last executing test programs:

31.070619028s ago: executing program 1 (id=702):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'tunl0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000003840), 0x0, 0x4080)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

30.999627995s ago: executing program 1 (id=704):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000038"], 0x14}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

30.901086534s ago: executing program 1 (id=707):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

30.747636886s ago: executing program 1 (id=711):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

30.691118481s ago: executing program 1 (id=713):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xafbeec54da1e82f}, 0x40)

30.360109627s ago: executing program 1 (id=723):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}]}], {0x14}}, 0x6c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x40}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0)

30.2503948s ago: executing program 32 (id=723):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}]}], {0x14}}, 0x6c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x40}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0)

1.428397953s ago: executing program 2 (id=1396):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x11, r0, 0x3000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000000)=0xfc, 0x4)

1.345181372s ago: executing program 2 (id=1398):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x0, 0x2000000000903, 0xb, 0x8}, 0x20)

1.257268233s ago: executing program 2 (id=1401):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x238, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x3, 0x4, 0x4, 0x4, 0x4], 0x1, 0xc35e26e2184081db}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="07b467a3267e", 0x8, 0x5, [0x34, 0x18, 0x3c, 0x31, 0x28, 0x31, 0x6, 0x3e, 0x1a, 0x37, 0x4, 0x3, 0x20, 0x15, 0x15, 0x36], 0x2, 0x1400000, 0x10}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1f}, @local, 0x0, 0xff, 'geneve1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0x1, 0xa}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x100000000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

1.14722217s ago: executing program 3 (id=1403):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x3, 0x802, 0x9141, 0x3, 0x0, 0xf42, 0x8}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x3502, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

1.064456479s ago: executing program 3 (id=1406):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004"], 0x122}}, 0x10)

995.691888ms ago: executing program 3 (id=1407):
unshare(0x22020600)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000040), 0x4)

902.868993ms ago: executing program 3 (id=1409):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@generic={0x1d, "762e635a430760596cf4f7268473843f846b301daea9a3e9afb2522ac212669bc69fead0cf4ec0e89be561b93445c501e462f176be627cde87853a698c1b42aaaab813a3bbcd9766d0fa752b27178272f8a7204d4055706310cc6f833e858b3b0ae56d25744be87ddeec1dfa37c1528ac4b03350326a5c37be7f519df4df"}, 0x80, 0x0}}], 0x2, 0x60000800)

824.612181ms ago: executing program 3 (id=1411):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0)

746.918581ms ago: executing program 3 (id=1413):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1}, 0x18)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="8010e60080ed78", 0x206c}], 0x1}}], 0x1, 0x40000)

308.121968ms ago: executing program 0 (id=1420):
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0xc0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0)

244.676239ms ago: executing program 0 (id=1421):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf251b00000008001500020000000400190008000100", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84)

243.69833ms ago: executing program 2 (id=1422):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340002800800080006040000060002004e200000080007000800000005000d00010000000800060009"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

186.160538ms ago: executing program 0 (id=1423):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)

134.945262ms ago: executing program 2 (id=1424):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x400, 0xbf28, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='ipvlan1\x00', 0x10)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0)

75.931363ms ago: executing program 2 (id=1425):
r0 = socket$kcm(0x10, 0x2, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84)
recvmmsg(r4, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
write$tun(r6, &(0x7f0000000100)={@val, @void, @eth={@random="8c5d673ef776", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "c72975ea5f954511"}}}}}, 0x2e)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)

75.593118ms ago: executing program 0 (id=1426):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a00000800028004007280140007000001"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1.883655ms ago: executing program 0 (id=1427):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000050000000000000001000006040000000100000000000000005f5fa0"], &(0x7f0000000200)=""/146, 0x31, 0x92, 0x1}, 0x20)

