last executing test programs:

531.737036ms ago: executing program 1 (id=349):
socket$rds(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000))

420.760959ms ago: executing program 1 (id=353):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r0, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040))

352.252692ms ago: executing program 2 (id=354):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003180)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0)

351.866297ms ago: executing program 1 (id=355):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a20000000000a01010000000000000000050000000900010073797a30000000004c000000030a01080000000000000000050000000900010073797a30000000000900030073797a3200000000140004800800024000000014080001"], 0x94}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000000000070000000006001500040000001400168010000880"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0)

351.6233ms ago: executing program 0 (id=356):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@gettfilter={0x2c, 0x2e, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff3}, {0x2, 0x2}, {0x6, 0xffe0}}, [{0x46, 0xb, 0xbb6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8890}, 0x1040)

270.872162ms ago: executing program 1 (id=357):
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @echo}}}}, 0x0)

270.619092ms ago: executing program 2 (id=358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@newqdisc={0x26c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x240, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x8}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x3}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_FLAGS={0x0, 0x4, {0x8, 0x4}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x5}, @TCA_RED_MARK_BLOCK={0x0, 0x6, 0x20000000}, @TCA_RED_FLAGS={0xc, 0x4, {0x17, 0x10}}]}}]}, 0x26c}}, 0x0)

270.233178ms ago: executing program 0 (id=359):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x9b}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)

269.692082ms ago: executing program 1 (id=360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan0\x00', <r3=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r3, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001)

209.929508ms ago: executing program 2 (id=361):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

209.583016ms ago: executing program 0 (id=362):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

145.245458ms ago: executing program 2 (id=363):
unshare(0x24060400)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)

144.928268ms ago: executing program 1 (id=364):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
r2 = socket(0x8, 0x0, 0x8000)
ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @loopback}, &(0x7f00000001c0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000003140)={@initdev, @broadcast}, &(0x7f0000003180)=0xc)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, &(0x7f0000003700))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000004ac0)={'syztnl0\x00', &(0x7f0000004a40)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x2, 0x81, 0xa, @empty, @private1, 0x700, 0x40, 0x6, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000005340)={'syztnl0\x00', &(0x7f00000052c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0xba, 0x6, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x20, 0x700, 0x3, 0x6}})
sendmmsg$inet(r0, 0x0, 0x0, 0x8000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1ff, 0x8}, &(0x7f0000000280)=0x8)

144.48306ms ago: executing program 2 (id=365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x20000080)
sendto$packet(r2, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x9, 0x6, @broadcast}, 0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000011000000200000000000000", @ANYRES32, @ANYBLOB="00001600000000000000000000000000000000006c139675ecba7dee688b74484e5242547ee1ce30233ef7faaf7df4b150780e83392282ae2ac21852c1863c6052c420fd63156abbeffeb8052d6fa11f9ae59d94f49864fd3142a23c6ae0eb7cd95ebe748566bdc24a441bfe54ac1c94431634883064959f38a71611f65a1851c7b768b34e03f9b705d3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r10, &(0x7f0000000180), &(0x7f00000009c0)=""/182}, 0x20)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg0\x00', 0x1000})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r12, 0x894a, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x6, 0x5, 0x5, 0x7, 0x8}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xe, 0x10}, {0xfff2, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054)
socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0xfffffffffffffeb7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff70000000000000000850000003602000095000000000000005794623eaed2a7586527efc46a652f38135eb1388742255e284cb675bb"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

144.344592ms ago: executing program 0 (id=366):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

81.877577ms ago: executing program 0 (id=367):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x838, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x820, 0x1, 0x0, 0x1, [@nested={0x81c, 0x40, 0x0, 0x1, [@generic="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", @typed={0x4, 0x14e}, @nested={0x11, 0x48, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="2f8327c5b8"]}]}]}]}, 0x838}}, 0x4010)

476.155µs ago: executing program 0 (id=368):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=0x1, r0, 0x5}, 0x10)

