last executing test programs:

993.709826ms ago: executing program 2 (id=994):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000001010400000000003a000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)

993.144244ms ago: executing program 2 (id=995):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'sit0\x00', 0x10})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xc, 0xffff}, {0x6}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x100, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r3, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xb01a97f884207f17}, 0x20040054)
r4 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x400)
shutdown(r4, 0x320989e66844190)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}})
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r7, 0x1, 0x2d, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[], 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00022abd7000fcdbdf5800000000000000000c410000000c001473787a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x744942de6e2f13e9}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000500)={0x1bc, 0x0, 0xa00, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0xffff}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1000}, @NL80211_ATTR_FRAME_MATCH={0xf1, 0x5b, "e4cc8223d241f7f99be25fee86877603a1f40870f74145eccbc326706872faa5fc0f2b5ef93272a2a0ccd097deb9cd26a090b7e14bced4fe1674400630a4bc3aaf7c5f7705c75e952c00b9e35245a8877c62f8044dd268294cc460ae077c2d5c6963bf6f1414749bf7290c3dbc0694936196b3216ba78540312465eac8f28967d364163e38b307813a48f836d3b1ccf601baebcff612540a9dd3d788253c56475826fe994821eaba62c758522010a3668469723ec96b82bfc9ef48dffb70cebb7353cb6afacb0f7bedd9d50f640296029061715731f5fb708ee6ca66ea176f8b10eeed34cf6a16f7807c57a0eb"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x87, 0x5b, "dd284a986102c755dc183aa6ff944fb8a4110152247eb26d8053351242a77fc2605f8acb3011e1a957e43a09fee7e513aefa55c46d7ae0584bcfe991639632d22fefe0bd5c57138f974f544fbdea1a0778b3fc5626d5805ab2300fb8ac149a691c0680413c60b4c4e4606359b4a5ce3fddef5e5a363ab5ead8941ba970e23af72df78f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9c5}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a00)={&(0x7f0000000780)="67134e5f1fe9007eb564734021f837e42868b84c980b1f78f2559e5896a36f5c1903d47b55d61dc91977518f9fef763e9be4641d21995cba8251462558eeeb610f5834ba5900b48a987ff514070f75fb32ff76079ca91e35d2d4a364261ed3bd9a5ff4de72248a707890a8b7ae0b18ae2ebee786e63a1b858237d8cc922a64ff4da27ebef3375f5f5a26db8f4fabaaa7a1a843a7c7326c5ae04f76f7597776f75b60fbbcfb7546161b4c8de1", &(0x7f00000006c0)=""/123, &(0x7f0000000840)="df7bd4c0cb88c12382305cb0c76116cd04105e98fabcc1e3009d40622038baef8d43d700ff8728bb38981870663e8d366520af6c76ae84a86f0c344ea31212288d3d4a30e191260435619f331485c977308ff98fd58a239fd0252afe9d67b49dac7d6e9c4016dd70e30bbd3a4b21f1e71f67389a551f3bad72d023d6d9dd9bff5cb986c442d15d7d45a4578534d503f16b7cdeb18d4c1b81260cebff81232ec21277e7d33d89cbaf889ca89bf4bc9a890c5410bfa2004a7eadd33b92d3", &(0x7f0000000900)="c8302f4958a2fb0c6ce1121675b3ae359fd73797040996daab23281dfa47bef8a3a01462c3e9bbc2cb65308d71f0c9c1dc15ccdcc405d4dcc98ab79ceab5e4cf900aebb88198717c7e4b555c6f805f6611844fdba12d6636d601580c416bbbc335af1593a1684b547d91b9f75d7d49994ebf86c12b431b265e203a7783742fa093240cd2d100f8675efdcaac5e99737c10e5475744cd731f7646b0320ca7c97d5b02c2d9870c793c5f15ecbe61ae7c2e19bf3b1f9dcbe25389528cbdbc00047c2d1e5dbb8586ac3b84337dc9df6751d8bb4e", 0x8, r0}, 0x38)
sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYRES16, @ANYRES8=r8, @ANYBLOB="000229bd7000fddbdf25030000000c00098008000200010000004400098008000200ff03000008000200b3de0000080001000900000008000100330600000800010000000000080001000200000008000200fb0100000800020000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40060}, 0x8844)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x40, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a804692a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8)
setsockopt$inet_tcp_int(r11, 0x6, 0x1, &(0x7f0000000040)=0x4000002, 0x4)

933.773665ms ago: executing program 2 (id=996):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x23, &(0x7f0000000c80), 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

932.922976ms ago: executing program 2 (id=997):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x90)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x140f, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x8, 0x1, 'drr\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x22000004)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14)

823.276429ms ago: executing program 2 (id=998):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@remote, @multicast2, 0x0, "0000004aef8555b7216fe75ebaa2845a422a8bf8ec7caf0037518045ffffffff", 0x0, 0x0, 0x9, 0xfffffffe}, 0xff23)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@multicast1, @private, 0x0, "6069177019716e31e2e0f1fc00", 0x9, 0xfffffffe, 0x3, 0xff}, 0x3c)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa3, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
socket$inet(0x2, 0x1, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@ipv4_getnetconf={0x54, 0x52, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x1ff}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5dec}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffc}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xc4}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x20009010}, 0x0)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x803, 0x6)

713.266811ms ago: executing program 2 (id=999):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0xb0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x30, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
r8 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='b 0:* r'], 0xa)
close(0x3)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x24040000}, 0xe2a52494d6a4af8c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000440)={0x3c, 0x33, '\x00', [@ra={0x5, 0x2, 0x400}, @jumbo={0xc2, 0x4, 0x73e}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x38, {0x0, 0xc, 0x3, 0x0, [0x0, 0x1, 0x2, 0x5c, 0xffffffff00000000, 0x0]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x50, {0x2, 0x12, 0x5, 0x2a, [0x0, 0xe7, 0x10, 0x6, 0x8, 0x3, 0x62, 0x8000, 0xff]}}, @generic={0x5, 0xf0, "0320c048731d752c248be418f318a03fe4037a01ff81c6bd771b79c1e90cba4b93260c8cd97e936a501da809418e17df73cf71e6de840be3fe10400f6c877be484e76ac0abf62d3fdaae5f44013e3ffff430a135180748fc5cbfe64e7e2fec4b8f574f55e9676d4c38fdf37f37c26f69ede6dfad377e7445cc956e7bcb757cd604f27ed90cfcc1881e2c629cec064fb1debbd8d5e959c2bc3eb907d963ade003cf97bd8677ee6f99da50c94a76cbc1ea3a6700e3c48c7cef9b57b614dc6dbada808efe376d6a2c1dd5bfa0f37b436bdbf0eeceae01d5cf2c5dad158bd6b9fe0162f921b678a7aa03cf264eb2c4909188"}]}, 0x1a8)
splice(r3, 0x0, r4, 0x0, 0x1, 0x0)
vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)="7f", 0x1}, {&(0x7f0000001300)="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", 0xd01}, {&(0x7f00000002c0)="40288f34bcf7367c6993649e41118758375f199400b0a9755e1b624228bf7072cae3c38479baec", 0x27}, {&(0x7f0000000440)="155332af", 0x4}, {&(0x7f0000002040)="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", 0xfc1}], 0x6, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0)
connect$rxrpc(r4, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @private2, 0x5d86a644}}, 0x24)

540.360101ms ago: executing program 0 (id=1000):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="0c000000010001", 0x7)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
socket$unix(0x1, 0x1, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
accept4(r9, &(0x7f0000000140)=@nfc_llcp, &(0x7f0000000340)=0x80, 0x0)

438.240138ms ago: executing program 1 (id=1003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00', <r1=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080800000100000080000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000010000000000000000000000000000001700000000000000"], 0x50)

333.987781ms ago: executing program 1 (id=1004):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040), 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000180)={0x1}, 0x8)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x24040800}, 0x40044)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$netlink(0x10, 0x3, 0xb)
writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000000000000000", 0x58}], 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4a}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="58f76b8f1d400000975b4916f9edfadf84e76c35", @ANYRES32=r6, @ANYBLOB="00000000000000002000128008000100736974001400028006001000018000000800140008000000"], 0x40}}, 0x0)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r6, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x1c, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x8, 0x1, 0x7, 0x50, 0x14}, @alu={0x4, 0x0, 0x8, 0x8, 0x9, 0x18, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x916, 0x45, &(0x7f0000000500)=""/69, 0x40f00, 0x1, '\x00', r6, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x8, 0x9, 0xda0}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000840)=[{0x1, 0x4, 0xa, 0x8}, {0x3, 0x3, 0xf, 0xd}, {0x0, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x10, 0xa}], 0x10, 0xf}, 0x94)
r12 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r12, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000040)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001980)={{r10}, &(0x7f00000001c0), &(0x7f0000000940)=r11}, 0x20)
r13 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r13, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0xfe, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r13, &(0x7f0000000440), 0x0, 0x0, 0x0)
sendmmsg(r13, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$ax25_SO_BINDTODEVICE(r13, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10)

310.896889ms ago: executing program 0 (id=1005):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0) (async, rerun: 64)
writev(r0, 0x0, 0x0) (async, rerun: 64)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x40001023, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x50}}, 0x0) (async)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0)
sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xfdf6}}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10)
r7 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000)
setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000240)=0x1ff, 0x4) (async, rerun: 64)
r8 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000400)=0x2)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) (async, rerun: 32)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r10)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, 0x0, &(0x7f0000000100)=0x5a)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) (async, rerun: 64)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r10) (rerun: 64)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

222.930805ms ago: executing program 1 (id=1006):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001580)={@cgroup, 0xffffffffffffffff, 0x1a, 0x3}, 0x20) (async)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$bt_rfcomm(r1, &(0x7f000000d400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xad}, 0xfffffffffffffe3f) (async)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, r4, 0x813, 0x4, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0xba01}, 0x810) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000200)={0x1, 0xc, 0x82, &(0x7f0000000340)=""/130}) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7, 0x10, 0x2653, 0x6}, &(0x7f00000001c0)=0x18) (async)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r7, &(0x7f0000000400)="3b50efc52ef24bebedeef89d95d18a0be7f7f7280daf4322835d39da8a41c2c98ae81a2b01626f8d0d20703b15a938a6d09eac1571f8f9f93e5f8fb401d6d485a7f310b87433372dec5b3c726703", &(0x7f00000005c0)=@buf="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", 0x2}, 0x20) (async)
sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
sendmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r3], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) (async)
close(r6)

219.02317ms ago: executing program 1 (id=1007):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r5=>0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000100))
sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000229bd7000fbdbdf251b00000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="06000200000000000800"/24], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="850000006c0000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)

102.879901ms ago: executing program 0 (id=1008):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000001010400000000ff88000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)

102.063705ms ago: executing program 1 (id=1009):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x24, 0x1, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x24}}, 0x44080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', <r4=>0x0, 0x2f, 0xc, 0x2, 0x7, 0x1c, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8000, 0x1, 0x6, 0x80000001}})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000740)={<r5=>r2, 0x7, 0x2, 0x1})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="09000100020000000400000000000005cc00000000e100"], 0x50)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xa, &(0x7f00000004c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc5d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0xd, 0x8, 0x9, 0x0, 0x4}], &(0x7f0000000380)='GPL\x00', 0x40, 0xf1, &(0x7f0000000640)=""/241, 0x41000, 0x35, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000780)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xf, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000980)=[r6, 0x1, r7, r8], &(0x7f00000009c0)=[{0x3, 0x2, 0x0, 0x8}, {0x0, 0x4, 0x5, 0x7}, {0x0, 0x3, 0x2, 0xa}, {0x5, 0x1, 0x10, 0x2}], 0x10, 0x400}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18)
r9 = socket$inet6(0xa, 0x3, 0x3c)
write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x3a, 0x2c, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d}], "d533"}}}}}}, 0x70)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xfdef}], 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="0c00018008000100"], 0x24}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)