0s ago: executing program 0 (id=1428):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@allocspi={0x1cc, 0x16, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in=@empty, 0x4d6, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1a0b1}, [@policy={0xac, 0x7, {{@in6=@empty, @in=@local, 0x4e20, 0x7, 0x4e24, 0x7fff, 0xa, 0x0, 0x80, 0x32}, {0x5, 0x5, 0x3, 0xffffffff, 0xada, 0x98d, 0x2, 0x4}, {0x6, 0x7, 0x8}, 0x8, 0x6e6bbd, 0x1, 0x1, 0x1, 0x1}}, @address_filter={0x28, 0x1a, {@in6=@remote, @in6=@private2, 0x2, 0xff, 0x8}}]}, 0x1cc}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:38024' (ED25519) to the list of known hosts.
syzkaller login: [   57.960487][ T5792] cgroup: Unknown subsys name 'net'
[   58.085473][ T5792] cgroup: Unknown subsys name 'cpuset'
[   58.091797][ T5792] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.332421][ T5792] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.272478][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   69.302031][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.405713][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.410633][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.414143][ T5845] bridge_slave_0: entered allmulticast mode
[   69.417176][ T5845] bridge_slave_0: entered promiscuous mode
[   69.475476][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.478027][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.480305][ T5845] bridge_slave_1: entered allmulticast mode
[   69.494621][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.497833][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.500646][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.504040][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.506640][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.519469][ T5845] bridge_slave_1: entered promiscuous mode
[   69.639134][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.668289][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.710789][ T5845] team0: Port device team_slave_0 added
[   69.726166][ T5845] team0: Port device team_slave_1 added
[   69.795929][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.798223][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.809125][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.817985][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.820307][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.829233][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.900135][ T5845] hsr_slave_0: entered promiscuous mode
[   69.906314][ T5845] hsr_slave_1: entered promiscuous mode
[   70.138582][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.148150][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.155030][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.160066][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.191302][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.194388][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.198189][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.201196][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.266257][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.278363][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.283584][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.295800][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   70.304398][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.307147][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.319959][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.322363][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.454969][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.487170][ T5845] veth0_vlan: entered promiscuous mode
[   70.495335][ T5845] veth1_vlan: entered promiscuous mode
[   70.516237][ T5845] veth0_macvtap: entered promiscuous mode
[   70.522138][ T5845] veth1_macvtap: entered promiscuous mode
[   70.533526][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.542481][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.551771][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.555082][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.558728][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.562942][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.264728][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.267437][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.594022][ T5211] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.598853][ T5211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.602500][ T5211] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.607592][ T5211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.612270][ T5211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.638071][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.647431][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.650615][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.654927][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.657967][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.665903][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.690372][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.696558][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.699979][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.705651][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.709250][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.777245][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.050030][ T5894] chnl_net:caif_netlink_parms(): no params data found
[   72.063222][ T5892] chnl_net:caif_netlink_parms(): no params data found
[   72.139281][ T5890] chnl_net:caif_netlink_parms(): no params data found
[   72.222754][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.225336][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.227696][ T5894] bridge_slave_0: entered allmulticast mode
[   72.230801][ T5894] bridge_slave_0: entered promiscuous mode
[   72.259503][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.262603][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.265007][ T5892] bridge_slave_0: entered allmulticast mode
[   72.268066][ T5892] bridge_slave_0: entered promiscuous mode
[   72.272246][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.275463][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.278541][ T5894] bridge_slave_1: entered allmulticast mode
[   72.285149][ T5894] bridge_slave_1: entered promiscuous mode
[   72.297194][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.299570][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.303065][ T5892] bridge_slave_1: entered allmulticast mode
[   72.306110][ T5892] bridge_slave_1: entered promiscuous mode
[   72.363344][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.387872][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.393461][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.412503][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.460384][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.465952][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.468614][ T5890] bridge_slave_0: entered allmulticast mode
[   72.472347][ T5890] bridge_slave_0: entered promiscuous mode
[   72.476883][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.479873][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.483114][ T5890] bridge_slave_1: entered allmulticast mode
[   72.486126][ T5890] bridge_slave_1: entered promiscuous mode
[   72.490932][ T5894] team0: Port device team_slave_0 added
[   72.521555][ T5894] team0: Port device team_slave_1 added
[   72.538346][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.545890][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.562348][ T5892] team0: Port device team_slave_0 added
[   72.603854][ T5892] team0: Port device team_slave_1 added
[   72.607746][ T5890] team0: Port device team_slave_0 added
[   72.638934][ T5890] team0: Port device team_slave_1 added
[   72.642389][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.644795][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.653638][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.658344][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.660525][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.669735][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.700464][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.704229][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.714547][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.718895][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.721437][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.730373][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.741961][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.744665][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.758143][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.824914][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.836503][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.839503][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.850557][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.884576][ T5894] hsr_slave_0: entered promiscuous mode
[   72.887332][ T5894] hsr_slave_1: entered promiscuous mode
[   72.890191][ T5894] debugfs: 'hsr0' already exists in 'hsr'
[   72.894900][ T5894] Cannot create hsr debugfs directory
[   72.919003][ T5892] hsr_slave_0: entered promiscuous mode
[   72.923277][ T5892] hsr_slave_1: entered promiscuous mode
[   72.926216][ T5892] debugfs: 'hsr0' already exists in 'hsr'
[   72.928380][ T5892] Cannot create hsr debugfs directory
[   73.036729][ T5890] hsr_slave_0: entered promiscuous mode
[   73.040148][ T5890] hsr_slave_1: entered promiscuous mode
[   73.045984][ T5890] debugfs: 'hsr0' already exists in 'hsr'
[   73.048603][ T5890] Cannot create hsr debugfs directory
[   73.371851][ T5892] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.382133][ T5892] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.391378][ T5892] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.400428][ T5892] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.468355][ T5894] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.477992][ T5894] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.487191][ T5894] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.497163][ T5894] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.637273][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.648088][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.662418][   T55] Bluetooth: hci0: command tx timeout
