last executing test programs:

1.40012177s ago: executing program 0 (id=518):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18)
socket$inet6(0xa, 0x3, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}})
ioctl(r6, 0x8b1b, &(0x7f0000000040))
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc)
sendmsg$nl_route(r0, 0x0, 0x0)

1.30365827s ago: executing program 0 (id=522):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000))

1.169664083s ago: executing program 0 (id=525):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
syz_emit_ethernet(0x14d, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c011311ff"], 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x8a, 0x0, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$rds(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004844)

360.411607ms ago: executing program 1 (id=539):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

360.118993ms ago: executing program 1 (id=540):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b112200000000009f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

310.789262ms ago: executing program 1 (id=541):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000400, 0x2, 0x3, 0x9}, 0x20)

260.842397ms ago: executing program 1 (id=542):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}, 0x1, 0x0, 0x0, 0x20020810}, 0x0)

260.696451ms ago: executing program 2 (id=543):
r0 = socket(0x28, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x1000, 0x9, 0x0, 0x7ff, 0x4, 0xc0000002, 0x402, 0xfffffffd, 0x4, 0x4, 0x80000003, 0x4006, 0x80, 0xfffffffc, 0xd, 0x800002, 0x80002005, 0x2, 0xdac9, 0xfffffff9, 0xffffe67d}})

235.952349ms ago: executing program 1 (id=544):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20)

235.620118ms ago: executing program 2 (id=545):
syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x200}}}}}, 0x0)

229.934279ms ago: executing program 0 (id=546):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
close(0x3)

119.936729ms ago: executing program 1 (id=547):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x1000003, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r1, 0x3)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff, 0x2}, 0xe)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d3862950f91ace0319f430925fda88089e3fe65327bef7730896f40535d8cc3c9e2357f8ac13729dd5377c9c47936647690105b100149bfde44adf0e4fae811ad40bb7d9385a4ba07521d9382b1183789c743d76db805ea62c6116d31e6ba78ad33b098cae1289b4b8f007241dff6f9fad1a5f0d161c275d54cbe561ae3842222b780bf1d11"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
sendfile(r4, r5, 0x0, 0xffffffff000)
recvmmsg(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0x10000}, {{&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000100)=""/35, 0x23}], 0x3, &(0x7f0000000880)=""/144, 0x90}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f00000011c0)=[{&(0x7f00000009c0)=""/176, 0xb0}, {&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/193, 0xc1}, {&(0x7f0000000e00)=""/142, 0x8e}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000ec0)=""/158, 0xfffffffffffffd81}, {&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f00000010c0)=""/223, 0xdf}, {&(0x7f0000000a80)=""/21, 0x15}], 0x9}, 0x100}], 0x3, 0x40001023, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x40000083)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bf0600000082565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="4000000000000000060012810b000100627269646765000100010000ff0f00003004000000242d4400000000"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x8044)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@o_path={0x0, 0x0, 0x8, r8}, 0x18)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYRES8=r4], &(0x7f00000022c0)='GPL\x00', 0x1008, 0x1b, &(0x7f0000002300)=""/27, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, r5, 0x8, &(0x7f0000002340)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002380)={0x2, 0xe, 0x7, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000200), &(0x7f0000002400)=[{0x3, 0x3, 0xf, 0x7}], 0x10, 0x81}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r9}, &(0x7f00000021c0), &(0x7f0000002500)=r10}, 0x20)
socket(0x2, 0x80805, 0x0)

119.693851ms ago: executing program 2 (id=548):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x60}, {0x6, 0x0, 0x0, 0x33}]}, 0x10)

117.318208ms ago: executing program 2 (id=549):
unshare(0x20400)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='1', 0x1}], 0x1, 0x0, 0x0, 0x4004c}}], 0x1, 0x4884)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x39000, 0x0)

50.369991ms ago: executing program 0 (id=550):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r1, 0x18f40, 0x2200a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x40}}, 0x0)

50.105122ms ago: executing program 2 (id=551):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r3 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r3, &(0x7f0000000240)=""/272, 0x37, 0x62, 0x0, 0x0)

