clone(0x2000500, &(0x7f0000000100)="9b8ccebf578d8d9a5b582289c4f4706e44ebe910d1d9fdcfd4392ccaab162caa90a3923eb0d56e2dc7eb000000000000000000002000000000", 0x39, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="4a6de6485ed2449eec916cad7be4ee6275d696eb3a7ee06b4eeafb79f343c5c756b4e00339c507ae6fa0c58b96db7b220644d809d52358bfd9c1c8f6ca8e3bd77ecd99ae550287e0810dded8c36009d128401be28763bee7cd1713a9549cc4dad53fdca2af0ffbe57f01c750550393dc5fbbc1fd03635b8273f0952d4ae493cedc9fc316c622908f350b77061e86ab963c9462f6f9e28f66114fc2b91982d3c706d1efb01e1f6c0c2104506f948acf60e8743a133c2cb8d3e55b2b882f354ea2")

503.885871ms ago: executing program 1 (id=21027):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) (async)
setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0xffffffff, 0x3, 0x2, 0x0, 0x5}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = epoll_create1(0x80000)
ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000))
r5 = epoll_create1(0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20044040}, 0x4000800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/45, 0x2d}], 0x1}, 0x2) (async)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/45, 0x2d}], 0x1}, 0x2)
getsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async)
getsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f0000000080), &(0x7f0000000140)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000400)={0xa000001c})
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4)

503.310388ms ago: executing program 0 (id=21028):
r0 = syz_clone(0x5902e100, &(0x7f0000000000)="9da3f249553c7f861fcaac4b8adc4a6cb6a42b7ca71ea1728655cceda662ffca3411fa63d28bcf632f5dc5661f6dbb01278ad1d32b93f697bf70693dd7c9ebf87f2dba099859d2a234cd6703ffec4f882481aa96456b5a81c8c1f1726aab0a4862ffa7a5c311aa2d23f4ac43332098d251ad5473eb6e08f584c8f9c635037705421a89afa9600000000000000000004939f5880a50ada28b4c459be11a963e7912b104bf97c3336c33d6e63048ff15a939e38f799a40062f3711bcd04099908679771b2fb015572741d51f01a0ef5ae0ec7cfcafda5650f10bb58aa8de6ad56268c58a9dd89fbe65cf9a67f6ae5da9bc57efebe5505e74f7544262d68a23197df2f21e647e6a9aa26c14d4ccd5f4939cd2840a6a867e2c85175189f3bb36292f8200000000000000", 0x128, &(0x7f0000000140), &(0x7f0000000c80), &(0x7f0000000cc0)="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")
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100269d7000ffdbdf271500000008000300", @ANYRES32=r5, @ANYBLOB="14002b800800010002"], 0x30}, 0x1, 0x0, 0x0, 0x2c008005}, 0x20040400)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r6)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf25070000000c0017000201aaaaaaaaaaaa0a0004007770616e3300000008000100000000000c001700010055555555555508000300", @ANYRES32=r8, @ANYBLOB="0c0017000203aaaaaaaaaaaa080001a3370000000800050000"], 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0)
r9 = getpid()
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3f9d00000000fedbdf250800000008000300", @ANYBLOB="b9e89ed711c29bb12caaf976b6848d1f196ebc1f40fad6351bb92c3dc5c126d81106e83905c6a61fbbfae030fe59284ba46e0e4b116bbfa638dad28cea55001980a8932fcbe8d8ccf786", @ANYBLOB="5400308005000200090000000c000180080001000000000005000200010000000c00018005000200"], 0x70}}, 0x8004014)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240400c0}, 0x10)

458.420459ms ago: executing program 1 (id=21029):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r7, 0x25, 0x2, @void}, 0x10)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd"], 0xfdef)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newqdisc={0x74, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x8, 0x7ff, 0x401, 0x7}, {0x7, 0x2, 0x865, 0xc97, 0x2, 0x1}, 0x9, 0x7, 0xd8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0df283696257db3}, @TCA_TBF_BURST={0x8, 0x6, 0xffffffff}]}}]}, 0x74}}, 0x4000080)
bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r8, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x3, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r12, r13, 0x7, 0x0, @val=@tcx={@void, @value=r12}}, 0x13)

369.74053ms ago: executing program 2 (id=21030):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="100001"], 0x28}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x1, 0x57, 0x2, 0x0, 0x8000000000000001, 0xb210, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xfffffffffffffff8, 0xb}, 0x900, 0x1, 0x9, 0x6, 0x2, 0xfffff800, 0xfffe, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x2)

368.102595ms ago: executing program 2 (id=21031):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="04"], 0x10)

259.369715ms ago: executing program 0 (id=21032):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r2, r0, 0x4, r3}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$inet(r5, &(0x7f0000000100)=""/188, 0xbc, 0x10101, &(0x7f0000000280)={0x2, 0x4e24, @broadcast}, 0x10)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={<r11=>0x0, 0x9}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000380)={r11, 0x1}, &(0x7f00000003c0)=0x8)
read$nci(r6, &(0x7f0000000200)=""/100, 0x64)
write$nci(r6, &(0x7f0000000940)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x1, 0x2, 0x2, 0x31, {0x1, 0x2f, "3f4a019e81e2dfbebb579b8b853407bc2eb3da32e63a6ed8d6f42a4706bac53b13576befee10f3f066e4dfcc2e3918"}}, 0x34)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

188.588438ms ago: executing program 1 (id=21033):
syz_clone(0x2001120, &(0x7f0000000100)="9b8ccebf578d8d9a5b582289c4f4f547bc55a3542f68465521867b2de1706e44ebe910d1d9fdcfd4392ccaab162caa90a3923eb0d56e2dc7eb", 0x39, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="4a6de6485ed2449eec916cad7be4ee6275d696eb3a7ee06b4eeafb79f343c5c756b4e00339c507ae6fa0c58b96db7b220644d809d52358bfd9c1c8f6ca8e3bd77ecd99ae550287e0810dded8c36009d128401be28763bee7cd1713a9549cc4dad53fdca2af0ffbe57f01c750550393dc5fbbc1fd03635b8273f0952d4ae493cedc9fc316c622908f350b77061e86ab963c9462f6f9e28f66114fc2b91982d3c706d1efb01e1f6c0c2104506f948acf60e8743a133c2cb8d3e55b2b882f354ea2")

90.065111ms ago: executing program 0 (id=21034):
syz_clone(0x40089100, &(0x7f0000000180)="2795be32b03e4e2c9dcc8bb89431b7ba71921f71bb976d696fbe31d89da64146", 0x20, &(0x7f0000000400), &(0x7f00000004c0), &(0x7f0000000500)="f881d4a8c0052c6a6e9a6389061942e50efc417944e2138a36db28e61e1a117b7fee10620d14fb6e6e2b4d")

89.866474ms ago: executing program 1 (id=21035):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41)

0s ago: executing program 1 (id=21036):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x2, 0xb, 0x2, 0x3, 0x2}, 0x10}}, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0x6, 0x50, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200), 0x0)
shutdown(r1, 0x1)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000370429bd7000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c020008010500280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000400)=@udp6}, 0x3f)

kernel console output (not intermixed with test programs):

a4d/0x1340
[  555.753949][ T9251]  ? trace_page_fault_user+0x84/0x1e0
[  555.753961][ T9251]  exc_page_fault+0x6a/0xc0
[  555.753978][ T9251]  asm_exc_page_fault+0x26/0x30
[  555.753989][ T9251] RIP: 0033:0x7fca5f957fbe
[  555.754004][ T9251] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24
[  555.754014][ T9251] RSP: 002b:00007fff8fb79700 EFLAGS: 00010246
[  555.754024][ T9251] RAX: 0000000000000000 RBX: 000055555af3b500 RCX: 00007fca5f95d68e
[  555.754032][ T9251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  555.754038][ T9251] RBP: 00007fca5fc17da0 R08: 0000000000000000 R09: 0000000000000000
[  555.754044][ T9251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000087afa
[  555.754051][ T9251] R13: 00007fca5fc15fac R14: 00000000000877ec R15: 00007fff8fb79880
[  555.754066][ T9251]  </TASK>
[  555.754072][ T9251] memory: usage 307200kB, limit 307200kB, failcnt 2620
[  555.908279][ T9251] memory+swap: usage 307812kB, limit 9007199254740988kB, failcnt 0
[  555.911786][ T9251] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  555.914627][ T9251] Memory cgroup stats for /syz0:
[  555.914771][ T9251] cache 4096
[  555.917941][ T9251] rss 0
[  555.919050][ T9251] rss_huge 0
[  555.920358][ T9251] shmem 0
[  555.922001][ T9251] mapped_file 0
[  555.923387][ T9251] dirty 0
[  555.924565][ T9251] writeback 0
[  555.925859][ T9251] workingset_refault_anon 214
[  555.927636][ T9251] workingset_refault_file 467
[  555.929352][ T9251] swap 626688
[  555.930557][ T9251] swapcached 1798144
[  555.932602][ T9251] pgpgin 480778
[  555.934032][ T9251] pgpgout 480773
[  555.935422][ T9251] pgfault 966655
[  555.936851][ T9251] pgmajfault 195
[  555.938204][ T9251] inactive_anon 0
[  555.939630][ T9251] active_anon 16384
[  555.941100][ T9251] inactive_file 0
[  555.942966][ T9251] active_file 4096
[  555.944474][ T9251] unevictable 0
[  555.945820][ T9251] hierarchical_memory_limit 314572800
[  555.947830][ T9251] hierarchical_memsw_limit 9223372036854771712
[  555.950155][ T9251] total_cache 4096
[  555.952009][ T9251] total_rss 0
[  555.953358][ T9251] total_rss_huge 0
[  555.954850][ T9251] total_shmem 0
[  555.956250][ T9251] total_mapped_file 0
[  555.957879][ T9251] total_dirty 0
[  555.959253][ T9251] total_writeback 0
[  555.960784][ T9251] total_workingset_refault_anon 214
[  555.963340][ T9251] total_workingset_refault_file 467
[  555.965389][ T9251] total_swap 626688
[  555.966922][ T9251] total_swapcached 1798144
[  555.968852][ T9251] total_pgpgin 482317
[  555.970420][ T9251] total_pgpgout 482312
[  555.972479][ T9251] total_pgfault 968199
[  555.974539][ T9251] total_pgmajfault 195
[  555.976249][ T9251] total_inactive_anon 0
[  555.977867][ T9251] total_active_anon 16384
[  555.979548][ T9251] total_inactive_file 0
[  555.981142][ T9251] total_active_file 4096
[  555.983443][ T9251] total_unevictable 0
[  555.985133][ T9251] anon_cost 0
[  555.986419][ T9251] file_cost 0
[  555.987743][ T9251] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.15724,pid=9251,uid=0
[  555.993845][ T9251] Memory cgroup out of memory: Killed process 9251 (syz.0.15724) total-vm:102160kB, anon-rss:1248kB, file-rss:21584kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  556.064441][ T9289] netlink: 'syz.0.15741': attribute type 4 has an invalid length.
[  556.551897][ T9339] bridge0: port 3(dummy0) entered blocking state
[  556.554623][ T9339] bridge0: port 3(dummy0) entered disabled state
[  556.557247][ T9339] dummy0: entered allmulticast mode
[  556.560146][ T9339] dummy0: entered promiscuous mode
[  556.566172][ T9339] dummy0: left allmulticast mode
[  556.567942][ T9339] dummy0: left promiscuous mode
[  556.569937][ T9339] bridge0: port 3(dummy0) entered disabled state
[  556.595345][ T9343] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  556.597999][ T9343] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  556.600152][ T9345] netlink: 'syz.2.15767': attribute type 1 has an invalid length.
[  556.605538][ T9345] netlink: 'syz.2.15767': attribute type 2 has an invalid length.
[  556.646115][ T9353] batadv_slave_0: entered promiscuous mode
[  556.649397][ T9352] batadv_slave_0: left promiscuous mode
[  556.769100][ T9374] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  556.773960][ T9374] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  556.912996][ T9388] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  556.915687][ T9388] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  557.153303][ T9409] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  557.155606][ T9409] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  557.270053][T28333] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  557.748104][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15800'.
[  557.866949][ T9431] syzkaller0: entered promiscuous mode
[  557.869176][ T9431] syzkaller0: entered allmulticast mode
[  559.113899][ T9453] netlink: 'syz.1.15812': attribute type 1 has an invalid length.
[  559.132844][ T9453] 8021q: adding VLAN 0 to HW filter on device bond30
[  559.151094][ T9453] bond30: (slave veth37): Enslaving as a backup interface with a down link
[  559.164967][ T9453] bond30: (slave dummy0): Enslaving as a backup interface with an up link
[  559.169202][ T9453] netlink: 'syz.1.15812': attribute type 10 has an invalid length.
[  559.173233][ T9453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15812'.
[  559.176953][ T9453] dummy0: entered promiscuous mode
[  559.180330][ T9453] bond30: (slave dummy0): Releasing backup interface
[  559.313629][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15813'.
[  560.174517][ T9411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  560.406893][ T9499] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  560.409789][ T9499] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  560.413337][ T9499] tipc: Enabled bearer <eth:hsr0>, priority 0
[  560.541782][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  560.544460][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  560.583802][ T9512] netlink: 'syz.0.15837': attribute type 10 has an invalid length.
[  560.811751][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  560.814481][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  561.097495][ T9546] netlink: 208 bytes leftover after parsing attributes in process `syz.1.15853'.
[  561.101784][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15853'.
[  561.105900][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15853'.
[  561.341639][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  561.345036][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  561.830527][ T9584] netlink: 'syz.0.15871': attribute type 8 has an invalid length.
[  562.293137][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15885'.
[  562.401902][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  562.404494][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  562.419856][ T9629] xt_hashlimit: size too large, truncated to 1048576
[  562.436337][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15893'.
[  562.440255][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15893'.
[  562.444706][ T9633] bond0: left promiscuous mode
[  562.446838][ T9633] gre3: left promiscuous mode
[  562.450303][ T9633] 8021q: adding VLAN 0 to HW filter on device bond0
[  562.456177][ T9633] bond6: (slave bond0): making interface the new active one
[  562.459913][ T9633] bond6: (slave bond0): Enslaving as an active interface with an up link
[  562.647741][ T9655] netlink: 'syz.2.15902': attribute type 1 has an invalid length.
[  562.651120][ T9655] netlink: 'syz.2.15902': attribute type 2 has an invalid length.
[  562.682444][ T9659] netlink: 'syz.0.15900': attribute type 8 has an invalid length.
[  562.686007][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15900'.
[  562.806832][ T9671] __nla_validate_parse: 1 callbacks suppressed
[  562.806851][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15909'.
[  562.817899][ T9677] netlink: 'syz.0.15912': attribute type 1 has an invalid length.
[  562.821131][ T9677] netlink: 'syz.0.15912': attribute type 2 has an invalid length.
[  563.304764][ T9738] veth0_to_batadv: Caught tx_queue_len zero misconfig
[  563.441660][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  563.444648][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  564.214490][ T9802] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  564.481725][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  564.484303][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  564.931168][ T9840] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15983'.
[  565.124497][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15988'.
[  565.229855][ T9864] dummy0: Caught tx_queue_len zero misconfig
[  565.308732][ T9875] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  565.311928][ T9875] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  565.352674][ T9879] netlink: 92 bytes leftover after parsing attributes in process `syz.1.16000'.
[  565.449048][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16003'.
[  565.521640][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  565.523652][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  565.551522][ T9905] netlink: 'syz.1.16012': attribute type 4 has an invalid length.
[  565.555710][ T9905] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16012'.
[  565.562149][ T9905] 8021q: adding VLAN 0 to HW filter on device .`
[  565.649166][ T9919] netlink: 'syz.1.16019': attribute type 1 has an invalid length.
[  565.654410][ T9919] netlink: 'syz.1.16019': attribute type 2 has an invalid length.
[  565.776037][ T9935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16026'.
[  565.802035][ T9933] syzkaller0: entered promiscuous mode
[  565.807069][ T9933] syzkaller0: entered allmulticast mode
[  565.885093][ T9943] ip6erspan2: entered allmulticast mode
[  565.905690][ T9945] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component
[  566.148123][ T9980] netlink: 'syz.0.16043': attribute type 1 has an invalid length.