[   73.672546][ T5892] 8021q: adding VLAN 0 to HW filter on device team0
[   73.686742][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.689651][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.697599][ T5894] 8021q: adding VLAN 0 to HW filter on device team0
[   73.716035][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.718278][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.722768][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.725968][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.741251][ T5211] Bluetooth: hci1: command tx timeout
[   73.743624][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.743815][   T55] Bluetooth: hci2: command tx timeout
[   73.746521][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.868710][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.028497][   T12] bridge_slave_1: left allmulticast mode
[   74.030860][   T12] bridge_slave_1: left promiscuous mode
[   74.035830][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.045345][   T12] bridge_slave_0: left allmulticast mode
[   74.047561][   T12] bridge_slave_0: left promiscuous mode
[   74.049999][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.361908][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.367495][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.374905][   T12] bond0 (unregistering): Released all slaves
[   74.402736][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.448997][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.499655][   T12] hsr_slave_0: left promiscuous mode
[   74.504959][   T12] hsr_slave_1: left promiscuous mode
[   74.507402][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.509982][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.515853][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.518204][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.534454][   T12] veth1_macvtap: left promiscuous mode
[   74.536930][   T12] veth0_macvtap: left promiscuous mode
[   74.539015][   T12] veth1_vlan: left promiscuous mode
[   74.544892][   T12] veth0_vlan: left promiscuous mode
[   74.995988][   T12] team0 (unregistering): Port device team_slave_1 removed
[   75.028012][   T12] team0 (unregistering): Port device team_slave_0 removed
[   75.401426][ T5892] veth0_vlan: entered promiscuous mode
[   75.426346][ T5892] veth1_vlan: entered promiscuous mode
[   75.473870][ T5892] veth0_macvtap: entered promiscuous mode
[   75.521720][ T5892] veth1_macvtap: entered promiscuous mode
[   75.540637][ T5894] veth0_vlan: entered promiscuous mode
[   75.566604][ T5894] veth1_vlan: entered promiscuous mode
[   75.579408][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.599038][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.619937][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.645635][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.670222][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.676698][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.741485][   T55] Bluetooth: hci0: command tx timeout
[   75.775831][ T5894] veth0_macvtap: entered promiscuous mode
[   75.790610][ T5894] veth1_macvtap: entered promiscuous mode
[   75.821202][   T55] Bluetooth: hci2: command tx timeout
[   75.824828][   T55] Bluetooth: hci1: command tx timeout
[   75.836111][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.852844][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.856310][ T5890] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.863929][ T5890] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.878782][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.883285][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.886183][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.892761][ T5890] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.908716][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.915355][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.939138][ T5890] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.945576][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.984500][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.994739][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.142219][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.145904][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.236233][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.238805][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.265128][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.272557][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20'.
[   76.297310][ T5890] 8021q: adding VLAN 0 to HW filter on device team0
[   76.332101][ T2446] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.335613][ T2446] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.348515][ T2446] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.351105][ T2446] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.430093][ T5890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.732388][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.827165][ T5989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.850263][ T5890] veth0_vlan: entered promiscuous mode
[   76.860879][ T5890] veth1_vlan: entered promiscuous mode
[   76.925934][ T5993] unsupported nlmsg_type 40
[   76.951742][ T5890] veth0_macvtap: entered promiscuous mode
[   76.959062][ T5890] veth1_macvtap: entered promiscuous mode
[   77.018446][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.043868][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.085018][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.088846][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.104748][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.118974][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.178226][ T6002] macvlan2: entered allmulticast mode
[   77.180314][ T6002] veth1_vlan: entered allmulticast mode
[   77.187796][ T6002] veth1_vlan: left allmulticast mode
[   77.274812][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.277463][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.360037][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.370260][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.420316][ T6010] netlink: 292 bytes leftover after parsing attributes in process `syz.0.40'.
[   77.480045][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   77.493854][ T6014] netlink: 'syz.2.41': attribute type 11 has an invalid length.
[   77.497302][ T6013] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17'.
[   77.626866][ T6026] netlink: 'syz.2.45': attribute type 2 has an invalid length.
[   77.632282][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'.
[   77.824522][   T55] Bluetooth: hci0: command tx timeout
[   77.903414][   T55] Bluetooth: hci1: command tx timeout
[   77.911732][   T55] Bluetooth: hci2: command tx timeout
[   78.687852][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.692610][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.818852][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.832532][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.048966][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.054398][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.057570][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.060599][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.067745][ T6067] warning: `syz.2.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.165423][ T6069] nbd: must specify at least one socket
[   79.398532][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'.
[   79.423155][ T6081] veth1: entered promiscuous mode
[   79.432567][ T6081] veth1: left promiscuous mode
[   79.643319][  T791] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   79.822376][  T791] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   79.887943][ T6103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.903178][   T55] Bluetooth: hci0: command tx timeout
[   79.982301][ T5211] Bluetooth: hci1: command tx timeout
[   79.986626][   T55] Bluetooth: hci2: command tx timeout
[   80.301831][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   80.366832][ T6140] veth0: entered promiscuous mode
[   80.369565][ T6140] veth0: left promiscuous mode
[   80.461516][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.103'.
[   80.464224][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'.
[   80.611863][ T6158] tipc: Started in network mode
[   80.616296][ T6158] tipc: Node identity 12112ade09df, cluster identity 4711
[   80.620054][ T6158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.629617][ T6158] syzkaller0: entered promiscuous mode
[   80.632930][ T6158] syzkaller0: entered allmulticast mode
[   80.669359][ T6161] sock: sock_timestamping_bind_phc: sock not bind to device
[   80.674981][ T6158] tipc: Resetting bearer <eth:syzkaller0>
[   80.691463][ T6157] tipc: Resetting bearer <eth:syzkaller0>
[   80.731682][ T6157] tipc: Disabling bearer <eth:syzkaller0>
[   81.156989][ T6196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.124'.
[   81.217910][ T6199] netlink: 72 bytes leftover after parsing attributes in process `syz.1.125'.
[   81.325868][ T6202] gretap1: entered promiscuous mode
[   81.328151][ T6202] gretap1: entered allmulticast mode
[   81.342160][    C1] Unknown status report in ack skb
[   81.354402][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   81.363206][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   81.661457][ T5938] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   81.723906][ T6172] delete_channel: no stack
[   82.360487][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'.
[   82.432350][ T6220] Zero length message leads to an empty skb
[   82.446699][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'.
[   82.464681][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.511618][ T6222] bridge_slave_1 (unregistering): left allmulticast mode