281.975µs ago: executing program 0 (id=552):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x400}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)

0s ago: executing program 2 (id=553):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
unshare(0x2a020400)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
readv(r1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11149' (ED25519) to the list of known hosts.
syzkaller login: [   49.990413][ T5808] cgroup: Unknown subsys name 'net'
[   50.117765][ T5808] cgroup: Unknown subsys name 'cpuset'
[   50.121787][ T5808] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.503563][ T5808] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.596002][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.599558][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.602501][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.606331][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.609823][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.649306][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.653483][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.665069][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.669401][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.673734][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.742397][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.746887][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.754425][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.759089][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.763132][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.870080][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   55.909352][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   56.065109][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.068792][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.072468][ T5819] bridge_slave_0: entered allmulticast mode
[   56.077957][ T5819] bridge_slave_0: entered promiscuous mode
[   56.086538][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.090246][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.093635][ T5819] bridge_slave_1: entered allmulticast mode
[   56.098812][ T5819] bridge_slave_1: entered promiscuous mode
[   56.103266][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.107125][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.111212][ T5823] bridge_slave_0: entered allmulticast mode
[   56.116990][ T5823] bridge_slave_0: entered promiscuous mode
[   56.121886][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.125568][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.128959][ T5823] bridge_slave_1: entered allmulticast mode
[   56.133027][ T5823] bridge_slave_1: entered promiscuous mode
[   56.205773][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.221290][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.228475][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.239482][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.338775][ T5819] team0: Port device team_slave_0 added
[   56.344166][ T5823] team0: Port device team_slave_0 added
[   56.349996][ T5823] team0: Port device team_slave_1 added
[   56.371555][ T5819] team0: Port device team_slave_1 added
[   56.395741][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.399438][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.411554][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.433169][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   56.442053][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.445206][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.457396][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.471656][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.474104][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.484041][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.498452][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.501128][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.510656][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.598590][ T5819] hsr_slave_0: entered promiscuous mode
[   56.601952][ T5819] hsr_slave_1: entered promiscuous mode
[   56.630775][ T5823] hsr_slave_0: entered promiscuous mode
[   56.634149][ T5823] hsr_slave_1: entered promiscuous mode
[   56.638385][ T5823] debugfs: 'hsr0' already exists in 'hsr'
[   56.640649][ T5823] Cannot create hsr debugfs directory
[   56.677363][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.680087][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.682922][ T5827] bridge_slave_0: entered allmulticast mode
[   56.686395][ T5827] bridge_slave_0: entered promiscuous mode
[   56.712798][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.716160][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.718843][ T5827] bridge_slave_1: entered allmulticast mode
[   56.722084][ T5827] bridge_slave_1: entered promiscuous mode
