last executing test programs:

2.214450299s ago: executing program 2 (id=2185):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000069000bb100000000000000000000f8ff"], 0x18}}, 0x4000000)

2.153351014s ago: executing program 2 (id=2186):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r3 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f)
close(r2)
close(r3)
getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000080)=0x5)
sendmmsg$inet6(r4, &(0x7f0000002ac0)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0x6a3e3663, @rand_addr=' \x01\x00', 0x1}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000480)="96", 0x1}], 0x1}}], 0x1, 0x4020)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r6, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r6, 0x9}, &(0x7f0000000080)=0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3100000002000000", @ANYRES32, @ANYBLOB='C'], 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802800018007000100637400001c000280050003000100000008000140000000170800024000000007240001800a00010072656469720000001400028008000140000000170800024000ffff140900010073797a30000000000900020073797a32"], 0xa4}}, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x8000, 0x80, 0x4, 0x2, {{0x9, 0x4, 0x2, 0x1, 0x24, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x8e, [@empty, @multicast2, @rand_addr=0x64010101]}]}}}}})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x800}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.25534626s ago: executing program 2 (id=2213):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x78, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x578}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48025}, 0x8050)
setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a"], 0x84}}, 0x20008040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r7], 0x448}}, 0x0)
sendmmsg$inet(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbec, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ppoll(&(0x7f00000000c0)=[{r6, 0x100a}, {r6, 0x212bdb8c3662ab0c}], 0x2, 0x0, 0x0, 0x0)
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00')
ioctl$NS_GET_PARENT(r9, 0x8004b707, 0x0)
connect$unix(r6, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000180)={0x20000010})

1.023810021s ago: executing program 2 (id=2220):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e)
bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2)

959.958101ms ago: executing program 2 (id=2223):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x9bb}, 0x8)

829.086868ms ago: executing program 2 (id=2227):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

500.033178ms ago: executing program 1 (id=2243):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

430.689609ms ago: executing program 1 (id=2245):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000041c0), 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r4 = socket(0x10, 0x803, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e1f, 0x6, @mcast2, 0x9}}, 0x2, 0x9, 0xe7, 0x2, 0x2}, &(0x7f00000004c0)=0x98)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, &(0x7f0000003f80))
sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x400c001)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0)
sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @local}, 0x14)

379.643697ms ago: executing program 1 (id=2247):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90)

326.657157ms ago: executing program 1 (id=2249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0)

268.149425ms ago: executing program 1 (id=2252):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x7bc, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000040)=0x1f8, 0x4)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0xbb74, 0x4)
recvmmsg(r0, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)=""/31, 0x1f}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0)

210.274097ms ago: executing program 0 (id=2253):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0)

159.93191ms ago: executing program 0 (id=2254):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001a950000000bf62d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)

159.596876ms ago: executing program 0 (id=2255):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1a0}}, 0x0)

70.449522ms ago: executing program 0 (id=2256):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b011d08afc99cf6754d4c259d71c7596afc4a76608a319a454412a02a4c229307c4f54d7eb11ae380c7173dff3f093fc", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0)

70.188003ms ago: executing program 0 (id=2257):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

377.591µs ago: executing program 0 (id=2258):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))