[   82.515684][ T6222] bridge_slave_1 (unregistering): left promiscuous mode
[   82.518060][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.600236][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[   82.681685][ T6235] Illegal XDP return value 4294967294 on prog  (id 21) dev N/A, expect packet loss!
[   82.715618][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'.
[   82.752427][ T6239] netlink: 44 bytes leftover after parsing attributes in process `syz.2.140'.
[   82.970801][ T6252] netlink: 'syz.2.146': attribute type 1 has an invalid length.
[   83.204244][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.154'.
[   83.399166][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'.
[   83.427084][ T6293] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.317924][ T6314] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.393170][ T6314] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.463749][ T6314] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.544694][ T6314] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.651097][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.673173][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.710098][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[   84.720468][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.725411][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.173917][ T6355] macsec1: entered promiscuous mode
[   85.181151][ T6355] macsec1: entered allmulticast mode
[   85.573600][ T6364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.603775][ T6368] netlink: 'syz.1.189': attribute type 2 has an invalid length.
[   85.679993][ T6373] syz.2.194 uses obsolete (PF_INET,SOCK_PACKET)
[   86.202317][ T6377] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   86.312929][ T6380] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   86.635216][   T10] cfg80211: failed to load regulatory.db
[   86.718960][ T6400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.203'.
[   86.723772][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.203'.
[   87.469262][ T6433] netlink: 'syz.0.219': attribute type 7 has an invalid length.
[   87.473732][ T6433] __nla_validate_parse: 1 callbacks suppressed
[   87.473748][ T6433] netlink: 248 bytes leftover after parsing attributes in process `syz.0.219'.
[   87.574404][   T10] IPVS: starting estimator thread 0...
[   87.671242][ T6440] IPVS: using max 33 ests per chain, 79200 per kthread
[   87.759748][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'.
[   88.250814][ T6478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.599474][ T6494] netlink: 'syz.1.248': attribute type 1 has an invalid length.
[   88.653038][ T6494] bond1: entered promiscuous mode
[   88.657324][ T6494] bond1: entered allmulticast mode
[   88.660196][ T6494] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.679252][ T6494] ip6gretap2: entered promiscuous mode
[   88.683403][ T6494] ip6gretap2: entered allmulticast mode
[   88.686458][ T6494] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   88.773272][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   88.891736][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   89.400119][ T6531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.262'.
[   89.533231][ T6536] tipc: Started in network mode
[   89.535548][ T6536] tipc: Node identity , cluster identity 4711
[   89.538083][ T6536] tipc: Failed to set node id, please configure manually
[   89.542101][ T6536] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   89.620611][ T6543] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   89.698826][ T6552] sctp: [Deprecated]: syz.0.269 (pid 6552) Use of int in max_burst socket option deprecated.
[   89.698826][ T6552] Use struct sctp_assoc_value instead
[   90.360624][ T6602] v: renamed from dummy0 (while UP)
[   90.808539][ T6644] netlink: 'syz.1.312': attribute type 12 has an invalid length.
[   90.812026][ T6644] netlink: 'syz.1.312': attribute type 29 has an invalid length.
[   90.815300][ T6644] netlink: 148 bytes leftover after parsing attributes in process `syz.1.312'.
[   90.818779][ T6644] netlink: 'syz.1.312': attribute type 2 has an invalid length.
[   90.826900][ T6644] netlink: 'syz.1.312': attribute type 3 has an invalid length.
[   91.094852][ T6669] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.210494][ T6663] netlink: 64 bytes leftover after parsing attributes in process `syz.1.314'.
[   91.270099][ T6683] netlink: 100 bytes leftover after parsing attributes in process `syz.2.329'.
[   91.274300][ T6683] netlink: 100 bytes leftover after parsing attributes in process `syz.2.329'.
[   91.525772][ T6697] netlink: 'syz.2.336': attribute type 2 has an invalid length.
[   91.633363][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.339'.
[   91.734230][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'.
[   92.158142][ T6725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.348'.
[   93.952463][ T6823] netlink: 'syz.0.383': attribute type 2 has an invalid length.
[   94.979461][ T6848] gtp0: entered promiscuous mode
[   95.128457][ T6860] __nla_validate_parse: 1 callbacks suppressed
[   95.128471][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'.
[   95.135720][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'.
[   95.138847][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'.
[   95.296426][ T6868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.548439][ T6884] wg1: entered promiscuous mode
[   95.555901][ T6884] wg1: entered allmulticast mode
[   95.733881][ T6904] netlink: 324 bytes leftover after parsing attributes in process `syz.1.421'.
[   95.773139][ T6907] netlink: 'syz.2.420': attribute type 9 has an invalid length.
[   95.776014][ T6907] netlink: 'syz.2.420': attribute type 6 has an invalid length.
[   96.612705][ T6947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.439'.
[   96.615935][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'.
[   96.907143][ T6961] netlink: 'syz.0.445': attribute type 1 has an invalid length.
[   96.957932][ T6961] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.990508][ T6961] 8021q: adding VLAN 0 to HW filter on device batadv1
[   96.998205][ T6961] bond1: (slave batadv1): making interface the new active one
[   97.008110][ T6961] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   97.539533][ T6999] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   97.673454][ T7013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.468'.
[   97.860301][ T7020] IPVS: Scheduler module ip_vs_sip not found
[   97.864052][ T7028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.944992][ T7030] netlink: zone id is out of range
[   97.947345][ T7030] netlink: zone id is out of range
[   97.949661][ T7030] netlink: zone id is out of range
[   97.955375][ T7030] netlink: zone id is out of range
[   97.957708][ T7030] netlink: zone id is out of range
[   97.960012][ T7030] netlink: zone id is out of range
[   97.982306][ T7030] netlink: zone id is out of range
[   98.007796][ T7036] Bluetooth: MGMT ver 1.23
[   98.167953][ T7046] tipc: Started in network mode
[   98.169689][ T7046] tipc: Node identity d6ba712ec7c6, cluster identity 4711
[   98.180743][ T7046] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.189415][ T7046] syzkaller0: entered promiscuous mode
[   98.193160][ T7046] syzkaller0: entered allmulticast mode
[   98.219946][ T7046] tipc: Resetting bearer <eth:syzkaller0>
[   98.242905][ T7043] tipc: Resetting bearer <eth:syzkaller0>
[   98.292882][ T7043] tipc: Disabling bearer <eth:syzkaller0>
[   98.693386][ T7054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.697496][ T7054] syzkaller0: entered promiscuous mode
[   98.699969][ T7054] syzkaller0: entered allmulticast mode
[   98.767736][ T7060] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[   98.790336][ T7054] tipc: Resetting bearer <eth:syzkaller0>
[   98.816832][ T7053] tipc: Resetting bearer <eth:syzkaller0>
[   98.884490][ T7053] tipc: Disabling bearer <eth:syzkaller0>
[   99.018076][ T7075] netlink: 256 bytes leftover after parsing attributes in process `syz.0.497'.
[   99.036980][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'.
[   99.043916][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.496'.
[   99.377200][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.650925][ T7159] __nla_validate_parse: 2 callbacks suppressed
[  100.654484][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'.
[  100.909643][ T7170] netlink: 'syz.1.539': attribute type 1 has an invalid length.
[  100.915723][ T7170] netlink: 220 bytes leftover after parsing attributes in process `syz.1.539'.
[  100.919641][ T7170] netlink: 'syz.1.539': attribute type 1 has an invalid length.
[  101.009898][ T7176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.014058][ T7176] syzkaller0: entered promiscuous mode
[  101.016825][ T7176] syzkaller0: entered allmulticast mode
[  101.049693][ T7176] tipc: Resetting bearer <eth:syzkaller0>
[  101.066109][ T7175] tipc: Resetting bearer <eth:syzkaller0>
[  101.089361][ T7175] tipc: Disabling bearer <eth:syzkaller0>
[  101.676165][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'.
[  101.679625][ T7217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.560'.
[  101.711233][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'.
[  101.714834][ T7217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.560'.
[  101.720267][ T7217] netlink: 5 bytes leftover after parsing attributes in process `syz.2.560'.
[  101.855695][ T7223] netlink: 60 bytes leftover after parsing attributes in process `syz.2.560'.
[  101.879814][ T7217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.560'.
[  102.107105][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'.
[  102.405363][ T7241] netlink: 'syz.1.571': attribute type 31 has an invalid length.
[  103.899310][ T7357] syz.0.626 (7357) used obsolete PPPIOCDETACH ioctl
[  104.461171][ T5211] Bluetooth: hci2: command 0x0405 tx timeout
[  104.563004][ T7387] netlink: 'syz.0.639': attribute type 3 has an invalid length.
[  104.669728][ T7395] netlink: 'syz.0.643': attribute type 2 has an invalid length.
[  104.939466][ T7415] net_ratelimit: 165 callbacks suppressed