[   56.778449][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.796035][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.851275][ T5827] team0: Port device team_slave_0 added
[   56.866998][ T5827] team0: Port device team_slave_1 added
[   56.902043][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.905180][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.916274][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.927876][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.931115][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.942377][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.984245][ T5827] hsr_slave_0: entered promiscuous mode
[   56.987667][ T5827] hsr_slave_1: entered promiscuous mode
[   56.990467][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   56.993149][ T5827] Cannot create hsr debugfs directory
[   57.016292][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.024480][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.045197][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.061215][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.139282][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.152884][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.162632][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.188363][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.222651][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.228283][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.236225][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.242564][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.317078][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.347571][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   57.364291][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.368851][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.392203][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.395581][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.419914][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.432536][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.461267][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   57.470598][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.480943][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.484076][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.493319][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   57.504284][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.507505][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.529283][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.532634][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.551207][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.553627][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.687969][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.688655][ T5820] Bluetooth: hci0: command tx timeout
[   57.719477][ T5827] veth0_vlan: entered promiscuous mode
[   57.727894][ T5827] veth1_vlan: entered promiscuous mode
[   57.747740][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.757559][ T5827] veth0_macvtap: entered promiscuous mode
[   57.757903][ T5820] Bluetooth: hci1: command tx timeout
[   57.772088][ T5827] veth1_macvtap: entered promiscuous mode
[   57.791725][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.811931][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.826404][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.836379][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.844292][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.849911][ T5820] Bluetooth: hci2: command tx timeout
[   57.852545][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.866916][ T5819] veth0_vlan: entered promiscuous mode
[   57.881154][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.888164][ T5819] veth1_vlan: entered promiscuous mode
[   57.947987][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.950929][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.973435][ T5823] veth0_vlan: entered promiscuous mode
[   57.998986][ T5823] veth1_vlan: entered promiscuous mode
[   58.006524][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.007199][ T5819] veth0_macvtap: entered promiscuous mode
[   58.013172][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.019816][ T5819] veth1_macvtap: entered promiscuous mode
[   58.054130][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.065474][ T5823] veth0_macvtap: entered promiscuous mode
[   58.079315][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.086382][ T5823] veth1_macvtap: entered promiscuous mode
[   58.090593][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.137306][ T5690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.153978][ T5690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.167118][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.169917][ T5690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.192718][ T5690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.198749][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'.