98.663288ms ago: executing program 0 (id=1010):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x7}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x1}, @IFLA_GRE_LOCAL={0x8, 0x6, @broadcast}]}}}]}, 0x50}}, 0x0)

1.615514ms ago: executing program 0 (id=1011):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00', <r1=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080800000100000080000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000010000000000000000000000000000001800000000000000"], 0x50)

770.097µs ago: executing program 1 (id=1012):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@remote, 0x400, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="14f9ffff0f00010000000000000000000000000a54000000060609040000000000000000020000040900020073797a32000000000900010073f052c4f75f7468647200001400028008000540000000010800064000000001140000001100010000000000000000000000000a"], 0x7c}}, 0x0)

0s ago: executing program 0 (id=1013):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r1}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2}, 0x40)
syz_emit_ethernet(0x66, &(0x7f0000001880)={@broadcast, @random, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x22, 0x58, 0x66, 0x0, 0xe0, 0x2f, 0x0, @local, @local}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0xc, 0x1, 0x80, 0x3, 0x1, 0x0, 0x3, 0x9}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x1, 0x3, 0x1, 0x0, 0x3, 0x4}, 0x2, {0x7, 0x1, 0x0, 0x5, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000001e000505000000000000000007002b0046c8a600714a616b7e1794997ebc81226fc04bc5cb20db59ce74882c00223f7bf762b2ed32daf85097489a8516e0d9134ff3a78c354003a78a545fccf6802db9be6f6287153777ef47baa3b55b0ac30298aca1ecceadf9a5040dd33331d290c847097f08d6932f62854c9b"], 0x18}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47900' (ED25519) to the list of known hosts.
syzkaller login: [   56.694387][ T5819] cgroup: Unknown subsys name 'net'
[   56.804494][ T5819] cgroup: Unknown subsys name 'cpuset'
[   56.811808][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.020765][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.625303][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.628368][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.638589][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.643736][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.644157][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.649521][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.652457][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.655218][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.659132][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.661726][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.664588][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.670303][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.683385][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.687294][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.691237][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.943789][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   65.118503][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   65.125665][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.129347][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.132871][ T5852] bridge_slave_0: entered allmulticast mode
[   65.136751][ T5852] bridge_slave_0: entered promiscuous mode
[   65.146191][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.149074][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.152217][ T5852] bridge_slave_1: entered allmulticast mode
[   65.156032][ T5852] bridge_slave_1: entered promiscuous mode
[   65.172851][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   65.228666][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.248325][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.320406][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.323091][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.325419][ T5853] bridge_slave_0: entered allmulticast mode
[   65.328207][ T5853] bridge_slave_0: entered promiscuous mode
[   65.340744][ T5852] team0: Port device team_slave_0 added
[   65.344999][ T5852] team0: Port device team_slave_1 added
[   65.347461][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.349886][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.352990][ T5853] bridge_slave_1: entered allmulticast mode
[   65.355826][ T5853] bridge_slave_1: entered promiscuous mode
[   65.423977][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.426777][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.430723][ T5851] bridge_slave_0: entered allmulticast mode
[   65.435073][ T5851] bridge_slave_0: entered promiscuous mode
[   65.440005][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.442496][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.445342][ T5851] bridge_slave_1: entered allmulticast mode
[   65.448266][ T5851] bridge_slave_1: entered promiscuous mode
[   65.451669][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.454454][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.463813][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.471354][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.474722][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.477457][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.487806][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.512652][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.524847][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.530584][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.575180][ T5851] team0: Port device team_slave_0 added
[   65.578763][ T5851] team0: Port device team_slave_1 added
[   65.627256][ T5853] team0: Port device team_slave_0 added
[   65.637978][ T5852] hsr_slave_0: entered promiscuous mode
[   65.641456][ T5852] hsr_slave_1: entered promiscuous mode
[   65.645241][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.648089][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.658327][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.664960][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.667786][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.679128][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.685997][ T5853] team0: Port device team_slave_1 added
[   65.745431][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.747645][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.756818][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.762189][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.765003][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.774244][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.851139][ T5851] hsr_slave_0: entered promiscuous mode
[   65.854556][ T5851] hsr_slave_1: entered promiscuous mode
[   65.857701][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   65.861184][ T5851] Cannot create hsr debugfs directory
[   65.937412][ T5853] hsr_slave_0: entered promiscuous mode
[   65.942625][ T5853] hsr_slave_1: entered promiscuous mode
[   65.944755][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   65.946531][ T5853] Cannot create hsr debugfs directory
[   66.216373][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.241081][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.260188][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.278060][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.321374][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.342368][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.362404][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.390177][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.436478][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.447125][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.460778][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.468107][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.583514][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.613178][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.625149][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   66.641716][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.644895][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.665379][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   66.678794][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.681552][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.692730][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.707948][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.710852][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.728598][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.731676][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.750486][ T5860] Bluetooth: hci2: command tx timeout
[   66.760312][   T54] Bluetooth: hci0: command tx timeout
[   66.762764][ T5860] Bluetooth: hci1: command tx timeout
[   66.782755][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   66.812229][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.814915][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.840088][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.842947][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.923032][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.038475][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.058264][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.101575][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.132626][ T5851] veth0_vlan: entered promiscuous mode
[   67.161676][ T5851] veth1_vlan: entered promiscuous mode
[   67.174040][ T5852] veth0_vlan: entered promiscuous mode
[   67.195112][ T5852] veth1_vlan: entered promiscuous mode
[   67.202073][ T5853] veth0_vlan: entered promiscuous mode
[   67.216549][ T5851] veth0_macvtap: entered promiscuous mode
[   67.231703][ T5853] veth1_vlan: entered promiscuous mode
[   67.236113][ T5851] veth1_macvtap: entered promiscuous mode
[   67.246573][ T5852] veth0_macvtap: entered promiscuous mode
[   67.264865][ T5852] veth1_macvtap: entered promiscuous mode
[   67.271003][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.285735][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.308977][ T5885] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.314575][ T5885] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.324881][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.334485][ T5885] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.348231][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.352271][ T5885] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.374961][ T5853] veth0_macvtap: entered promiscuous mode
[   67.388562][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.399977][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.403440][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.411568][ T5853] veth1_macvtap: entered promiscuous mode
[   67.415106][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.485603][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.523876][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.526401][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.529928][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.580159][ T5885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.580474][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.586654][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.599336][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.605525][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.622689][ T5886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.626940][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.634381][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.643976][ T5886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.671021][ T5886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.738136][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.750322][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.759302][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.803130][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.805964][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.894766][ T5924] Zero length message leads to an empty skb
[   67.968603][ T5929] netlink: 'syz.1.5': attribute type 7 has an invalid length.
[   67.972387][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'.
[   68.295736][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'.
[   68.421880][ T5950] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET)
[   68.506285][ T5957] tipc: Started in network mode
[   68.508004][ T5957] tipc: Node identity 82747c2bbb4d, cluster identity 4711
[   68.512126][ T5957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.518674][ T5957] syzkaller0: entered promiscuous mode
[   68.533954][ T5959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12'.
[   68.539972][ T5957] syzkaller0: entered allmulticast mode
[   68.542951][ T5959] netlink: 108 bytes leftover after parsing attributes in process `syz.0.12'.
[   68.553150][ T5959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12'.
[   68.562489][ T5957] tipc: Resetting bearer <eth:syzkaller0>
[   68.571547][ T5956] tipc: Resetting bearer <eth:syzkaller0>
[   68.581681][ T5956] tipc: Disabling bearer <eth:syzkaller0>
[   68.597533][ T5961] bridge1: the hash_elasticity option has been deprecated and is always 16
[   68.602256][ T5961] bridge1: entered allmulticast mode
[   68.663855][ T5966] netlink: 'syz.2.15': attribute type 10 has an invalid length.