[  104.939501][ T7415] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  105.166111][ T7440] block nbd0: not configured, cannot reconfigure
[  105.453037][ T7466] Bluetooth: MGMT ver 1.23
[  105.592159][ T7473] netlink: 'syz.1.676': attribute type 11 has an invalid length.
[  105.687260][ T7484] netlink: 'syz.0.681': attribute type 2 has an invalid length.
[  105.720544][ T7486] bridge_slave_0: left allmulticast mode
[  105.726054][ T7488] netlink: 'syz.2.684': attribute type 1 has an invalid length.
[  105.728667][ T7488] netlink: 'syz.2.684': attribute type 3 has an invalid length.
[  105.732359][ T7486] bridge_slave_0: left promiscuous mode
[  105.734308][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.734444][ T7488] __nla_validate_parse: 7 callbacks suppressed
[  105.734454][ T7488] netlink: 224 bytes leftover after parsing attributes in process `syz.2.684'.
[  105.743543][ T7488] NCSI netlink: No device for ifindex 246
[  105.752452][ T7486] bridge_slave_1: left allmulticast mode
[  105.754767][ T7486] bridge_slave_1: left promiscuous mode
[  105.757172][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.785483][ T7486] bond0: (slave bond_slave_0): Releasing backup interface
[  105.807795][ T7486] bond0: (slave bond_slave_1): Releasing backup interface
[  105.820782][ T7494] netlink: 224 bytes leftover after parsing attributes in process `syz.0.686'.
[  105.831444][ T7486] team0: Port device team_slave_0 removed
[  105.843459][ T7486] team0: Port device team_slave_1 removed
[  105.846502][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.849595][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.856193][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.858691][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.878450][ T7486] bond1: (slave ip6gretap2): Removing an active aggregator
[  105.883290][ T7486] bond1: (slave ip6gretap2): Releasing backup interface
[  105.887588][ T7486] ip6gretap2: left promiscuous mode
[  105.890048][ T7486] ip6gretap2: left allmulticast mode
[  106.064936][ T7508] netlink: 'syz.1.692': attribute type 30 has an invalid length.
[  106.390686][ T7527] netlink: 'syz.2.700': attribute type 1 has an invalid length.
[  106.418525][ T7527] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  106.442521][ T7527] veth3: entered promiscuous mode
[  106.464267][ T7527] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  106.472083][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.700'.
[  106.501233][ T7527] 8021q: adding VLAN 0 to HW filter on device bond2
[  106.504410][ T5881] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  106.644064][ T5849] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  106.722339][ T7543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.243273][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.316042][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.455922][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.514629][ T7594] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.733'.
[  107.517433][ T7594] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.733'.
[  107.583355][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.716332][ T5211] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  107.720799][ T5211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  107.726664][ T5211] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  107.730609][ T5211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  107.735188][ T5211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  107.782519][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'.
[  107.785964][ T7609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.738'.
[  107.799746][ T7609] bridge0: port 2(vlan2) entered blocking state
[  107.804895][ T7609] bridge0: port 2(vlan2) entered disabled state
[  107.808708][ T7609] vlan2: entered allmulticast mode
[  107.811352][ T7609] bridge0: entered allmulticast mode
[  107.816831][ T7609] vlan2: left allmulticast mode
[  107.819021][ T7609] bridge0: left allmulticast mode
[  107.850119][ T7613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.740'.
[  108.442886][   T12] bond0 (unregistering): Released all slaves
[  108.525855][   T12] bond1 (unregistering): Released all slaves
[  108.568672][ T7632] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.610727][ T7632] bond0: (slave rose0): Enslaving as an active interface with an up link
[  108.643399][   T12] tipc: Left network mode
[  108.899866][ T7606] chnl_net:caif_netlink_parms(): no params data found
[  108.993263][   T12] hsr_slave_0: left promiscuous mode
[  109.006110][   T12] hsr_slave_1: left promiscuous mode
[  109.033110][   T12] veth1_macvtap: left promiscuous mode
[  109.035355][   T12] veth0_macvtap: left promiscuous mode
[  109.037288][   T12] veth1_vlan: left promiscuous mode
[  109.046592][   T12] veth0_vlan: left promiscuous mode
[  109.826029][ T5211] Bluetooth: hci0: command tx timeout
[  109.955169][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.760'.
[  109.974087][ T7606] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.976558][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.991224][ T7606] bridge_slave_0: entered allmulticast mode
[  109.994375][ T7606] bridge_slave_0: entered promiscuous mode
[  110.005512][ T7606] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.008461][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.018018][ T7606] bridge_slave_1: entered allmulticast mode
[  110.028406][ T7606] bridge_slave_1: entered promiscuous mode
[  110.080374][ T7606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.087286][ T7606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.133753][ T7606] team0: Port device team_slave_0 added
[  110.138498][ T7606] team0: Port device team_slave_1 added
[  110.203962][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.207124][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.218559][ T7606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.225739][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.228761][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.250247][ T7606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.270073][   T12] IPVS: stop unused estimator thread 0...
[  110.294072][ T7697] netlink: 48 bytes leftover after parsing attributes in process `syz.0.765'.
[  110.304972][ T7606] hsr_slave_0: entered promiscuous mode
[  110.307971][ T7606] hsr_slave_1: entered promiscuous mode
[  110.422253][ T7606] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  110.429446][ T7606] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  110.436040][ T7606] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  110.443586][ T7606] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  110.483808][ T7606] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.486342][ T7606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.489030][ T7606] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.491747][ T7606] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.544709][ T7606] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.556147][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.559878][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.578797][ T7606] 8021q: adding VLAN 0 to HW filter on device team0
[  110.589962][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.592735][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.602201][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.604576][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.747893][ T7606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.779387][ T7606] veth0_vlan: entered promiscuous mode
[  110.788508][ T7730] __nla_validate_parse: 1 callbacks suppressed
[  110.788539][ T7730] netlink: 76 bytes leftover after parsing attributes in process `syz.0.775'.
[  110.790642][ T7606] veth1_vlan: entered promiscuous mode
[  110.818139][ T7606] veth0_macvtap: entered promiscuous mode
[  110.827151][ T7606] veth1_macvtap: entered promiscuous mode
[  110.839281][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.864371][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.874681][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.884529][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.888219][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.909655][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.990650][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.998651][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.024517][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.029750][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.084639][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.782'.
[  111.285920][ T7764] IPVS: Error connecting to the multicast addr
[  111.303784][ T7764] netlink: 'syz.0.789': attribute type 16 has an invalid length.
[  111.317300][ T7764] netlink: 'syz.0.789': attribute type 17 has an invalid length.
[  111.901140][ T5211] Bluetooth: hci0: command tx timeout
[  111.945200][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'.
[  111.948108][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'.
[  111.951929][ T7789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.799'.
[  112.014522][ T7793] netlink: 'syz.2.801': attribute type 1 has an invalid length.
[  112.017540][ T7793] netlink: 'syz.2.801': attribute type 2 has an invalid length.
[  112.022706][ T7793] netlink: 'syz.2.801': attribute type 1 has an invalid length.
[  112.025681][ T7793] netlink: 'syz.2.801': attribute type 2 has an invalid length.
[  112.103011][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'.
[  112.370425][ T7812] tipc: Started in network mode
[  112.373368][ T7812] tipc: Node identity 76305dc39b68, cluster identity 4711
[  112.376555][ T7812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.380833][ T7812] syzkaller0: entered promiscuous mode
[  112.389397][ T7812] syzkaller0: entered allmulticast mode
[  112.436074][ T7812] tipc: Resetting bearer <eth:syzkaller0>
[  112.445908][ T7811] tipc: Resetting bearer <eth:syzkaller0>
[  112.459866][ T7811] tipc: Disabling bearer <eth:syzkaller0>