[  566.290280][T10000] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  566.295023][T10000] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  566.433902][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16054'.
[  566.499185][T10015] pimreg: entered allmulticast mode
[  566.503034][T10014] pimreg: left allmulticast mode
[  566.561579][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  567.137704][T10033] dummy0: entered allmulticast mode
[  567.148920][T10032] dummy0: left allmulticast mode
[  567.479086][T10049] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16069'.
[  567.601489][    C1] net_ratelimit: 1 callbacks suppressed
[  567.601506][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  567.605296][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  567.624747][T10059] netlink: 'syz.1.16072': attribute type 1 has an invalid length.
[  567.627751][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16072'.
[  567.962250][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16078'.
[  568.070705][T10029] Set syz1 is full, maxelem 65536 reached
[  568.641551][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  568.644327][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  569.673240][T10025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  569.681995][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  569.684706][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  569.759536][T10106] syzkaller1: entered promiscuous mode
[  569.762042][T10106] syzkaller1: entered allmulticast mode
[  569.799612][T10114] netlink: 'syz.1.16096': attribute type 1 has an invalid length.
[  569.803146][T10114] netlink: 'syz.1.16096': attribute type 2 has an invalid length.
[  569.858496][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16100'.
[  569.867653][T10124] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  569.889221][T10123] netlink: 'syz.2.16101': attribute type 1 has an invalid length.
[  569.892983][T10123] netlink: 'syz.2.16101': attribute type 2 has an invalid length.
[  570.037329][T10155] netlink: 'syz.0.16114': attribute type 1 has an invalid length.
[  570.040463][T10155] netlink: 'syz.0.16114': attribute type 2 has an invalid length.
[  570.502729][T10201] netlink: 212320 bytes leftover after parsing attributes in process `syz.2.16134'.
[  570.505818][T10201] openvswitch: netlink: Message has 4 unknown bytes.
[  570.513305][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16136'.
[  570.516628][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16136'.
[  570.520504][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16136'.
[  570.525755][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16136'.
[  570.731633][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  570.734166][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  572.028618][T10246] tc action pedit offset must be on 32 bit boundaries
[  572.448316][T10270] netlink: 76 bytes leftover after parsing attributes in process `syz.0.16161'.
[  572.455701][T10270] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16161'.
[  572.544617][T10290] netlink: 'syz.1.16168': attribute type 1 has an invalid length.
[  572.551472][T10290] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16168'.
[  572.811485][    C1] net_ratelimit: 2 callbacks suppressed
[  572.811508][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  572.816479][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  573.369196][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16178'.
[  573.388524][T10313] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  573.517339][T10336] netlink: 'syz.2.16189': attribute type 3 has an invalid length.
[  573.655941][T10355] ksmbd: Unknown IPC event: 1, ignore.
[  573.719506][T10363] netlink: 'syz.0.16201': attribute type 1 has an invalid length.
[  573.723999][T10363] netlink: 'syz.0.16201': attribute type 2 has an invalid length.
[  573.841481][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  573.844188][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  573.875032][T10376] geneve0: entered promiscuous mode
[  573.881063][T10376] macvlan2: entered promiscuous mode
[  574.491902][T10420] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16216'.
[  574.550088][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16216'.
[  574.881511][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  574.883548][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  575.017809][T10467] can: request_module (can-proto-0) failed.
[  575.046555][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16238'.
[  575.050612][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16238'.
[  575.883509][T10492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16245'.
[  575.890608][T10492] netlink: 'syz.1.16245': attribute type 1 has an invalid length.
[  575.903265][T10492] 8021q: adding VLAN 0 to HW filter on device bond31
[  575.931607][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  575.934329][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  575.953328][T10492] bond31: (slave geneve8): making interface the new active one
[  575.958313][T10492] bond31: (slave geneve8): Enslaving as an active interface with an up link
[  576.343266][T10545] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16268'.
[  576.346934][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16268'.
[  576.350067][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16268'.
[  576.971455][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  576.973880][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  577.442731][T10586] syzkaller1: entered promiscuous mode
[  577.445019][T10586] syzkaller1: entered allmulticast mode
[  577.930848][T10632] netlink: 'syz.2.16306': attribute type 1 has an invalid length.
[  577.936158][T10632] netlink: 'syz.2.16306': attribute type 2 has an invalid length.
[  577.979838][T10640] xt_hashlimit: size too large, truncated to 1048576
[  578.011406][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  578.014025][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  578.388486][T10673] netlink: 'syz.1.16323': attribute type 39 has an invalid length.
[  578.668715][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16336'.
[  578.668808][T10690] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16331'.
[  578.693691][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16337'.
[  578.873267][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16343'.
[  579.041822][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  579.044749][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  579.319622][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16360'.
[  580.091542][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  580.093783][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  581.121464][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  581.123577][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  581.187283][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16410'.
[  581.192271][T10866] syzkaller0: left promiscuous mode
[  581.194221][T10866] syzkaller0: left allmulticast mode
[  581.368666][T10888] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  581.375046][T10888] syzkaller0: entered promiscuous mode
[  581.377212][T10888] syzkaller0: entered allmulticast mode
[  581.940319][T10896] IPVS: sh: FWM 3 0x00000003 - no destination available
[  582.161722][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  582.317304][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16436'.
[  582.320193][T10921] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1550) !
[  582.330043][T10923] netlink: 'syz.1.16437': attribute type 6 has an invalid length.
[  582.336431][T10923] IPv6: NLM_F_CREATE should be specified when creating new route
[  582.370918][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16439'.
[  582.484622][T10938] netlink: 'syz.0.16445': attribute type 2 has an invalid length.
[  582.664232][T10957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16453'.
[  582.847754][T10983] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.16466'.
[  583.153444][T11016] netlink: 'syz.2.16480': attribute type 1 has an invalid length.
[  583.161483][T11016] netlink: 'syz.2.16480': attribute type 2 has an invalid length.
[  583.201623][    C1] net_ratelimit: 2 callbacks suppressed
[  583.201644][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  583.206488][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  583.313426][T11041] tc_dump_action: action bad kind
[  583.409598][T11057] netlink: 'syz.0.16500': attribute type 1 has an invalid length.
[  583.413196][T11057] netlink: 'syz.0.16500': attribute type 2 has an invalid length.
[  583.454885][T11063] xt_bpf: check failed: parse error
[  583.686438][T11080] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[  584.099642][T11109] __nla_validate_parse: 2 callbacks suppressed
[  584.099656][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16523'.
[  584.241651][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  584.244298][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  585.182377][T11144] netlink: 'syz.1.16536': attribute type 1 has an invalid length.
[  585.281629][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  585.284070][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  585.597226][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16561'.
[  585.708119][T11210] netlink: 'syz.1.16568': attribute type 3 has an invalid length.
[  585.949522][T11236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16579'.
[  586.007437][T11245] netlink: 'syz.0.16581': attribute type 3 has an invalid length.
[  586.331661][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  586.334335][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  586.390047][T11284] block nbd0: Unsupported socket: should be TCP or UNIX.
[  586.474511][T11308] netlink: 'syz.0.16600': attribute type 1 has an invalid length.
[  586.477565][T11308] netlink: 'syz.0.16600': attribute type 8 has an invalid length.
[  586.549451][T11316] netlink: 'syz.1.16604': attribute type 1 has an invalid length.
[  586.565069][T11316] bond32: entered promiscuous mode
[  586.567615][T11316] 8021q: adding VLAN 0 to HW filter on device bond32
[  586.577091][T11316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16604'.
[  586.580975][T11316] bond32: entered allmulticast mode
[  586.600183][T11316] bond32: (slave bridge21): making interface the new active one
[  586.604068][T11316] bridge21: entered promiscuous mode
[  586.606716][T11316] bridge21: entered allmulticast mode
[  586.613604][T11316] bond32: (slave bridge21): Enslaving as an active interface with an up link
[  587.361688][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  587.364053][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  587.669793][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16618'.
[  587.691056][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16617'.
[  587.851475][T11366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16625'.
[  588.059324][T11408] sock: sock_timestamping_bind_phc: sock not bind to device
[  588.075517][T11410] netlink: 292 bytes leftover after parsing attributes in process `syz.1.16644'.
[  588.401584][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  588.404432][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  589.392719][T11467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.403861][T11467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  589.441494][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  589.443692][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  589.966856][T11484] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  589.991821][T11486] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.16678'.
[  589.995999][T11486] veth0_to_bond: default FDB implementation only supports local addresses
[  590.426095][T11528] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  590.481519][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  590.483816][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  590.685643][T11570] lo speed is unknown, defaulting to 1000
[  590.688747][T11570] xfrm0 speed is unknown, defaulting to 1000
[  590.986348][T11612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16733'.
[  591.089004][T11622] validate_nla: 2 callbacks suppressed
[  591.089015][T11622] netlink: 'syz.1.16737': attribute type 29 has an invalid length.
[  591.093556][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16737'.
[  591.096489][T11622] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  591.118329][T11624] netlink: 'syz.1.16738': attribute type 4 has an invalid length.
[  591.140734][T11626] netlink: 'syz.1.16739': attribute type 1 has an invalid length.
[  591.143627][T11626] netlink: 'syz.1.16739': attribute type 2 has an invalid length.
[  591.502307][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16748'.
[  591.521577][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  591.524086][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  592.561656][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  592.564361][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  592.847913][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16759'.
[  592.851691][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16759'.
[  592.855407][T11674] netlink: 'syz.1.16759': attribute type 4 has an invalid length.
[  593.027234][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16765'.
[  593.601592][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  593.603779][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  594.558492][T11656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  594.614463][T11699] syzkaller1: entered promiscuous mode
[  594.616774][T11699] syzkaller1: entered allmulticast mode
[  594.641608][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  594.644317][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  594.743402][T11717] veth39: entered allmulticast mode
[  594.947255][T11745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16788'.
[  594.960268][T11745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16788'.
[  594.963741][T11745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16788'.
[  595.077151][T11768] netlink: 'syz.1.16799': attribute type 2 has an invalid length.
[  595.079746][T11768] __nla_validate_parse: 2 callbacks suppressed
[  595.079763][T11768] netlink: 119 bytes leftover after parsing attributes in process `syz.1.16799'.
[  595.256140][T11788] netlink: 'syz.1.16808': attribute type 1 has an invalid length.
[  595.259728][T11788] netlink: 'syz.1.16808': attribute type 2 has an invalid length.
[  595.611846][T11820] bond37: Unable to set up delay as MII monitoring is disabled
[  595.616695][T11820] bond37 (unregistering): Released all slaves
[  595.681561][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  595.683808][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  595.886526][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16831'.
[  596.124545][T11874] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  596.128611][T11874] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  596.212814][T11881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  596.642961][T11929] netlink: 'syz.2.16868': attribute type 1 has an invalid length.
[  596.663191][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16868'.
[  596.668931][T11929] 8021q: adding VLAN 0 to HW filter on device bond28
[  596.695448][T11936] gre0: Caught tx_queue_len zero misconfig
[  596.721483][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  596.724138][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  596.796985][T11950] sctp: [Deprecated]: syz.2.16878 (pid 11950) Use of struct sctp_assoc_value in delayed_ack socket option.
[  596.796985][T11950] Use struct sctp_sack_info instead
[  596.870331][T11962] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  596.957784][T11976] netlink: 'syz.1.16892': attribute type 3 has an invalid length.
[  597.115219][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16902'.
[  597.179395][T12006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  597.205634][T12008] netlink: 'syz.1.16907': attribute type 1 has an invalid length.
[  597.544952][T12043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16912'.
[  597.687830][T12054] syzkaller0: entered promiscuous mode
[  597.690133][T12054] syzkaller0: entered allmulticast mode
[  597.761476][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  598.435292][T12064] nbd0: detected capacity change from 0 to 6
[  598.439990][T11138] block nbd0: Dead connection, failed to find a fallback
[  598.588240][T12080] netlink: 'syz.2.16929': attribute type 1 has an invalid length.
[  598.674384][T12089] 8021q: VLANs not supported on syzkaller1
[  598.684055][T12091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16934'.
[  598.726213][T12097] netlink: 'syz.2.16936': attribute type 1 has an invalid length.
[  598.783567][T12105] netlink: 'syz.2.16939': attribute type 1 has an invalid length.
[  598.801605][    C1] net_ratelimit: 1 callbacks suppressed
[  598.801623][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  598.806591][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  598.812930][T12105] bond29: (slave geneve7): Opening slave failed
[  598.836121][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16939'.
[  598.839624][T12105] 8021q: adding VLAN 0 to HW filter on device bond29
[  598.946834][T12122] netlink: 'syz.2.16941': attribute type 1 has an invalid length.
[  598.954732][T12122] netlink: 'syz.2.16941': attribute type 2 has an invalid length.
[  599.220194][T12150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16946'.
[  599.415621][T12158] lo speed is unknown, defaulting to 1000
[  599.418790][T12158] xfrm0 speed is unknown, defaulting to 1000
[  599.474238][T12164] netlink: 'syz.2.16951': attribute type 32 has an invalid length.
[  599.851452][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  599.853887][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  600.062700][T12228] netlink: 'syz.2.16972': attribute type 1 has an invalid length.
[  600.114609][T12242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16975'.
[  600.135347][T12242] 8021q: adding VLAN 0 to HW filter on device macsec3
[  600.289490][T12272] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  600.335129][T12282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16995'.
[  600.430213][T12302] SET target dimension over the limit!
[  600.568772][T12322] nbd: socks must be embedded in a SOCK_ITEM attr
[  600.572176][T12322] block nbd9: shutting down sockets
[  600.881451][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  600.884010][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  601.173941][T12418] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  601.353329][T12441] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17068'.
[  601.400726][T12450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17072'.
[  601.416492][T12450] bond33: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  601.426080][T12450] bond33 (unregistering): Released all slaves
[  601.429288][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17073'.
[  601.616339][T12478] IPv6: sit8: Disabled Multicast RS
[  601.695803][T12492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17091'.
[  601.762223][T12497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17093'.
[  601.850244][T12507] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.17097'.
[  601.854016][T12507] openvswitch: netlink: Message has 512 unknown bytes.
[  601.904788][T12511] netlink: 68 bytes leftover after parsing attributes in process `syz.0.17099'.
[  601.931491][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  601.934237][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  601.952912][T12518] validate_nla: 6 callbacks suppressed
[  601.952930][T12518] netlink: 'syz.2.17101': attribute type 1 has an invalid length.
[  601.958357][T12518] netlink: 'syz.2.17101': attribute type 2 has an invalid length.
[  601.989268][T12520] sctp: [Deprecated]: syz.2.17102 (pid 12520) Use of struct sctp_assoc_value in delayed_ack socket option.
[  601.989268][T12520] Use struct sctp_sack_info instead
[  601.996948][T12520] sctp: [Deprecated]: syz.2.17102 (pid 12520) Use of struct sctp_assoc_value in delayed_ack socket option.
[  601.996948][T12520] Use struct sctp_sack_info instead
[  602.116094][T12535] netlink: 'syz.2.17107': attribute type 1 has an invalid length.
[  602.142647][T12535] bond30: (slave bridge34): making interface the new active one
[  602.145841][T12535] bond30: (slave bridge34): Enslaving as an active interface with an up link
[  602.150019][T12535] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17107'.
[  602.153682][T12535] bond30: entered promiscuous mode
[  602.155476][T12535] bridge34: entered promiscuous mode
[  602.157342][T12535] bond30: entered allmulticast mode
[  602.159150][T12535] bridge34: entered allmulticast mode
[  602.162444][T12535] 8021q: adding VLAN 0 to HW filter on device bond30
[  602.961561][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  604.001767][    C1] net_ratelimit: 1 callbacks suppressed
[  604.001787][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  604.005900][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  605.041597][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  605.044490][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  605.677528][T12618] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  605.755974][T12629] syzkaller1: entered promiscuous mode
[  605.758062][T12629] syzkaller1: entered allmulticast mode
[  605.759482][T12633] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  606.091508][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  606.093794][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  606.097619][T12670] netlink: 'syz.1.17166': attribute type 1 has an invalid length.
[  606.100302][T12670] netlink: 'syz.1.17166': attribute type 2 has an invalid length.