0s ago: executing program 2 (id=369):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35411' (ED25519) to the list of known hosts.
syzkaller login: [   58.508710][ T5806] cgroup: Unknown subsys name 'net'
[   58.626034][ T5806] cgroup: Unknown subsys name 'cpuset'
[   58.632912][ T5806] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.946779][ T5806] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.521912][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.526546][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.529990][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.534140][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.537577][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.643830][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.648087][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.651871][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.656068][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.662149][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.676337][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.681208][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.685142][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.688917][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.694104][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.959183][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   66.991138][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   67.171801][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.175727][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.178790][ T5825] bridge_slave_0: entered allmulticast mode
[   67.184313][ T5825] bridge_slave_0: entered promiscuous mode
[   67.218429][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.221845][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.224952][ T5825] bridge_slave_1: entered allmulticast mode
[   67.228815][ T5825] bridge_slave_1: entered promiscuous mode
[   67.241301][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   67.249225][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.252489][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.255319][ T5831] bridge_slave_0: entered allmulticast mode
[   67.259054][ T5831] bridge_slave_0: entered promiscuous mode
[   67.307385][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.310516][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.313515][ T5831] bridge_slave_1: entered allmulticast mode
[   67.317262][ T5831] bridge_slave_1: entered promiscuous mode
[   67.338292][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.345266][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.409955][ T5825] team0: Port device team_slave_0 added
[   67.422195][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.427556][ T5825] team0: Port device team_slave_1 added
[   67.446965][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.497613][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.500838][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.511908][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.537528][ T5831] team0: Port device team_slave_0 added
[   67.557234][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.560096][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.571407][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.579065][ T5831] team0: Port device team_slave_1 added
[   67.630513][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.635413][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.638457][ T5829] bridge_slave_0: entered allmulticast mode
[   67.643164][ T5829] bridge_slave_0: entered promiscuous mode
[   67.648104][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.651603][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.655033][ T5829] bridge_slave_1: entered allmulticast mode
[   67.659028][ T5829] bridge_slave_1: entered promiscuous mode
[   67.678176][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.681340][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.691944][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.711860][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.714699][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.726703][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.747224][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.772351][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.781301][ T5825] hsr_slave_0: entered promiscuous mode
[   67.784226][ T5825] hsr_slave_1: entered promiscuous mode
[   67.827718][ T5829] team0: Port device team_slave_0 added
[   67.868215][ T5829] team0: Port device team_slave_1 added
[   67.889796][ T5831] hsr_slave_0: entered promiscuous mode
[   67.893628][ T5831] hsr_slave_1: entered promiscuous mode
[   67.896432][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   67.898396][ T5831] Cannot create hsr debugfs directory