[  112.526637][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.529103][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.532586][ T7818] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.534917][ T7818] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.591933][ T7822] netlink: 60 bytes leftover after parsing attributes in process `syz.3.813'.
[  112.718077][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'.
[  112.756302][ T7829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.762320][ T7829] syzkaller0: entered promiscuous mode
[  112.764699][ T7829] syzkaller0: entered allmulticast mode
[  112.796769][ T7829] tipc: Resetting bearer <eth:syzkaller0>
[  112.805612][ T7828] tipc: Resetting bearer <eth:syzkaller0>
[  112.825068][ T7828] tipc: Disabling bearer <eth:syzkaller0>
[  112.941263][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.819'.
[  113.212396][ T7861] netlink: 'syz.3.829': attribute type 1 has an invalid length.
[  113.215470][ T7861] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.588926][ T7889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.842'.
[  113.725490][ T7903] syzkaller1: tun_chr_ioctl cmd 1074025673
[  113.746208][ T7904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.981240][ T5211] Bluetooth: hci0: command tx timeout
[  114.454839][ T7904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.547348][ T7904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.607991][ T7927] delete_channel: no stack
[  114.620619][ T7904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.705494][ T7933] vlan2: entered promiscuous mode
[  114.707235][ T7933] batadv0: entered promiscuous mode
[  114.734947][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.746354][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.757030][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.770356][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.266758][ T7968] netlink: 'syz.0.876': attribute type 9 has an invalid length.
[  115.660266][ T7998] netlink: 'syz.0.890': attribute type 1 has an invalid length.
[  116.061498][ T5211] Bluetooth: hci0: command tx timeout
[  116.555181][ T8031] __nla_validate_parse: 1 callbacks suppressed
[  116.555192][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'.
[  116.630493][ T8035] bridge0: port 3(veth0_to_bridge) entered blocking state
[  116.634160][ T8035] bridge0: port 3(veth0_to_bridge) entered disabled state
[  116.637655][ T8035] veth0_to_bridge: entered allmulticast mode
[  116.643059][ T8035] veth0_to_bridge: entered promiscuous mode
[  116.645977][ T8035] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  116.655962][ T8035] bridge0: port 3(veth0_to_bridge) entered blocking state
[  116.659102][ T8035] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  117.016298][ T8057] netlink: 'syz.3.915': attribute type 9 has an invalid length.
[  117.019579][ T8057] netlink: 204732 bytes leftover after parsing attributes in process `syz.3.915'.
[  117.820069][ T8140] netlink: 27 bytes leftover after parsing attributes in process `syz.0.954'.
[  117.834451][ T8139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.844082][ T8139] syzkaller0: entered promiscuous mode
[  117.845831][ T8139] syzkaller0: entered allmulticast mode
[  117.880535][ T8139] tipc: Resetting bearer <eth:syzkaller0>
[  117.896465][ T8136] tipc: Resetting bearer <eth:syzkaller0>
[  117.918527][ T8136] tipc: Disabling bearer <eth:syzkaller0>
[  117.945648][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'.
[  117.965845][ T8153] netlink: 60 bytes leftover after parsing attributes in process `syz.2.959'.
[  117.968584][ T8153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.959'.
[  117.974823][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'.
[  118.967299][ T8167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.193662][ T8183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.972'.
[  119.539636][ T8213] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  119.824070][ T8236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.826638][ T8236] syzkaller0: entered promiscuous mode
[  119.828629][ T8236] syzkaller0: entered allmulticast mode
[  119.846718][ T8236] tipc: Resetting bearer <eth:syzkaller0>
[  119.850661][ T8235] tipc: Resetting bearer <eth:syzkaller0>
[  119.863336][ T8235] tipc: Disabling bearer <eth:syzkaller0>
[  119.944968][ T8246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1001'.
[  120.114181][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'.
[  120.203150][ T8275] netlink: 'syz.0.1014': attribute type 3 has an invalid length.
[  120.212861][ T8274] tipc: Cannot configure node identity twice
[  120.288403][ T8281] batadv2: entered promiscuous mode
[  120.290564][ T8281] batadv2: entered allmulticast mode
[  121.587377][ T8359] netlink: 'syz.2.1049': attribute type 10 has an invalid length.
[  121.589962][ T8359] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  121.597664][ T8359] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  121.719587][ T8371] __nla_validate_parse: 3 callbacks suppressed
[  121.719609][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1056'.
[  122.551180][ T5211] Bluetooth: hci0: command tx timeout
[  122.685467][ T8395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.688118][ T8395] IPv6: NLM_F_CREATE should be set when creating new route
[  122.690422][ T8395] IPv6: NLM_F_CREATE should be set when creating new route
[  122.838764][ T8407] netlink: 'syz.3.1069': attribute type 4 has an invalid length.
[  123.147849][ T8430] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1078'.
[  123.222051][ T8438] netlink: 'syz.3.1081': attribute type 10 has an invalid length.
[  123.231462][ T8438] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.236940][ T8438] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  123.244177][ T8438] netlink: 'syz.3.1081': attribute type 10 has an invalid length.
[  123.247947][ T8438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1081'.
[  123.256021][ T8438] batadv0: entered promiscuous mode
[  123.258275][ T8438] batadv0: entered allmulticast mode
[  123.262808][ T8438] bond0: (slave batadv0): Releasing backup interface
[  123.269052][ T8438] bridge0: port 4(batadv0) entered blocking state
[  123.272059][ T8438] bridge0: port 4(batadv0) entered disabled state
[  123.781332][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  123.784814][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  124.593985][ T8466] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1094'.
[  124.597218][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'.
[  125.124385][ T8497] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1108'.
[  125.128551][ T8497] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1108'.
[  125.134047][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'.
[  125.368387][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'.
[  125.415073][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'.
[  125.425439][ T8513] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  125.428741][ T8513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.851565][ T8546] netlink: 'syz.0.1132': attribute type 18 has an invalid length.
[  125.894850][ T8546] netlink: 'syz.0.1132': attribute type 18 has an invalid length.
[  125.895731][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.904246][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.909956][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.921426][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.964144][ T8552] gtp0: entered promiscuous mode
[  125.965807][ T8552] gtp0: entered allmulticast mode
[  126.424697][ T8574] syzkaller0: entered promiscuous mode
[  126.431127][ T8574] syzkaller0: entered allmulticast mode
[  126.938683][ T8606] __nla_validate_parse: 3 callbacks suppressed
[  126.938705][ T8606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1158'.
[  127.365598][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'.
[  127.369821][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1172'.
[  127.377015][ T8635] netlink: 'syz.3.1172': attribute type 1 has an invalid length.
[  127.381366][ T8635] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1172'.
[  127.422297][ T8638] syzkaller0: entered promiscuous mode
[  127.424921][ T8638] syzkaller0: entered allmulticast mode
[  127.432061][ T8635] nbd: socks must be embedded in a SOCK_ITEM attr
[  127.437822][ T8635] block nbd0: shutting down sockets
[  127.972394][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'.
[  127.976530][ T8666] sctp: [Deprecated]: syz.2.1187 (pid 8666) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.976530][ T8666] Use struct sctp_sack_info instead
[  128.035360][ T8670] netlink: 'syz.0.1189': attribute type 2 has an invalid length.
[  128.064829][ T8670] : entered promiscuous mode
[  128.108521][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'.
[  128.123446][ T8676] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  128.132897][ T8676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.331302][ T8695] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1201'.
[  128.364273][ T8695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.371344][   T12] bond2: (slave ip6gretap1): link status up again after 0 ms
[  128.392564][   T12] bond2: (slave ip6gretap1): link status up again after 0 ms
[  128.411459][   T12] bond2: (slave ip6gretap1): link status up again after 0 ms
[  128.433053][   T12] bond2: (slave ip6gretap1): link status up again after 0 ms
[  128.458342][   T12] bond2: (slave ip6gretap1): link status up again after 0 ms
[  128.472500][ T8703] tipc: Started in network mode
[  128.474656][ T8703] tipc: Node identity 52e08e3f2c8d, cluster identity 4711
[  128.477403][ T8703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.492330][ T8703] syzkaller0: entered promiscuous mode
[  128.494378][ T8703] syzkaller0: entered allmulticast mode
[  128.510543][ T8703] tipc: Resetting bearer <eth:syzkaller0>
[  128.568724][ T8702] tipc: Resetting bearer <eth:syzkaller0>
[  128.593846][ T8702] tipc: Disabling bearer <eth:syzkaller0>
[  128.757928][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1211'.
[  129.090493][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'.
[  129.393259][ T8759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1231'.