0s ago: executing program 1 (id=2259):
socket(0x10, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private0, 0x0, 0x3, 0x0, 0x40, 0x2, 0x0, 0x0, 0x73}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x20002880)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000004c0)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)="63c7e4df04e067406562b551fb77e58aab3a4f76446b2797175ab2330a1231807dfbd440", 0x24}, {&(0x7f0000000600)="f88150bf0b7bb2ed297bbd20e08821f7c9b4cfd47d282fce788324aa01a08f69b9adbd9faeeac9b5afd7e3b5b52924f1dd8305e576d0e7fff89536a95024ed6c7f663b176e081ff6f04d2639c01db676a162305267994cb729fee526de186e831534f5508baf47fb93dbe1654e74972ff6ec95dc2456e98c5a", 0x79}, {&(0x7f00000006c0)="b5e133cbf5d8e812239358cffa6896d019e23664a3f8179c24b97035f57eb51c094035f5ef2aba90a65709726bda03f6f131ce7d2dee04701199099d66a7faff1897ee9b2cfa6eb0d99979", 0x4b}], 0x3, &(0x7f0000000740)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}, 0x20008004)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020600)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0)
getsockopt$netlink(r5, 0x10e, 0x6, &(0x7f00000002c0)=""/181, &(0x7f0000000100)=0xb5)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x1}]}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:54422' (ED25519) to the list of known hosts.
syzkaller login: [   48.934871][ T5780] cgroup: Unknown subsys name 'net'
[   49.043127][ T5780] cgroup: Unknown subsys name 'cpuset'
[   49.050591][ T5780] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.051934][ T5780] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.397643][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.403134][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.405942][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.408902][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.411523][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.541455][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.545729][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.548852][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.551579][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.554289][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.556997][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.559890][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.569869][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   55.584334][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.590130][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.593711][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.634531][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.637189][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.640320][ T5828] bridge_slave_0: entered allmulticast mode
[   55.643122][ T5828] bridge_slave_0: entered promiscuous mode
[   55.649996][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.652418][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.654840][ T5828] bridge_slave_1: entered allmulticast mode
[   55.657591][ T5828] bridge_slave_1: entered promiscuous mode
[   55.688053][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.701768][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.742382][ T5828] team0: Port device team_slave_0 added
[   55.753889][ T5828] team0: Port device team_slave_1 added
[   55.783563][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.785948][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.795856][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.801114][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.804047][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.814025][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.872072][ T5828] hsr_slave_0: entered promiscuous mode
[   55.875220][ T5828] hsr_slave_1: entered promiscuous mode
[   55.920818][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   55.985290][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   56.051604][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.054885][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.058020][ T5836] bridge_slave_0: entered allmulticast mode
[   56.062515][ T5836] bridge_slave_0: entered promiscuous mode
[   56.076629][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.082455][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.085065][ T5836] bridge_slave_1: entered allmulticast mode
[   56.087827][ T5836] bridge_slave_1: entered promiscuous mode
[   56.114356][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.116837][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.119869][ T5835] bridge_slave_0: entered allmulticast mode
[   56.122812][ T5835] bridge_slave_0: entered promiscuous mode
[   56.135332][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.138651][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.141044][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.143580][ T5835] bridge_slave_1: entered allmulticast mode
[   56.146350][ T5835] bridge_slave_1: entered promiscuous mode
[   56.168556][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.190278][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.221376][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.242584][ T5836] team0: Port device team_slave_0 added
[   56.263740][ T5836] team0: Port device team_slave_1 added
[   56.266040][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.275140][ T5835] team0: Port device team_slave_0 added
[   56.285300][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.293471][ T5835] team0: Port device team_slave_1 added
[   56.305253][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.308958][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.318380][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.322561][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.337164][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.339931][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.349081][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.352870][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.367256][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.370157][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.379918][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.394739][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.397057][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.405407][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.453662][ T5835] hsr_slave_0: entered promiscuous mode
[   56.456108][ T5835] hsr_slave_1: entered promiscuous mode
[   56.458840][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.462283][ T5835] Cannot create hsr debugfs directory
[   56.469104][ T5836] hsr_slave_0: entered promiscuous mode
[   56.472342][ T5836] hsr_slave_1: entered promiscuous mode
[   56.474495][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.477096][ T5836] Cannot create hsr debugfs directory
[   56.688075][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.698893][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.704933][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.709819][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.783985][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.793612][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.805088][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.818063][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.824698][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.854301][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   56.883534][ T1937] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.886723][ T1937] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.901658][ T1937] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.904670][ T1937] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.940428][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.972915][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.991231][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   57.014834][ T1937] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.017731][ T1937] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.032566][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   57.047459][ T1937] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.050730][ T1937] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.082270][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.085672][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.112127][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.115236][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.243839][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.292270][ T5828] veth0_vlan: entered promiscuous mode