[   67.924195][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.927126][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.937598][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.947769][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.951235][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.959291][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.072962][ T5829] hsr_slave_0: entered promiscuous mode
[   68.076037][ T5829] hsr_slave_1: entered promiscuous mode
[   68.078564][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   68.081630][ T5829] Cannot create hsr debugfs directory
[   68.293349][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.314904][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.331374][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.344593][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.405288][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.412683][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.418758][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.425183][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.489720][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.498264][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.518287][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.528703][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.571394][ T5209] Bluetooth: hci0: command tx timeout
[   68.618379][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.649509][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.665975][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   68.686848][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   68.694894][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.697834][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.714606][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.717460][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.722497][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.725038][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.731870][ T5209] Bluetooth: hci2: command tx timeout
[   68.732606][   T56] Bluetooth: hci1: command tx timeout
[   68.743308][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.746143][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.802190][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.826953][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.853608][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   68.874955][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.877761][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.906615][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.909586][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.984048][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.087133][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.124470][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.189369][ T5831] veth0_vlan: entered promiscuous mode
[   69.204616][ T5831] veth1_vlan: entered promiscuous mode
[   69.214678][ T5825] veth0_vlan: entered promiscuous mode
[   69.229446][ T5831] veth0_macvtap: entered promiscuous mode
[   69.234003][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.239672][ T5825] veth1_vlan: entered promiscuous mode
[   69.251929][ T5831] veth1_macvtap: entered promiscuous mode
[   69.285727][ T5825] veth0_macvtap: entered promiscuous mode
[   69.293479][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.299609][ T5825] veth1_macvtap: entered promiscuous mode
[   69.314218][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.346449][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.349174][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.357417][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.368562][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.373220][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.384371][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.400435][ T5829] veth0_vlan: entered promiscuous mode
[   69.404810][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.416310][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.419289][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.444255][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.455594][ T5829] veth1_vlan: entered promiscuous mode
[   69.533990][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.538431][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.558805][ T5829] veth0_macvtap: entered promiscuous mode
[   69.580511][ T5829] veth1_macvtap: entered promiscuous mode