[   68.697839][ T5966] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   68.816744][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'.
[   68.831388][ T5860] Bluetooth: hci1: command tx timeout
[   68.833681][ T5860] Bluetooth: hci0: command tx timeout
[   68.836670][   T54] Bluetooth: hci2: command tx timeout
[   68.843747][ T5976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.886408][ T5974] pim6reg: entered allmulticast mode
[   68.889106][ T5977] pim6reg: left allmulticast mode
[   68.943728][ T5979] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19'.
[   68.986642][   T33] audit: type=1800 audit(1756901505.567:2): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19" name="blkio.bfq.time_recursive" dev="tmpfs" ino=35 res=0 errno=0
[   69.115488][ T5983] netlink: 864 bytes leftover after parsing attributes in process `syz.2.20'.
[   69.228603][ T5996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.256216][ T5996] syzkaller0: entered promiscuous mode
[   69.258094][ T5996] syzkaller0: entered allmulticast mode
[   69.270850][ T5996] tipc: Resetting bearer <eth:syzkaller0>
[   69.305880][ T5998] Bluetooth: MGMT ver 1.23
[   70.027343][ T5995] tipc: Resetting bearer <eth:syzkaller0>
[   70.082930][ T5995] tipc: Disabling bearer <eth:syzkaller0>
[   70.585507][ T6036] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.631320][ T6039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31'.
[   70.697278][ T6043] syzkaller1: entered promiscuous mode
[   70.703188][ T6043] syzkaller1: entered allmulticast mode
[   70.918577][ T5860] Bluetooth: hci2: command tx timeout
[   70.921161][ T5860] Bluetooth: hci1: command tx timeout
[   71.057011][ T6076] netlink: 'syz.0.38': attribute type 2 has an invalid length.
[   71.118821][ T6077] netlink: 92 bytes leftover after parsing attributes in process `syz.0.38'.
[   71.314025][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[   71.316278][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[   71.771730][ T6167] netlink: 'syz.1.46': attribute type 32 has an invalid length.
[   71.797542][ T6169] netlink: 'syz.1.46': attribute type 1 has an invalid length.
[   71.807026][ T6169] netlink: 'syz.1.46': attribute type 2 has an invalid length.
[   71.835465][ T6166] openvswitch: netlink: Unknown key attributes 2
[   72.103992][ T6195] netlink: 'syz.2.53': attribute type 1 has an invalid length.
[   72.131234][ T6189] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   72.187384][ T6191] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   72.284428][ T6198] syz_tun: entered allmulticast mode
[   72.312122][ T6197] syz_tun: left allmulticast mode
[   72.361601][ T6210] netlink: 'syz.0.56': attribute type 1 has an invalid length.
[   72.587238][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.590576][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.647585][ T6229] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   72.657482][    T9] IPVS: starting estimator thread 0...
[   72.695184][ T6235] netlink: 'syz.1.63': attribute type 1 has an invalid length.
[   72.697728][ T6235] netlink: 'syz.1.63': attribute type 2 has an invalid length.
[   72.728589][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.746347][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.750775][ T6233] IPVS: using max 64 ests per chain, 153600 per kthread
[   72.844182][ T6219] bridge1: left allmulticast mode
[   72.867415][ T5681] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.871770][ T5681] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.874765][ T5681] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.877658][ T5681] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.991448][ T5864] Bluetooth: hci1: command tx timeout
[   72.991467][ T5860] Bluetooth: hci2: command tx timeout
[   73.048568][ T6257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.053159][ T6256] syzkaller0: entered promiscuous mode
[   73.054873][ T6256] syzkaller0: entered allmulticast mode
[   73.082710][ T6256] tipc: Resetting bearer <eth:syzkaller0>
[   73.093425][ T6255] tipc: Resetting bearer <eth:syzkaller0>
[   73.102139][ T6255] tipc: Disabling bearer <eth:syzkaller0>
[   73.116301][ T6262] syzkaller1: entered promiscuous mode
[   73.118001][ T6262] syzkaller1: entered allmulticast mode
[   73.224439][ T6270] validate_nla: 1 callbacks suppressed
[   73.224471][ T6270] netlink: 'syz.1.71': attribute type 4 has an invalid length.
[   73.281007][ T6273] __nla_validate_parse: 17 callbacks suppressed
[   73.281018][ T6273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.72'.
[   73.318781][ T6276] netlink: 'syz.2.73': attribute type 4 has an invalid length.
[   73.432951][ T6287] syzkaller1: entered promiscuous mode
[   73.435721][ T6287] syzkaller1: entered allmulticast mode
[   73.443191][ T6286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.460986][ T6286] syzkaller0: entered promiscuous mode
[   73.462929][ T6286] syzkaller0: entered allmulticast mode
[   73.481638][ T6290] can: request_module (can-proto-0) failed.
[   73.488448][ T6286] tipc: Resetting bearer <eth:syzkaller0>
[   73.506993][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'.
[   73.516516][ T6284] tipc: Resetting bearer <eth:syzkaller0>
[   73.529564][ T6284] tipc: Disabling bearer <eth:syzkaller0>
[   73.609109][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'.
[   73.866071][ T6311] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.886676][ T6311] bond_slave_0: entered promiscuous mode
[   73.888654][ T6311] bond_slave_1: entered promiscuous mode
[   73.897653][ T6311] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   73.901985][ T6311] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   73.910145][ T6311] bridge_slave_0: left allmulticast mode
[   73.911896][ T6311] bridge_slave_0: left promiscuous mode
[   73.913874][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.938215][ T6320] netlink: 'syz.0.80': attribute type 12 has an invalid length.
[   74.091992][ T6311] bridge_slave_1: left allmulticast mode
[   74.094169][ T6311] bridge_slave_1: left promiscuous mode
[   74.098172][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.111058][ T6311] bond0: (slave bond_slave_0): Releasing backup interface
[   74.114493][ T6311] bond_slave_0: left promiscuous mode
[   74.131530][ T6311] bond0: (slave bond_slave_1): Releasing backup interface
[   74.137375][ T6311] bond_slave_1: left promiscuous mode
[   74.147331][ T6311] team0: Port device team_slave_0 removed
[   74.155375][ T6311] team0: Port device team_slave_1 removed
[   74.158339][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.161489][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.165797][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.168730][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.181188][ T6311] bond1: (slave macvlan2): Removing an active aggregator
[   74.184626][ T6311] bond1: (slave macvlan2): Releasing backup interface
[   74.249002][ T6325] netlink: 'syz.2.83': attribute type 1 has an invalid length.
[   74.256475][ T6325] netlink: 224 bytes leftover after parsing attributes in process `syz.2.83'.
[   74.444238][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'.
[   74.488680][  T792] IPVS: starting estimator thread 0...
[   74.496915][ T6344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.613620][ T6349] IPVS: using max 64 ests per chain, 153600 per kthread
[   74.692638][ T6360] ipvlan2: entered promiscuous mode
[   74.698613][ T6360] bridge0: port 3(ipvlan2) entered blocking state
[   74.702779][ T6360] bridge0: port 3(ipvlan2) entered disabled state
[   74.706672][ T6360] ipvlan2: entered allmulticast mode
[   74.716021][ T6360] erspan0: entered allmulticast mode
[   74.720294][ T6360] ipvlan2: left allmulticast mode
[   74.722116][ T6360] erspan0: left allmulticast mode
[   74.823852][ T6377] netlink: 'syz.0.98': attribute type 2 has an invalid length.
[   74.826688][ T6377] netlink: 'syz.0.98': attribute type 8 has an invalid length.
[   74.832243][ T6377] netlink: 132 bytes leftover after parsing attributes in process `syz.0.98'.
[   74.892660][ T6382] netlink: 'syz.2.99': attribute type 13 has an invalid length.
[   74.895148][ T6382] netlink: 'syz.2.99': attribute type 17 has an invalid length.
[   74.971326][ T6388] IPVS: Scheduler module ip_vs_sip not found
[   74.984676][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.988084][ T6382] 8021q: adding VLAN 0 to HW filter on device team0
[   74.995684][ T6382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.007755][ T6387] xfrm0: entered promiscuous mode
[   75.017927][ T6387] xfrm0: entered allmulticast mode
[   75.023560][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'.
[   75.173257][ T6382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.276109][ T6375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.442004][ T6413] netlink: 'syz.1.112': attribute type 3 has an invalid length.
[   75.445512][ T6413] netlink: 'syz.1.112': attribute type 3 has an invalid length.
[   75.536140][ T6421] netlink: 88 bytes leftover after parsing attributes in process `syz.0.113'.
[   75.708148][ T6429] syzkaller1: entered promiscuous mode
[   75.713282][ T6429] syzkaller1: entered allmulticast mode
[   75.989014][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'.
[   75.995418][ T6440] netlink: 15 bytes leftover after parsing attributes in process `syz.2.120'.
[   76.289710][ T6448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.411682][ T6449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.768423][ T6477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.862428][ T6477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.925031][ T6477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.008372][ T6477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.122713][ T5886] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.133171][ T5886] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.144639][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.163956][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.214117][ T6517] trusted_key: syz.1.142 sent an empty control message without MSG_MORE.
[   77.221341][ T6517] syzkaller1: entered allmulticast mode
[   77.229206][ T6517] (unnamed net_device) (uninitialized): up delay (13) is not a multiple of miimon (2279), value rounded to 0 ms
[   77.237718][ T6517] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[   77.243849][ T6518] (unnamed net_device) (uninitialized): up delay (13) is not a multiple of miimon (2279), value rounded to 0 ms
[   77.249099][ T6518] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[   77.386632][ T6532] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001
[   77.446737][ T6535] raw_sendmsg: syz.1.145 forgot to set AF_INET. Fix it!
[   77.567427][ T6540] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   77.573726][ T6540] warning: `syz.0.147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.594554][ T6540] bridge_slave_0: left allmulticast mode
[   77.596563][ T6540] bridge_slave_0: left promiscuous mode
[   77.598512][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.607723][ T6540] bridge_slave_1: left allmulticast mode
[   77.612095][ T6540] bridge_slave_1: left promiscuous mode
[   77.614678][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.626118][ T6540] bond0: (slave bond_slave_0): Releasing backup interface
[   77.636904][ T6540] bond0: (slave bond_slave_1): Releasing backup interface
[   77.652760][ T6540] team0: Port device team_slave_0 removed
[   77.660957][ T6540] team0: Port device team_slave_1 removed
[   77.663348][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.665818][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.670284][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.673233][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.702713][ T6540] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   77.708374][ T6540] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.717466][ T6540] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   77.999263][   T10] cfg80211: failed to load regulatory.db
[   78.068842][ T6545] team0: Device vti0 is up. Set it down before adding it as a team port
[   78.260164][ T6558] openvswitch: netlink: IPv4 tun info is not correct
[   78.267828][ T6559] validate_nla: 8 callbacks suppressed
[   78.267839][ T6559] netlink: 'syz.1.154': attribute type 18 has an invalid length.
[   78.346193][ T6564] __nla_validate_parse: 16 callbacks suppressed
[   78.346204][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.156'.
[   78.358604][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.156'.
[   78.551043][ T6578] syzkaller1: entered promiscuous mode
[   78.553240][ T6578] syzkaller1: entered allmulticast mode
[   78.589092][ T6581] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.160'.
[   78.713130][ T6583] syz.1.161 (6583) used greatest stack depth: 19224 bytes left
[   78.944425][ T6599] netlink: 'syz.2.166': attribute type 3 has an invalid length.
[   78.946809][ T6599] netlink: 'syz.2.166': attribute type 1 has an invalid length.
[   78.953550][ T6599] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.166'.
[   78.978133][ T6601] bridge2: entered promiscuous mode
[   79.784669][ T6607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'.
[   79.787939][ T6607] netlink: 'syz.2.169': attribute type 7 has an invalid length.
[   79.792122][ T6607] netlink: 'syz.2.169': attribute type 8 has an invalid length.