[  606.423570][T12704] netlink: 'syz.2.17182': attribute type 1 has an invalid length.
[  606.427033][T12704] netlink: 'syz.2.17182': attribute type 2 has an invalid length.
[  606.529742][T12711] lo speed is unknown, defaulting to 1000
[  606.532879][T12711] xfrm0 speed is unknown, defaulting to 1000
[  606.623727][T12720] xt_CT: You must specify a L4 protocol and not use inversions on it
[  606.699829][T12733] __nla_validate_parse: 2 callbacks suppressed
[  606.699843][T12733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17194'.
[  606.855177][T12747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17202'.
[  607.035924][T12774] netlink: 'syz.0.17213': attribute type 23 has an invalid length.
[  607.041627][T12774] netlink: 'syz.0.17213': attribute type 21 has an invalid length.
[  607.056875][T12778] netlink: 'syz.2.17214': attribute type 1 has an invalid length.
[  607.099169][T12778] bond31: entered promiscuous mode
[  607.100939][T12778] bond31: entered allmulticast mode
[  607.104879][T12778] 8021q: adding VLAN 0 to HW filter on device bond31
[  607.131010][T12778] bridge35: entered promiscuous mode
[  607.133015][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  607.133056][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  607.150906][T12778] bridge35: entered allmulticast mode
[  607.154787][T12778] bond31: (slave bridge35): Enslaving as a backup interface with an up link
[  607.178664][T12778] bridge36: entered promiscuous mode
[  607.180924][T12778] bridge36: entered allmulticast mode
[  607.184901][T12778] bond31: (slave bridge36): Enslaving as a backup interface with a down link
[  607.202175][T28333] bond31: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  607.226737][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17229'.
[  607.230595][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17229'.
[  607.276048][T12811] bond37: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  607.283748][T12811] bond37 (unregistering): Released all slaves
[  607.317190][   T13] bond31: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  607.326477][T12805] syzkaller0: entered promiscuous mode
[  607.329902][T12805] syzkaller0: entered allmulticast mode
[  607.415376][T12823] netlink: 96 bytes leftover after parsing attributes in process `syz.0.17235'.
[  607.424951][T12825] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.17234'.
[  607.619571][T12854] netlink: 'syz.0.17250': attribute type 1 has an invalid length.
[  607.623342][T12854] netlink: 'syz.0.17250': attribute type 8 has an invalid length.
[  607.688450][T12863] syzkaller0: entered promiscuous mode
[  607.690952][T12863] syzkaller0: entered allmulticast mode
[  607.850093][T12882] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  607.956136][T12894] netlink: 'syz.0.17268': attribute type 3 has an invalid length.
[  608.015946][T12900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17271'.
[  608.053283][T12906] netlink: 'syz.2.17273': attribute type 29 has an invalid length.
[  608.250230][T12924] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  608.253631][T12924] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  608.511727][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17296'.
[  608.512573][T12961] ip6_vti0: entered allmulticast mode
[  608.520017][T12960] ip6_vti0: left allmulticast mode
[  608.612615][T12971] netlink: 'syz.2.17302': attribute type 1 has an invalid length.
[  608.615323][T12971] netlink: 'syz.2.17302': attribute type 2 has an invalid length.
[  608.683119][T12985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17309'.
[  608.720111][T12992] netlink: 'syz.0.17312': attribute type 1 has an invalid length.
[  608.724155][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17313'.
[  608.836618][T13006] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  609.201501][    C1] net_ratelimit: 3 callbacks suppressed
[  609.201519][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  609.206488][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  609.474650][T13082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  609.477011][T13082] IPv6: NLM_F_CREATE should be set when creating new route
[  609.479202][T13082] IPv6: NLM_F_CREATE should be set when creating new route
[  609.481647][T13079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.484178][T13079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.841424][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.844564][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.121981][T13182] bond37: option ad_user_port_key: invalid value (65535)
[  610.124340][T13182] bond37: option ad_user_port_key: allowed values 0 - 1023
[  610.145464][T13182] bond37 (unregistering): Released all slaves
[  610.241407][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  610.243705][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  610.361505][T13208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  610.366073][T13208] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  610.370870][T13208] bond0 (unregistering): (slave erspan1): Releasing backup interface
[  610.378576][T13208] bond0 (unregistering): Released all slaves
[  610.450927][T13216] bridge0: port 1(vlan0) entered blocking state
[  610.453566][T13216] bridge0: port 1(vlan0) entered forwarding state
[  610.467345][T13216] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  610.700904][T13230] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001
[  611.211134][T13275] bridge0: port 1(vlan0) entered disabled state
[  611.281474][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  611.708145][T13298] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  611.715261][T13298] batman_adv: batadv0: Adding interface: gretap6
[  611.718075][T13298] batman_adv: batadv0: The MTU of interface gretap6 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  611.728845][T13298] batman_adv: batadv0: Interface activated: gretap6
[  611.732759][T28333] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  611.736370][T28333] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.741382][T28333] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  611.745011][T28333] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.754554][T28333] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  611.757988][T28333] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.760954][T28333] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  611.767691][T28333] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.792107][T13302] __nla_validate_parse: 15 callbacks suppressed
[  611.792119][T13302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17450'.
[  611.861962][T13316] vlan0: entered promiscuous mode
[  611.907830][T13325] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  612.095951][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17475'.
[  612.180680][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17479'.
[  612.335867][T13388] validate_nla: 7 callbacks suppressed
[  612.335878][T13388] netlink: 'syz.2.17486': attribute type 1 has an invalid length.
[  612.340615][T13388] netlink: 'syz.2.17486': attribute type 2 has an invalid length.
[  612.374930][T13393] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17488'.
[  612.762941][   T57] block nbd9: Receive control failed (result -32)
[  613.036388][T13475] pim6reg0: tun_chr_ioctl cmd 1074025677
[  613.038334][T13475] pim6reg0: linktype set to 805
[  613.108484][T13478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17528'.
[  613.112390][T13478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17528'.
[  613.190852][T13495] netlink: 136 bytes leftover after parsing attributes in process `syz.0.17536'.
[  613.326506][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17548'.
[  613.329488][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17548'.
[  613.375672][T13530] syzkaller0: left promiscuous mode
[  613.377511][T13530] syzkaller0: left allmulticast mode
[  613.505909][T13543] SET target dimension over the limit!
[  613.563743][T13549] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.17562'.
[  613.568839][T13557] netlink: 'syz.2.17561': attribute type 1 has an invalid length.
[  613.600691][T13557] netlink: 'syz.2.17561': attribute type 2 has an invalid length.
[  613.626464][T13567] erspan0: entered promiscuous mode
[  613.778971][T13598] netlink: 'syz.2.17581': attribute type 1 has an invalid length.
[  613.794326][T13598] 8021q: adding VLAN 0 to HW filter on device bond32
[  613.805500][T13598] netlink: 'syz.2.17581': attribute type 10 has an invalid length.
[  613.918575][T13620] sch_fq: defrate 0 ignored.
[  614.034975][T13640] syzkaller0: entered promiscuous mode
[  614.037214][T13640] syzkaller0: entered allmulticast mode
[  614.396889][T13675] : renamed from batadv_slave_1 (while UP)
[  614.401485][    C1] net_ratelimit: 8 callbacks suppressed
[  614.401502][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  614.406273][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  614.453971][T13679] ip6tnl12: entered allmulticast mode
[  614.457071][ T5750] ip6_tunnel: ip6tnl12 xmit: Local address not yet configured!
[  615.064285][T13745] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  615.097521][T13744] lo speed is unknown, defaulting to 1000
[  615.101760][T13744] xfrm0 speed is unknown, defaulting to 1000
[  615.144936][T13755] syzkaller1: entered promiscuous mode
[  615.147356][T13755] syzkaller1: entered allmulticast mode
[  615.361211][T13782] netlink: 'syz.1.17667': attribute type 1 has an invalid length.
[  615.364354][T13782] netlink: 'syz.1.17667': attribute type 2 has an invalid length.
[  615.441512][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  615.444187][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  615.456515][T13790] IPVS: Error connecting to the multicast addr
[  615.461778][T13788] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  615.484435][T13788] syzkaller0: entered promiscuous mode
[  615.486775][T13788] syzkaller0: entered allmulticast mode
[  615.620759][T13812] syzkaller0: entered promiscuous mode
[  615.623311][T13812] syzkaller0: entered allmulticast mode
[  615.830196][T13840] openvswitch: netlink: Message has 512 unknown bytes.
[  616.491444][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  616.493443][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  616.585059][T13846] vxcan1: entered allmulticast mode
[  616.735931][T13864] : renamed from team_slave_1
[  616.768120][T13861] lo speed is unknown, defaulting to 1000
[  616.774487][T13861] xfrm0 speed is unknown, defaulting to 1000
[  616.810710][T13868] __nla_validate_parse: 12 callbacks suppressed
[  616.810728][T13868] netlink: 192 bytes leftover after parsing attributes in process `syz.2.17702'.
[  616.928121][T13878] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  616.932758][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17708'.
[  617.070793][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17712'.
[  617.073781][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17712'.
[  617.076669][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17712'.
[  617.079549][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17712'.
[  617.084106][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17712'.
[  617.087584][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17712'.
[  617.091030][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17712'.
[  617.094183][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17712'.
[  617.474915][T13924] syzkaller0: entered promiscuous mode
[  617.477076][T13924] syzkaller0: entered allmulticast mode
[  617.484659][T13924] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  617.521486][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  617.524240][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  617.660828][T13947] gtp7: entered allmulticast mode
[  617.683393][T13950] netlink: 'syz.0.17740': attribute type 1 has an invalid length.
[  617.693966][T13950] netlink: 'syz.0.17740': attribute type 2 has an invalid length.
[  617.775520][T13958] 8021q: adding VLAN 0 to HW filter on device bond33
[  617.780975][T13958] bond33: option mode: unable to set because the bond device is up
[  618.481757][    C0] ip6_tunnel: ip6tnl12 xmit: Local address not yet configured!
[  618.561536][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  618.713299][T13980] netlink: 'syz.0.17755': attribute type 1 has an invalid length.
[  619.026307][T14019] netlink: 'syz.2.17768': attribute type 3 has an invalid length.
[  619.114214][T14026] syzkaller0: entered promiscuous mode
[  619.116561][T14026] syzkaller0: entered allmulticast mode
[  619.324734][T14042] ip6_vti0: Caught tx_queue_len zero misconfig
[  619.500473][T14080] netlink: 'syz.2.17796': attribute type 1 has an invalid length.
[  619.509102][T14080] netlink: 'syz.2.17796': attribute type 2 has an invalid length.
[  619.515060][T14082] netlink: 'syz.1.17797': attribute type 4 has an invalid length.
[  619.519643][T14082] netlink: 'syz.1.17797': attribute type 4 has an invalid length.
[  619.601535][    C1] net_ratelimit: 1 callbacks suppressed
[  619.601554][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  619.606356][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  619.893373][T14121] netlink: 'syz.1.17813': attribute type 1 has an invalid length.
[  620.651564][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  620.654303][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  621.355720][T14155] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  621.453801][T14167] "syz.0.17834" (14167) uses obsolete ecb(arc4) skcipher
[  621.691477][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  621.693626][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  622.232687][T14208] syzkaller0: entered promiscuous mode
[  622.234598][T14208] syzkaller0: entered allmulticast mode
[  622.269459][T14214] netlink: 'syz.1.17855': attribute type 1 has an invalid length.
[  622.534624][T14241] erspan0: left promiscuous mode
[  622.540813][T14241] dummy0: left promiscuous mode
[  622.549730][T14241] xfrm0: left allmulticast mode
[  622.554123][T14241] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  622.556961][T14241] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  622.560315][T14241] veth11: left allmulticast mode
[  622.564159][T14241] ip6erspan0: left allmulticast mode
[  622.567488][T14241] vti1: left promiscuous mode
[  622.571181][T14241] vti1: left allmulticast mode
[  622.574977][T14241] geneve4: left promiscuous mode
[  622.579975][T14241] macvtap1: left promiscuous mode
[  622.582198][T14241] bond10: left allmulticast mode
[  622.584605][T14241] ip6gre3: left promiscuous mode
[  622.586467][T14241] ip6gre3: left allmulticast mode
[  622.588588][T14241] xfrm1: left allmulticast mode
[  622.590549][T14241] bond13: left promiscuous mode
[  622.593649][T14241] ip6gre4: left promiscuous mode
[  622.598786][T14241] ip6gre4: left allmulticast mode
[  622.601842][T14241] macsec0: left promiscuous mode
[  622.604222][T14241] macsec0: left allmulticast mode
[  622.606883][T14241] bond15: left promiscuous mode
[  622.608686][T14241] bridge11: left promiscuous mode
[  622.610695][T14241] bond15: left allmulticast mode
[  622.612493][T14241] bridge11: left allmulticast mode
[  622.614585][T14241] geneve5: left promiscuous mode
[  622.617013][T14241] bond19: left allmulticast mode
[  622.619094][T14241] bond20: left allmulticast mode
[  622.621099][T14241] bond21: left promiscuous mode
[  622.624129][T14241] bond21: left allmulticast mode
[  622.626229][T14241] geneve6: left promiscuous mode
[  622.627908][T14241] bond24: left promiscuous mode
[  622.629641][T14241] bridge18: left promiscuous mode
[  622.635126][T14241] bond26: left promiscuous mode
[  622.637903][T14241] geneve7: left promiscuous mode
[  622.639974][T14241] vlan4: left promiscuous mode
[  622.645618][T14241] bond28: left promiscuous mode
[  622.647788][T14241] vlan6: left allmulticast mode
[  622.649585][T14241] bond28: left allmulticast mode
[  622.653362][T14241] bond29: left promiscuous mode
[  622.656572][T14241] ip6erspan2: left allmulticast mode
[  622.658929][T14241] bond32: left promiscuous mode
[  622.660869][T14241] bridge21: left promiscuous mode
[  622.663544][T14241] bond32: left allmulticast mode
[  622.665577][T14241] bridge21: left allmulticast mode
[  622.723916][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  622.726586][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  622.759286][T14261] __nla_validate_parse: 20 callbacks suppressed
[  622.759332][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17878'.
[  622.842650][T14262] validate_nla: 1 callbacks suppressed
[  622.842675][T14262] netlink: 'syz.1.17878': attribute type 9 has an invalid length.
[  623.036635][T14272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17882'.
[  623.347932][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17899'.
[  623.415403][T14313] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma?
[  623.761608][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  623.885532][T14337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17909'.
[  623.890408][T14337] netlink: 'syz.1.17909': attribute type 1 has an invalid length.
[  623.917768][T14337] 8021q: adding VLAN 0 to HW filter on device bond33
[  624.011141][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17912'.
[  624.026840][T14346] bond34: entered promiscuous mode
[  624.028745][T14346] 8021q: adding VLAN 0 to HW filter on device bond34
[  624.036854][T14346] vlan7: entered allmulticast mode
[  624.038991][T14346] bond34: entered allmulticast mode
[  624.261663][T14375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17923'.
[  624.269022][T14375] ip6gre6: entered promiscuous mode
[  624.271508][T14375] ip6gre6: entered allmulticast mode
[  624.339627][T14384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17927'.
[  624.576909][T14403] netlink: 'syz.2.17935': attribute type 1 has an invalid length.
[  624.684155][T14416] netlink: 'syz.0.17942': attribute type 1 has an invalid length.
[  624.687212][T14416] netlink: 'syz.0.17942': attribute type 2 has an invalid length.
[  624.801496][    C1] net_ratelimit: 1 callbacks suppressed
[  624.801510][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  624.805979][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  624.842516][T14425] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  625.034505][T14451] netlink: 'syz.2.17955': attribute type 1 has an invalid length.
[  625.040308][T14451] netlink: 'syz.2.17955': attribute type 2 has an invalid length.
[  625.255069][T14479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17968'.
[  625.343191][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17973'.
[  625.841545][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  625.844227][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  626.036169][T14531] netlink: 212028 bytes leftover after parsing attributes in process `syz.1.17993'.
[  626.039778][T14531] openvswitch: netlink: Message has 512 unknown bytes.