[   69.586237][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.588819][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.613424][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.623181][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.640041][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.647358][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.664458][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.670127][ T2252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.681568][ T2252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.691563][ T5889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.696114][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.705923][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.790061][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.826593][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.833951][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.917508][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.923994][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.035156][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'.
[   70.234613][ T5907] netlink: 240 bytes leftover after parsing attributes in process `syz.2.8'.
[   70.303411][ T5915] pim6reg1: entered promiscuous mode
[   70.305317][ T5915] pim6reg1: entered allmulticast mode
[   70.380233][ T5919] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET)
[   70.649480][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'.
[   70.671132][   T56] Bluetooth: hci0: command tx timeout
[   70.688722][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'.
[   70.703277][ T5935] netlink: 'syz.2.22': attribute type 14 has an invalid length.
[   70.811831][   T56] Bluetooth: hci1: command tx timeout
[   70.814188][ T5209] Bluetooth: hci2: command tx timeout
[   70.834099][ T5942] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.841501][ T5942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26'.
[   71.138569][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.140975][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.312359][ T5979] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.41'.
[   71.425654][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.46'.
[   71.445153][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.46'.
[   71.621491][ T5998] Zero length message leads to an empty skb
[   71.706500][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.53'.
[   71.881892][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'.
[   72.304483][ T6057] netlink: 'syz.2.77': attribute type 29 has an invalid length.
[   72.311591][ T6057] netlink: 'syz.2.77': attribute type 29 has an invalid length.
[   72.316057][ T6057] netlink: 'syz.2.77': attribute type 29 has an invalid length.
[   72.319368][ T6057] netlink: 'syz.2.77': attribute type 29 has an invalid length.
[   72.342031][ T6057] netlink: 'syz.2.77': attribute type 29 has an invalid length.
[   72.344716][ T6057] netlink: 'syz.2.77': attribute type 29 has an invalid length.
[   72.347419][ T6057] netlink: 'syz.2.77': attribute type 29 has an invalid length.
[   72.353341][ T6057] netlink: 'syz.2.77': attribute type 29 has an invalid length.
[   72.358880][ T6057] netlink: 'syz.2.77': attribute type 29 has an invalid length.
[   72.730894][   T56] Bluetooth: hci0: command tx timeout
[   72.890265][   T56] Bluetooth: hci2: command tx timeout
[   72.899261][ T6090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.901004][   T56] Bluetooth: hci1: command tx timeout
[   73.492183][  T789] cfg80211: failed to load regulatory.db
[   74.063199][ T6176] warning: `syz.0.134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.249849][ T6188] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.812194][   T56] Bluetooth: hci0: command tx timeout
[   74.970788][   T56] Bluetooth: hci1: command tx timeout
[   74.971873][ T5209] Bluetooth: hci2: command tx timeout
[   75.345651][ T6265] __nla_validate_parse: 8 callbacks suppressed
[   75.345671][ T6265] netlink: 48 bytes leftover after parsing attributes in process `syz.2.170'.
[   75.382516][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'.
[   75.386553][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'.
[   75.733820][ T6286] syzkaller1: entered promiscuous mode
[   75.735743][ T6286] syzkaller1: entered allmulticast mode
[   75.967654][ T6292] netlink: 1360 bytes leftover after parsing attributes in process `syz.1.187'.
[   75.972299][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'.
[   76.059568][ T6294] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[   76.072866][ T6296] netlink: 48 bytes leftover after parsing attributes in process `syz.1.188'.
[   76.292344][ T6301] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.190'.
[   76.777671][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'.
[   76.846393][ T5889] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[   77.408492][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'.
[   77.550605][ T6351] netlink: 732 bytes leftover after parsing attributes in process `syz.1.206'.
[   77.601462][ T6355] validate_nla: 22 callbacks suppressed
[   77.601496][ T6355] netlink: 'syz.1.208': attribute type 1 has an invalid length.
[   77.843101][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.087848][ T6255] Set syz1 is full, maxelem 65536 reached
[   78.437861][ T6413] netlink: 'syz.1.236': attribute type 4 has an invalid length.