[   79.795022][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'.
[   79.876833][ T6609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.170'.
[   79.883757][ T6611] netlink: 'syz.2.170': attribute type 3 has an invalid length.
[   79.932433][ T6616] delete_channel: no stack
[   80.063094][ T6628] syzkaller1: entered promiscuous mode
[   80.065207][ T6628] syzkaller1: entered allmulticast mode
[   80.071711][ T6628] netlink: 'syz.2.177': attribute type 1 has an invalid length.
[   80.107302][ T6628] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.131842][ T6628] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.138097][ T6628] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   80.145142][ T6628] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   80.177912][ T6637] bond1: (slave bridge2): Enslaving as an active interface with a down link
[   80.303252][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.183'.
[   80.791583][ T6665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.190'.
[   80.920067][ T6678] syzkaller1: entered promiscuous mode
[   80.922420][ T6678] syzkaller1: entered allmulticast mode
[   81.084905][ T6694] netlink: 'syz.2.200': attribute type 58 has an invalid length.
[   81.088867][ T6693] netlink: 'syz.0.201': attribute type 1 has an invalid length.
[   81.093032][ T6693] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.201'.
[   81.144249][   T56] block nbd0: Receive control failed (result -107)
[   81.190548][ T6697] nbd0: detected capacity change from 0 to 32
[   81.195852][ T5863] block nbd0: Dead connection, failed to find a fallback
[   81.198417][ T5863] block nbd0: shutting down sockets
[   81.205133][ T5863] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.209008][ T5863] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.218000][ T5863] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.227880][ T5863] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.233067][ T5863] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.236516][ T5863] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.240640][ T5863] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.243472][ T5863] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.246089][ T5863] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.249156][ T5863] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.252492][ T5863] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.255549][ T5863] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.258796][ T5863] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.258901][ T6702] netlink: 'syz.0.203': attribute type 1 has an invalid length.
[   81.262806][ T5863] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.268116][ T5863] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.272736][ T5863] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.275875][ T5863] ldm_validate_partition_table(): Disk read failed.
[   81.278574][ T5863] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.282818][ T5863] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.286736][ T5863] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.290684][ T5863] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.293966][ T5863] Dev nbd0: unable to read RDB block 0
[   81.296691][ T5863]  nbd0: unable to read partition table
[   81.304997][ T5863] ldm_validate_partition_table(): Disk read failed.
[   81.308654][ T5863] Dev nbd0: unable to read RDB block 0
[   81.312608][ T5863]  nbd0: unable to read partition table
[   81.327537][ T6702] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.489349][ T6733] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:21
[   81.674217][ T6747] xt_policy: too many policy elements
[   81.888459][ T6759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.576515][ T6789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.704120][ T6796] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[   82.769637][ T6792] sctp: [Deprecated]: syz.0.225 (pid 6792) Use of int in maxseg socket option.
[   82.769637][ T6792] Use struct sctp_assoc_value instead
[   82.885700][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.156225][ T6813] netlink: 'syz.2.230': attribute type 11 has an invalid length.
[   83.540103][ T6828] __nla_validate_parse: 12 callbacks suppressed
[   83.540118][ T6828] netlink: 27 bytes leftover after parsing attributes in process `syz.0.234'.
[   83.590117][ T6828] syzkaller1: entered promiscuous mode
[   83.592270][ T6828] syzkaller1: entered allmulticast mode
[   83.607815][ T6829] validate_nla: 8 callbacks suppressed
[   83.607826][ T6829] netlink: 'syz.2.232': attribute type 12 has an invalid length.
[   83.908891][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'.
[   84.276370][ T6849] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   84.285699][ T6849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.288114][ T6849] IPv6: NLM_F_CREATE should be set when creating new route
[   84.291002][ T6849] IPv6: NLM_F_CREATE should be set when creating new route
[   84.295854][ T6849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.451431][ T6852] bridge_slave_0: left allmulticast mode
[   84.459621][ T6852] bridge_slave_0: left promiscuous mode
[   84.461534][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.472857][ T6852] bridge_slave_1: left allmulticast mode
[   84.475325][ T6852] bridge_slave_1: left promiscuous mode
[   84.477903][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.485514][ T6852] bond0: (slave bond_slave_0): Releasing backup interface
[   84.493885][ T6852] bond0: (slave bond_slave_1): Releasing backup interface
[   84.503230][ T6852] team0: Port device team_slave_0 removed
[   84.506595][ T6852] team0: Port device team_slave_1 removed
[   84.508717][ T6852] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.518151][ T6852] bond0: (slave wlan1): Releasing backup interface
[   84.524060][ T6852] bond1: (slave bridge2): Releasing active interface
[   84.963836][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'.
[   85.457349][ T6892] dvmrp0: entered allmulticast mode
[   85.463643][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.250'.
[   85.535417][ T6897] openvswitch: netlink: VXLAN extension message has 10 unknown bytes.
[   85.592652][ T6901] tipc: Started in network mode
[   85.594881][ T6901] tipc: Node identity 080211000001, cluster identity 4711
[   85.598086][ T6901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.604540][ T6901] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   85.607728][ T6901] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   85.613274][ T6901] tipc: Resetting bearer <eth:syzkaller0>
[   85.622842][ T6901] tipc: Resetting bearer <eth:syzkaller0>
[   85.688931][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.256'.
[   85.735691][ T6910] netlink: 'syz.2.257': attribute type 6 has an invalid length.
[   85.753358][ T6910] netlink: 'syz.2.257': attribute type 12 has an invalid length.
[   85.756446][ T6910] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.257'.
[   85.795728][ T6912] netlink: 'syz.0.258': attribute type 11 has an invalid length.
[   85.976920][   T33] audit: type=1804 audit(1756901522.557:3): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.265" name="/newroot/90/cgroup.controllers" dev="tmpfs" ino=474 res=1 errno=0
[   85.986330][ T6928] netlink: 'syz.2.263': attribute type 29 has an invalid length.
[   85.996222][   T33] audit: type=1800 audit(1756901522.577:4): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.265" name="cgroup.controllers" dev="tmpfs" ino=474 res=0 errno=0
[   86.005536][ T6933] syzkaller1: entered promiscuous mode
[   86.007611][ T6933] syzkaller1: entered allmulticast mode
[   86.012546][   T33] audit: type=1800 audit(1756901522.577:5): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.265" name="cgroup.controllers" dev="tmpfs" ino=474 res=0 errno=0
[   86.043941][ T6935] netlink: 'syz.1.267': attribute type 11 has an invalid length.
[   86.103148][ T6941] netlink: 'syz.0.269': attribute type 2 has an invalid length.
[   86.144023][ T6941] netlink: 92 bytes leftover after parsing attributes in process `syz.0.269'.
[   86.286645][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'.
[   86.326977][ T6962] netlink: 'syz.0.274': attribute type 1 has an invalid length.
[   86.330206][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'.
[   86.442585][ T6967] syzkaller1: entered promiscuous mode
[   86.444341][ T6967] syzkaller1: entered allmulticast mode
[   86.548761][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'.
[   86.564793][ T5885] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.568907][ T5885] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.575678][ T5885] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.578580][ T5885] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.620147][  T792] tipc: Node number set to 134418688
[   86.649958][ T6976] pimreg3: entered allmulticast mode
[   86.945221][ T6997] netlink: 'syz.2.284': attribute type 21 has an invalid length.
[   86.946066][ T6998] netlink: 'syz.2.284': attribute type 21 has an invalid length.
[   87.147532][ T7009] netlink: 'syz.2.287': attribute type 12 has an invalid length.
[   87.454551][ T7016] bridge2: left promiscuous mode
[   87.471467][ T5885] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.479630][ T5885] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.483220][ T5885] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.487139][ T5885] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.928878][ T7056] macvlan2: entered promiscuous mode
[   87.931628][ T7056] vlan0: entered promiscuous mode
[   88.249170][ T7068] syzkaller1: entered promiscuous mode
[   88.251049][ T7068] syzkaller1: entered allmulticast mode
[   88.697529][ T7086] __nla_validate_parse: 6 callbacks suppressed
[   88.697545][ T7086] netlink: 704 bytes leftover after parsing attributes in process `syz.0.308'.
[   89.266904][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'.
[   89.389011][ T7108] syzkaller0: entered promiscuous mode
[   89.392353][ T7108] syzkaller0: entered allmulticast mode
[   89.407427][ T7123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.318'.
[   89.634320][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'.
[   89.640296][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.318'.
[   89.648101][ T7123] netlink: 'syz.1.318': attribute type 13 has an invalid length.
[   89.659582][ T7123] netlink: 'syz.1.318': attribute type 17 has an invalid length.
[   89.678371][ T7123] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   90.104916][ T7154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.326'.
[   90.107875][ T7154] netlink: 216 bytes leftover after parsing attributes in process `syz.1.326'.
[   90.229651][ T7157] netlink: 'syz.0.327': attribute type 1 has an invalid length.
[   90.232124][ T7157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.327'.
[   90.345217][ T7163] syzkaller0: entered promiscuous mode
[   90.347777][ T7163] syzkaller0: entered allmulticast mode
[   90.703971][ T7174] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.331'.
[   90.822430][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.331'.
[   91.918051][ T7200] netlink: 'syz.2.335': attribute type 4 has an invalid length.
[   92.045021][ T7197] syzkaller0: entered promiscuous mode
[   92.046849][ T7197] syzkaller0: entered allmulticast mode
[   93.254542][ T7216] netlink: 'syz.2.342': attribute type 4 has an invalid length.
[   93.638253][ T7240] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   93.646417][ T7240] Bluetooth: MGMT ver 1.23
[   93.835108][ T7251] netlink: 'syz.2.351': attribute type 11 has an invalid length.
[   93.871949][ T7253] __nla_validate_parse: 4 callbacks suppressed
[   93.871961][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'.
[   93.885998][ T7253] openvswitch: netlink: Missing key (keys=40, expected=80)
[   93.892762][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'.
[   93.963269][ T7259] netlink: 84 bytes leftover after parsing attributes in process `syz.1.353'.
[   94.047510][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'.
[   94.166282][ T7274] netlink: 'syz.0.358': attribute type 11 has an invalid length.
[   94.166975][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'.
[   94.231423][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'.
[   94.367680][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'.
[   94.374861][ T7286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.362'.
[   94.498037][ T7291] netlink: 'syz.2.363': attribute type 6 has an invalid length.
[   94.752789][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'.
[   94.756469][ T7313] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   94.772054][ T7313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.791711][ T7317] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.798848][ T7317] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   94.813357][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'.
[   94.947414][ T7330] netlink: 'syz.2.371': attribute type 10 has an invalid length.
[   95.118973][ T7346] netlink: 'syz.1.374': attribute type 1 has an invalid length.
[   95.122911][ T7346] netlink: 'syz.1.374': attribute type 4 has an invalid length.
[   95.226456][ T7355] batman_adv: batadv0: Adding interface: dummy0
[   95.233772][ T7355] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.253623][ T7355] batman_adv: batadv0: Interface activated: dummy0