[  626.126830][T14537] tipc: Failed to remove unknown binding: 66,0,0/1:230208958/230208960
[  626.130206][T14537] tipc: Failed to remove unknown binding: 66,0,0/1:230208958/230208959
[  626.136490][T14537] tipc: Failed to remove unknown binding: 66,0,0/1:230208958/230208960
[  626.139804][T14537] tipc: Failed to remove unknown binding: 66,0,0/1:230208958/230208959
[  626.386635][T14560] syzkaller0: entered promiscuous mode
[  626.389351][T14560] syzkaller0: entered allmulticast mode
[  626.536600][T14572] netlink: 'syz.2.18007': attribute type 3 has an invalid length.
[  626.590117][T14580] netlink: 'syz.0.18012': attribute type 21 has an invalid length.
[  626.594079][T14580] IPv6: NLM_F_CREATE should be specified when creating new route
[  626.814205][T14598] netlink: 'syz.2.18020': attribute type 1 has an invalid length.
[  626.881548][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  626.883762][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  626.926617][T14611] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0
[  627.041510][    C0] ip6_tunnel: ip6tnl12 xmit: Local address not yet configured!
[  627.195498][T14627] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  627.376245][T14661] veth0: Caught tx_queue_len zero misconfig
[  627.400710][T14658] lo speed is unknown, defaulting to 1000
[  627.404553][T14658] xfrm0 speed is unknown, defaulting to 1000
[  627.767132][T14716] xt_hashlimit: size too large, truncated to 1048576
[  627.904222][T14729] __nla_validate_parse: 6 callbacks suppressed
[  627.904232][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18075'.
[  627.931495][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  627.934111][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  627.947490][T14735] IPVS: sh: FWM 3 0x00000003 - no destination available
[  628.276746][T14777] tipc: Resetting bearer <eth:syzkaller0>
[  628.279626][T14777] tipc: Resetting bearer <eth:hsr0>
[  628.284380][T14777] tipc: Resetting bearer <eth:hsr0>
[  628.341126][ T5673] lo speed is unknown, defaulting to 1000
[  628.406843][   T34] audit: type=1800 audit(1781928456.207:13): pid=14788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18102" name="r" dev="tmpfs" ino=29265 res=0 errno=0
[  628.473827][T14797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18106'.
[  628.493885][T14797] batman_adv: batadv0: Interface deactivated: gretap6
[  628.496845][T14797] batman_adv: batadv0: Removing interface: gretap6
[  628.735160][T14818] validate_nla: 1 callbacks suppressed
[  628.735175][T14818] netlink: 'syz.1.18116': attribute type 1 has an invalid length.
[  628.755728][T14818] 8021q: adding VLAN 0 to HW filter on device bond35
[  628.768259][T14818] vlan8: entered allmulticast mode
[  628.770549][T14818] bond35: entered allmulticast mode
[  628.799278][T14828] syzkaller1: left promiscuous mode
[  628.801000][T14828] syzkaller1: left allmulticast mode
[  628.896778][T14842] syz.1.18127: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  628.905951][T14842] CPU: 1 UID: 0 PID: 14842 Comm: syz.1.18127 Not tainted syzkaller #0 PREEMPT(full) 
[  628.905971][T14842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  628.905979][T14842] Call Trace:
[  628.905984][T14842]  <TASK>
[  628.905990][T14842]  dump_stack_lvl+0xe8/0x150
[  628.906011][T14842]  warn_alloc+0x24c/0x270
[  628.906029][T14842]  ? __pfx_stack_trace_save+0x10/0x10
[  628.906048][T14842]  ? __pfx_warn_alloc+0x10/0x10
[  628.906068][T14842]  ? __kasan_kmalloc+0x93/0xb0
[  628.906079][T14842]  ? __kmalloc_cache_noprof+0x318/0x660
[  628.906097][T14842]  ? xskq_create+0x56/0x170
[  628.906115][T14842]  ? xsk_init_queue+0x8a/0xe0
[  628.906132][T14842]  ? xsk_setsockopt+0x52a/0x960
[  628.906147][T14842]  ? do_sock_setsockopt+0x17c/0x1b0
[  628.906181][T14842]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  628.906192][T14842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.906208][T14842]  __vmalloc_node_range_noprof+0x12c/0x1730
[  628.906235][T14842]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  628.906254][T14842]  ? __kasan_kmalloc+0x93/0xb0
[  628.906267][T14842]  vmalloc_user_noprof+0xad/0xe0
[  628.906283][T14842]  ? xskq_create+0xbf/0x170
[  628.906301][T14842]  xskq_create+0xbf/0x170
[  628.906319][T14842]  xsk_init_queue+0x8a/0xe0
[  628.906335][T14842]  xsk_setsockopt+0x52a/0x960
[  628.906350][T14842]  ? __pfx_xsk_setsockopt+0x10/0x10
[  628.906364][T14842]  ? __pfx_aa_sk_perm+0x10/0x10
[  628.906375][T14842]  ? lock_release+0x4b/0x3c0
[  628.906388][T14842]  ? aa_sock_opt_perm+0xff/0x1a0
[  628.906403][T14842]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  628.906417][T14842]  ? __pfx_xsk_setsockopt+0x10/0x10
[  628.906431][T14842]  do_sock_setsockopt+0x17c/0x1b0
[  628.906445][T14842]  __x64_sys_setsockopt+0x13d/0x1b0
[  628.906458][T14842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.906479][T14842]  do_syscall_64+0x174/0x580
[  628.906493][T14842]  ? trace_irq_disable+0x3b/0x140
[  628.906514][T14842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.906527][T14842] RIP: 0033:0x7fdf05d9ce59
[  628.906542][T14842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.906554][T14842] RSP: 002b:00007fdf06cfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  628.906570][T14842] RAX: ffffffffffffffda RBX: 00007fdf06015fa0 RCX: 00007fdf05d9ce59
[  628.906580][T14842] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  628.906589][T14842] RBP: 00007fdf05e32e6f R08: 0000000000000004 R09: 0000000000000000
[  628.906598][T14842] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  628.906607][T14842] R13: 00007fdf06016038 R14: 00007fdf06015fa0 R15: 00007ffe99c868b8
[  628.906622][T14842]  </TASK>
[  628.907084][T14842] Mem-Info:
[  628.966945][T14845] netlink: 'syz.1.18127': attribute type 10 has an invalid length.
[  628.969123][T14842] active_anon:6035 inactive_anon:2018 isolated_anon:0
[  628.969123][T14842]  active_file:47 inactive_file:51010 isolated_file:0
[  628.969123][T14842]  unevictable:1768 dirty:74 writeback:0
[  628.969123][T14842]  slab_reclaimable:11037 slab_unreclaimable:145927
[  628.969123][T14842]  mapped:18196 shmem:2384 pagetables:1150
[  628.969123][T14842]  sec_pagetables:0 bounce:0
[  628.969123][T14842]  kernel_misc_reclaimable:0
[  628.969123][T14842]  free:1045602 free_pcp:33141 free_cma:0
[  628.973136][T14845] netlink: 'syz.1.18127': attribute type 1 has an invalid length.
[  628.975613][T14842] Node 0 active_anon:13688kB inactive_anon:8072kB active_file:132kB inactive_file:165676kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38344kB dirty:156kB writeback:0kB shmem:5004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8120kB pagetables:2452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  628.978852][T14845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18127'.
[  628.980665][T14842] Node 1 active_anon:10452kB inactive_anon:0kB active_file:56kB inactive_file:38364kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34440kB dirty:140kB writeback:0kB shmem:4532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7324kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  628.993943][T14845] netlink: 'syz.1.18127': attribute type 10 has an invalid length.
[  628.995721][T14842] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  629.077619][T14842] lowmem_reserve[]: 0 1586 2117 2117 2117
[  629.079976][T14842] Node 0 DMA32 free:1282584kB boost:0kB min:25008kB low:31260kB high:37512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4924kB inactive_anon:8072kB active_file:60kB inactive_file:33284kB unevictable:0kB writepending:68kB zspages:0kB present:2080636kB managed:1624696kB mlocked:0kB bounce:0kB free_pcp:16324kB local_pcp:276kB free_cma:0kB
[  629.092083][T14842] lowmem_reserve[]: 0 0 530 530 530
[  629.094240][T14842] Node 0 Normal free:8236kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8624kB inactive_anon:0kB active_file:72kB inactive_file:132392kB unevictable:3536kB writepending:88kB zspages:0kB present:1572868kB managed:543128kB mlocked:0kB bounce:0kB free_pcp:6608kB local_pcp:1292kB free_cma:0kB
[  629.109773][T14842] lowmem_reserve[]: 0 0 0 0 0
[  629.111402][T14842] Node 1 Normal free:2875976kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10452kB inactive_anon:0kB active_file:56kB inactive_file:38364kB unevictable:3536kB writepending:140kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:110624kB local_pcp:77672kB free_cma:0kB
[  629.125324][T14842] lowmem_reserve[]: 0 0 0 0 0
[  629.127591][T14842] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB
[  629.132946][T14842] Node 0 DMA32: 368*4kB (UME) 175*8kB (UME) 310*16kB (UME) 79*32kB (UME) 115*64kB (UME) 22*128kB (UME) 88*256kB (UME) 31*512kB (UM) 15*1024kB (UM) 6*2048kB (UM) 292*4096kB (UE) = 1282616kB
[  629.139454][T14842] Node 0 Normal: 1*4kB (E) 146*8kB (UE) 272*16kB (UE) 30*32kB (UE) 25*64kB (UE) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8212kB
[  629.145542][T14842] Node 1 Normal: 10*4kB (UE) 1514*8kB (UME) 883*16kB (UME) 705*32kB (UE) 150*64kB (UME) 88*128kB (UME) 186*256kB (UM) 76*512kB (UM) 30*1024kB (UME) 35*2048kB (UME) 639*4096kB (UM) = 2875976kB
[  629.153471][T14842] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  629.157237][T14842] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  629.160987][T14842] 53400 total pagecache pages
[  629.163250][T14842] 1 pages in swap cache
[  629.165081][T14842] Free swap  = 124992kB
[  629.166879][T14842] Total swap = 124996kB
[  629.168670][T14842] 1834877 pages RAM
[  629.170693][T14842] 0 pages HighMem/MovableOnly
[  629.172807][T14842] 390410 pages reserved
[  629.174600][T14842] 0 pages cma reserved
[  629.518241][T14875] netlink: 277 bytes leftover after parsing attributes in process `syz.0.18142'.
[  629.608979][T14890] netlink: 100 bytes leftover after parsing attributes in process `syz.1.18148'.
[  629.773113][T14923] ip6tnl7: entered allmulticast mode
[  629.901713][T14938] netlink: 27 bytes leftover after parsing attributes in process `syz.2.18167'.
[  629.947379][T14943] pim6reg0: tun_chr_ioctl cmd 1074025675
[  629.950870][T14943] pim6reg0: persist disabled
[  630.000228][T14946] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.18170'.
[  630.003395][T14946] net_ratelimit: 10 callbacks suppressed
[  630.003406][T14946] openvswitch: netlink: Message has 512 unknown bytes.
[  630.024695][T14948] netlink: 'syz.2.18171': attribute type 1 has an invalid length.
[  630.027127][T14948] netlink: 'syz.2.18171': attribute type 2 has an invalid length.
[  630.214947][T14961] tipc: Resetting bearer <eth:gre0>
[  630.220166][T14961] tipc: Resetting bearer <eth:ip6gre0>
[  630.232273][ T5793] xfrm0 speed is unknown, defaulting to 1000
[  630.242311][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  630.244781][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  630.247021][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  630.249118][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  630.367968][T14965] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  630.371764][T14965] syzkaller0: entered promiscuous mode
[  630.373696][T14965] syzkaller0: entered allmulticast mode
[  630.377347][T14965] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  630.593237][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18185'.
[  630.596898][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18185'.
[  630.601024][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18185'.
[  630.697535][   T34] audit: type=1800 audit(1781928458.497:14): pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18190" name="blkio.bfq.time_recursive" dev="tmpfs" ino=29447 res=0 errno=0
[  630.762545][T14999] netlink: 'syz.0.18194': attribute type 1 has an invalid length.
[  630.765416][T14999] netlink: 'syz.0.18194': attribute type 1 has an invalid length.
[  630.963078][T15034] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  631.050078][T15046] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  631.095499][T15058] xt_TCPMSS: Only works on TCP SYN packets
[  631.281815][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  631.284435][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  631.286995][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  631.289626][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  631.338944][T15078] syzkaller0: entered promiscuous mode
[  631.341579][T15078] syzkaller0: entered allmulticast mode
[  631.820158][T15115] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  631.824262][T15115] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  631.827207][T15115] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  631.868316][T15119] lo speed is unknown, defaulting to 1000
[  631.870610][T15119] xfrm0 speed is unknown, defaulting to 1000
[  631.970173][T15119] dvmrp0: entered allmulticast mode
[  632.142688][ T5750] dvmrp0: left allmulticast mode
[  632.636096][T15184] wg2: Caught tx_queue_len zero misconfig
[  635.441825][    C0] net_ratelimit: 12 callbacks suppressed
[  635.441845][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  635.446695][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  635.449014][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  635.451415][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  635.558777][T15174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  635.607142][T15202] sctp: [Deprecated]: syz.1.18278 (pid 15202) Use of int in max_burst socket option deprecated.
[  635.607142][T15202] Use struct sctp_assoc_value instead
[  635.687276][T15219] 8021q: VLANs not supported on syzkaller1
[  635.778621][T15227] __nla_validate_parse: 3 callbacks suppressed
[  635.778640][T15227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18289'.
[  636.481543][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  636.484497][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  636.487241][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  636.489889][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  636.775655][T15252] syzkaller0: entered promiscuous mode
[  636.777979][T15252] syzkaller0: entered allmulticast mode
[  636.892242][T15256] tipc: Resetting bearer <eth:gre0>
[  636.904391][T15256] tipc: Resetting bearer <eth:ip6gre0>
[  636.964077][ T6958] xfrm0 speed is unknown, defaulting to 1000
[  636.964111][ T5749] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  636.966043][ T6958] syz0: Port: 1 Link DOWN
[  636.972059][ T5749] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  636.975727][ T6958] xfrm0 speed is unknown, defaulting to 1000
[  636.975766][ T5749] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  637.006123][T15259] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18302'.
[  637.521995][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  637.525034][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  638.272465][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18322'.
[  639.065352][T15368] netlink: 80 bytes leftover after parsing attributes in process `syz.0.18352'.
[  639.122843][T15377] netlink: 'syz.0.18355': attribute type 8 has an invalid length.
[  639.130645][T15371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18354'.
[  639.180244][T15384] netlink: 'syz.0.18358': attribute type 4 has an invalid length.
[  639.197799][T15386] netlink: 'syz.1.18359': attribute type 1 has an invalid length.
[  639.201087][T15386] netlink: 'syz.1.18359': attribute type 2 has an invalid length.
[  639.248796][T15393] netlink: 'syz.0.18362': attribute type 4 has an invalid length.
[  639.267934][T15393] netlink: 'syz.0.18362': attribute type 4 has an invalid length.
[  639.270366][ T5680] lo speed is unknown, defaulting to 1000
[  639.282862][   T10] lo speed is unknown, defaulting to 1000
[  639.469966][T15418] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  639.522056][T15424] tipc: Resetting bearer <eth:syzkaller0>
[  639.611793][T15432] bond37: option lp_interval: invalid value (0)
[  639.614566][T15432] bond37: option lp_interval: allowed values 1 - 2147483647
[  639.623918][T15432] bond37 (unregistering): Released all slaves
[  639.634631][T15435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18383'.
[  639.787430][T15456] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  639.857263][T15464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  640.305720][T15507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18413'.
[  640.308948][T15507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18413'.
[  640.404835][T15519] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18419'.
[  640.641588][    C0] net_ratelimit: 10 callbacks suppressed
[  640.641609][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  640.646467][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  640.649119][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  640.651803][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  641.272242][T15556] : renamed from bond_slave_0
[  641.357547][T15562] netlink: 'syz.0.18437': attribute type 1 has an invalid length.