[   78.748850][ T6437] Bluetooth: MGMT ver 1.23
[   78.918332][ T6442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.987135][ T6442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.088988][ T6442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.190938][ T6442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.355421][ T5889] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.437961][ T5889] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.445903][ T5889] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.452175][ T6470] bond0: invalid ARP target 0.0.0.0 specified for addition
[   79.454463][ T6470] bond0: option arp_ip_target: invalid value (0)
[   79.456978][ T5889] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.747701][ T6495] Unsupported xt match
[   79.747721][ T6495] unable to load match
[   79.846885][ T6503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.214182][ T6567] __nla_validate_parse: 12 callbacks suppressed
[   81.214198][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'.
[   81.220556][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'.
[   82.017541][ T6616] netlink: 'syz.1.324': attribute type 1 has an invalid length.
[   82.021342][ T6616] netlink: 'syz.1.324': attribute type 1 has an invalid length.
[   82.725573][ T6653] openvswitch: netlink: Duplicate or invalid key (type 0).
[   82.728811][ T6653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.204800][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'.
[   83.243180][ T6688] netlink: 288 bytes leftover after parsing attributes in process `syz.2.358'.
[   83.412918][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.365'.
[   83.415943][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.365'.
[   83.419468][ T6707] netlink: 'syz.2.365': attribute type 4 has an invalid length.
[   83.433315][ T6709] netlink: zone id is out of range
[   83.435658][ T6709] netlink: zone id is out of range
[   83.440513][ T6709] netlink: zone id is out of range
[   83.442935][ T6709] netlink: zone id is out of range
[   83.445114][ T6709] netlink: zone id is out of range
[   83.446922][ T6709] netlink: zone id is out of range
[   83.449311][ T6709] netlink: zone id is out of range
[   83.454376][ T6709] netlink: zone id is out of range
[   83.456381][ T6709] netlink: zone id is out of range
[   83.459418][ T6709] netlink: zone id is out of range
Connection to localhost closed by remote host.
[   84.112270][ T5889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.196052][ T5889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.265748][ T5889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.300872][ T5889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.399040][ T5889] bridge_slave_1: left allmulticast mode
[   84.402452][ T5889] bridge_slave_1: left promiscuous mode
[   84.405152][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.411696][ T5889] bridge_slave_0: left allmulticast mode
[   84.413984][ T5889] bridge_slave_0: left promiscuous mode
[   84.416368][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.744606][ T5889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.752232][ T5889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.758442][ T5889] bond0 (unregistering): Released all slaves
[   85.078127][ T5889] hsr_slave_0: left promiscuous mode
[   85.081056][ T5889] hsr_slave_1: left promiscuous mode
[   85.083905][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.086864][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.093404][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.096399][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.113063][ T5889] veth1_macvtap: left promiscuous mode
[   85.115574][ T5889] veth0_macvtap: left promiscuous mode
[   85.118466][ T5889] veth1_vlan: left promiscuous mode
[   85.120943][ T5889] veth0_vlan: left promiscuous mode
[   85.506653][ T5889] team0 (unregistering): Port device team_slave_1 removed
[   85.538766][ T5889] team0 (unregistering): Port device team_slave_0 removed
[   86.166710][ T5889] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.223133][ T5889] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.267076][ T5889] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.295376][ T5889] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.432416][ T5889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.471594][ T5889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.526001][ T5889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.597789][ T5889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.737000][ T5889] bridge_slave_1: left allmulticast mode
[   86.739404][ T5889] bridge_slave_1: left promiscuous mode
[   86.742136][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.747199][ T5889] bridge_slave_0: left allmulticast mode
[   86.749504][ T5889] bridge_slave_0: left promiscuous mode