[   58.207711][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.241874][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.242490][ T5890] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET)
[   58.255520][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.263117][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.267105][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.349797][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.353043][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.383495][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.392609][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.402847][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.409753][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.433516][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.437292][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.621661][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.629339][ T5903] tipc: Started in network mode
[   58.646334][ T5903] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   58.653027][ T5907] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.11'.
[   58.661390][ T5903] tipc: Enabled bearer <eth:vlan0>, priority 18
[   58.739235][ T5915] syz_tun: entered allmulticast mode
[   58.741513][ T5913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15'.
[   58.758012][ T5915] syz_tun: left allmulticast mode
[   58.759768][ T5913] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.767284][ T5913] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   58.802506][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   59.030790][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23'.
[   59.223084][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'.
[   59.240861][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'.
[   59.653007][ T5986] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.47'.
[   59.755729][ T5820] Bluetooth: hci0: command tx timeout
[   59.781451][ T5841] tipc: Node number set to 10005162
[   59.841065][ T5820] Bluetooth: hci1: command tx timeout
[   59.915027][ T5820] Bluetooth: hci2: command tx timeout
[   60.105944][ T6015] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.140585][ T6017] netlink: 40 bytes leftover after parsing attributes in process `syz.0.62'.
[   60.195830][   T33] audit: type=1804 audit(1754074505.058:2): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.64" name="/newroot/30/cgroup.controllers" dev="tmpfs" ino=168 res=1 errno=0
[   60.203284][   T33] audit: type=1800 audit(1754074505.058:3): pid=6021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.64" name="cgroup.controllers" dev="tmpfs" ino=168 res=0 errno=0
[   60.340350][ T6034] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   60.668907][ T6056] xfrm1: entered promiscuous mode
[   60.670845][ T6056] xfrm1: entered allmulticast mode
[   60.834212][ T6072] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   60.849812][ T6072] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   61.378033][ T6100] blkio.reset_stats is deprecated
[   61.835230][ T5820] Bluetooth: hci0: command tx timeout
[   61.898241][ T6112] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   61.901353][ T6112] netlink: 'syz.2.103': attribute type 2 has an invalid length.
[   61.916578][ T5820] Bluetooth: hci1: command tx timeout
[   61.948756][ T6113] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   61.951620][ T6113] netlink: 'syz.2.103': attribute type 2 has an invalid length.
[   61.995836][ T5820] Bluetooth: hci2: command tx timeout
[   62.497159][ T6126] netlink: 'syz.2.107': attribute type 10 has an invalid length.
[   62.500867][ T6126] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   62.670891][ T6144] warning: `syz.2.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.181252][ T6170] netlink: 'syz.1.129': attribute type 6 has an invalid length.
[   63.242410][ T6172] pimreg3: entered allmulticast mode
[   63.272053][ T6148] __nla_validate_parse: 6 callbacks suppressed
[   63.272070][ T6148] netlink: 248 bytes leftover after parsing attributes in process `syz.2.118'.
[   63.377669][ T6175] netlink: 788 bytes leftover after parsing attributes in process `syz.0.131'.
[   63.915359][ T5820] Bluetooth: hci0: command tx timeout
[   63.918612][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'.
[   63.918715][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'.
[   63.926066][ T6215] ip6gre1: entered allmulticast mode
[   63.994972][ T5820] Bluetooth: hci1: command tx timeout
[   64.074988][ T5820] Bluetooth: hci2: command tx timeout
[   64.345377][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'.
[   64.420481][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'.
[   64.494115][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'.
[   64.501645][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.540203][ T6272] bridge_slave_1 (unregistering): left allmulticast mode
[   64.542973][ T6272] bridge_slave_1 (unregistering): left promiscuous mode