[  130.453301][   T12] net_ratelimit: 22 callbacks suppressed
[  130.453323][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  130.576006][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  130.681191][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  130.791717][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  130.903306][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  131.022008][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  131.131322][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  131.251255][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  131.361251][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  131.481334][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  131.800722][ T8893] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003
[  132.135899][ T8912] __nla_validate_parse: 7 callbacks suppressed
[  132.135913][ T8912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1302'.
[  132.322161][ T8923] pim6reg1: entered promiscuous mode
[  132.324169][ T8923] pim6reg1: entered allmulticast mode
[  132.533716][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'.
[  132.540449][ T8935] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  132.709897][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.715187][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.728846][ T8956] ieee802154 phy0 wpan0: encryption failed: -22
[  132.937593][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'.
[  133.123001][ T8982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1334'.
[  133.127307][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1334'.
[  133.134153][ T8982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1334'.
[  133.138013][ T8982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1334'.
[  133.644280][ T9011] tipc: New replicast peer: 255.255.255.255
[  133.683652][ T9011] tipc: Enabled bearer <udp:syz2>, priority 10
[  133.702953][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1347'.
[  134.426382][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'.
[  134.430681][ T9013] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1351'.
[  134.447045][ T9013] vlan2: entered allmulticast mode
[  134.449329][ T9013] veth1: entered allmulticast mode
[  134.782541][   T24] tipc: Node number set to 2121109055
[  134.848408][ T9045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.852463][ T9045] syzkaller0: entered promiscuous mode
[  134.854822][ T9045] syzkaller0: entered allmulticast mode
[  134.886099][ T9045] tipc: Resetting bearer <eth:syzkaller0>
[  134.894556][ T9044] tipc: Resetting bearer <eth:syzkaller0>
[  134.924614][ T9044] tipc: Disabling bearer <eth:syzkaller0>
[  135.113009][ T9060] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  135.517464][ T5881] net_ratelimit: 34 callbacks suppressed
[  135.517491][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  135.631737][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  135.741512][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  135.826049][ T9101] netlink: 'syz.0.1391': attribute type 1 has an invalid length.
[  135.867471][ T9101] 8021q: adding VLAN 0 to HW filter on device bond3
[  135.898733][ T9101] bond3: (slave gretap1): making interface the new active one
[  135.906911][ T9101] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  135.915256][ T9101] syz.0.1391 (9101) used greatest stack depth: 19848 bytes left
[  135.915419][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  135.984820][   T24] IPVS: starting estimator thread 0...
[  136.031707][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  136.081222][ T9109] IPVS: using max 32 ests per chain, 76800 per kthread
[  136.162031][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  136.303156][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  136.413533][ T5659] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  136.544490][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  136.651498][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  136.886862][ T9153] netlink: 'syz.0.1415': attribute type 9 has an invalid length.
[  137.468798][ T9177] netlink: 'syz.0.1426': attribute type 7 has an invalid length.
[  137.489546][ T9177] : entered promiscuous mode
[  137.593866][ T9183] ==================================================================
[  137.597624][ T9183] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  137.600914][ T9183] Read of size 4 at addr ffff88810baa12c4 by task syz.0.1428/9183
[  137.604895][ T9183] 
[  137.606413][ T9183] CPU: 1 UID: 0 PID: 9183 Comm: syz.0.1428 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  137.606437][ T9183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.606448][ T9183] Call Trace:
[  137.606458][ T9183]  <TASK>
[  137.606468][ T9183]  dump_stack_lvl+0x189/0x250
[  137.606493][ T9183]  ? __kasan_check_byte+0x12/0x40
[  137.606528][ T9183]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.606545][ T9183]  ? lock_release+0x4b/0x3e0
[  137.606567][ T9183]  ? __virt_addr_valid+0x4a5/0x5c0
[  137.606586][ T9183]  print_report+0xca/0x240
[  137.606607][ T9183]  ? xfrm_alloc_spi+0x570/0xf30
[  137.606627][ T9183]  kasan_report+0x118/0x150
[  137.606651][ T9183]  ? xfrm_alloc_spi+0x570/0xf30
[  137.606671][ T9183]  xfrm_alloc_spi+0x570/0xf30
[  137.606687][ T9183]  ? xfrm_alloc_spi+0x2a0/0xf30
[  137.606708][ T9183]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  137.606724][ T9183]  ? xfrm_find_acq+0x87/0xa0
[  137.606742][ T9183]  xfrm_alloc_userspi+0x70b/0xc90
[  137.606761][ T9183]  ? __pfx_aa_get_newest_label+0x10/0x10
[  137.606786][ T9183]  ? apparmor_capable+0x137/0x1b0
[  137.606799][ T9183]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  137.606820][ T9183]  ? __nla_parse+0x40/0x60
[  137.606841][ T9183]  xfrm_user_rcv_msg+0x7a3/0xab0
[  137.606861][ T9183]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  137.606891][ T9183]  ? __pfx___mutex_trylock_common+0x10/0x10
[  137.606907][ T9183]  ? rcu_is_watching+0x15/0xb0
[  137.606929][ T9183]  ? trace_contention_end+0x39/0x120
[  137.606978][ T9183]  ? __mutex_lock+0x335/0x1340
[  137.607007][ T9183]  netlink_rcv_skb+0x208/0x470
[  137.607030][ T9183]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  137.607050][ T9183]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  137.607077][ T9183]  ? netlink_deliver_tap+0x2e/0x1b0
[  137.607098][ T9183]  ? netlink_deliver_tap+0x2e/0x1b0
[  137.607118][ T9183]  xfrm_netlink_rcv+0x79/0x90
[  137.607135][ T9183]  netlink_unicast+0x82f/0x9e0
[  137.607158][ T9183]  ? __pfx_netlink_unicast+0x10/0x10
[  137.607178][ T9183]  ? netlink_sendmsg+0x642/0xb30
[  137.607198][ T9183]  ? skb_put+0x11b/0x210
[  137.607214][ T9183]  netlink_sendmsg+0x805/0xb30
[  137.607239][ T9183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.607262][ T9183]  ? aa_sock_msg_perm+0x94/0x160
[  137.607282][ T9183]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  137.607300][ T9183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.607322][ T9183]  __sock_sendmsg+0x21c/0x270
[  137.607343][ T9183]  ____sys_sendmsg+0x505/0x830
[  137.607360][ T9183]  ? __pfx_____sys_sendmsg+0x10/0x10
[  137.607379][ T9183]  ? import_iovec+0x74/0xa0
[  137.607399][ T9183]  ___sys_sendmsg+0x21f/0x2a0
[  137.607414][ T9183]  ? __pfx____sys_sendmsg+0x10/0x10
[  137.607442][ T9183]  ? __fget_files+0x2a/0x420
[  137.607456][ T9183]  ? __fget_files+0x3a0/0x420
[  137.607474][ T9183]  __x64_sys_sendmsg+0x19b/0x260
[  137.607489][ T9183]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  137.607507][ T9183]  ? rcu_is_watching+0x15/0xb0
[  137.607539][ T9183]  ? do_syscall_64+0xbe/0x3b0
[  137.607563][ T9183]  do_syscall_64+0xfa/0x3b0
[  137.607582][ T9183]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.607602][ T9183]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.607619][ T9183]  ? exc_page_fault+0x9f/0xf0
[  137.607638][ T9183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.607653][ T9183] RIP: 0033:0x7f13b238ebe9
[  137.607686][ T9183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.607701][ T9183] RSP: 002b:00007f13b05f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  137.607722][ T9183] RAX: ffffffffffffffda RBX: 00007f13b25b5fa0 RCX: 00007f13b238ebe9
[  137.607735][ T9183] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  137.607745][ T9183] RBP: 00007f13b2411e19 R08: 0000000000000000 R09: 0000000000000000
[  137.607756][ T9183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.607765][ T9183] R13: 00007f13b25b6038 R14: 00007f13b25b5fa0 R15: 00007ffda5a39188
[  137.607783][ T9183]  </TASK>
[  137.607789][ T9183] 
[  137.771510][ T9183] Allocated by task 7352:
[  137.773407][ T9183]  kasan_save_track+0x3e/0x80
[  137.775461][ T9183]  __kasan_slab_alloc+0x6c/0x80
[  137.777505][ T9183]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  137.779686][ T9183]  xfrm_state_alloc+0x24/0x2f0
[  137.781694][ T9183]  __find_acq_core+0x8a7/0x1c00
[  137.783709][ T9183]  xfrm_find_acq+0x78/0xa0
[  137.785744][ T9183]  xfrm_alloc_userspi+0x6b3/0xc90
[  137.788048][ T9183]  xfrm_user_rcv_msg+0x7a3/0xab0
[  137.790260][ T9183]  netlink_rcv_skb+0x208/0x470
[  137.792263][ T9183]  xfrm_netlink_rcv+0x79/0x90
[  137.794162][ T9183]  netlink_unicast+0x82f/0x9e0
[  137.796115][ T9183]  netlink_sendmsg+0x805/0xb30
[  137.798116][ T9183]  __sock_sendmsg+0x21c/0x270
[  137.800163][ T9183]  ____sys_sendmsg+0x505/0x830
[  137.802235][ T9183]  ___sys_sendmsg+0x21f/0x2a0
[  137.804276][ T9183]  __x64_sys_sendmsg+0x19b/0x260
[  137.806455][ T9183]  do_syscall_64+0xfa/0x3b0
[  137.808424][ T9183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.810730][ T9183] 
[  137.811762][ T9183] Freed by task 96:
[  137.813389][ T9183]  kasan_save_track+0x3e/0x80
[  137.815488][ T9183]  kasan_save_free_info+0x46/0x50
[  137.817674][ T9183]  __kasan_slab_free+0x62/0x70
[  137.819778][ T9183]  kmem_cache_free+0x18f/0x400
[  137.821777][ T9183]  xfrm_state_gc_task+0x518/0x6a0
[  137.823815][ T9183]  process_scheduled_works+0xae1/0x17b0
[  137.826305][ T9183]  worker_thread+0x8a0/0xda0
[  137.828290][ T9183]  kthread+0x711/0x8a0
[  137.830087][ T9183]  ret_from_fork+0x3fc/0x770