[  641.681908][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  641.684440][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  641.687162][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  641.689699][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  641.916740][T15583] ip6gre4: entered promiscuous mode
[  641.918891][T15583] ip6gre4: entered allmulticast mode
[  642.024886][T15593] xt_hashlimit: size too large, truncated to 1048576
[  642.076470][T15595] netlink: 'syz.2.18450': attribute type 11 has an invalid length.
[  642.079848][T15595] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18450'.
[  642.185593][T15599] lo speed is unknown, defaulting to 1000
[  642.188781][T15599] xfrm0 speed is unknown, defaulting to 1000
[  642.340307][T15611] netlink: 'syz.2.18456': attribute type 2 has an invalid length.
[  642.537454][T15628] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  642.721575][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  642.724192][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  642.748607][T15660] netlink: 236 bytes leftover after parsing attributes in process `syz.0.18478'.
[  642.752804][T15660] netlink: 236 bytes leftover after parsing attributes in process `syz.0.18478'.
[  642.787664][T15663] IPv6: sit6: Disabled Multicast RS
[  643.419148][T15684] syzkaller1: entered promiscuous mode
[  643.421745][T15684] syzkaller1: entered allmulticast mode
[  643.485712][T15690] netlink: 'syz.2.18490': attribute type 9 has an invalid length.
[  643.488258][T15690] netlink: 'syz.2.18490': attribute type 6 has an invalid length.
[  643.639409][T15711] IPVS: stopping backup sync thread 23021 ...
[  645.841933][    C0] net_ratelimit: 10 callbacks suppressed
[  645.841952][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  645.846780][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  645.849433][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  645.852050][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  646.679429][T15740] lo speed is unknown, defaulting to 1000
[  646.683555][T15740] xfrm0 speed is unknown, defaulting to 1000
[  646.719125][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18504'.
[  646.727756][T15747] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma?
[  646.769241][T15752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18507'.
[  646.881578][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  646.884135][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  646.886448][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  646.888848][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  647.092538][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18524'.
[  647.098215][T15785] netlink: 580 bytes leftover after parsing attributes in process `syz.1.18524'.
[  647.118028][T15789] sctp: [Deprecated]: syz.0.18525 (pid 15789) Use of int in max_burst socket option deprecated.
[  647.118028][T15789] Use struct sctp_assoc_value instead
[  647.336943][T15818] validate_nla: 2 callbacks suppressed
[  647.336954][T15818] netlink: 'syz.1.18533': attribute type 13 has an invalid length.
[  647.343113][T15818] netlink: 'syz.1.18533': attribute type 17 has an invalid length.
[  647.349045][T15820] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.18538'.
[  647.352496][T15820] openvswitch: netlink: Message has 512 unknown bytes.
[  647.405527][T15817] bond34: entered promiscuous mode
[  647.407547][T15817] bond34: entered allmulticast mode
[  647.410221][T15817] 8021q: adding VLAN 0 to HW filter on device bond34
[  647.464285][T15818] 8021q: adding VLAN 0 to HW filter on device .`
[  647.471802][T15818] 8021q: adding VLAN 0 to HW filter on device 60X
[  647.505999][T15818] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  647.510130][T15818] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  647.515808][T15828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18533'.
[  647.523935][T15818] bridge0: port 1(vlan0) entered blocking state
[  647.526670][T15818] bridge0: port 1(vlan0) entered forwarding state
[  647.545937][T15818] 8021q: adding VLAN 0 to HW filter on device bond1
[  647.551808][T15818] 8021q: adding VLAN 0 to HW filter on device bond2
[  647.565883][T15818] 8021q: adding VLAN 0 to HW filter on device bond3
[  647.578356][T15818] 8021q: adding VLAN 0 to HW filter on device bond4
[  647.598884][T15818] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  647.634877][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  647.641883][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  647.645677][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  647.649066][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  647.654081][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  647.657504][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  647.667762][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  647.672599][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  648.193094][T15867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18558'.
[  648.518518][T15909] tipc: Resetting bearer <eth:gre0>
[  648.842413][T15931] macsec4: entered promiscuous mode
[  648.844475][T15931] veth1_macvtap: entered promiscuous mode
[  648.848145][T15931] veth1_macvtap: left promiscuous mode
[  649.353144][T15981] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.18608'.
[  649.873733][T16051] netlink: 186364 bytes leftover after parsing attributes in process `syz.2.18641'.
[  650.711104][T16064] netlink: 'syz.0.18646': attribute type 1 has an invalid length.
[  650.715355][T16064] netlink: 'syz.0.18646': attribute type 2 has an invalid length.
[  650.758458][T16068] netlink: 'syz.0.18649': attribute type 1 has an invalid length.
[  650.761894][T16068] netlink: 'syz.0.18649': attribute type 2 has an invalid length.
[  650.822333][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18652'.
[  650.839896][T16078] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  650.908231][T16087] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.18657'.
[  650.912075][T16087] net_ratelimit: 13 callbacks suppressed
[  650.912091][T16087] openvswitch: netlink: Message has 512 unknown bytes.
[  650.970297][T16094] netlink: 'syz.2.18660': attribute type 10 has an invalid length.
[  650.987336][T16096] netlink: 'syz.0.18662': attribute type 1 has an invalid length.
[  651.041559][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  651.044923][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  651.047828][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  651.050566][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  651.133028][T16114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18671'.
[  652.081608][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  652.083867][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  652.086429][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  652.088944][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  652.100932][T16125] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  652.271122][T16162] netlink: 'syz.0.18692': attribute type 1 has an invalid length.
[  652.275045][T16162] netlink: 'syz.0.18692': attribute type 8 has an invalid length.
[  652.513613][T16200] netlink: 'syz.1.18708': attribute type 1 has an invalid length.
[  652.516991][T16200] netlink: 'syz.1.18708': attribute type 2 has an invalid length.
[  652.588020][T16210] netlink: 'syz.0.18713': attribute type 1 has an invalid length.
[  652.591125][T16210] netlink: 'syz.0.18713': attribute type 2 has an invalid length.
[  653.121642][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  653.443710][T16246] netlink: 'syz.0.18730': attribute type 1 has an invalid length.
[  653.748914][T16303] netlink: 'syz.1.18753': attribute type 1 has an invalid length.
[  653.758880][T16303] 8021q: adding VLAN 0 to HW filter on device bond36
[  653.763463][T16301] syzkaller0: entered promiscuous mode
[  653.765863][T16301] syzkaller0: entered allmulticast mode
[  654.135905][T16356] netlink: 'syz.1.18776': attribute type 1 has an invalid length.
[  654.138501][T16356] netlink: 'syz.1.18776': attribute type 2 has an invalid length.
[  654.279208][T16378] netlink: 'syz.2.18780': attribute type 1 has an invalid length.
[  654.293102][T16378] bond35: entered promiscuous mode
[  654.295782][T16378] 8021q: adding VLAN 0 to HW filter on device bond35
[  654.315391][T16378] bond35: (slave veth31): making interface the new active one
[  654.318556][T16378] veth31: entered promiscuous mode
[  654.321634][T16378] bond35: (slave veth31): Enslaving as an active interface with an up link
[  656.241849][    C0] net_ratelimit: 11 callbacks suppressed
[  656.241876][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  656.246892][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  656.249552][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  656.252949][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  657.138691][T16356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  657.281521][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  657.283955][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  657.286424][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  657.288638][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  657.330091][T16421] netlink: 72 bytes leftover after parsing attributes in process `syz.2.18798'.
[  657.600539][T16454] pimreg: entered allmulticast mode
[  657.605243][T16453] pimreg: left allmulticast mode
[  657.673357][T16456] syzkaller1: left promiscuous mode
[  657.675612][T16456] syzkaller1: left allmulticast mode
[  657.717474][T16458] syzkaller0: entered promiscuous mode
[  657.719430][T16458] syzkaller0: entered allmulticast mode
[  658.321709][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  658.323924][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  658.478102][T16475] syzkaller0: entered promiscuous mode
[  658.479977][T16475] syzkaller0: entered allmulticast mode
[  658.842570][   T34] audit: type=1107 audit(1781928486.647:15): pid=16499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  659.378431][T16558] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.18861'.
[  660.150095][ T5058] udevd[5058]: worker [11138] /devices/virtual/block/nbd0 is taking a long time
[  660.475632][T16629] netlink: 'syz.1.18890': attribute type 1 has an invalid length.
[  660.655144][T16643] syzkaller1: entered promiscuous mode
[  660.657125][T16643] syzkaller1: entered allmulticast mode
[  661.441556][    C0] net_ratelimit: 11 callbacks suppressed
[  661.441627][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  661.446737][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  661.449603][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  661.452128][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  661.708651][T16664] netlink: 'syz.2.18906': attribute type 1 has an invalid length.
[  661.713409][T16664] netlink: 'syz.2.18906': attribute type 2 has an invalid length.
[  661.997142][T16711] syzkaller0: entered promiscuous mode
[  661.999584][T16711] syzkaller0: entered allmulticast mode
[  662.011630][T16711] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  662.250287][T16749] netlink: 'syz.2.18945': attribute type 1 has an invalid length.
[  662.254271][T16749] netlink: 'syz.2.18945': attribute type 2 has an invalid length.
[  662.413149][T16763] xt_l2tp: invalid flags combination: 8
[  662.481747][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  662.484228][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  662.486997][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  662.489757][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  662.514344][T16776] netlink: 'syz.1.18957': attribute type 1 has an invalid length.
[  662.532949][T16776] bond37: entered promiscuous mode
[  662.534820][T16776] 8021q: adding VLAN 0 to HW filter on device bond37
[  662.544283][T16776] bridge0: Device is already in use.
[  662.548215][T16780] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  662.582992][T16783] netlink: 'syz.0.18960': attribute type 11 has an invalid length.
[  662.673659][T16792] 8021q: adding VLAN 0 to HW filter on device bond38
[  662.789810][T16810] xt_bpf: check failed: parse error
[  663.048447][T16832] netlink: 'syz.1.18981': attribute type 1 has an invalid length.
[  663.519867][T16873] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  663.522729][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  663.550565][T16875] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.19000'.
[  663.817422][T16909] syzkaller1: entered promiscuous mode
[  663.819313][T16909] syzkaller1: entered allmulticast mode
[  664.000212][T16945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19032'.
[  664.103510][T16961] bond36: option miimon: invalid value (18446744073709551607)
[  664.107957][T16961] bond36: option miimon: allowed values 0 - 2147483647
[  664.113974][T16961] bond36 (unregistering): Released all slaves
[  666.641640][    C0] net_ratelimit: 12 callbacks suppressed
[  666.641659][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  666.645382][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  666.647394][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  666.649362][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  667.413624][T17060] lo speed is unknown, defaulting to 1000
[  667.416475][T17060] xfrm0 speed is unknown, defaulting to 1000
[  667.681561][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  667.685269][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  667.688608][    C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  667.691774][    C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  667.750287][T17055] tipc: Resetting bearer <eth:syzkaller0>
[  667.798880][T17055] tipc: Resetting bearer <eth:hsr0>
[  667.806557][T17055] tipc: Resetting bearer <eth:hsr0>
[  667.954487][T17085] block nbd11: server does not support multiple connections per device.
[  667.960367][T17085] block nbd11: shutting down sockets
[  668.043809][T17055] geneve0: left promiscuous mode
[  668.069002][   T10] lo speed is unknown, defaulting to 1000
[  668.071566][   T10] syz2: Port: 1 Link DOWN
[  668.086985][ T5749] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.090772][ T5749] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20003 - 0
[  668.099211][ T5749] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.106853][ T5749] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20003 - 0
[  668.114851][ T5749] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.119881][ T5749] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20003 - 0
[  668.129558][ T5749] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.139741][ T5749] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20003 - 0
[  668.173548][T17092] netlink: 'syz.1.19082': attribute type 1 has an invalid length.
[  668.176889][T17092] netlink: 'syz.1.19082': attribute type 2 has an invalid length.
[  668.419048][T17113] netlink: 'syz.1.19092': attribute type 11 has an invalid length.
[  668.424615][T17113] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19092'.
[  668.435097][T17112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  668.954232][T17161] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  669.211963][T17175] netlink: 80 bytes leftover after parsing attributes in process `syz.1.19119'.
[  669.769149][T17203] ip6gre5: entered promiscuous mode
[  669.771113][T17203] ip6gre5: entered allmulticast mode
[  669.776984][ T5506] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  669.780098][ T5506] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  669.786045][T17203] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  669.811538][   T33] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  669.901150][T17211] netlink: 766 bytes leftover after parsing attributes in process `syz.2.19134'.
[  669.945460][T17215] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  669.954754][T17215] syzkaller1: left promiscuous mode
[  669.956997][T17215] syzkaller1: left allmulticast mode
[  669.967143][T17215] ipvlan2: left allmulticast mode
[  669.983500][T17215] bond22: left allmulticast mode
[  669.987505][T17215] bridge28: left promiscuous mode
[  669.989907][T17215] bridge28: left allmulticast mode
[  669.994423][T17215] bond27: left promiscuous mode
[  669.996647][T17215] bridge32: left promiscuous mode
[  669.999585][T17215] bond30: left promiscuous mode
[  670.002472][T17215] bridge34: left promiscuous mode
[  670.004998][T17215] bond30: left allmulticast mode
[  670.007098][T17215] bridge34: left allmulticast mode
[  670.009402][T17215] bond31: left promiscuous mode
[  670.012174][T17215] bridge35: left promiscuous mode
[  670.014542][T17215] bridge36: left promiscuous mode
[  670.016820][T17215] bond31: left allmulticast mode
[  670.018896][T17215] bridge35: left allmulticast mode
[  670.020887][T17215] bridge36: left allmulticast mode
[  670.024865][T17215] ip6tnl12: left allmulticast mode
[  670.026738][T17215] gtp7: left allmulticast mode
[  670.028857][T17215] ip6gre4: left promiscuous mode
[  670.030444][T17215] ip6gre4: left allmulticast mode
[  670.034495][T17215] bond34: left promiscuous mode
[  670.036289][T17215] bond34: left allmulticast mode
[  670.039061][T17215] bond35: left promiscuous mode
[  670.040826][T17215] veth31: left promiscuous mode
[  670.046767][T17215] ip6gre5: left promiscuous mode
[  670.048654][T17215] ip6gre5: left allmulticast mode
[  670.082933][T17224] syzkaller1: entered promiscuous mode
[  670.084988][T17224] syzkaller1: entered allmulticast mode
[  670.133103][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19142'.
[  670.987082][T17243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19145'.
[  671.093345][T17256] netlink: 'syz.2.19151': attribute type 1 has an invalid length.
[  671.096192][T17256] netlink: 'syz.2.19151': attribute type 2 has an invalid length.
[  671.231127][T17269] syzkaller0: entered promiscuous mode
[  671.237021][T17269] syzkaller0: entered allmulticast mode
[  671.366950][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19154'.
[  671.513210][T17283] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.19161'.
[  671.516024][T17283] openvswitch: netlink: Message has 512 unknown bytes.
[  671.557184][T17294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19165'.
[  671.560829][T17294] netlink: 'syz.2.19165': attribute type 1 has an invalid length.
[  671.563601][T17294] netlink: 72 bytes leftover after parsing attributes in process `syz.2.19165'.
[  671.566559][T17294] netlink: 252 bytes leftover after parsing attributes in process `syz.2.19165'.
[  671.569420][T17294] netlink: 'syz.2.19165': attribute type 1 has an invalid length.
[  671.572531][T17294] netlink: 72 bytes leftover after parsing attributes in process `syz.2.19165'.
[  671.936176][T17338] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) !
[  671.963419][T17341] netlink: 'syz.0.19187': attribute type 6 has an invalid length.
[  671.966194][T17341] IPv6: NLM_F_CREATE should be specified when creating new route
[  672.093080][T17351] netlink: 'syz.1.19192': attribute type 4 has an invalid length.
[  672.154191][T17361] netlink: 'syz.1.19197': attribute type 2 has an invalid length.
[  672.715185][T17428] netlink: 'syz.0.19226': attribute type 1 has an invalid length.
[  672.756563][T17432] syzkaller1: entered promiscuous mode
[  672.758850][T17432] syzkaller1: entered allmulticast mode
[  672.836707][T17444] openvswitch: netlink: Message has 512 unknown bytes.