[   95.287733][ T7355] batadv0: mtu less than device minimum
[   95.301314][ T7355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.306830][ T7355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.312246][ T7355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.317378][ T7355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.322679][ T7355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.328071][ T7355] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   95.376030][ T7369] batman_adv: batadv0: Adding interface: ip6gretap1
[   95.378979][ T7369] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.400752][ T7369] batman_adv: batadv0: Interface activated: ip6gretap1
[   95.532266][ T7379] syzkaller1: entered promiscuous mode
[   95.534467][ T7379] syzkaller1: entered allmulticast mode
[   95.577407][ T7381] veth0_to_team: entered promiscuous mode
[   95.580414][ T7381] veth0_to_team: entered allmulticast mode
[   95.670984][ T7387] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[   95.711799][ T5864] Bluetooth: hci2: command 0x0405 tx timeout
[   95.714320][ T5860] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   95.791715][ T7395] netlink: 'syz.0.384': attribute type 1 has an invalid length.
[   95.794817][ T7391] veth3: entered promiscuous mode
[   95.806814][ T7391] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   95.816221][ T7395] (unnamed net_device) (uninitialized): option mode: invalid value (8)
[   95.833303][ T7387] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.882027][ T7397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.884941][ T7397] IPv6: NLM_F_CREATE should be set when creating new route
[   95.887773][ T7397] IPv6: NLM_F_CREATE should be set when creating new route
[   95.893953][ T7397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.133787][ T7407] vlan3: entered promiscuous mode
[   96.136147][ T7407] batadv0: entered promiscuous mode
[   96.431388][ T7420] netlink: 'syz.2.391': attribute type 10 has an invalid length.
[   96.437667][ T7420] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.460446][ T7420] team0: Port device bond0 added
[   96.986737][ T7438] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   97.052325][ T7447] netlink: 'syz.0.399': attribute type 15 has an invalid length.
[   97.057787][ T7447] netlink: 'syz.0.399': attribute type 15 has an invalid length.
[   97.300783][ T7462] netlink: 'syz.2.402': attribute type 10 has an invalid length.
[   97.312031][ T7462] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   97.994349][ T7486] batman_adv: batadv0: Interface deactivated: dummy0
[   97.997016][ T7486] batman_adv: batadv0: Removing interface: dummy0
[   98.031126][ T7486] bond0: (slave wlan1): Releasing backup interface
[   98.048302][ T7486] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   98.051303][ T7486] batman_adv: batadv0: Removing interface: ip6gretap1
[   98.091348][ T7489] team0: Mode changed to "broadcast"
[   98.129391][ T7486] vlan0: entered promiscuous mode
[   98.156019][ T7486] team0: Port device vlan0 added
[   98.172348][ T7486] tipc: Started in network mode
[   98.175609][ T7486] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   98.192070][ T7486] tipc: Enabled bearer <eth:team0>, priority 0
[   98.260889][ T7496] bond0: (slave syz_tun): Releasing backup interface
[   98.282754][ T7496] team0: Port device bond0 removed
[   98.288628][ T7496] bond2: (slave veth3): Releasing backup interface
[   98.317729][ T7499] syzkaller1: entered promiscuous mode
[   98.325722][ T7499] syzkaller1: entered allmulticast mode
[   98.416133][ T7506] netlink: 'syz.2.415': attribute type 29 has an invalid length.
[   98.548096][ T7512] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.552964][ T7512] 8021q: adding VLAN 0 to HW filter on device team0
[   98.713117][ T7530] 8021q: adding VLAN 0 to HW filter on device bond3
[   98.727682][ T7530] bond2: (slave bond3): making interface the new active one
[   98.733190][ T7530] bond2: (slave bond3): Enslaving as an active interface with an up link
[   98.822334][ T7530] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[   98.830502][ T7537] gretap0: entered promiscuous mode
[   98.835930][ T7537] gretap0: left promiscuous mode
[   98.886885][ T7540] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.038508][ T7552] pimreg: entered allmulticast mode
[   99.046052][ T7555] team0: Device gtp0 is of different type
[   99.169724][  T974] tipc: Node number set to 10005162
[   99.551126][ T7589] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.569275][ T7589] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   99.604650][ T7584] __nla_validate_parse: 24 callbacks suppressed
[   99.604665][ T7584] netlink: 44 bytes leftover after parsing attributes in process `syz.0.432'.
[   99.711959][ T7592] _Z`Ԁ@: entered promiscuous mode
[   99.837281][ T5859] IPVS: starting estimator thread 0...
[   99.884836][ T7604] geneve2: entered promiscuous mode
[   99.888926][ T5885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.895460][ T5885] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.899274][ T5885] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.906308][ T5885] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.929576][ T7605] IPVS: using max 49 ests per chain, 117600 per kthread
[   99.965220][ T7610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.440'.
[  100.314959][ T7627] validate_nla: 6 callbacks suppressed
[  100.314978][ T7627] netlink: 'syz.0.444': attribute type 5 has an invalid length.
[  100.512440][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'.
[  100.692004][ T7644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.451'.
[  100.719151][ T7647] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  100.827121][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'.
[  100.863752][ T7666] netlink: 'syz.2.459': attribute type 1 has an invalid length.
[  100.892108][ T7668] netlink: 44 bytes leftover after parsing attributes in process `syz.0.458'.
[  100.949272][ T7672] netlink: 'syz.2.461': attribute type 1 has an invalid length.
[  100.953461][ T7673] netlink: 'syz.2.461': attribute type 1 has an invalid length.
[  100.983666][ T7673] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  100.991089][ T7673] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  100.997855][ T7673] bond3: (slave vcan1): making interface the new active one
[  101.003051][ T7673] bond3: (slave vcan1): Enslaving as an active interface with an up link
[  101.007267][ T7676] netlink: 'syz.0.462': attribute type 1 has an invalid length.
[  101.012637][ T7676] netlink: 232 bytes leftover after parsing attributes in process `syz.0.462'.
[  101.015754][ T7672] bond3: (slave vcan2): The slave device specified does not support setting the MAC address
[  101.023915][ T7672] bond3: (slave vcan2): Enslaving as a backup interface with an up link
[  101.034132][ T7673] bond3: (slave vcan3): The slave device specified does not support setting the MAC address
[  101.041918][ T7673] bond3: (slave vcan3): Enslaving as a backup interface with an up link
[  101.050447][ T7677] bond3: (slave vcan4): The slave device specified does not support setting the MAC address
[  101.058319][ T7677] bond3: (slave vcan4): Enslaving as a backup interface with an up link
[  101.067534][ T7672] 8021q: adding VLAN 0 to HW filter on device bond3
[  101.151736][ T7683] netlink: 'syz.0.465': attribute type 11 has an invalid length.
[  101.224830][ T7688] syzkaller1: entered promiscuous mode
[  101.230152][ T7688] syzkaller1: entered allmulticast mode
[  101.508954][ T7700] team0: Port device vlan0 removed
[  101.541735][ T7700] bond2: (slave bond3): Releasing backup interface
[  101.544317][ T7700] bond2: (slave bond3): the permanent HWaddr of slave - 82:33:f2:2f:5f:27 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  101.564769][ T7700] bond2: (slave gretap1): making interface the new active one
[  104.368701][ T7700] bond2: (slave gretap1): Releasing backup interface
[  104.403785][ T6153] tipc: Resetting bearer <eth:team0>
[  104.435462][ T7716] tap0: tun_chr_ioctl cmd 1074025677
[  104.437811][ T7716] tap0: linktype set to 0
[  104.451820][ T7700] syz.0.472 (7700) used greatest stack depth: 17808 bytes left
[  104.572335][ T7728] unknown channel width for channel at 909000KHz?
[  104.575157][ T7728] unknown channel width for channel at 909000KHz?
[  104.582939][ T7728] lo speed is unknown, defaulting to 1000
[  104.587412][ T7728] lo speed is unknown, defaulting to 1000
[  104.593965][ T7728] lo speed is unknown, defaulting to 1000
[  104.782090][ T7742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.478'.
[  104.811341][ T7728] infiniband syz0: set active
[  104.814088][ T7728] infiniband syz0: added lo
[  104.862995][ T7728] RDS/IB: syz0: added
[  104.865331][ T7728] smc: adding ib device syz0 with port count 1
[  104.867966][ T7728] smc:    ib device syz0 port 1 has pnetid 
[  104.964439][ T7740] tipc: Resetting bearer <eth:syzkaller0>
[  104.999620][ T7740] vlan0: left promiscuous mode
[  105.040279][ T5859] lo speed is unknown, defaulting to 1000
[  105.043924][ T5886] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.052664][ T5886] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.058988][ T7728] lo speed is unknown, defaulting to 1000
[  105.062234][ T5886] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.062288][ T5886] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.081329][    T9] lo speed is unknown, defaulting to 1000
[  105.253726][ T7763] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.482'.
[  105.325147][ T7728] lo speed is unknown, defaulting to 1000
[  105.334043][ T7765] syzkaller1: entered promiscuous mode
[  105.336107][ T7765] syzkaller1: entered allmulticast mode
[  105.422035][ T7767] netlink: 'syz.0.484': attribute type 1 has an invalid length.
[  105.487357][ T7728] lo speed is unknown, defaulting to 1000
[  105.496474][ T7767] 8021q: adding VLAN 0 to HW filter on device bond4
[  105.517231][ T7767] veth3: entered promiscuous mode
[  105.526005][ T7767] tipc: Resetting bearer <eth:team0>
[  105.711826][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.488'.
[  105.826907][ T7788] netlink: 'syz.1.491': attribute type 13 has an invalid length.
[  105.835100][ T7788] netlink: 'syz.1.491': attribute type 17 has an invalid length.
[  105.848491][ T7788] net_ratelimit: 72 callbacks suppressed
[  105.848517][ T7788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.859226][  T974] lo speed is unknown, defaulting to 1000
[  105.902017][ T7794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.492'.
[  105.906817][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'.
[  106.010744][ T7799] syzkaller1: entered promiscuous mode
[  106.012805][ T7799] syzkaller1: entered allmulticast mode
[  106.084876][ T7805] pim6reg1: entered promiscuous mode
[  106.086647][ T7805] pim6reg1: entered allmulticast mode
[  106.371316][ T7828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.504'.
[  106.374818][ T7828] netlink: 100 bytes leftover after parsing attributes in process `syz.2.504'.
[  106.378481][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'.
[  106.665754][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'.
[  106.717580][ T7855] vxcan1 speed is unknown, defaulting to 1000
[  106.721771][ T7855] vxcan1 speed is unknown, defaulting to 1000
[  106.724422][ T7855] vxcan1 speed is unknown, defaulting to 1000
[  106.828617][ T7858] bridge0: port 1(hsr_slave_0) entered blocking state
[  106.833969][ T7858] bridge0: port 1(hsr_slave_0) entered disabled state
[  106.836887][ T7858] hsr_slave_0: entered allmulticast mode
[  106.842241][ T7858] hsr_slave_0: left allmulticast mode
[  106.863776][ T7860] lo speed is unknown, defaulting to 1000
[  107.031183][ T7855] infiniband syz2: set active
[  107.033229][ T7855] infiniband syz2: added vxcan1
[  107.035926][    T9] vxcan1 speed is unknown, defaulting to 1000
[  107.075634][ T7855] RDS/IB: syz2: added
[  107.080141][ T7855] smc: adding ib device syz2 with port count 1
[  107.082974][ T7855] smc:    ib device syz2 port 1 has pnetid 
[  107.094826][  T792] vxcan1 speed is unknown, defaulting to 1000
[  107.098698][ T7855] vxcan1 speed is unknown, defaulting to 1000
[  107.214943][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'.
[  107.292955][ T7855] vxcan1 speed is unknown, defaulting to 1000
[  107.445541][ T7881] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  107.457498][ T7878] netlink: 'syz.1.517': attribute type 1 has an invalid length.
[  107.572847][ T7855] vxcan1 speed is unknown, defaulting to 1000
[  107.766668][ T7855] vxcan1 speed is unknown, defaulting to 1000
[  107.944826][ T7855] vxcan1 speed is unknown, defaulting to 1000
[  108.093681][ T7879] lo speed is unknown, defaulting to 1000
[  108.185027][ T7886] lo speed is unknown, defaulting to 1000
[  108.211387][ T7886] lo speed is unknown, defaulting to 1000
[  108.278918][ T7886] lo speed is unknown, defaulting to 1000
[  108.306773][ T7886] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  108.346293][ T7886] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  108.463445][ T7886] lo speed is unknown, defaulting to 1000
[  108.471559][ T7886] lo speed is unknown, defaulting to 1000
[  108.478412][ T7886] lo speed is unknown, defaulting to 1000
[  108.491140][ T7886] lo speed is unknown, defaulting to 1000
[  108.605677][ T7904] netlink: 'syz.0.525': attribute type 4 has an invalid length.