[   64.549701][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.211803][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   65.505157][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'.
[   65.662212][ T6363] netlink: 'syz.1.196': attribute type 10 has an invalid length.
[   65.666244][ T6363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.196'.
[   65.689311][ T6363] team0: Port device geneve0 added
[   65.724203][ T6363] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   65.985465][ T6388] syzkaller1: entered promiscuous mode
[   65.987974][ T6388] syzkaller1: entered allmulticast mode
[   66.274130][ T6418] unknown channel width for channel at 909000KHz?
[   66.278134][ T6418] unknown channel width for channel at 909000KHz?
[   66.280767][ T6418] unknown channel width for channel at 909000KHz?
[   66.432088][ T6429] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[   66.623752][ T6448] netlink: 'syz.1.224': attribute type 4 has an invalid length.
[   66.910082][ T6474] tipc: Resetting bearer <eth:vlan0>
[   66.976059][ T6474] tipc: Disabling bearer <eth:vlan0>
[   67.157212][ T6491] netlink: 'syz.1.247': attribute type 12 has an invalid length.
[   68.031308][ T6510] IPv4: Oversized IP packet from 127.202.26.0
[   68.081573][ T6512] tipc: Started in network mode
[   68.084037][ T6512] tipc: Node identity , cluster identity 4711
[   68.087520][ T6512] tipc: Failed to obtain node identity
[   68.089730][ T6512] tipc: Enabling of bearer <eth:wg0> rejected, failed to enable media
[   68.099335][  T790] cfg80211: failed to load regulatory.db
[   68.150315][ T6519] unsupported nlmsg_type 40
[   68.201116][ T6527] netlink: 'syz.0.261': attribute type 1 has an invalid length.
[   68.453765][ T6542] __nla_validate_parse: 12 callbacks suppressed
[   68.453778][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.266'.
[   68.491750][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'.
[   68.682932][ T6566] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   68.703474][ T6566] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   68.812778][ T6578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.283'.
[   68.828698][ T6578] bond1: entered promiscuous mode
[   68.831630][ T6578] bond1: entered allmulticast mode
[   68.833574][ T6578] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.583634][ T6634] pim6reg1: entered promiscuous mode
[   69.586112][ T6634] pim6reg1: entered allmulticast mode
[   69.769621][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'.
[   69.889734][ T6662] netlink: 60 bytes leftover after parsing attributes in process `syz.2.319'.
[   70.083896][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'.
[   70.099307][ T6687] pimreg3: entered allmulticast mode
[   70.144781][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'.
[   70.382698][ T6706] syzkaller0: entered allmulticast mode
[   70.475999][ T6703] syzkaller0: left allmulticast mode
[   70.600622][ T6743] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   70.666012][ T6749] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   70.668381][ T6749] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   70.671026][ T6749] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   70.685165][ T6751] netlink: 248 bytes leftover after parsing attributes in process `syz.0.358'.
[   70.827535][ T6766] Bluetooth: MGMT ver 1.23
[   71.119068][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.121639][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.312274][ T6795] tipc: Started in network mode
[   71.313989][ T6795] tipc: Node identity 5636a6b619f4, cluster identity 4711
[   71.351200][ T6795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.372416][ T6801] syzkaller0: entered promiscuous mode
[   71.384679][ T6801] syzkaller0: entered allmulticast mode
[   71.469882][ T6795] tipc: Resetting bearer <eth:syzkaller0>
[   71.634063][ T6814] netlink: 100 bytes leftover after parsing attributes in process `syz.1.376'.
[   71.763180][ T6831] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.385'.
[   71.832972][ T6842] syzkaller1: entered promiscuous mode
[   71.836443][ T6842] syzkaller1: entered allmulticast mode
[   72.208142][ T6882] Zero length message leads to an empty skb
[   72.296451][ T6891] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   72.385062][ T6891] nbd0: detected capacity change from 0 to 127
[   72.389882][   T55] block nbd0: Receive control failed (result -32)
[   72.390911][ T5825] block nbd0: Send control failed (result -32)
[   72.404451][ T5825] block nbd0: Request send failed, requeueing
[   72.413945][ T5825] block nbd0: Dead connection, failed to find a fallback
[   72.418404][ T5825] block nbd0: shutting down sockets
[   72.418771][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.421092][ T5825] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.425776][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.431548][ T5825] Buffer I/O error on dev nbd0, logical block 1, async page read