[   86.754126][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.762773][ T5889] bridge_slave_1: left allmulticast mode
[   86.765126][ T5889] bridge_slave_1: left promiscuous mode
[   86.767546][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.775274][ T5889] bridge_slave_0: left allmulticast mode
[   86.777595][ T5889] bridge_slave_0: left promiscuous mode
[   86.779990][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.174015][ T5889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.180832][ T5889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.185853][ T5889] bond0 (unregistering): Released all slaves
[   87.454759][ T5889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.462419][ T5889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.467321][ T5889] bond0 (unregistering): Released all slaves
[   87.893102][ T5889] hsr_slave_0: left promiscuous mode
[   87.896320][ T5889] hsr_slave_1: left promiscuous mode
[   87.898789][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.901324][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.905542][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.908184][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.940285][ T5889] hsr_slave_0: left promiscuous mode
[   87.943281][ T5889] hsr_slave_1: left promiscuous mode
[   87.946040][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.949018][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.953213][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.956142][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.986474][ T5889] veth1_macvtap: left promiscuous mode
[   87.988789][ T5889] veth0_macvtap: left promiscuous mode
[   87.991673][ T5889] veth1_vlan: left promiscuous mode
[   87.993813][ T5889] veth0_vlan: left promiscuous mode
[   87.998174][ T5889] veth1_macvtap: left promiscuous mode
[   88.000588][ T5889] veth0_macvtap: left promiscuous mode
[   88.002947][ T5889] veth1_vlan: left promiscuous mode
[   88.005809][ T5889] veth0_vlan: left promiscuous mode
[   88.475703][ T5889] team0 (unregistering): Port device team_slave_1 removed
[   88.503590][ T5889] team0 (unregistering): Port device team_slave_0 removed
[   89.092084][ T5889] team0 (unregistering): Port device team_slave_1 removed
[   89.125186][ T5889] team0 (unregistering): Port device team_slave_0 removed
[   90.341144][ T5889] ------------[ cut here ]------------
[   90.343458][ T5889] WARNING: CPU: 0 PID: 5889 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[   90.347238][ T5889] Modules linked in:
[   90.348828][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[   90.354676][ T5889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.358515][ T5889] Workqueue: netns cleanup_net
[   90.360518][ T5889] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[   90.362632][ T5889] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b8 4b 0a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 1a eb f7 e8 b1 28 a7 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a3 28 a7 f7 90 0f 0b 90 e9 60 fe ff ff
[   90.370439][ T5889] RSP: 0018:ffffc90004417898 EFLAGS: 00010293
[   90.372900][ T5889] RAX: ffffffff8a1887ff RBX: ffff8880220b8000 RCX: ffff88801fe4b980
[   90.375982][ T5889] RDX: 0000000000000000 RSI: ffffffff8db66054 RDI: ffff88801fe4b980
[   90.379163][ T5889] RBP: ffffc900044179b0 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e
[   90.382559][ T5889] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: ffffffff8f601ba0
[   90.385702][ T5889] R13: 1ffff92000882f40 R14: ffff8880220b9480 R15: dffffc0000000000
[   90.388855][ T5889] FS:  0000000000000000(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[   90.392517][ T5889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   90.395131][ T5889] CR2: 00007fc1440bfff8 CR3: 000000010928e000 CR4: 00000000000006f0
[   90.398164][ T5889] Call Trace:
[   90.399417][ T5889]  <TASK>
[   90.400748][ T5889]  xfrm_net_exit+0x2d/0x70
[   90.402577][ T5889]  ops_undo_list+0x49a/0x990
[   90.404132][ T5889]  ? __pfx_ops_undo_list+0x10/0x10
[   90.405846][ T5889]  ? do_raw_spin_unlock+0x4d/0x240
[   90.407616][ T5889]  cleanup_net+0x4c5/0x800
[   90.409244][ T5889]  ? __pfx_cleanup_net+0x10/0x10
[   90.410948][ T5889]  ? _raw_spin_unlock_irq+0x23/0x50
[   90.412646][ T5889]  ? process_scheduled_works+0x9ef/0x17b0
[   90.414521][ T5889]  ? process_scheduled_works+0x9ef/0x17b0
[   90.416297][ T5889]  process_scheduled_works+0xae1/0x17b0
[   90.418132][ T5889]  ? __pfx_process_scheduled_works+0x10/0x10
[   90.420686][ T5889]  worker_thread+0x8a0/0xda0
[   90.422302][ T5889]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   90.424604][ T5889]  ? __kthread_parkme+0x7b/0x200
[   90.426146][ T5889]  kthread+0x711/0x8a0
[   90.427431][ T5889]  ? __pfx_worker_thread+0x10/0x10
[   90.429018][ T5889]  ? __pfx_kthread+0x10/0x10
[   90.430611][ T5889]  ? __pfx_kthread+0x10/0x10
[   90.432041][ T5889]  ret_from_fork+0x3fc/0x770
[   90.433531][ T5889]  ? __pfx_ret_from_fork+0x10/0x10