[  109.436238][ T7949] netlink: 'syz.1.539': attribute type 11 has an invalid length.
[  109.804941][ T7927] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  109.935400][ T7982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.970081][ T7979] nbd1: detected capacity change from 0 to 127
[  109.975651][ T7980] __nla_validate_parse: 19 callbacks suppressed
[  109.975674][ T7980] netlink: 40 bytes leftover after parsing attributes in process `syz.1.546'.
[  109.984573][   T56] block nbd1: Receive control failed (result -104)
[  110.128997][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.552'.
[  110.222058][ T8006] netlink: 32 bytes leftover after parsing attributes in process `syz.1.553'.
[  110.232747][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.554'.
[  110.236298][ T8008] netlink: 100 bytes leftover after parsing attributes in process `syz.0.554'.
[  110.239388][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'.
[  110.321350][ T8022] netlink: 'syz.1.559': attribute type 1 has an invalid length.
[  110.324674][ T8022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.395744][ T8023] netlink: 72 bytes leftover after parsing attributes in process `syz.0.558'.
[  110.440243][ T8025] bond0: (slave rose0): Error: Device can not be enslaved while up
[  110.707217][ T8046] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  110.738440][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.565'.
[  110.754081][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.565'.
[  110.766609][ T8050] netlink: 'syz.1.567': attribute type 1 has an invalid length.
[  110.808720][ T8053] lo speed is unknown, defaulting to 1000
[  110.868269][ T8057] ieee802154 phy1 wpan1: encryption failed: -22
[  110.977602][ T8064] bond0: (slave rose0): Error: Device can not be enslaved while up
[  110.994039][ T8053] vxcan1 speed is unknown, defaulting to 1000
[  111.127709][ T8066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.574'.
[  111.150309][ T8053] lo speed is unknown, defaulting to 1000
[  111.220790][ T8072] netlink: 'syz.1.576': attribute type 30 has an invalid length.
[  111.395530][ T8085] netlink: 'syz.1.580': attribute type 11 has an invalid length.
[  111.658525][ T8105] IPv6: Can't replace route, no match found
[  111.719310][ T8109] IPv6: Can't replace route, no match found
[  111.775139][ T8114] netlink: 'syz.1.589': attribute type 12 has an invalid length.
[  111.779080][ T8114] netlink: 'syz.1.589': attribute type 12 has an invalid length.
[  111.893443][ T8125] syzkaller1: entered promiscuous mode
[  111.896199][ T8125] syzkaller1: entered allmulticast mode
[  112.095919][ T8139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.106029][ T8139] tipc: Resetting bearer <eth:syzkaller0>
[  112.111916][ T8138] tipc: Resetting bearer <eth:syzkaller0>
[  112.125256][ T8138] tipc: Disabling bearer <eth:syzkaller0>
[  112.209946][ T6153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.212504][ T6153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.213885][ T8150] netlink: 'syz.0.602': attribute type 2 has an invalid length.
[  112.227552][ T8150] k*]: entered promiscuous mode
[  112.233627][ T8148] bond0: (slave rose0): Error: Device can not be enslaved while up
[  112.247974][ T8150] tipc: Resetting bearer <eth:team0>
[  112.250980][ T8150] tipc: Resetting bearer <eth:team0>
[  112.255577][ T8150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.267958][ T8148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.271752][ T8148] syzkaller0: entered promiscuous mode
[  112.273596][ T8148] syzkaller0: entered allmulticast mode
[  112.277887][ T8147] tipc: Resetting bearer <eth:syzkaller0>
[  112.296027][ T8147] tipc: Disabling bearer <eth:syzkaller0>
[  112.708338][ T8188] netlink: 'syz.1.610': attribute type 11 has an invalid length.
[  112.737228][ T8186] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  112.742801][ T8190] syzkaller1: entered promiscuous mode
[  112.745155][ T8190] syzkaller1: entered allmulticast mode
[  113.091577][   T33] audit: type=1800 audit(1756901549.667:6): pid=8223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.620" name="@" dev="tmpfs" ino=1105 res=0 errno=0
[  113.233229][    C1] Illegal XDP return value 16128 on prog  (id 123) dev lo, expect packet loss!
[  113.244863][ T8237] lo speed is unknown, defaulting to 1000
[  113.259739][ T8238] ieee802154 phy1 wpan1: encryption failed: -22
[  113.315104][   T60] block nbd1: Connection timed out, retrying (0/1 alive)
[  113.318623][   T60] block nbd1: Connection timed out, retrying (0/1 alive)
[  113.322963][   T60] block nbd1: Connection timed out, retrying (0/1 alive)
[  113.325894][   T60] block nbd1: Connection timed out, retrying (0/1 alive)
[  113.328831][   T60] block nbd1: Dead connection, failed to find a fallback
[  113.333039][   T60] block nbd1: shutting down sockets
[  113.335284][   T60] blk_print_req_error: 27 callbacks suppressed
[  113.335296][   T60] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  113.342274][   T60] buffer_io_error: 27 callbacks suppressed
[  113.342285][   T60] Buffer I/O error on dev nbd1, logical block 3, async page read
[  113.348041][   T60] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  113.354350][   T60] Buffer I/O error on dev nbd1, logical block 2, async page read
[  113.357674][   T60] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  113.361913][   T60] Buffer I/O error on dev nbd1, logical block 1, async page read
[  113.365190][   T60] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  113.368756][   T60] Buffer I/O error on dev nbd1, logical block 0, async page read
[  113.373652][ T7724] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  113.377267][ T7724] Buffer I/O error on dev nbd1, logical block 0, async page read
[  113.380436][ T8237] vxcan1 speed is unknown, defaulting to 1000
[  113.384684][ T8233] lo speed is unknown, defaulting to 1000
[  113.390610][ T7724] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  113.394282][ T7724] Buffer I/O error on dev nbd1, logical block 1, async page read
[  113.397388][ T7724] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  113.406848][ T7724] Buffer I/O error on dev nbd1, logical block 2, async page read
[  113.415664][ T7724] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  113.430003][ T7724] Buffer I/O error on dev nbd1, logical block 3, async page read
[  113.437897][ T7724] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  113.445635][ T7724] Buffer I/O error on dev nbd1, logical block 0, async page read
[  113.451916][ T7724] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  113.458263][ T7724] Buffer I/O error on dev nbd1, logical block 1, async page read
[  113.470882][ T7724] ldm_validate_partition_table(): Disk read failed.
[  113.478730][ T7724] Dev nbd1: unable to read RDB block 0
[  113.493373][ T7724]  nbd1: unable to read partition table
[  113.517547][ T7724] ldm_validate_partition_table(): Disk read failed.
[  113.533426][ T7724] Dev nbd1: unable to read RDB block 0
[  113.543755][ T7724]  nbd1: unable to read partition table
[  113.631781][ T8237] lo speed is unknown, defaulting to 1000
[  113.633524][ T8233] vxcan1 speed is unknown, defaulting to 1000
[  113.854255][ T8233] lo speed is unknown, defaulting to 1000
[  114.044841][ T8252] netlink: 'syz.1.628': attribute type 12 has an invalid length.
[  115.031450][ T8279] netlink: 'syz.1.635': attribute type 1 has an invalid length.
[  115.034308][ T8279] __nla_validate_parse: 14 callbacks suppressed
[  115.034317][ T8279] netlink: 208 bytes leftover after parsing attributes in process `syz.1.635'.
[  115.166644][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'.
[  115.169999][ T8285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'.
[  115.173811][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'.
[  115.174502][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'.
[  115.177419][ T8286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'.
[  115.197280][ T8287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'.
[  115.236674][ T8291] netlink: 'syz.1.637': attribute type 11 has an invalid length.
[  115.320861][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'.
[  115.376378][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'.
[  115.381633][ T8297] netlink: 'syz.2.639': attribute type 20 has an invalid length.
[  115.396966][ T5681] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.400784][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'.
[  115.410062][ T5681] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.413201][ T8297] netlink: 'syz.2.639': attribute type 20 has an invalid length.
[  115.416114][ T5681] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.423034][ T5681] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.474538][ T8300] syzkaller1: entered promiscuous mode
[  115.487705][ T8300] syzkaller1: entered allmulticast mode
[  116.100885][ T8355] syzkaller0: entered promiscuous mode
[  116.102987][ T8355] syzkaller0: entered allmulticast mode
[  116.424319][ T8364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.434626][ T8364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.612031][ T8382] pim6reg1: entered promiscuous mode
[  116.613784][ T8382] pim6reg1: entered allmulticast mode
[  116.795582][ T8385] 8021q: adding VLAN 0 to HW filter on device bond5
[  116.805812][ T8385] team0: Port device bond5 added
[  116.813009][   T52] tipc: Resetting bearer <eth:team0>
[  116.986409][ T8398] netlink: 'syz.2.657': attribute type 9 has an invalid length.
[  116.994170][ T8398] macvlan3: entered promiscuous mode
[  116.996413][ T8398] hsr0: entered promiscuous mode
[  116.998424][ T8398] macvlan3: entered allmulticast mode
[  117.002993][ T8398] hsr0: entered allmulticast mode
[  117.004761][ T8398] hsr_slave_0: entered allmulticast mode
[  117.006625][ T8398] hsr_slave_1: entered allmulticast mode
[  117.012962][ T8398] netlink: 'syz.2.657': attribute type 4 has an invalid length.
[  117.259817][ T8416] veth0_vlan: entered allmulticast mode
[  117.362995][ T8426] netlink: 'syz.0.666': attribute type 11 has an invalid length.
[  118.045271][ T8447] netlink: 'syz.0.673': attribute type 11 has an invalid length.
[  118.151856][ T8452] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  118.177271][ T8453] lo speed is unknown, defaulting to 1000
[  118.178043][ T8452] syzkaller1: entered promiscuous mode
[  118.182807][ T8452] syzkaller1: entered allmulticast mode
[  118.337298][ T8460] tipc: Resetting bearer <eth:team0>
[  118.584497][ T8453] vxcan1 speed is unknown, defaulting to 1000
[  118.595238][ T8461] bridge0: port 1(batadv0) entered blocking state
[  118.597874][ T8461] bridge0: port 1(batadv0) entered disabled state
[  118.600959][ T8461] batadv0: entered allmulticast mode
[  118.604319][ T8461] batadv0: entered promiscuous mode
[  118.607453][ T5886] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.614323][ T5886] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.617164][   T10] vxcan1 speed is unknown, defaulting to 1000
[  118.619177][   T10] syz2: Port: 1 Link DOWN
[  118.621752][   T10] vxcan1 speed is unknown, defaulting to 1000
[  118.624416][ T5886] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.627511][ T5886] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.632694][ T5886] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.636175][ T5886] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.639168][ T5886] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.642877][ T5886] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.761891][ T8469] ip6tnl0: entered promiscuous mode
[  118.764211][ T8469] ip6tnl0: entered allmulticast mode
[  118.772711][ T8469] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  118.784642][ T8469] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  118.813184][ T8453] lo speed is unknown, defaulting to 1000
[  119.128903][ T5681] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  119.134171][ T5681] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  119.514436][ T8503] bond3: (slave vcan1): Releasing backup interface
[  119.517450][ T8503] bond3: (slave vcan2): making interface the new active one
[  119.524498][ T8503] bond3: (slave vcan2): Releasing backup interface
[  119.527065][ T8503] bond3: (slave vcan3): making interface the new active one
[  119.533645][ T8503] bond3: (slave vcan3): Releasing backup interface
[  119.536192][ T8503] bond3: (slave vcan4): making interface the new active one
[  119.541620][ T8503] bond3: (slave vcan4): Releasing backup interface
[  120.061732][   T55] block nbd2: Receive control failed (result -32)
[  120.366983][ T8527] __nla_validate_parse: 13 callbacks suppressed
[  120.367003][ T8527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.700'.
[  120.374954][ T8527] netlink: 100 bytes leftover after parsing attributes in process `syz.1.700'.
[  120.378526][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'.
[  120.413019][ T8533] netlink: 'syz.1.702': attribute type 21 has an invalid length.
[  120.415787][ T8533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.702'.
[  121.344817][ T8557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.708'.
[  121.348412][ T8557] netlink: 100 bytes leftover after parsing attributes in process `syz.2.708'.
[  121.359944][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'.
[  121.591967][ T8575] netlink: 'syz.2.714': attribute type 1 has an invalid length.