[  673.166363][T17473] vlan1: entered promiscuous mode
[  673.168536][T17473] gretap0: entered promiscuous mode
[  673.609772][T17501] validate_nla: 1 callbacks suppressed
[  673.609789][T17501] netlink: 'syz.2.19260': attribute type 4 has an invalid length.
[  673.698044][T17511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  673.718943][T17513] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  673.721916][T17513] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  674.032421][T17553] netlink: 'syz.0.19284': attribute type 1 has an invalid length.
[  674.035911][T17553] netlink: 'syz.0.19284': attribute type 2 has an invalid length.
[  674.290727][T17571] netlink: 'syz.0.19290': attribute type 4 has an invalid length.
[  674.294426][T17571] __nla_validate_parse: 6 callbacks suppressed
[  674.294440][T17571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19290'.
[  674.740157][T17593] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19298'.
[  675.069053][T17613] netlink: 'syz.0.19306': attribute type 13 has an invalid length.
[  675.137762][T17621] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  675.162450][T17621] tipc: Resetting bearer <eth:syzkaller0>
[  675.167964][T17621] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  675.205256][T17625] netlink: 'syz.2.19312': attribute type 5 has an invalid length.
[  675.918448][T17675] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.19334'.
[  676.814785][T17714] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.19351'.
[  676.884411][T17716] netlink: 'syz.1.19354': attribute type 7 has an invalid length.
[  676.894266][T17716] netlink: 'syz.1.19354': attribute type 27 has an invalid length.
[  677.115801][T17730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19359'.
[  677.215280][T17738] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  677.451151][T17759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19373'.
[  677.978819][T17808] bond37: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  677.995051][T17808] bond37 (unregistering): Released all slaves
[  678.111806][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19397'.
[  678.115855][T17822] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  678.129118][T17822] ipt_ECN: cannot use operation on non-tcp rule
[  679.013091][T17858] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.19417'.
[  679.016306][T17858] openvswitch: netlink: Message has 512 unknown bytes.
[  679.637773][T17909] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.19441'.
[  679.641872][T17909] openvswitch: netlink: Message has 512 unknown bytes.
[  679.767645][T17922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19445'.
[  680.099425][T17955] netlink: 'syz.1.19461': attribute type 1 has an invalid length.
[  680.125641][T17955] gretap4: entered allmulticast mode
[  680.130444][T17955] bond39: (slave gretap4): making interface the new active one
[  680.134024][T17955] bond39: (slave gretap4): Enslaving as an active interface with an up link
[  681.223476][T18032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19495'.
[  681.566875][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19509'.
[  681.867583][T18087] syzkaller0: left promiscuous mode
[  681.869336][T18087] syzkaller0: left allmulticast mode
[  681.871175][T18087] tipc: Resetting bearer <eth:syzkaller0>
[  682.059855][T18105] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[  682.394432][T18128] xt_CT: No such helper "snmp_trap"
[  682.431959][T18130] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19537'.
[  683.305754][T18172] syzkaller0: entered promiscuous mode
[  683.307661][T18172] syzkaller0: entered allmulticast mode
[  683.310123][T18172] tipc: Resetting bearer <eth:syzkaller0>
[  683.317816][T18172] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  683.482127][T18178] netlink: 'syz.0.19561': attribute type 1 has an invalid length.
[  683.539590][T18184] netlink: 'syz.0.19564': attribute type 1 has an invalid length.
[  683.658191][T18197] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.19557'.
[  683.662906][T18197] openvswitch: netlink: Message has 16 unknown bytes.
[  683.678472][T18194] bond37: Unable to set up delay as MII monitoring is disabled
[  683.688295][T18194] bond37 (unregistering): Released all slaves
[  683.850532][T18208] netlink: 'syz.2.19572': attribute type 1 has an invalid length.
[  683.868057][T18208] bond36: entered promiscuous mode
[  683.869893][T18208] bond36: entered allmulticast mode
[  683.872622][T18208] 8021q: adding VLAN 0 to HW filter on device bond36
[  683.892355][T18208] erspan2: entered allmulticast mode
[  683.899647][T18208] bond36: (slave erspan2): making interface the new active one
[  683.902616][T18208] erspan2: entered promiscuous mode
[  683.909063][T18208] bond36: (slave erspan2): Enslaving as an active interface with an up link
[  684.119290][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19584'.
[  684.123276][T18234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19584'.
[  684.127251][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19584'.
[  684.130910][T18234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19584'.
[  684.809873][T18290] netlink: 'syz.0.19612': attribute type 4 has an invalid length.
[  684.824216][T18290] netlink: 17 bytes leftover after parsing attributes in process `syz.0.19612'.
[  684.889672][T18298] netlink: 'syz.2.19613': attribute type 3 has an invalid length.
[  684.901049][T18295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19615'.
[  684.996674][T18302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19617'.
[  685.082115][T18304] netlink: 56 bytes leftover after parsing attributes in process `syz.2.19617'.
[  685.861865][T18358] netlink: 'syz.0.19636': attribute type 1 has an invalid length.
[  686.120093][T18372] netlink: 232 bytes leftover after parsing attributes in process `syz.1.19641'.
[  686.195889][T18378] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  686.230190][T18380] syzkaller0: entered promiscuous mode
[  686.238422][T18380] syzkaller0: entered allmulticast mode
[  687.334521][T18416] netlink: 136 bytes leftover after parsing attributes in process `syz.0.19660'.
[  687.337422][T18416] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  687.707209][T18454] netlink: 'syz.0.19677': attribute type 1 has an invalid length.
[  687.713014][T18454] netlink: 'syz.0.19677': attribute type 2 has an invalid length.
[  688.447984][T18529] syzkaller1: entered promiscuous mode
[  688.450201][T18529] syzkaller1: entered allmulticast mode
[  688.503783][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19715'.
[  688.668282][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19718'.
[  688.724314][T18552] nbd: socks must be embedded in a SOCK_ITEM attr
[  688.727802][T18552] block nbd11: shutting down sockets
[  688.819874][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19728'.
[  688.977056][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19734'.
[  689.655503][T18631] netlink: 'syz.0.19757': attribute type 49 has an invalid length.
[  690.350413][T18682] netlink: 'syz.1.19776': attribute type 1 has an invalid length.
[  690.813202][T18730] netlink: 'syz.0.19797': attribute type 1 has an invalid length.
[  690.819095][T18730] netlink: 'syz.0.19797': attribute type 2 has an invalid length.
[  691.037602][T18751] __nla_validate_parse: 4 callbacks suppressed
[  691.037614][T18751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19805'.
[  694.014496][T18746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  694.067873][T18793] netlink: 14 bytes leftover after parsing attributes in process `syz.1.19819'.
[  694.133368][T18797] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  694.137979][T18797] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  694.231042][T18805] netlink: 'syz.2.19825': attribute type 1 has an invalid length.
[  694.485997][T18817] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  694.898368][T18843] syzkaller0: entered promiscuous mode
[  694.900230][T18843] syzkaller0: entered allmulticast mode
[  695.067138][T18847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19843'.
[  695.072905][T18847] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19843'.
[  695.077077][T18847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19843'.
[  695.459960][T18880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19856'.
[  695.710016][T18898] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  695.715727][T18898] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  695.864228][T18919] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  695.943239][T18930] netlink: 'syz.0.19879': attribute type 1 has an invalid length.
[  695.970563][T18933] IPVS: Unknown mcast interface: vcan0
[  696.040143][T18938] xt_bpf: check failed: parse error
[  696.259181][   T34] audit: type=1804 audit(1781928524.057:16): pid=18959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.19891" name="/newroot/6882/cgroup.controllers" dev="tmpfs" ino=34702 res=1 errno=0
[  696.285597][   T34] audit: type=1800 audit(1781928524.057:17): pid=18959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19891" name="cgroup.controllers" dev="tmpfs" ino=34702 res=0 errno=0
[  696.465346][T18971] bond26: entered allmulticast mode
[  696.480566][T18970] bond26: left allmulticast mode
[  696.784563][T18992] bridge_slave_1: invalid flags given to default FDB implementation
[  696.938786][T19006] netlink: 1 bytes leftover after parsing attributes in process `syz.0.19914'.
[  696.991234][T19013] syzkaller0: entered promiscuous mode
[  696.996755][T19013] syzkaller0: entered allmulticast mode
[  697.475296][T19030] bond40: option ad_user_port_key: invalid value (65535)
[  697.484329][T19030] bond40: option ad_user_port_key: allowed values 0 - 1023
[  697.493918][T19030] bond40 (unregistering): Released all slaves
[  697.503622][T19034] netlink: 'syz.2.19927': attribute type 1 has an invalid length.
[  697.585611][T19034] 8021q: adding VLAN 0 to HW filter on device bond37
[  697.725482][T19047] IPVS: Scheduler module ip_vs_sip not found
[  697.759745][T19034] netlink: 'syz.2.19927': attribute type 10 has an invalid length.
[  697.768498][T19034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19927'.
[  698.044364][T19074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19943'.
[  698.187253][T19090] netlink: 181256 bytes leftover after parsing attributes in process `syz.1.19949'.
[  698.197021][T19090] openvswitch: netlink: Message has 512 unknown bytes.
[  698.417982][T19117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19962'.
[  698.788540][T19141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19970'.
[  699.514878][T19181] netlink: 136 bytes leftover after parsing attributes in process `syz.1.19983'.
[  699.610563][T19187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19986'.
[  699.615481][T19187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19986'.
[  699.941180][T19209] erspan0: entered promiscuous mode
[  699.945459][T19208] erspan0: left promiscuous mode
[  700.053359][   T34] audit: type=1804 audit(1781928527.857:18): pid=19218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.20001" name="/newroot/6755/cgroup.controllers" dev="tmpfs" ino=34051 res=1 errno=0
[  700.071700][   T34] audit: type=1800 audit(1781928527.857:19): pid=19218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20001" name="cgroup.controllers" dev="tmpfs" ino=34051 res=0 errno=0
[  700.141697][T19222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20004'.
[  703.499418][T19256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  704.369067][T19375] __nla_validate_parse: 3 callbacks suppressed
[  704.369079][T19375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20069'.
[  704.485968][T19379] netlink: 'syz.0.20072': attribute type 1 has an invalid length.
[  704.489273][T19379] netlink: 'syz.0.20072': attribute type 2 has an invalid length.
[  704.892746][T19419] netlink: 9 bytes leftover after parsing attributes in process `syz.2.20088'.
[  704.896270][T19413] syzkaller1: entered promiscuous mode
[  704.908309][T19413] syzkaller1: entered allmulticast mode
[  705.114985][T19434] netlink: 'syz.1.20094': attribute type 1 has an invalid length.
[  705.117908][T19434] netlink: 'syz.1.20094': attribute type 2 has an invalid length.
[  705.421108][T19460] netlink: 'syz.0.20106': attribute type 1 has an invalid length.
[  705.472359][T19460] bond37: entered promiscuous mode
[  705.474919][T19460] 8021q: adding VLAN 0 to HW filter on device bond37
[  705.498906][T19460] bond37: (slave bridge26): making interface the new active one
[  705.502898][T19460] bridge26: entered promiscuous mode
[  705.506283][T19460] bond37: (slave bridge26): Enslaving as an active interface with an up link
[  706.002242][T19496] netlink: 'syz.0.20118': attribute type 1 has an invalid length.
[  706.389808][T19532] netlink: 'syz.2.20133': attribute type 1 has an invalid length.
[  706.394750][T19532] netlink: 'syz.2.20133': attribute type 2 has an invalid length.
[  706.497910][T19540] x_tables: duplicate underflow at hook 1
[  706.580881][T19544] bond0: Caught tx_queue_len zero misconfig
[  706.654488][T19547] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  706.657675][T19547] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  706.883194][T19564] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.20148'.
[  706.886826][T19564] openvswitch: netlink: Message has 512 unknown bytes.
[  706.913582][T19566] netlink: 'syz.1.20149': attribute type 1 has an invalid length.
[  706.916414][T19566] netlink: 'syz.1.20149': attribute type 2 has an invalid length.
[  707.035455][T19574] netlink: 207236 bytes leftover after parsing attributes in process `syz.1.20153'.
[  707.415810][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20162'.
[  708.215800][T19654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20188'.
[  708.442222][T19675] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  708.446038][T19675] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  708.595851][T19682] rdma_rxe: rxe_newlink: failed to add vlan0
[  709.212017][T19713] vxcan4: entered allmulticast mode
[  709.960250][T19724] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma?
[  710.053523][T19734] validate_nla: 3 callbacks suppressed
[  710.053536][T19734] netlink: 'syz.2.20223': attribute type 1 has an invalid length.
[  710.058144][T19734] netlink: 'syz.2.20223': attribute type 8 has an invalid length.
[  711.312213][T19759] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  711.446876][T19765] netlink: 'syz.0.20237': attribute type 1 has an invalid length.
[  711.452980][T19765] netlink: 'syz.0.20237': attribute type 2 has an invalid length.
[  711.511166][T19766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20237'.
[  711.518378][T19766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20237'.
[  711.569923][T19767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20237'.
[  711.697252][T19767] hsr_slave_0: left promiscuous mode
[  711.708280][T19767] hsr_slave_1: left promiscuous mode
[  711.769095][T19767] tipc: Disabling bearer <eth:hsr0>
[  711.856072][T19783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20245'.
[  711.862888][T19783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20245'.
[  711.866160][T19783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20245'.
[  711.873370][T19783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20245'.
[  712.536991][T19832] netlink: 'syz.1.20264': attribute type 1 has an invalid length.
[  712.701146][T19844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20270'.
[  712.837434][T19857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20277'.
[  713.219705][T19885] netlink: 'syz.1.20289': attribute type 13 has an invalid length.
[  713.364351][T19898] netlink: 'syz.1.20295': attribute type 10 has an invalid length.
[  713.367272][T19898] netlink: 'syz.1.20295': attribute type 10 has an invalid length.
[  713.421769][T19904] tap0: tun_chr_ioctl cmd 2148553947
[  713.456600][T19908] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20298'.
[  713.478953][T19906] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  713.482728][T19906] bond0: Master is either lo or non-ether device
[  713.522816][T19912] sctp: [Deprecated]: syz.0.20301 (pid 19912) Use of int in max_burst socket option.
[  713.522816][T19912] Use struct sctp_assoc_value instead
[  713.669311][T19927] bond2: entered allmulticast mode
[  713.671468][T19927] ip6gre1: entered allmulticast mode
[  713.755956][T19927] dvmrp6: entered allmulticast mode
[  713.778034][T19926] bond2: left allmulticast mode
[  713.779863][T19926] ip6gre1: left allmulticast mode
[  713.790416][T19933] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  713.842870][T19940] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  714.019746][T19956] veth43: entered allmulticast mode
[  714.033602][T19956] bond38: (slave veth43): Enslaving as an active interface with an up link
[  714.053728][T19956] bond38 (unregistering): (slave veth43): Releasing backup interface
[  714.066223][T19956] bond38 (unregistering): Released all slaves
[  714.234731][T19974] netlink: 'syz.0.20325': attribute type 3 has an invalid length.
[  714.715152][T20022] netlink: 'syz.1.20345': attribute type 1 has an invalid length.
[  714.732763][T20022] 8021q: adding VLAN 0 to HW filter on device bond40
[  714.747945][T20022] vlan10: entered allmulticast mode
[  714.750123][T20022] bond40: entered allmulticast mode
[  715.248500][T20036] nbd: socks must be embedded in a SOCK_ITEM attr
[  715.369771][T20050] syzkaller0: entered promiscuous mode
[  715.374790][T20050] syzkaller0: entered allmulticast mode
[  715.710354][T20064] gre5: entered allmulticast mode
[  716.331685][T20106] sctp: [Deprecated]: syz.0.20381 (pid 20106) Use of struct sctp_assoc_value in delayed_ack socket option.
[  716.331685][T20106] Use struct sctp_sack_info instead
[  716.460782][T20114] netlink: 'syz.1.20385': attribute type 1 has an invalid length.
[  716.469345][T20114] netlink: 'syz.1.20385': attribute type 2 has an invalid length.
[  716.730165][T20135] lo speed is unknown, defaulting to 1000
[  716.736442][T20135] xfrm0 speed is unknown, defaulting to 1000
[  716.800543][T20142] __nla_validate_parse: 10 callbacks suppressed
[  716.800557][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20397'.