[   90.435100][ T5889]  ? __switch_to_asm+0x39/0x70
[   90.436600][ T5889]  ? __switch_to_asm+0x33/0x70
[   90.438270][ T5889]  ? __pfx_kthread+0x10/0x10
[   90.440276][ T5889]  ret_from_fork_asm+0x1a/0x30
[   90.442231][ T5889]  </TASK>
[   90.443449][ T5889] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   90.445792][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[   90.449499][ T5889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.452981][ T5889] Workqueue: netns cleanup_net
[   90.454708][ T5889] Call Trace:
[   90.455776][ T5889]  <TASK>
[   90.456710][ T5889]  dump_stack_lvl+0x99/0x250
[   90.458037][ T5889]  ? __asan_memcpy+0x40/0x70
[   90.459454][ T5889]  ? __pfx_dump_stack_lvl+0x10/0x10
[   90.461156][ T5889]  ? __pfx__printk+0x10/0x10
[   90.462777][ T5889]  panic+0x2db/0x790
[   90.463996][ T5889]  ? __pfx_panic+0x10/0x10
[   90.465392][ T5889]  ? ret_from_fork_asm+0x1a/0x30
[   90.466958][ T5889]  __warn+0x31b/0x4b0
[   90.468548][ T5889]  ? xfrm_state_fini+0x270/0x2f0
[   90.470423][ T5889]  ? xfrm_state_fini+0x270/0x2f0
[   90.472314][ T5889]  report_bug+0x2be/0x4f0
[   90.474011][ T5889]  ? xfrm_state_fini+0x270/0x2f0
[   90.475959][ T5889]  ? xfrm_state_fini+0x270/0x2f0
[   90.477857][ T5889]  ? xfrm_state_fini+0x272/0x2f0
[   90.479803][ T5889]  handle_bug+0x84/0x160
[   90.481482][ T5889]  exc_invalid_op+0x1a/0x50
[   90.482982][ T5889]  asm_exc_invalid_op+0x1a/0x20
[   90.484554][ T5889] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[   90.486236][ T5889] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b8 4b 0a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 1a eb f7 e8 b1 28 a7 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a3 28 a7 f7 90 0f 0b 90 e9 60 fe ff ff
[   90.492401][ T5889] RSP: 0018:ffffc90004417898 EFLAGS: 00010293
[   90.494486][ T5889] RAX: ffffffff8a1887ff RBX: ffff8880220b8000 RCX: ffff88801fe4b980
[   90.497287][ T5889] RDX: 0000000000000000 RSI: ffffffff8db66054 RDI: ffff88801fe4b980
[   90.499988][ T5889] RBP: ffffc900044179b0 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e
[   90.503102][ T5889] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: ffffffff8f601ba0
[   90.506320][ T5889] R13: 1ffff92000882f40 R14: ffff8880220b9480 R15: dffffc0000000000
[   90.509081][ T5889]  ? xfrm_state_fini+0x26f/0x2f0
[   90.510855][ T5889]  ? xfrm_state_fini+0x26f/0x2f0
[   90.512381][ T5889]  xfrm_net_exit+0x2d/0x70
[   90.513803][ T5889]  ops_undo_list+0x49a/0x990
[   90.515246][ T5889]  ? __pfx_ops_undo_list+0x10/0x10
[   90.516832][ T5889]  ? do_raw_spin_unlock+0x4d/0x240
[   90.518424][ T5889]  cleanup_net+0x4c5/0x800
[   90.520086][ T5889]  ? __pfx_cleanup_net+0x10/0x10
[   90.522081][ T5889]  ? _raw_spin_unlock_irq+0x23/0x50
[   90.524064][ T5889]  ? process_scheduled_works+0x9ef/0x17b0
[   90.526285][ T5889]  ? process_scheduled_works+0x9ef/0x17b0
[   90.528554][ T5889]  process_scheduled_works+0xae1/0x17b0
[   90.530709][ T5889]  ? __pfx_process_scheduled_works+0x10/0x10
[   90.532839][ T5889]  worker_thread+0x8a0/0xda0
[   90.534532][ T5889]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   90.536836][ T5889]  ? __kthread_parkme+0x7b/0x200
[   90.538610][ T5889]  kthread+0x711/0x8a0
[   90.539779][ T5889]  ? __pfx_worker_thread+0x10/0x10
[   90.541504][ T5889]  ? __pfx_kthread+0x10/0x10
[   90.542979][ T5889]  ? __pfx_kthread+0x10/0x10
[   90.544549][ T5889]  ret_from_fork+0x3fc/0x770
[   90.546468][ T5889]  ? __pfx_ret_from_fork+0x10/0x10
[   90.548074][ T5889]  ? __switch_to_asm+0x39/0x70
[   90.549579][ T5889]  ? __switch_to_asm+0x33/0x70
[   90.551065][ T5889]  ? __pfx_kthread+0x10/0x10
[   90.552525][ T5889]  ret_from_fork_asm+0x1a/0x30
[   90.554304][ T5889]  </TASK>
[   90.556185][ T5889] Kernel Offset: disabled
[   90.557942][ T5889] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:55:28  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004417030
R8 =ffff888107038237 R9 =1ffff11020e07046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a958f6 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc1440bfff8 CR3=000000010928e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000411 0000000000003231
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=0000000000000411 0000000000003231
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=c28410aa8c792e00 RDX=0000000000000100
RSI=ffffffff8be309e0 RDI=ffffffff8be309a0 RBP=0000000000000000 RSP=ffffc900001e0708
R8 =0000000000000000 R9 =ffffffff81cea0a6 R10=ffffc900001e0858 R11=ffffffff81ac3450
R12=00000000000000ee R13=ffffffff81cea0a6 R14=ffffffff8e13c4e0 R15=0000000000000000
RIP=ffffffff819d8180 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f67d76c6380 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f67d7978690 CR3=000000002aefc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ff000000 000000ff000000ff XMM01=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
XMM02=ffffffff00000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