[  121.595087][ T8575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.714'.
[  121.748388][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.718'.
[  121.792432][ T8585] bridge2: port 1(veth5) entered blocking state
[  121.795209][ T8585] bridge2: port 1(veth5) entered disabled state
[  121.800708][ T8585] veth5: entered allmulticast mode
[  121.803359][ T8585] veth5: entered promiscuous mode
[  121.810328][ T8585] bridge2: port 2(veth0_to_bond) entered blocking state
[  121.812527][ T8585] bridge2: port 2(veth0_to_bond) entered disabled state
[  121.814927][ T8585] veth0_to_bond: entered allmulticast mode
[  121.817724][ T8585] veth0_to_bond: entered promiscuous mode
[  121.844124][ T8585] vlan2: entered allmulticast mode
[  121.846593][ T8585] veth1: entered allmulticast mode
[  121.849247][ T8585] bridge2: port 3(vlan2) entered blocking state
[  121.854152][ T8585] bridge2: port 3(vlan2) entered disabled state
[  121.861003][ T8585] vlan2: entered promiscuous mode
[  121.863119][ T8585] veth1: entered promiscuous mode
[  121.983038][ T8602] 8021q: adding VLAN 0 to HW filter on device bond6
[  121.987686][ T8602] veth0_to_bond: left allmulticast mode
[  121.990027][ T8602] veth0_to_bond: left promiscuous mode
[  121.992091][ T8602] bridge2: port 2(veth0_to_bond) entered disabled state
[  121.997703][ T8602] team0: Port device bond5 removed
[  122.001309][ T8602] veth5: left allmulticast mode
[  122.002950][ T8602] veth5: left promiscuous mode
[  122.004683][ T8602] bridge2: port 1(veth5) entered disabled state
[  122.008312][ T8602] vlan2: left promiscuous mode
[  122.010096][ T8602] veth1: left promiscuous mode
[  122.012000][ T8602] bridge2: port 3(vlan2) entered disabled state
[  122.017259][ T8602] netlink: 'syz.0.725': attribute type 1 has an invalid length.
[  122.022015][ T8605] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  122.133102][ T8610] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.140491][ T8610] tipc: Resetting bearer <eth:syzkaller0>
[  122.323854][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'.
[  122.331701][ T8624] bond0: Master is either lo or non-ether device
[  122.400505][ T8626] bond0: Master is either lo or non-ether device
[  122.524753][ T8633] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[  122.584740][ T8638] sctp: [Deprecated]: syz.0.734 (pid 8638) Use of int in max_burst socket option deprecated.
[  122.584740][ T8638] Use struct sctp_assoc_value instead
[  122.828792][ T8669] syzkaller1: entered promiscuous mode
[  122.832423][ T8669] syzkaller1: entered allmulticast mode
[  123.039976][ T8686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  123.117648][ T8689] macsec1: entered promiscuous mode
[  123.126919][ T8689] team0: entered promiscuous mode
[  123.143960][ T8693] netlink: 'syz.2.751': attribute type 11 has an invalid length.
[  123.203400][ T8696] syzkaller1: entered promiscuous mode
[  123.208461][ T8696] syzkaller1: entered allmulticast mode
[  123.220376][ T8694] nbd3: detected capacity change from 0 to 127
[  123.238688][   T55] block nbd3: Receive control failed (result -104)
[  123.267628][ T8700] pim6reg1: entered promiscuous mode
[  123.269256][ T8700] pim6reg1: entered allmulticast mode
[  123.296233][ T8702] netlink: 'syz.1.756': attribute type 11 has an invalid length.
[  123.314944][ T8700] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  123.317308][ T8700] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  123.342732][ T8700] 8021q: adding VLAN 0 to HW filter on device bond4
[  123.345925][ T8700] team0: Port device bond4 added
[  123.464554][ T8720] netlink: 'syz.2.761': attribute type 1 has an invalid length.
[  124.515880][ T8747] netlink: 'syz.2.770': attribute type 11 has an invalid length.
[  124.544837][ T8749] bond0: Unable to set down delay as MII monitoring is disabled
[  124.698262][ T8764] tap0: tun_chr_ioctl cmd 1074025677
[  124.703533][ T8764] tap0: linktype set to 0
[  124.737611][ T8773] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  124.848431][ T8779] netlink: 'syz.2.778': attribute type 11 has an invalid length.
[  124.927920][ T8788] lo speed is unknown, defaulting to 1000
[  125.073268][ T8788] vxcan1 speed is unknown, defaulting to 1000
[  125.123031][ T8805] netlink: 'syz.1.788': attribute type 21 has an invalid length.
[  125.126670][ T8805] netlink: 'syz.1.788': attribute type 22 has an invalid length.
[  125.132701][ T8805] netlink: 'syz.1.788': attribute type 23 has an invalid length.
[  125.135649][ T8805] netlink: 'syz.1.788': attribute type 25 has an invalid length.
[  125.138350][ T8805] netlink: 'syz.1.788': attribute type 26 has an invalid length.
[  125.149156][ T8806] openvswitch: netlink: Message has 4 unknown bytes.
[  125.155548][ T8805] openvswitch: netlink: Message has 4 unknown bytes.
[  125.214594][ T8788] lo speed is unknown, defaulting to 1000
[  125.480540][ T8825] __nla_validate_parse: 24 callbacks suppressed
[  125.480553][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'.
[  125.513649][ T5886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.520823][ T5886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.524426][ T5886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.534898][ T5886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.684142][ T8839] netlink: 'syz.0.799': attribute type 13 has an invalid length.
[  125.689164][ T8839] netlink: 'syz.0.799': attribute type 17 has an invalid length.
[  125.693676][ T8840] xfrm0: entered promiscuous mode
[  125.696104][ T8840] xfrm0: entered allmulticast mode
[  125.724827][ T8839] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.728187][ T8839] 8021q: adding VLAN 0 to HW filter on device team0
[  125.732082][ T8839] tipc: Resetting bearer <eth:team0>
[  125.734094][ T8839] tipc: Resetting bearer <eth:team0>
[  125.738100][ T8839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.804756][ T8844] netlink: 76 bytes leftover after parsing attributes in process `syz.0.800'.
[  125.811757][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'.
[  125.982545][ T8853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.804'.
[  125.985515][ T8853] netlink: 100 bytes leftover after parsing attributes in process `syz.2.804'.
[  125.988505][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'.
[  125.993614][ T8854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.803'.
[  126.026598][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.805'.
[  126.052480][ T8858] netlink: 'syz.0.806': attribute type 1 has an invalid length.
[  126.057271][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'.
[  126.177704][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'.
[  126.361407][ T8889] syzkaller1: entered promiscuous mode
[  126.363154][ T8889] syzkaller1: entered allmulticast mode
[  126.589852][   T60] block nbd3: Connection timed out, retrying (0/1 alive)
[  126.592241][   T60] block nbd3: Connection timed out, retrying (0/1 alive)
[  126.594907][   T60] block nbd3: Connection timed out, retrying (0/1 alive)
[  126.597541][   T60] block nbd3: Connection timed out, retrying (0/1 alive)
[  126.600444][   T60] block nbd3: Dead connection, failed to find a fallback
[  126.602980][   T60] block nbd3: shutting down sockets
[  126.604650][   T60] blk_print_req_error: 138 callbacks suppressed
[  126.604658][   T60] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.610190][   T60] buffer_io_error: 138 callbacks suppressed
[  126.610201][   T60] Buffer I/O error on dev nbd3, logical block 3, async page read
[  126.615151][   T60] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.618315][   T60] Buffer I/O error on dev nbd3, logical block 2, async page read
[  126.621140][   T60] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.623985][   T60] Buffer I/O error on dev nbd3, logical block 1, async page read
[  126.626705][   T60] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.630614][   T60] Buffer I/O error on dev nbd3, logical block 0, async page read
[  126.634623][ T8275] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.637476][ T8275] Buffer I/O error on dev nbd3, logical block 0, async page read
[  126.640577][ T8275] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.644056][ T8275] Buffer I/O error on dev nbd3, logical block 1, async page read
[  126.647250][ T8275] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.651780][ T8275] Buffer I/O error on dev nbd3, logical block 2, async page read
[  126.655514][ T8275] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.659000][ T8275] Buffer I/O error on dev nbd3, logical block 3, async page read
[  126.662677][ T8275] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.666429][ T8275] Buffer I/O error on dev nbd3, logical block 0, async page read
[  126.670138][ T8275] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.675383][ T8275] Buffer I/O error on dev nbd3, logical block 1, async page read
[  126.682534][ T8275] ldm_validate_partition_table(): Disk read failed.
[  126.686765][ T8275] Dev nbd3: unable to read RDB block 0
[  126.693328][ T8275]  nbd3: unable to read partition table
[  126.706466][ T8275] ldm_validate_partition_table(): Disk read failed.
[  126.722520][ T8275] Dev nbd3: unable to read RDB block 0
[  126.727025][ T8275]  nbd3: unable to read partition table
[  127.222697][ T8932] netlink: 'syz.1.831': attribute type 11 has an invalid length.
[  127.289191][ T8941] validate_nla: 3 callbacks suppressed
[  127.289209][ T8941] netlink: 'syz.2.834': attribute type 7 has an invalid length.
[  127.543659][ T8951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.826230][ T8981] delete_channel: no stack
[  128.638567][ T9036] syz_tun: entered promiscuous mode
[  128.655365][ T9036] batadv_slave_0: entered promiscuous mode
[  128.673862][ T9036] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.696266][ T9036] hsr1: entered allmulticast mode
[  128.705374][ T9036] syz_tun: entered allmulticast mode
[  128.715624][ T9036] batadv_slave_0: entered allmulticast mode
[  128.861206][ T9039] batadv_slave_0: entered promiscuous mode
[  128.965309][ T9044] syzkaller1: entered promiscuous mode
[  128.967373][ T9044] syzkaller1: entered allmulticast mode
[  129.067575][ T9050] sctp: [Deprecated]: syz.0.863 (pid 9050) Use of int in max_burst socket option deprecated.
[  129.067575][ T9050] Use struct sctp_assoc_value instead
[  129.198007][ T9063] lo: entered allmulticast mode
[  129.209123][ T9063] lo: left allmulticast mode
[  129.296780][ T9070] syzkaller1: entered promiscuous mode
[  129.298701][ T9070] syzkaller1: entered allmulticast mode
[  129.356409][ T9076] syzkaller1: entered promiscuous mode
[  129.358497][ T9076] syzkaller1: entered allmulticast mode
[  129.687279][ T9087] lo speed is unknown, defaulting to 1000
[  129.915978][ T9087] vxcan1 speed is unknown, defaulting to 1000
[  130.139197][ T9087] lo speed is unknown, defaulting to 1000
[  130.598489][ T9104] __nla_validate_parse: 16 callbacks suppressed
[  130.598509][ T9104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.881'.
[  130.636830][ T9105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.880'.
[  130.674077][ T9105] netlink: 100 bytes leftover after parsing attributes in process `syz.1.880'.
[  130.692897][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'.
[  130.842165][ T9107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.881'.
[  130.845494][ T9107] netlink: 100 bytes leftover after parsing attributes in process `syz.0.881'.
[  130.848279][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'.
[  132.354371][ T9110] netlink: 48 bytes leftover after parsing attributes in process `syz.1.882'.
[  132.677782][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'.
[  132.682498][ T9125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'.
[  132.918021][ T9135] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  132.967852][ T9137] can: request_module (can-proto-4) failed.
[  133.066348][ T9145] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  133.076508][ T9145] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  133.126682][ T9150] pim6reg: entered allmulticast mode
[  133.160887][ T9150] pim6reg: left allmulticast mode
[  133.414866][ T9158] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  133.521586][ T9172] gretap1: entered promiscuous mode
[  133.704517][ T9176] lo speed is unknown, defaulting to 1000
[  133.804544][ T9176] vxcan1 speed is unknown, defaulting to 1000
[  133.921667][ T9176] lo speed is unknown, defaulting to 1000
[  134.395079][ T9193] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  134.412912][ T9200] bond0: option arp_validate: invalid value (18446744073491447809)
[  134.494508][   T33] audit: type=1804 audit(1756901571.077:7): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.914" name="/newroot/307/cgroup.controllers" dev="tmpfs" ino=1570 res=1 errno=0
[  134.507635][   T33] audit: type=1800 audit(1756901571.077:8): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.914" name="cgroup.controllers" dev="tmpfs" ino=1570 res=0 errno=0
[  134.723926][ T9223] netlink: 'syz.2.920': attribute type 12 has an invalid length.
[  134.768995][ T9226] netlink: 'syz.2.921': attribute type 11 has an invalid length.
[  135.127905][ T9233] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  135.193217][ T9237] lo speed is unknown, defaulting to 1000
[  135.258100][ T5681] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  135.348475][ T9237] vxcan1 speed is unknown, defaulting to 1000