[  717.187293][T20175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20413'.
[  717.566850][T20207] bridge0: port 1(hsr_slave_0) entered blocking state
[  717.569146][T20207] bridge0: port 1(hsr_slave_0) entered disabled state
[  717.609872][T20207] hsr_slave_0: entered allmulticast mode
[  717.613859][T20207] hsr_slave_0: entered promiscuous mode
[  717.930702][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20440'.
[  717.934587][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20440'.
[  718.043089][T20249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20446'.
[  718.046189][T20249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20446'.
[  718.052585][T20249] geneve10: entered promiscuous mode
[  718.054663][T20249] geneve10: entered allmulticast mode
[  718.558500][T20256] tipc: Failed to remove unknown binding: 66,0,0/1:353338471/353338473
[  718.561197][T20256] tipc: Failed to remove unknown binding: 66,0,0/1:353338471/353338472
[  718.565076][T20256] tipc: Failed to remove unknown binding: 66,0,0/1:353338471/353338473
[  718.567676][T20256] tipc: Failed to remove unknown binding: 66,0,0/1:353338471/353338472
[  718.620521][T20269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20455'.
[  718.923907][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20465'.
[  719.284372][T20311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20471'.
[  719.289823][T20315] netlink: 'syz.0.20474': attribute type 1 has an invalid length.
[  719.303089][T20315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20474'.
[  719.437635][T20326] block nbd0: Unsupported socket: should be TCP or UNIX.
[  719.441540][T20318] gtp1: entered promiscuous mode
[  719.444243][T20318] gtp1: entered allmulticast mode
[  719.641553][T20340] syzkaller1: left promiscuous mode
[  719.643797][T20340] syzkaller1: left allmulticast mode
[  720.282203][T20383] netlink: 'syz.1.20505': attribute type 19 has an invalid length.
[  720.781616][T20419] netlink: 'syz.0.20520': attribute type 1 has an invalid length.
[  720.944626][T20427] netlink: 'syz.0.20524': attribute type 10 has an invalid length.
[  721.184031][T20442] syzkaller0: entered promiscuous mode
[  721.186951][T20442] syzkaller0: entered allmulticast mode
[  721.197295][T20442] tc action pedit offset 136 out of bounds
[  721.675704][T20485] syzkaller1: entered promiscuous mode
[  721.678091][T20485] syzkaller1: entered allmulticast mode
[  722.239372][T20533] netlink: 'syz.1.20576': attribute type 1 has an invalid length.
[  722.245641][T20533] netlink: 'syz.1.20576': attribute type 2 has an invalid length.
[  722.248485][T20536] netlink: 'syz.2.20574': attribute type 8 has an invalid length.
[  722.445247][T20569] __nla_validate_parse: 7 callbacks suppressed
[  722.445266][T20569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20592'.
[  722.458779][T20572] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  722.510868][T20578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20598'.
[  722.519548][T20582] netlink: 'syz.2.20597': attribute type 1 has an invalid length.
[  722.522773][T20582] netlink: 'syz.2.20597': attribute type 2 has an invalid length.
[  722.778339][T20607] bond41: option lp_interval: invalid value (0)
[  722.782662][T20607] bond41: option lp_interval: allowed values 1 - 2147483647
[  722.794509][T20607] bond41 (unregistering): Released all slaves
[  723.038291][T20637] netlink: 'syz.2.20621': attribute type 3 has an invalid length.
[  723.099655][T20648] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002
[  723.255834][T20675] netlink: 'syz.1.20638': attribute type 24 has an invalid length.
[  723.654636][T20711] sctp: [Deprecated]: syz.1.20642 (pid 20711) Use of struct sctp_assoc_value in delayed_ack socket option.
[  723.654636][T20711] Use struct sctp_sack_info instead
[  724.080593][T20745] netlink: 'syz.2.20658': attribute type 1 has an invalid length.
[  724.904199][T20822] xt_hashlimit: size too large, truncated to 1048576
[  724.958153][T20826] netlink: 'syz.0.20692': attribute type 11 has an invalid length.
[  724.971448][T20826] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20692'.
[  725.040964][T20829] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.20695'.
[  725.045517][T20829] openvswitch: netlink: Message has 512 unknown bytes.
[  725.324084][T20841] openvswitch: netlink: Message has 9891 unknown bytes.
[  725.484502][T20847] netlink: 'syz.2.20704': attribute type 27 has an invalid length.
[  725.759730][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20712'.
[  725.962231][T20875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  725.965248][T20875] IPv6: NLM_F_CREATE should be set when creating new route
[  725.968102][T20875] IPv6: NLM_F_CREATE should be set when creating new route
[  726.119876][T20886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20713'.
[  726.177464][   T56] block nbd11: Receive control failed (result -1)
[  726.319959][T20903] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  727.815879][T20949] bond38: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  727.822627][T20949] bond38 (unregistering): Released all slaves
[  728.039946][T20969] netlink: 'syz.0.20755': attribute type 1 has an invalid length.
[  728.229628][T20982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20761'.
[  728.339387][T20989] netlink: 'syz.2.20763': attribute type 1 has an invalid length.
[  728.344829][T20989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  728.578844][T21013] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.20773'.
[  728.583238][T21013] openvswitch: netlink: Message has 512 unknown bytes.
[  728.645735][T21025] netlink: 44 bytes leftover after parsing attributes in process `syz.0.20779'.
[  728.756364][T21035] syzkaller1: entered promiscuous mode
[  728.758501][T21035] syzkaller1: entered allmulticast mode
[  728.770226][T21038] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  728.773702][T21038] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  728.833391][T21044] sctp: [Deprecated]: syz.0.20787 (pid 21044) Use of int in max_burst socket option deprecated.
[  728.833391][T21044] Use struct sctp_assoc_value instead
[  728.868423][T21050] nbd: must specify a device to reconfigure
[  729.082687][T21084] netlink: 424 bytes leftover after parsing attributes in process `syz.1.20806'.
[  729.087099][T21084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20806'.
[  729.105760][T21086] bond38: entered promiscuous mode
[  729.108016][T21086] bond38: entered allmulticast mode
[  729.110495][T21086] 8021q: adding VLAN 0 to HW filter on device bond38
[  729.217950][T21097] netlink: 'syz.1.20811': attribute type 11 has an invalid length.
[  729.245382][T21097] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  729.319894][T21108] netlink: 'syz.1.20814': attribute type 6 has an invalid length.
[  729.347782][T21111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20815'.
[  729.410669][T21121] xt_CT: You must specify a L4 protocol and not use inversions on it
[  729.613687][T21141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20828'.
[  730.315528][T21156] syzkaller0: entered promiscuous mode
[  730.317319][T21156] syzkaller0: entered allmulticast mode
[  730.528483][T21166] netlink: 'syz.1.20839': attribute type 1 has an invalid length.
[  730.555891][T21166] 8021q: adding VLAN 0 to HW filter on device bond41
[  730.619007][T21166] bond41: (slave veth47): Enslaving as a backup interface with a down link
[  732.121236][T21190] syzkaller0: entered promiscuous mode
[  732.123561][T21190] syzkaller0: entered allmulticast mode
[  732.128651][T21190] TC_ACT_REPEAT abuse ?
[  732.180258][T21194] IPv6: NLM_F_CREATE should be specified when creating new route
[  732.252867][T21201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20847'.
[  732.256457][T21201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20847'.
[  732.266738][ T5750] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  732.270236][T21201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20847'.
[  732.276253][ T5750] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  732.291947][ T5750] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  732.298895][ T5750] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  732.462035][T21218] netlink: 'syz.1.20850': attribute type 2 has an invalid length.
[  732.878525][T21292] ipt_REJECT: TCP_RESET invalid for non-tcp
[  732.983792][T21303] netlink: 'syz.0.20876': attribute type 21 has an invalid length.
[  732.986317][T21303] netlink: 'syz.0.20876': attribute type 1 has an invalid length.
[  733.098391][T21319] nbd: must specify at least one socket
[  733.128081][T21326] netlink: 'syz.0.20883': attribute type 2 has an invalid length.
[  733.338625][T21357] __nla_validate_parse: 16 callbacks suppressed
[  733.338644][T21357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20894'.
[  733.374315][T21358] xt_hl: Unknown TTL match mode: 237
[  733.496767][T21373] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component
[  733.521689][T21371] block nbd12: server does not support multiple connections per device.
[  733.524698][T21371] block nbd12: shutting down sockets
[  733.533178][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20897'.
[  733.536215][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20897'.
[  733.539215][T21373] netlink: 'syz.2.20897': attribute type 18 has an invalid length.
[  733.910646][T21395] Cannot find add_set index 0 as target
[  733.965575][T21396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20904'.
[  733.969158][T21396] bridge0: port 1(vlan0) entered disabled state
[  734.503085][T21435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20915'.
[  734.506455][T21435] netlink: 7 bytes leftover after parsing attributes in process `syz.2.20915'.
[  734.554779][T21441] vlan2: entered allmulticast mode
[  734.557098][T21441] bond0: entered allmulticast mode
[  734.563946][T21441] netlink: 14 bytes leftover after parsing attributes in process `syz.0.20918'.
[  735.398854][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20923'.
[  735.437535][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20925'.
[  735.441906][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20925'.
[  736.422320][T21487] block nbd12: server does not support multiple connections per device.
[  736.425985][T21487] block nbd12: shutting down sockets
[  736.868422][T21544] bond36: left promiscuous mode
[  736.870693][T21544] erspan2: left promiscuous mode
[  736.878489][T21544] bond36: left allmulticast mode
[  736.916198][T21544] erspan2: left allmulticast mode
[  736.956431][T21544] gre5: left allmulticast mode
[  737.664658][T21591] syzkaller1: entered promiscuous mode
[  737.668329][T21591] syzkaller1: entered allmulticast mode
[  737.803499][T21604] Cannot find set identified by id 0 to match
[  738.648407][T21645] __nla_validate_parse: 14 callbacks suppressed
[  738.648422][T21645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20978'.
[  738.655447][T21646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20978'.
[  741.004105][T21626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  741.098445][T21663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20980'.
[  741.241169][T21678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20988'.
[  741.495088][T21695] tipc: Resetting bearer <eth:syzkaller0>
[  742.221031][T21749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21013'.
[  742.728601][T21764] 8021q: VLANs not supported on ip6tnl0
[  742.785199][T21771] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  742.791406][T21771] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  742.805745][T21773] netlink: 56 bytes leftover after parsing attributes in process `syz.0.21018'.
[  742.958534][T21784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21017'.
[  743.015678][T21771] netlink: 88 bytes leftover after parsing attributes in process `syz.1.21017'.
[  743.110453][T21795] lo speed is unknown, defaulting to 1000
[  743.115305][T21795] xfrm0 speed is unknown, defaulting to 1000
[  743.459232][T21818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21029'.
[  743.489451][T21814] netlink: 84 bytes leftover after parsing attributes in process `syz.0.21028'.
[  743.780154][T21838] lo speed is unknown, defaulting to 1000
[  743.793743][T21838] xfrm0 speed is unknown, defaulting to 1000
[  744.162056][   T35] INFO: task udevd:11138 blocked for more than 143 seconds.
[  744.167302][   T35]       Not tainted syzkaller #0
[  744.171105][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  744.176031][   T35] task:udevd           state:D stack:23688 pid:11138 tgid:11138 ppid:5058   task_flags:0x400140 flags:0x00080800
[  744.183373][   T35] Call Trace:
[  744.185508][   T35]  <TASK>
[  744.187971][   T35]  __schedule+0x17d9/0x56c0
[  744.189940][   T35]  ? blk_mq_flush_plug_list+0x415/0x540
[  744.194089][   T35]  ? rcu_is_watching+0x15/0xb0
[  744.196770][   T35]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  744.199153][   T35]  ? __blk_flush_plug+0x416/0x4d0
[  744.201690][   T35]  ? __pfx___schedule+0x10/0x10
[  744.204835][   T35]  ? rcu_is_watching+0x15/0xb0
[  744.207198][   T35]  ? lock_release+0x4b/0x3c0
[  744.209210][   T35]  schedule+0x164/0x360
[  744.211598][   T35]  schedule_timeout+0x152/0x2c0
[  744.213787][   T35]  ? __pfx_schedule_timeout+0x10/0x10
[  744.216071][   T35]  ? __pfx_process_timeout+0x10/0x10
[  744.218274][   T35]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  744.221844][   T35]  ? prepare_to_wait_event+0x436/0x480
[  744.224338][   T35]  nbd_queue_rq+0x889/0x1150
[  744.226476][   T35]  ? __pfx_nbd_queue_rq+0x10/0x10
[  744.228733][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  744.232589][   T35]  ? unwind_next_frame+0x1baf/0x2550
[  744.234848][   T35]  ? deref_stack_reg+0x18e/0x220
[  744.236975][   T35]  blk_mq_dispatch_rq_list+0x499/0x1990
[  744.239460][   T35]  ? sbitmap_get+0x229/0x390
[  744.241941][   T35]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  744.244740][   T35]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  744.247244][   T35]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  744.250066][   T35]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  744.253480][   T35]  ? blk_mq_hw_queue_need_run+0x134/0x630
[  744.255911][   T35]  ? rcu_is_watching+0x15/0xb0
[  744.258041][   T35]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  744.260678][   T35]  ? rcu_is_watching+0x15/0xb0
[  744.264570][   T35]  ? lock_acquire+0x5f/0x350
[  744.266632][   T35]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  744.269348][   T35]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  744.271924][   T35]  blk_mq_run_hw_queue+0x348/0x4f0
[  744.274129][   T35]  blk_mq_dispatch_list+0xd11/0xe10
[  744.276403][   T35]  ? blk_mq_dispatch_list+0x230/0xe10
[  744.278647][   T35]  ? __pfx_blk_mq_dispatch_list+0x10/0x10
[  744.280978][   T35]  ? __pfx_update_io_ticks+0x10/0x10
[  744.284015][   T35]  ? rcu_is_watching+0x15/0xb0
[  744.286486][   T35]  blk_mq_flush_plug_list+0x45f/0x540
[  744.288611][   T35]  ? blk_add_rq_to_plug+0x300/0x450
[  744.290989][   T35]  ? blk_mq_submit_bio+0x1c62/0x2a80
[  744.293617][   T35]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  744.296160][   T35]  ? blk_mq_submit_bio+0x2f8/0x2a80
[  744.299092][   T35]  __blk_flush_plug+0x3ed/0x4d0
[  744.302662][   T35]  ? __pfx___blk_flush_plug+0x10/0x10
[  744.306000][   T35]  ? blkg_get+0x20/0x1d0
[  744.307909][   T35]  ? rcu_is_watching+0x15/0xb0
[  744.309938][   T35]  __submit_bio+0x465/0x560
[  744.314813][   T35]  ? __pfx___submit_bio+0x10/0x10
[  744.318233][   T35]  ? bio_associate_blkg+0x6d/0x230
[  744.324123][   T35]  submit_bio_noacct_nocheck+0x2f4/0xa40
[  744.327782][   T35]  ? bio_associate_blkg+0x6d/0x230
[  744.331514][   T35]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  744.334765][   T35]  ? submit_bio_noacct+0xf7b/0x1b20
[  744.338782][   T35]  ? blkcg_set_ioprio+0x16b/0x2a0
[  744.342564][   T35]  block_read_full_folio+0x581/0x810
[  744.346190][   T35]  ? __pfx_blkdev_get_block+0x10/0x10
[  744.349419][   T35]  filemap_read_folio+0x12c/0x3a0
[  744.352822][   T35]  ? __pfx_blkdev_read_folio+0x10/0x10
[  744.357174][   T35]  ? __pfx_filemap_read_folio+0x10/0x10
[  744.360754][   T35]  ? filemap_add_folio+0x350/0x530
[  744.364187][   T35]  do_read_cache_folio+0x354/0x590
[  744.367759][   T35]  ? __pfx_blkdev_read_folio+0x10/0x10
[  744.370431][   T35]  read_part_sector+0xb6/0x2b0
[  744.373953][   T35]  adfspart_check_ICS+0xb1/0x960
[  744.376948][   T35]  ? seq_buf_printf+0x212/0x2d0
[  744.380290][   T35]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  744.382943][   T35]  ? __kmalloc_cache_noprof+0x318/0x660
[  744.386468][   T35]  bdev_disk_changed+0x851/0x17a0
[  744.389887][   T35]  ? __pfx_bdev_disk_changed+0x10/0x10
[  744.392895][   T35]  blkdev_get_whole+0x372/0x510
[  744.396411][   T35]  bdev_open+0x324/0xd70
[  744.398824][   T35]  blkdev_open+0x461/0x600
[  744.400887][   T35]  ? __pfx_blkdev_open+0x10/0x10
[  744.405268][   T35]  do_dentry_open+0x816/0x1380
[  744.408269][   T35]  vfs_open+0x3b/0x340
[  744.411141][   T35]  ? path_openat+0x2e2d/0x3830
[  744.413932][   T35]  path_openat+0x2e44/0x3830
[  744.420933][   T35]  ? kasan_save_track+0x3e/0x80
[  744.424526][   T35]  ? do_getname+0x2e/0x250
[  744.427082][   T35]  ? do_sys_openat2+0xcc/0x200
[  744.430277][   T35]  ? __x64_sys_openat+0x138/0x170
[  744.433146][   T35]  do_file_open+0x23e/0x4a0
[  744.436264][   T35]  ? __pfx_do_file_open+0x10/0x10
[  744.438991][   T35]  ? _raw_spin_unlock+0x28/0x50
[  744.442804][   T35]  ? alloc_fd+0x651/0x6c0
[  744.445317][   T35]  do_sys_openat2+0x115/0x200
[  744.447389][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[  744.451863][   T35]  ? __x64_sys_epoll_wait+0x1d7/0x230
[  744.455786][   T35]  __x64_sys_openat+0x138/0x170
[  744.458273][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.461660][   T35]  do_syscall_64+0x174/0x580
[  744.464572][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.468224][   T35] RIP: 0033:0x7fbd755169a4
[  744.470529][   T35] RSP: 002b:00007ffc581b6850 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  744.475503][   T35] RAX: ffffffffffffffda RBX: 0000561735a39910 RCX: 00007fbd755169a4
[  744.479293][   T35] RDX: 00000000000a0800 RSI: 0000561735a1c510 RDI: 00000000ffffff9c
[  744.484686][   T35] RBP: 0000561735a1c510 R08: 0000000000000001 R09: 3fffffffffffffff
[  744.489074][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  744.494306][   T35] R13: 0000561735a2caa0 R14: 0000000000000001 R15: 0000561735a1b910
[  744.498027][   T35]  </TASK>
[  744.500856][   T35] INFO: lockdep is turned off.