[  137.832079][ T9183]  ret_from_fork_asm+0x1a/0x30
[  137.834123][ T9183] 
[  137.835127][ T9183] The buggy address belongs to the object at ffff88810baa1200
[  137.835127][ T9183]  which belongs to the cache xfrm_state of size 928
[  137.840722][ T9183] The buggy address is located 196 bytes inside of
[  137.840722][ T9183]  freed 928-byte region [ffff88810baa1200, ffff88810baa15a0)
[  137.846610][ T9183] 
[  137.847644][ T9183] The buggy address belongs to the physical page:
[  137.850309][ T9183] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810baa1b00 pfn:0x10baa0
[  137.854294][ T9183] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  137.857831][ T9183] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  137.861121][ T9183] page_type: f5(slab)
[  137.862835][ T9183] raw: 057ff00000000040 ffff888104e4d640 dead000000000122 0000000000000000
[  137.866354][ T9183] raw: ffff88810baa1b00 00000000800e000a 00000000f5000000 0000000000000000
[  137.869790][ T9183] head: 057ff00000000040 ffff888104e4d640 dead000000000122 0000000000000000
[  137.873522][ T9183] head: ffff88810baa1b00 00000000800e000a 00000000f5000000 0000000000000000
[  137.877210][ T9183] head: 057ff00000000002 ffffea00042ea801 00000000ffffffff 00000000ffffffff
[  137.880610][ T9183] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  137.884124][ T9183] page dumped because: kasan: bad access detected
[  137.886953][ T9183] page_owner tracks the page as allocated
[  137.889416][ T9183] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5995, tgid 5994 (syz.2.34), ts 76991838358, free_ts 76932780298
[  137.896877][ T9183]  post_alloc_hook+0x240/0x2a0
[  137.898950][ T9183]  get_page_from_freelist+0x21e4/0x22c0
[  137.901380][ T9183]  __alloc_frozen_pages_noprof+0x181/0x370
[  137.903949][ T9183]  alloc_pages_mpol+0x232/0x4a0
[  137.905975][ T9183]  allocate_slab+0x8a/0x3b0
[  137.907870][ T9183]  ___slab_alloc+0xbfc/0x1480
[  137.909763][ T9183]  kmem_cache_alloc_noprof+0x283/0x3c0
[  137.911974][ T9183]  xfrm_state_alloc+0x24/0x2f0
[  137.914073][ T9183]  __find_acq_core+0x8a7/0x1c00
[  137.916166][ T9183]  xfrm_find_acq+0x78/0xa0
[  137.918099][ T9183]  xfrm_alloc_userspi+0x6b3/0xc90
[  137.920205][ T9183]  xfrm_user_rcv_msg+0x7a3/0xab0
[  137.922207][ T9183]  netlink_rcv_skb+0x208/0x470
[  137.924114][ T9183]  xfrm_netlink_rcv+0x79/0x90
[  137.926071][ T9183]  netlink_unicast+0x82f/0x9e0
[  137.928221][ T9183]  netlink_sendmsg+0x805/0xb30
[  137.930414][ T9183] page last free pid 96 tgid 96 stack trace:
[  137.933078][ T9183]  __free_frozen_pages+0xc71/0xe70
[  137.935220][ T9183]  __put_partials+0x161/0x1c0
[  137.937109][ T9183]  put_cpu_partial+0x17c/0x250
[  137.939077][ T9183]  __slab_free+0x2f7/0x400
[  137.940872][ T9183]  qlist_free_all+0x97/0x140
[  137.942751][ T9183]  kasan_quarantine_reduce+0x148/0x160
[  137.945154][ T9183]  __kasan_slab_alloc+0x22/0x80
[  137.947333][ T9183]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  137.949982][ T9183]  __alloc_skb+0x112/0x2d0
[  137.951940][ T9183]  mld_newpack+0x13c/0xc40
[  137.953779][ T9183]  add_grhead+0x5a/0x2a0
[  137.955497][ T9183]  add_grec+0x1452/0x1740
[  137.957191][ T9183]  mld_ifc_work+0x6ed/0xd60
[  137.959012][ T9183]  process_scheduled_works+0xae1/0x17b0
[  137.961231][ T9183]  worker_thread+0x8a0/0xda0
[  137.963225][ T9183]  kthread+0x711/0x8a0
[  137.965066][ T9183] 
[  137.966258][ T9183] Memory state around the buggy address:
[  137.968783][ T9183]  ffff88810baa1180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  137.972119][ T9183]  ffff88810baa1200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  137.975244][ T9183] >ffff88810baa1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  137.978351][ T9183]                                            ^
[  137.981049][ T9183]  ffff88810baa1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  137.984635][ T9183]  ffff88810baa1380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  137.987992][ T9183] ==================================================================
[  137.991565][ T9183] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  137.994441][ T9183] CPU: 1 UID: 0 PID: 9183 Comm: syz.0.1428 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  137.999621][ T9183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.003796][ T9183] Call Trace:
[  138.005159][ T9183]  <TASK>
[  138.006395][ T9183]  dump_stack_lvl+0x99/0x250
[  138.008319][ T9183]  ? __asan_memcpy+0x40/0x70
[  138.010361][ T9183]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.012689][ T9183]  ? __pfx__printk+0x10/0x10
[  138.014659][ T9183]  panic+0x2db/0x790
[  138.016310][ T9183]  ? __pfx_panic+0x10/0x10
[  138.018198][ T9183]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  138.020592][ T9183]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  138.023026][ T9183]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  138.025747][ T9183]  ? print_memory_metadata+0x314/0x400
[  138.028173][ T9183]  ? xfrm_alloc_spi+0x570/0xf30
[  138.030255][ T9183]  check_panic_on_warn+0x89/0xb0
[  138.032306][ T9183]  ? xfrm_alloc_spi+0x570/0xf30
[  138.034262][ T9183]  end_report+0x78/0x160
[  138.036060][ T9183]  kasan_report+0x129/0x150
[  138.038042][ T9183]  ? xfrm_alloc_spi+0x570/0xf30
[  138.040170][ T9183]  xfrm_alloc_spi+0x570/0xf30
[  138.042195][ T9183]  ? xfrm_alloc_spi+0x2a0/0xf30
[  138.044307][ T9183]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  138.046418][ T9183]  ? xfrm_find_acq+0x87/0xa0
[  138.048261][ T9183]  xfrm_alloc_userspi+0x70b/0xc90
[  138.050328][ T9183]  ? __pfx_aa_get_newest_label+0x10/0x10
[  138.052640][ T9183]  ? apparmor_capable+0x137/0x1b0
[  138.054790][ T9183]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  138.057215][ T9183]  ? __nla_parse+0x40/0x60
[  138.059186][ T9183]  xfrm_user_rcv_msg+0x7a3/0xab0
[  138.061274][ T9183]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  138.063510][ T9183]  ? __pfx___mutex_trylock_common+0x10/0x10
[  138.065873][ T9183]  ? rcu_is_watching+0x15/0xb0
[  138.067885][ T9183]  ? trace_contention_end+0x39/0x120
[  138.070325][ T9183]  ? __mutex_lock+0x335/0x1340
[  138.072605][ T9183]  netlink_rcv_skb+0x208/0x470
[  138.074759][ T9183]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  138.076992][ T9183]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.079139][ T9183]  ? netlink_deliver_tap+0x2e/0x1b0
[  138.081242][ T9183]  ? netlink_deliver_tap+0x2e/0x1b0
[  138.083288][ T9183]  xfrm_netlink_rcv+0x79/0x90
[  138.085263][ T9183]  netlink_unicast+0x82f/0x9e0
[  138.087434][ T9183]  ? __pfx_netlink_unicast+0x10/0x10
[  138.089891][ T9183]  ? netlink_sendmsg+0x642/0xb30
[  138.092128][ T9183]  ? skb_put+0x11b/0x210
[  138.093861][ T9183]  netlink_sendmsg+0x805/0xb30
[  138.095817][ T9183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.097933][ T9183]  ? aa_sock_msg_perm+0x94/0x160
[  138.099883][ T9183]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  138.102202][ T9183]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.104661][ T9183]  __sock_sendmsg+0x21c/0x270
[  138.106942][ T9183]  ____sys_sendmsg+0x505/0x830
[  138.108973][ T9183]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.111154][ T9183]  ? import_iovec+0x74/0xa0
[  138.113006][ T9183]  ___sys_sendmsg+0x21f/0x2a0
[  138.114876][ T9183]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.117092][ T9183]  ? __fget_files+0x2a/0x420
[  138.119120][ T9183]  ? __fget_files+0x3a0/0x420
[  138.121312][ T9183]  __x64_sys_sendmsg+0x19b/0x260
[  138.123568][ T9183]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  138.125837][ T9183]  ? rcu_is_watching+0x15/0xb0
[  138.127793][ T9183]  ? do_syscall_64+0xbe/0x3b0
[  138.129702][ T9183]  do_syscall_64+0xfa/0x3b0
[  138.131579][ T9183]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.133786][ T9183]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.136476][ T9183]  ? exc_page_fault+0x9f/0xf0
[  138.138606][ T9183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.141108][ T9183] RIP: 0033:0x7f13b238ebe9
[  138.142946][ T9183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.151119][ T9183] RSP: 002b:00007f13b05f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.154636][ T9183] RAX: ffffffffffffffda RBX: 00007f13b25b5fa0 RCX: 00007f13b238ebe9
[  138.157825][ T9183] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  138.161107][ T9183] RBP: 00007f13b2411e19 R08: 0000000000000000 R09: 0000000000000000
[  138.164608][ T9183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.168020][ T9183] R13: 00007f13b25b6038 R14: 00007f13b25b5fa0 R15: 00007ffda5a39188
[  138.171211][ T9183]  </TASK>
[  138.173201][ T9183] Kernel Offset: disabled
[  138.175025][ T9183] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:56:36  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4451b RBX=1ffff11026cc7f59 RCX=ffff888020723980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900222477e0 RSP=ffffc90022247660
R8 =ffffffff8fa07bf7 R9 =1ffffffff1f40f7e R10=dffffc0000000000 R11=fffffbfff1f40f7f
R12=ffff88813663fac8 R13=dffffc0000000000 R14=ffff88804b03b180 R15=0000000000000001
RIP=ffffffff81b44503 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000004b8000 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f13b2587498 ffffffff81ace8ef XMM03=00007f13b25874a8 00007f13b25874a0
XMM04=00007f13b30ed100 00007f13b2587460 XMM05=00007f13b2587478 00007f13b25874c0
XMM06=00007f13b25874b8 00007f13b25874b0 XMM07=00007f13b25874a8 00007f13b25874a0
XMM08=0000000000000000 00007f13b2412ee7 XMM09=0000000000000000 00007f13b2412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=000000000000130c RDI=000000000000130d RBP=00000000000003f9 RSP=ffffc90002fae9f0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f13b05f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000340 CR3=000000002107c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f13b2587498 00007f13b2587470 XMM03=00007f13b25874a8 00007f13b25874a0
XMM04=00007f13b30ed100 00007f13b2587460 XMM05=00007f13b2587478 00007f13b25874c0
XMM06=00007f13b25874b8 00007f13b25874b0 XMM07=00007f13b25874a8 00007f13b25874a0
XMM08=0000000000000000 00007f13b2412ee7 XMM09=0000000000000000 00007f13b2412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