[  135.642961][ T9263] netlink: 'syz.0.929': attribute type 11 has an invalid length.
[  135.648177][ T9237] lo speed is unknown, defaulting to 1000
[  135.723163][ T9268] __nla_validate_parse: 22 callbacks suppressed
[  135.723175][ T9268] netlink: 44 bytes leftover after parsing attributes in process `syz.0.933'.
[  135.728615][ T9268] netlink: 43 bytes leftover after parsing attributes in process `syz.0.933'.
[  135.734154][ T9268] netlink: 'syz.0.933': attribute type 6 has an invalid length.
[  135.736859][ T9268] netlink: 'syz.0.933': attribute type 5 has an invalid length.
[  135.740530][ T9268] netlink: 43 bytes leftover after parsing attributes in process `syz.0.933'.
[  135.877714][ T9276] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  135.895353][ T9274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.983412][ T9274] syzkaller0: entered promiscuous mode
[  135.985582][ T9274] syzkaller0: entered allmulticast mode
[  135.988047][ T9274] tipc: Resetting bearer <eth:syzkaller0>
[  136.028611][ T9273] tipc: Resetting bearer <eth:syzkaller0>
[  136.265709][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'.
[  137.159303][ T9273] tipc: Disabling bearer <eth:syzkaller0>
[  137.499081][ T9308] netlink: 'syz.0.945': attribute type 11 has an invalid length.
[  137.638598][ T9321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.949'.
[  137.792340][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.955'.
[  137.795554][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.955'.
[  137.827086][ T9339] netlink: 'syz.0.954': attribute type 11 has an invalid length.
[  137.853591][ T9344] netlink: 'syz.2.955': attribute type 3 has an invalid length.
[  137.856487][ T9344] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.955'.
[  137.863726][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.955'.
[  138.083397][ T9355] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  138.087563][ T9355] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  138.660262][ T9359] netlink: 'syz.2.960': attribute type 5 has an invalid length.
[  138.722981][ T9361] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  138.728176][ T9361] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  138.734307][ T9361] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  138.825158][ T9365] netlink: 'syz.2.962': attribute type 11 has an invalid length.
[  138.827880][ T9365] netlink: 140 bytes leftover after parsing attributes in process `syz.2.962'.
[  138.865757][ T9370] netlink: 'syz.2.963': attribute type 11 has an invalid length.
[  139.045184][ T9381] ip6gre1: entered allmulticast mode
[  139.105261][ T9386] netlink: 'syz.1.970': attribute type 11 has an invalid length.
[  139.130587][ T9383] lo speed is unknown, defaulting to 1000
[  139.326490][ T9383] vxcan1 speed is unknown, defaulting to 1000
[  139.355921][ T9405] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.360723][ T9405] syzkaller0: entered promiscuous mode
[  139.363202][ T9405] syzkaller0: entered allmulticast mode
[  139.387661][ T9405] tipc: Resetting bearer <eth:syzkaller0>
[  139.393362][ T9404] tipc: Resetting bearer <eth:syzkaller0>
[  139.407888][ T9404] tipc: Disabling bearer <eth:syzkaller0>
[  139.450065][ T9383] lo speed is unknown, defaulting to 1000
[  139.590109][ T9415] netlink: 'syz.1.978': attribute type 11 has an invalid length.
[  139.907943][ T9436] netlink: 'syz.1.984': attribute type 30 has an invalid length.
[  139.908844][ T9435] netlink: 'syz.1.984': attribute type 30 has an invalid length.
[  139.913359][ T9437] bond0: Error: Cannot enslave bond to itself.
[  140.052497][ T9447] netlink: 'syz.0.985': attribute type 11 has an invalid length.
[  140.737752][ T9481] nft_compat: unsupported protocol 0
[  140.783483][ T9485] netlink: 'syz.2.998': attribute type 3 has an invalid length.
[  140.792015][ T9485] dvmrp0: left allmulticast mode
[  140.844490][ T9485] siw: device registration error -23
[  141.090111][ T9491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.102712][ T9491] syzkaller0: entered promiscuous mode
[  141.111566][ T9491] syzkaller0: entered allmulticast mode
[  141.130619][ T9491] syzkaller1: entered promiscuous mode
[  141.132780][ T9491] syzkaller1: entered allmulticast mode
[  141.171920][ T9496] __nla_validate_parse: 4 callbacks suppressed
[  141.171935][ T9496] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1002'.
[  141.192565][ T9490] tipc: Resetting bearer <eth:syzkaller0>
[  141.211406][ T9490] tipc: Disabling bearer <eth:syzkaller0>
[  141.304178][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'.
[  141.445125][ T9502] netlink: 'syz.0.1005': attribute type 1 has an invalid length.
[  141.447786][ T9502] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1005'.
[  141.668773][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'.
Connection to localhost closed by remote host.
[  141.775206][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'.
[  142.279759][ T5864] Bluetooth: hci2: command 0x0405 tx timeout
[  142.280656][ T5885] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.350983][ T9522] syz_tun (unregistering): left promiscuous mode
[  142.368310][ T5885] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.461204][ T5885] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.514175][ T5885] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.643198][ T5885] tipc: Disabling bearer <ib:ip6gre0>
[  143.124084][ T5885] bond0 (unregistering): Released all slaves
[  143.203358][ T5885] bond1 (unregistering): Released all slaves
[  143.272522][ T5885] bond2 (unregistering): Released all slaves
[  143.340346][ T5885] bond3 (unregistering): Released all slaves
[  143.420282][ T5885] team0: Port device bond4 removed
[  143.423270][ T5885] bond4 (unregistering): Released all slaves
[  143.504071][ T5885] tipc: Disabling bearer <eth:syzkaller0>
[  143.511860][ T5885] tipc: Left network mode
[  143.526986][ T5885] IPVS: stopping backup sync thread 7438 ...
[  144.229244][ T5885] hsr_slave_0: left promiscuous mode
[  144.233979][ T5885] hsr_slave_1: left promiscuous mode
[  144.237537][ T5885] hsr0: left allmulticast mode
[  144.245440][ T5885] hsr0: left promiscuous mode
[  145.115930][ T5885] ------------[ cut here ]------------
[  145.117653][ T5885] WARNING: CPU: 0 PID: 5885 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  145.120997][ T5885] Modules linked in:
[  145.122748][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  145.127360][ T5885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.131450][ T5885] Workqueue: netns cleanup_net
[  145.133046][ T5885] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  145.134927][ T5885] Code: f8 38 df f7 4b 83 3c 2c 00 75 19 e8 cc ca 7b f7 49 81 fd f8 07 00 00 74 1d e8 be ca 7b f7 49 83 c5 08 eb c9 e8 b3 ca 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  145.142541][ T5885] RSP: 0018:ffffc9000485f8b0 EFLAGS: 00010293
[  145.145033][ T5885] RAX: ffffffff8a43e0dd RBX: ffff888021d5c000 RCX: ffff88810a64d640
[  145.148116][ T5885] RDX: 0000000000000000 RSI: ffffffff8d9b7faf RDI: ffff888021d5c2e8
[  145.151267][ T5885] RBP: ffffc9000485f9b0 R08: ffffffff8fa38e37 R09: 1ffffffff1f471c6
[  145.154139][ T5885] R10: dffffc0000000000 R11: fffffbfff1f471c7 R12: ffff888021d5c000
[  145.156969][ T5885] R13: 00000000000002e8 R14: ffff88802a312440 R15: dffffc0000000000
[  145.160191][ T5885] FS:  0000000000000000(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  145.163477][ T5885] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  145.165864][ T5885] CR2: 00007f97963c2440 CR3: 000000000df36000 CR4: 00000000000006f0
[  145.168767][ T5885] Call Trace:
[  145.170519][ T5885]  <TASK>
[  145.171643][ T5885]  ops_undo_list+0x49a/0x990
[  145.173333][ T5885]  ? __pfx_ops_undo_list+0x10/0x10
[  145.175241][ T5885]  ? do_raw_spin_unlock+0x4d/0x240
[  145.177179][ T5885]  cleanup_net+0x4c5/0x800
[  145.178822][ T5885]  ? __pfx_cleanup_net+0x10/0x10
[  145.180979][ T5885]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.182881][ T5885]  ? process_scheduled_works+0x9ef/0x17b0
[  145.184935][ T5885]  ? process_scheduled_works+0x9ef/0x17b0
[  145.187004][ T5885]  process_scheduled_works+0xae1/0x17b0
[  145.189008][ T5885]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.191519][ T5885]  worker_thread+0x8a0/0xda0
[  145.193195][ T5885]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.195550][ T5885]  ? __kthread_parkme+0x7b/0x200
[  145.197280][ T5885]  kthread+0x711/0x8a0
[  145.199834][ T5885]  ? __pfx_worker_thread+0x10/0x10
[  145.201725][ T5885]  ? __pfx_kthread+0x10/0x10
[  145.203304][ T5885]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.208129][ T5885]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.211134][ T5885]  ? __pfx_kthread+0x10/0x10
[  145.213085][ T5885]  ret_from_fork+0x3fc/0x770
[  145.214747][ T5885]  ? __pfx_ret_from_fork+0x10/0x10
[  145.216352][ T5885]  ? __switch_to_asm+0x39/0x70
[  145.218294][ T5885]  ? __switch_to_asm+0x33/0x70
[  145.220033][ T5885]  ? __pfx_kthread+0x10/0x10
[  145.221507][ T5885]  ret_from_fork_asm+0x1a/0x30
[  145.223248][ T5885]  </TASK>
[  145.224502][ T5885] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  145.227236][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  145.230959][ T5885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.234973][ T5885] Workqueue: netns cleanup_net
[  145.236898][ T5885] Call Trace:
[  145.238213][ T5885]  <TASK>
[  145.239376][ T5885]  dump_stack_lvl+0x99/0x250
[  145.241266][ T5885]  ? __asan_memcpy+0x40/0x70
[  145.243088][ T5885]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.245138][ T5885]  ? __pfx__printk+0x10/0x10
[  145.247002][ T5885]  vpanic+0x281/0x750
[  145.248607][ T5885]  ? __pfx__printk+0x10/0x10
[  145.250398][ T5885]  ? __pfx_vpanic+0x10/0x10
[  145.252242][ T5885]  ? is_bpf_text_address+0x292/0x2b0
[  145.254355][ T5885]  panic+0xb9/0xc0
[  145.255848][ T5885]  ? __pfx_panic+0x10/0x10
[  145.257290][ T5885]  __warn+0x31b/0x4b0
[  145.258526][ T5885]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  145.260172][ T5885]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  145.261973][ T5885]  report_bug+0x2be/0x4f0
[  145.263496][ T5885]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  145.265233][ T5885]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  145.267135][ T5885]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  145.269142][ T5885]  handle_bug+0x84/0x160
[  145.270701][ T5885]  exc_invalid_op+0x1a/0x50
[  145.272514][ T5885]  asm_exc_invalid_op+0x1a/0x20
[  145.274259][ T5885] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  145.276152][ T5885] Code: f8 38 df f7 4b 83 3c 2c 00 75 19 e8 cc ca 7b f7 49 81 fd f8 07 00 00 74 1d e8 be ca 7b f7 49 83 c5 08 eb c9 e8 b3 ca 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  145.282688][ T5885] RSP: 0018:ffffc9000485f8b0 EFLAGS: 00010293
[  145.284669][ T5885] RAX: ffffffff8a43e0dd RBX: ffff888021d5c000 RCX: ffff88810a64d640
[  145.287296][ T5885] RDX: 0000000000000000 RSI: ffffffff8d9b7faf RDI: ffff888021d5c2e8
[  145.289777][ T5885] RBP: ffffc9000485f9b0 R08: ffffffff8fa38e37 R09: 1ffffffff1f471c6
[  145.292703][ T5885] R10: dffffc0000000000 R11: fffffbfff1f471c7 R12: ffff888021d5c000
[  145.295309][ T5885] R13: 00000000000002e8 R14: ffff88802a312440 R15: dffffc0000000000
[  145.297847][ T5885]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  145.299619][ T5885]  ops_undo_list+0x49a/0x990
[  145.301144][ T5885]  ? __pfx_ops_undo_list+0x10/0x10
[  145.302850][ T5885]  ? do_raw_spin_unlock+0x4d/0x240
[  145.304505][ T5885]  cleanup_net+0x4c5/0x800
[  145.305965][ T5885]  ? __pfx_cleanup_net+0x10/0x10
[  145.307644][ T5885]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.309613][ T5885]  ? process_scheduled_works+0x9ef/0x17b0
[  145.311902][ T5885]  ? process_scheduled_works+0x9ef/0x17b0
[  145.314017][ T5885]  process_scheduled_works+0xae1/0x17b0
[  145.316142][ T5885]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.318425][ T5885]  worker_thread+0x8a0/0xda0
[  145.320342][ T5885]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.322777][ T5885]  ? __kthread_parkme+0x7b/0x200
[  145.324717][ T5885]  kthread+0x711/0x8a0
[  145.326300][ T5885]  ? __pfx_worker_thread+0x10/0x10
[  145.328280][ T5885]  ? __pfx_kthread+0x10/0x10
[  145.330041][ T5885]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.332001][ T5885]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.333991][ T5885]  ? __pfx_kthread+0x10/0x10
[  145.335745][ T5885]  ret_from_fork+0x3fc/0x770
[  145.337707][ T5885]  ? __pfx_ret_from_fork+0x10/0x10
[  145.339688][ T5885]  ? __switch_to_asm+0x39/0x70
[  145.341519][ T5885]  ? __switch_to_asm+0x33/0x70
[  145.343324][ T5885]  ? __pfx_kthread+0x10/0x10
[  145.345093][ T5885]  ret_from_fork_asm+0x1a/0x30
[  145.346972][ T5885]  </TASK>
[  145.348972][ T5885] Kernel Offset: disabled
[  145.350650][ T5885] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:13:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000055 RBX=0000000000000055 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000485f050
R8 =ffff888108060237 R9 =1ffff1102100c046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8df R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f97963c2440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=2775713d4ca88100 RBX=ffffffff819683c8 RCX=2775713d4ca88100 RDX=0000000000000001
RSI=ffffffff8d9b7faf RDI=ffffffff8be33800 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c2fb3d60d0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