[   72.445500][ T5825] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.450142][ T5825] Buffer I/O error on dev nbd0, logical block 2, async page read
[   72.454282][ T5825] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.461097][ T5825] Buffer I/O error on dev nbd0, logical block 3, async page read
[   72.464948][  T790] tipc: Node number set to 1338156726
[   72.465040][ T5825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.471151][ T5825] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.477367][ T5825] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.482142][ T5825] Buffer I/O error on dev nbd0, logical block 1, async page read
[   72.486448][ T5825] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.490216][ T5825] Buffer I/O error on dev nbd0, logical block 2, async page read
[   72.493770][ T5825] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.498346][ T5825] Buffer I/O error on dev nbd0, logical block 3, async page read
[   72.502540][ T5825] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.507503][ T5825] Buffer I/O error on dev nbd0, logical block 0, async page read
[   72.524140][ T5825] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.529176][ T5825] Buffer I/O error on dev nbd0, logical block 1, async page read
[   72.536745][ T5825] ldm_validate_partition_table(): Disk read failed.
[   72.542365][ T5825] Dev nbd0: unable to read RDB block 0
[   72.546536][ T5825]  nbd0: unable to read partition table
[   72.569105][ T5825] ldm_validate_partition_table(): Disk read failed.
[   72.577248][ T5825] Dev nbd0: unable to read RDB block 0
[   72.585526][ T5825]  nbd0: unable to read partition table
[   72.727671][ T6904] tipc: Failed to remove unknown binding: 66,1,1/0:3737980471/3737980473
[   72.735895][ T6904] tipc: Failed to remove unknown binding: 66,1,1/0:3737980471/3737980473
[   72.740032][ T6904] tipc: Failed to remove unknown binding: 66,1,1/0:3737980471/3737980473
[   72.921666][ T6910] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   73.581281][ T6973] __nla_validate_parse: 2 callbacks suppressed
[   73.581293][ T6973] netlink: 44 bytes leftover after parsing attributes in process `syz.2.445'.
[   73.619796][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'.
[   73.622839][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'.
[   73.627811][ T6974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.753635][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'.
[   73.760043][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'.
[   74.058499][ T7016] netlink: 248 bytes leftover after parsing attributes in process `syz.1.465'.
[   74.093759][ T7020] netlink: 132 bytes leftover after parsing attributes in process `syz.1.467'.
[   74.185908][ T7026] netlink: 'syz.0.470': attribute type 1 has an invalid length.
[   74.188463][ T7026] netlink: 224 bytes leftover after parsing attributes in process `syz.0.470'.
[   74.282417][ T7039] netlink: 'syz.1.475': attribute type 1 has an invalid length.
[   74.286047][ T7039] netlink: 208 bytes leftover after parsing attributes in process `syz.1.475'.
[   74.546921][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'.
[   74.550710][ T7062] netlink: 'syz.1.487': attribute type 12 has an invalid length.
[   74.554037][ T7062] netlink: 'syz.1.487': attribute type 11 has an invalid length.
[   74.710670][ T7073] team0: entered promiscuous mode
[   74.712890][ T7073] team_slave_0: entered promiscuous mode
[   74.716396][ T7073] team_slave_1: entered promiscuous mode
[   74.822472][ T7073] team0 (unregistering): left promiscuous mode
[   74.826116][ T7076] IPVS: Scheduler module ip_vs_sip not found
[   74.829309][ T7073] team_slave_0: left promiscuous mode
[   74.832370][ T7073] team_slave_1: left promiscuous mode
[   74.844376][ T7073] team0 (unregistering): Port device team_slave_0 removed
[   74.852827][ T7073] team0 (unregistering): Port device team_slave_1 removed
[   75.009082][ T7086] netlink: 'syz.1.498': attribute type 39 has an invalid length.
[   75.842769][ T7146] hsr_slave_0: left promiscuous mode
[   75.868644][ T7146] hsr_slave_1: left promiscuous mode
[   75.949362][ T7156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
Connection to localhost closed by remote host.
[   77.486466][ T5690] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.553993][ T5690] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.619308][ T5690] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.676021][ T5690] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.779606][ T5690] bridge_slave_1: left allmulticast mode
[   77.781756][ T5690] bridge_slave_1: left promiscuous mode
[   77.784490][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.790484][ T5690] bridge_slave_0: left allmulticast mode
[   77.792424][ T5690] bridge_slave_0: left promiscuous mode
[   77.795589][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.137886][ T5690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.142760][ T5690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.146828][ T5690] bond0 (unregistering): Released all slaves