[  744.504120][   T35] NMI backtrace for cpu 1
[  744.504147][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  744.504163][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  744.504172][   T35] Call Trace:
[  744.504178][   T35]  <TASK>
[  744.504215][   T35]  dump_stack_lvl+0xe8/0x150
[  744.504238][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  744.504258][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  744.504274][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  744.504292][   T35]  sys_info+0x135/0x170
[  744.504308][   T35]  watchdog+0xfd7/0x1030
[  744.504329][   T35]  ? watchdog+0x1c7/0x1030
[  744.504349][   T35]  kthread+0x388/0x470
[  744.504363][   T35]  ? __pfx_watchdog+0x10/0x10
[  744.504379][   T35]  ? __pfx_kthread+0x10/0x10
[  744.504392][   T35]  ret_from_fork+0x514/0xb70
[  744.504408][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  744.504419][   T35]  ? __switch_to+0xc89/0x1420
[  744.504436][   T35]  ? __pfx_kthread+0x10/0x10
[  744.504448][   T35]  ret_from_fork_asm+0x1a/0x30
[  744.504466][   T35]  </TASK>
[  744.504471][   T35] Sending NMI from CPU 1 to CPUs 0:
[  744.554592][    C0] NMI backtrace for cpu 0
[  744.554613][    C0] CPU: 0 UID: 0 PID: 21807 Comm: syz.0.21026 Not tainted syzkaller #0 PREEMPT(full) 
[  744.554624][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  744.554632][    C0] RIP: 0010:unwind_next_frame+0x4db/0x2550
[  744.554655][    C0] Code: 38 0f 84 8a 16 00 00 e9 ee 01 00 00 49 89 d5 49 89 d7 4c 89 e0 4c 29 f8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe <49> 8d 1c 47 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f
[  744.554663][    C0] RSP: 0018:ffffc900036edfe0 EFLAGS: 00000246
[  744.554673][    C0] RAX: 0000000000000000 RBX: ffffffff90535248 RCX: 0000000000000000
[  744.554680][    C0] RDX: ffffffff90535248 RSI: ffffffff90d39c76 RDI: ffffffff8c2953c0
[  744.554687][    C0] RBP: ffffffff8224eda8 R08: 000000000000000b R09: 0000000000000000
[  744.554693][    C0] R10: ffffc900036ee0d8 R11: ffffffff81b128a0 R12: ffffffff9053524c
[  744.554700][    C0] R13: ffffffff90535248 R14: ffffc900036ee088 R15: ffffffff9053524c
[  744.554707][    C0] FS:  00007fca6076e6c0(0000) GS:ffff88818dc53000(0000) knlGS:0000000000000000
[  744.554715][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  744.554722][    C0] CR2: 00007fca5fbeb078 CR3: 00000000225da000 CR4: 00000000000006f0
[  744.554755][    C0] Call Trace:
[  744.554762][    C0]  <TASK>
[  744.554775][    C0]  ? post_alloc_hook+0x1f9/0x250
[  744.554792][    C0]  ? unwind_next_frame+0x8f/0x2550
[  744.554803][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  744.554819][    C0]  arch_stack_walk+0x11b/0x150
[  744.554863][    C0]  ? post_alloc_hook+0x1f9/0x250
[  744.554876][    C0]  stack_trace_save+0xa9/0x100
[  744.554888][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  744.554900][    C0]  ? stack_depot_save_flags+0x33/0x800
[  744.554914][    C0]  save_stack+0x122/0x230
[  744.554929][    C0]  ? rcu_is_watching+0x15/0xb0
[  744.554941][    C0]  ? __pfx_save_stack+0x10/0x10
[  744.554954][    C0]  ? post_alloc_hook+0x1f9/0x250
[  744.554971][    C0]  __set_page_owner+0x8d/0x4c0
[  744.554985][    C0]  ? __pfx___set_page_owner+0x10/0x10
[  744.554997][    C0]  ? trace_irq_enable+0x3b/0x140
[  744.555011][    C0]  ? bad_range+0x8e/0x2a0
[  744.555024][    C0]  ? bad_range+0x8e/0x2a0
[  744.555036][    C0]  post_alloc_hook+0x1f9/0x250
[  744.555048][    C0]  get_page_from_freelist+0x21fa/0x2270
[  744.555063][    C0]  ? lock_release+0x4b/0x3c0
[  744.555074][    C0]  ? prepare_alloc_pages+0x230/0x650
[  744.555090][    C0]  __alloc_frozen_pages_noprof+0x18d/0x380
[  744.555100][    C0]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  744.555111][    C0]  ? __pfx_policy_nodemask+0x10/0x10
[  744.555122][    C0]  ? rcu_is_watching+0x15/0xb0
[  744.555132][    C0]  alloc_pages_mpol+0x212/0x380
[  744.555143][    C0]  folio_alloc_mpol_noprof+0x39/0x160
[  744.555152][    C0]  shmem_alloc_and_add_folio+0x43e/0xf60
[  744.555169][    C0]  ? __pte_offset_map+0x29/0x240
[  744.555211][    C0]  ? __pfx_filemap_get_entry+0x10/0x10
[  744.555224][    C0]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  744.555236][    C0]  ? shmem_allowable_huge_orders+0x325/0x6c0
[  744.555249][    C0]  shmem_get_folio_gfp+0x5da/0x16d0
[  744.555264][    C0]  shmem_write_begin+0x16c/0x330
[  744.555277][    C0]  generic_perform_write+0x2d5/0x8f0
[  744.555296][    C0]  ? __pfx_generic_perform_write+0x10/0x10
[  744.555310][    C0]  ? down_write+0x16d/0x200
[  744.555323][    C0]  ? generic_write_checks_count+0x41a/0x520
[  744.555343][    C0]  ? file_update_time_flags+0x3b3/0x4a0
[  744.555357][    C0]  shmem_file_write_iter+0xf8/0x120
[  744.555369][    C0]  __kernel_write_iter+0x44a/0x8f0
[  744.555380][    C0]  ? __pfx___kernel_write_iter+0x10/0x10
[  744.555389][    C0]  ? get_dump_page+0x1e6/0x410
[  744.555404][    C0]  ? __asan_memset+0x22/0x50
[  744.555418][    C0]  ? iov_iter_bvec+0xb8/0x180
[  744.555434][    C0]  dump_user_range+0xc19/0x12c0
[  744.555450][    C0]  ? __pfx_dump_user_range+0x10/0x10
[  744.555462][    C0]  ? elf_coredump_extra_notes_write+0x125/0x4b0
[  744.555475][    C0]  ? __pfx_elf_coredump_extra_notes_write+0x10/0x10
[  744.555489][    C0]  elf_core_dump+0x3485/0x3a90
[  744.555505][    C0]  ? __pfx_elf_core_dump+0x10/0x10
[  744.555516][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  744.555525][    C0]  ? __kvmalloc_node_noprof+0x520/0x890
[  744.555534][    C0]  ? coredump_write+0x394/0x1960
[  744.555545][    C0]  ? vfs_coredump+0x36ff/0x44c0
[  744.555554][    C0]  ? get_signal+0x1094/0x12c0
[  744.555569][    C0]  ? rcu_is_watching+0x15/0xb0
[  744.555581][    C0]  ? trace_irq_enable+0x3b/0x140
[  744.555604][    C0]  ? vfs_coredump+0x36ff/0x44c0
[  744.555613][    C0]  ? rcu_is_watching+0x15/0xb0
[  744.555624][    C0]  ? 0xffffffffff600000
[  744.555638][    C0]  coredump_write+0x1290/0x1960
[  744.555653][    C0]  ? __pfx_coredump_write+0x10/0x10
[  744.555664][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  744.555677][    C0]  ? put_files_struct+0x24f/0x350
[  744.555689][    C0]  ? do_raw_spin_unlock+0x4d/0x210
[  744.555701][    C0]  ? unshare_files+0x103/0x140
[  744.555711][    C0]  vfs_coredump+0x36ff/0x44c0
[  744.555721][    C0]  ? __pfx___schedule+0x10/0x10
[  744.555739][    C0]  ? __pfx_vfs_coredump+0x10/0x10
[  744.555751][    C0]  ? cmp_ex_search+0x1e/0x80
[  744.555761][    C0]  ? bsearch+0x91/0xc0
[  744.555778][    C0]  ? unwind_next_frame+0x8f/0x2550
[  744.555789][    C0]  ? rcu_is_watching+0x15/0xb0
[  744.555801][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  744.555812][    C0]  ? rcu_is_watching+0x15/0xb0
[  744.555823][    C0]  ? rcu_is_watching+0x15/0xb0
[  744.555833][    C0]  ? lock_release+0x4b/0x3c0
[  744.555842][    C0]  ? lock_release+0x4b/0x3c0
[  744.555852][    C0]  ? unwind_next_frame+0x8f/0x2550
[  744.555863][    C0]  ? rcu_is_watching+0x15/0xb0
[  744.555875][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  744.555885][    C0]  ? rcu_is_watching+0x15/0xb0
[  744.555896][    C0]  ? rcu_is_watching+0x15/0xb0
[  744.555906][    C0]  ? lock_release+0x4b/0x3c0
[  744.555914][    C0]  ? lock_release+0x4b/0x3c0
[  744.555924][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  744.555933][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  744.555944][    C0]  ? kernel_text_address+0xa5/0xe0
[  744.555956][    C0]  ? __kernel_text_address+0xd/0x30
[  744.555966][    C0]  ? unwind_get_return_address+0x4d/0x90
[  744.555977][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  744.555991][    C0]  ? arch_stack_walk+0xfb/0x150
[  744.556005][    C0]  ? stack_trace_save+0xa9/0x100
[  744.556018][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  744.556031][    C0]  ? stack_depot_save_flags+0x33/0x800
[  744.556043][    C0]  ? rcu_is_watching+0x15/0xb0
[  744.556052][    C0]  ? percpu_ref_get_many+0x19/0x140
[  744.556064][    C0]  ? kasan_save_track+0x4f/0x80
[  744.556078][    C0]  ? kasan_save_track+0x3e/0x80
[  744.556089][    C0]  ? kasan_save_free_info+0x40/0x50
[  744.556100][    C0]  ? __kasan_slab_free+0x5c/0x80
[  744.556107][    C0]  ? kmem_cache_free+0x182/0x650
[  744.556121][    C0]  ? get_signal+0x9e7/0x12c0
[  744.556132][    C0]  ? arch_do_signal_or_restart+0xbb/0x860
[  744.556148][    C0]  ? irqentry_exit+0x2ba/0x8f0
[  744.556156][    C0]  ? asm_exc_page_fault+0x26/0x30
[  744.556205][    C0]  ? proc_coredump_connector+0x187/0x4e0
[  744.556226][    C0]  ? trace_irq_enable+0x3b/0x140
[  744.556240][    C0]  get_signal+0x1094/0x12c0
[  744.556258][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  744.556273][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  744.556289][    C0]  ? rcu_is_watching+0x15/0xb0
[  744.556301][    C0]  irqentry_exit+0x2ba/0x8f0
[  744.556309][    C0]  ? trace_irq_disable+0x3b/0x140
[  744.556322][    C0]  asm_exc_page_fault+0x26/0x30
[  744.556331][    C0] RIP: 0033:0x2000000000
[  744.556368][    C0] Code: Unable to access opcode bytes at 0x1fffffffd6.
[  744.556374][    C0] RSP: 002b:0000200000000138 EFLAGS: 00010217
[  744.556386][    C0] RAX: 0000000000000000 RBX: 00007fca5fc15fa0 RCX: 00007fca5f99ce59
[  744.556394][    C0] RDX: 00002000000003c0 RSI: 0000200000000130 RDI: 0000000002000400
[  744.556401][    C0] RBP: 00007fca5fa32e6f R08: 0000200000000440 R09: 0000200000000440
[  744.556409][    C0] R10: 0000200000000400 R11: 0000000000000206 R12: 0000000000000000
[  744.556416][    C0] R13: 00007fca5fc16038 R14: 00007fca5fc15fa0 R15: 00007fff8fb79618
[  744.556428][    C0]  </TASK>
[  744.874251][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  744.877187][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  744.880767][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  744.885231][   T35] Call Trace:
[  744.886577][   T35]  <TASK>
[  744.887770][   T35]  vpanic+0x56c/0xa60
[  744.889405][   T35]  ? __pfx___schedule+0x10/0x10
[  744.891335][   T35]  ? __pfx_vpanic+0x10/0x10
[  744.893075][   T35]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  744.895547][   T35]  panic+0xc5/0xd0
[  744.897060][   T35]  ? __pfx_panic+0x10/0x10
[  744.898839][   T35]  ? preempt_schedule_common+0x82/0xd0
[  744.900979][   T35]  ? preempt_schedule_thunk+0x16/0x40
[  744.903053][   T35]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  744.905581][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  744.907997][   T35]  watchdog+0x1030/0x1030
[  744.909760][   T35]  ? watchdog+0x1c7/0x1030
[  744.911554][   T35]  kthread+0x388/0x470
[  744.913194][   T35]  ? __pfx_watchdog+0x10/0x10
[  744.915050][   T35]  ? __pfx_kthread+0x10/0x10
[  744.916976][   T35]  ret_from_fork+0x514/0xb70
[  744.918857][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  744.920918][   T35]  ? __switch_to+0xc89/0x1420
[  744.922751][   T35]  ? __pfx_kthread+0x10/0x10
[  744.925208][   T35]  ret_from_fork_asm+0x1a/0x30
[  744.927102][   T35]  </TASK>
[  744.929118][   T35] Kernel Offset: disabled
[  744.930869][   T35] Rebooting in 86400 seconds..