[   78.205066][ T5690] bond1 (unregistering): Released all slaves
[   78.267945][ T5690] tipc: Left network mode
[   78.370853][ T5690] hsr_slave_0: left promiscuous mode
[   78.373390][ T5690] hsr_slave_1: left promiscuous mode
[   78.377440][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.379943][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.383207][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.385885][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.398121][ T5690] veth1_macvtap: left promiscuous mode
[   78.400280][ T5690] veth0_macvtap: left promiscuous mode
[   79.147417][ T5690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.203370][ T5690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.277548][ T5690] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.339754][ T5690] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.449402][ T5690] bridge_slave_1: left allmulticast mode
[   79.451986][ T5690] bridge_slave_1: left promiscuous mode
[   79.454008][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.461017][ T5690] bridge_slave_0: left allmulticast mode
[   79.463410][ T5690] bridge_slave_0: left promiscuous mode
[   79.470875][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.482704][ T5690] tipc: Resetting bearer <eth:syzkaller0>
[   79.733585][ T5690] tipc: Disabling bearer <eth:syzkaller0>
[   79.851878][ T5690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.858583][ T5690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.864022][ T5690] bond0 (unregistering): Released all slaves
[   79.952418][ T5690] tipc: Left network mode
[   80.158018][ T5690] hsr_slave_0: left promiscuous mode
[   80.160739][ T5690] hsr_slave_1: left promiscuous mode
[   80.163250][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.167170][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.170293][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.173193][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.181488][ T5690] veth1_macvtap: left promiscuous mode
[   80.183676][ T5690] veth0_macvtap: left promiscuous mode
[   80.187718][ T5690] veth1_vlan: left promiscuous mode
[   80.189908][ T5690] veth0_vlan: left promiscuous mode
[   80.258647][ T5690] pimreg3 (unregistering): left allmulticast mode
[   80.518937][ T5690] team0 (unregistering): Port device team_slave_1 removed
[   80.549299][ T5690] team0 (unregistering): Port device team_slave_0 removed
[   80.900480][  T790] infiniband syz1: ib_query_port failed (-19)
[   81.163485][ T5690] ------------[ cut here ]------------
[   81.166157][ T5690] WARNING: CPU: 1 PID: 5690 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[   81.170543][ T5690] Modules linked in:
[   81.172559][ T5690] CPU: 1 UID: 0 PID: 5690 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[   81.178680][ T5690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.183479][ T5690] Workqueue: netns cleanup_net
[   81.186417][ T5690] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[   81.189100][ T5690] Code: a5 b0 e8 f7 4b 83 3c 2c 00 75 19 e8 a9 8d 85 f7 49 81 fd f8 07 00 00 74 1d e8 9b 8d 85 f7 49 83 c5 08 eb c9 e8 90 8d 85 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[   81.197458][ T5690] RSP: 0018:ffffc90002dff8b0 EFLAGS: 00010293
[   81.200125][ T5690] RAX: ffffffff8a3a2320 RBX: ffff88812408c000 RCX: ffff8880217b3980
[   81.204030][ T5690] RDX: 0000000000000000 RSI: ffffffff8db65e93 RDI: ffff88812408c0b8
[   81.207934][ T5690] RBP: ffffc90002dff9b0 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[   81.211330][ T5690] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: ffff88812408c000
[   81.214886][ T5690] R13: 00000000000000b8 R14: ffff888020872440 R15: dffffc0000000000
[   81.218254][ T5690] FS:  0000000000000000(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000
[   81.222071][ T5690] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   81.225288][ T5690] CR2: 00007fff653d19e8 CR3: 0000000020a60000 CR4: 00000000000006f0
[   81.229074][ T5690] Call Trace:
[   81.230657][ T5690]  <TASK>
[   81.231989][ T5690]  ops_undo_list+0x49a/0x990
[   81.233997][ T5690]  ? __pfx_ops_undo_list+0x10/0x10
[   81.236383][ T5690]  ? do_raw_spin_unlock+0x4d/0x240
[   81.238621][ T5690]  cleanup_net+0x4c5/0x800
[   81.240394][ T5690]  ? __pfx_cleanup_net+0x10/0x10
[   81.242969][ T5690]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.245678][ T5690]  ? process_scheduled_works+0x9ef/0x17b0
[   81.248654][ T5690]  ? process_scheduled_works+0x9ef/0x17b0
[   81.251606][ T5690]  process_scheduled_works+0xae1/0x17b0
[   81.254387][ T5690]  ? __pfx_process_scheduled_works+0x10/0x10
[   81.257366][ T5690]  worker_thread+0x8a0/0xda0
[   81.259428][ T5690]  kthread+0x711/0x8a0
[   81.261244][ T5690]  ? __pfx_worker_thread+0x10/0x10
[   81.263465][ T5690]  ? __pfx_kthread+0x10/0x10
[   81.265648][ T5690]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.267916][ T5690]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.270207][ T5690]  ? __pfx_kthread+0x10/0x10
[   81.272222][ T5690]  ret_from_fork+0x3fc/0x770
[   81.274244][ T5690]  ? __pfx_ret_from_fork+0x10/0x10
[   81.276745][ T5690]  ? __switch_to_asm+0x39/0x70
[   81.279013][ T5690]  ? __switch_to_asm+0x33/0x70
[   81.281168][ T5690]  ? __pfx_kthread+0x10/0x10
[   81.283201][ T5690]  ret_from_fork_asm+0x1a/0x30
[   81.285463][ T5690]  </TASK>
[   81.286818][ T5690] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   81.290175][ T5690] CPU: 1 UID: 0 PID: 5690 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[   81.296111][ T5690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.300476][ T5690] Workqueue: netns cleanup_net
[   81.302625][ T5690] Call Trace:
[   81.304162][ T5690]  <TASK>
[   81.305456][ T5690]  dump_stack_lvl+0x99/0x250
[   81.307628][ T5690]  ? __asan_memcpy+0x40/0x70
[   81.309811][ T5690]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.312181][ T5690]  ? __pfx__printk+0x10/0x10
[   81.314224][ T5690]  panic+0x2db/0x790
[   81.315989][ T5690]  ? __pfx_panic+0x10/0x10
[   81.318023][ T5690]  ? ret_from_fork_asm+0x1a/0x30
[   81.320167][ T5690]  __warn+0x31b/0x4b0
[   81.321924][ T5690]  ? xfrm6_tunnel_net_exit+0x81/0x100
[   81.324230][ T5690]  ? xfrm6_tunnel_net_exit+0x81/0x100
[   81.326653][ T5690]  report_bug+0x2be/0x4f0
[   81.328750][ T5690]  ? xfrm6_tunnel_net_exit+0x81/0x100
[   81.331561][ T5690]  ? xfrm6_tunnel_net_exit+0x81/0x100
[   81.333972][ T5690]  ? xfrm6_tunnel_net_exit+0x83/0x100
[   81.336430][ T5690]  handle_bug+0x84/0x160
[   81.338173][ T5690]  exc_invalid_op+0x1a/0x50
[   81.339800][ T5690]  asm_exc_invalid_op+0x1a/0x20
[   81.341625][ T5690] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[   81.343995][ T5690] Code: a5 b0 e8 f7 4b 83 3c 2c 00 75 19 e8 a9 8d 85 f7 49 81 fd f8 07 00 00 74 1d e8 9b 8d 85 f7 49 83 c5 08 eb c9 e8 90 8d 85 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[   81.351437][ T5690] RSP: 0018:ffffc90002dff8b0 EFLAGS: 00010293
[   81.354259][ T5690] RAX: ffffffff8a3a2320 RBX: ffff88812408c000 RCX: ffff8880217b3980
[   81.357620][ T5690] RDX: 0000000000000000 RSI: ffffffff8db65e93 RDI: ffff88812408c0b8
[   81.361289][ T5690] RBP: ffffc90002dff9b0 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[   81.364229][ T5690] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: ffff88812408c000
[   81.366986][ T5690] R13: 00000000000000b8 R14: ffff888020872440 R15: dffffc0000000000
[   81.370299][ T5690]  ? xfrm6_tunnel_net_exit+0x80/0x100
[   81.372381][ T5690]  ops_undo_list+0x49a/0x990
[   81.374057][ T5690]  ? __pfx_ops_undo_list+0x10/0x10
[   81.375985][ T5690]  ? do_raw_spin_unlock+0x4d/0x240
[   81.377913][ T5690]  cleanup_net+0x4c5/0x800
[   81.379675][ T5690]  ? __pfx_cleanup_net+0x10/0x10
[   81.382249][ T5690]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.384646][ T5690]  ? process_scheduled_works+0x9ef/0x17b0
[   81.387367][ T5690]  ? process_scheduled_works+0x9ef/0x17b0
[   81.389925][ T5690]  process_scheduled_works+0xae1/0x17b0
[   81.392357][ T5690]  ? __pfx_process_scheduled_works+0x10/0x10
[   81.394961][ T5690]  worker_thread+0x8a0/0xda0
[   81.396993][ T5690]  kthread+0x711/0x8a0
[   81.399019][ T5690]  ? __pfx_worker_thread+0x10/0x10
[   81.401234][ T5690]  ? __pfx_kthread+0x10/0x10
[   81.403270][ T5690]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.405705][ T5690]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.408039][ T5690]  ? __pfx_kthread+0x10/0x10
[   81.410273][ T5690]  ret_from_fork+0x3fc/0x770
[   81.412366][ T5690]  ? __pfx_ret_from_fork+0x10/0x10
[   81.414593][ T5690]  ? __switch_to_asm+0x39/0x70
[   81.416681][ T5690]  ? __switch_to_asm+0x33/0x70
[   81.418772][ T5690]  ? __pfx_kthread+0x10/0x10
[   81.420562][ T5690]  ret_from_fork_asm+0x1a/0x30
[   81.422609][ T5690]  </TASK>
[   81.424676][ T5690] Kernel Offset: disabled
[   81.426661][ T5690] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:55:26  Registers:
info registers vcpu 0

CPU#0
RAX=b62855b52e36ea00 RBX=ffffffff81969b18 RCX=b62855b52e36ea00 RDX=0000000000000001
RSI=ffffffff8d979100 RDI=ffffffff8be30a00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07af0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff653d19e8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff000000ff000000 0000000000000000 XMM05=0000000000000233 0000000000310030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffff00ff00 XMM09=6c6c696b66722f33 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002dff050
R8 =ffff888020180237 R9 =1ffff11004030046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a958ee R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff653d19e8 CR3=0000000020a60000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff000000ff000000 0000000000000000 XMM05=0000000000000071 00002d73000e0038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffff0000ff00ff00 XMM09=0000000000000071 00302d7800370038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