[   57.312985][ T5828] veth1_vlan: entered promiscuous mode
[   57.374687][ T5828] veth0_macvtap: entered promiscuous mode
[   57.383135][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.387966][ T5828] veth1_macvtap: entered promiscuous mode
[   57.415886][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.427339][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.433783][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.448734][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.453959][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.457922][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.464650][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.488631][ T5841] Bluetooth: hci0: command tx timeout
[   57.562206][ T5836] veth0_vlan: entered promiscuous mode
[   57.568431][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.571561][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.572150][ T5835] veth0_vlan: entered promiscuous mode
[   57.594463][ T5835] veth1_vlan: entered promiscuous mode
[   57.599368][ T5836] veth1_vlan: entered promiscuous mode
[   57.607004][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.611357][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.641323][ T5835] veth0_macvtap: entered promiscuous mode
[   57.650372][ T5841] Bluetooth: hci1: command tx timeout
[   57.652594][ T5841] Bluetooth: hci2: command tx timeout
[   57.661579][ T5835] veth1_macvtap: entered promiscuous mode
[   57.666552][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.666699][ T5836] veth0_macvtap: entered promiscuous mode
[   57.693945][ T5836] veth1_macvtap: entered promiscuous mode
[   57.705583][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.744418][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.754234][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.757696][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.764138][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.777572][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.783776][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.796888][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.814990][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.846350][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.855333][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.873836][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.920853][ T3606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.923668][ T3606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.962541][ T1937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.965161][ T1937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.987908][ T1937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.996879][ T1937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.014421][ T1937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.017103][ T1937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.125439][ T5908] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.141666][ T5908] netlink: 'syz.1.7': attribute type 25 has an invalid length.
[   58.144250][ T5908] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7'.
[   58.177683][ T5908] netlink: 'syz.1.7': attribute type 10 has an invalid length.
[   58.184164][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.187083][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.206177][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.208896][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.211806][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.214526][ T5908] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.237314][ T5908] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   58.407939][ T5926] syzkaller1: entered promiscuous mode
[   58.417439][ T5926] syzkaller1: entered allmulticast mode
[   58.567020][ T5938] syz.1.21 uses obsolete (PF_INET,SOCK_PACKET)
[   58.751775][ T5946] netlink: 'syz.0.25': attribute type 5 has an invalid length.
[   58.813610][ T5950] netlink: 224 bytes leftover after parsing attributes in process `syz.0.27'.
[   59.569939][ T5841] Bluetooth: hci0: command tx timeout
[   59.728312][ T5841] Bluetooth: hci1: command tx timeout
[   59.738796][ T5841] Bluetooth: hci2: command tx timeout
[   60.397371][ T5984] netlink: 'syz.1.40': attribute type 1 has an invalid length.
[   60.438609][ T5986] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.564132][ T5992] syzkaller1: entered promiscuous mode
[   60.566487][ T5992] syzkaller1: entered allmulticast mode
[   60.648073][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'.
[   60.695549][ T5999] netlink: 256 bytes leftover after parsing attributes in process `syz.2.47'.
[   60.850751][ T6005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   60.980821][ T6010] netlink: 'syz.2.52': attribute type 3 has an invalid length.
[   60.983766][ T6010] netlink: 'syz.2.52': attribute type 3 has an invalid length.
[   61.002263][ T6010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.52'.
[   61.053942][ T6012] vlan0: entered promiscuous mode
[   61.065427][ T6012] team0: Port device vlan0 added
[   61.343177][ T6031] warning: `syz.1.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.412749][ T6037] netlink: 240 bytes leftover after parsing attributes in process `syz.2.65'.
[   61.649204][ T5841] Bluetooth: hci0: command tx timeout
[   61.765788][ T6066] netlink: 'syz.1.77': attribute type 5 has an invalid length.
[   61.811966][ T5841] Bluetooth: hci2: command tx timeout
[   61.811996][ T5219] Bluetooth: hci1: command tx timeout
[   62.327675][ T6126] netlink: 'syz.0.103': attribute type 1 has an invalid length.
[   62.393712][ T6126] veth3: entered promiscuous mode
[   62.428270][ T6126] bridge_slave_0: left allmulticast mode
[   62.430552][ T6126] bridge_slave_0: left promiscuous mode
[   62.432842][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.445215][ T6126] bridge_slave_1: left allmulticast mode
[   62.447551][ T6126] bridge_slave_1: left promiscuous mode
[   62.451832][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.462644][ T6126] bond0: (slave bond_slave_0): Releasing backup interface
[   62.475982][ T6126] bond0: (slave bond_slave_1): Releasing backup interface
[   62.493743][ T6126] team0: Port device team_slave_0 removed
[   62.501846][ T6126] team0: Port device team_slave_1 removed
[   62.505141][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.511859][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.516719][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.520631][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.556684][ T6126] syz.0.103 (6126) used greatest stack depth: 19832 bytes left
[   62.920571][ T6102] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   63.010933][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.120'.
[   63.037067][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.121'.
[   63.164188][ T6178] pimreg: entered allmulticast mode
[   63.180343][ T6178] pimreg: left allmulticast mode
[   63.185153][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'.
[   63.202926][ T6180] IPVS: Error joining to the multicast group
[   63.207519][ T6182] netlink: 'syz.2.125': attribute type 3 has an invalid length.
[   63.211775][ T6182] netlink: 'syz.2.125': attribute type 3 has an invalid length.
[   63.555977][ T6201] netlink: 'syz.0.134': attribute type 7 has an invalid length.
[   63.855773][ T6204] pim6reg1: entered promiscuous mode
[   63.857688][ T6204] pim6reg1: entered allmulticast mode
[   63.888359][ T5219] Bluetooth: hci1: command tx timeout
[   63.898518][ T5219] Bluetooth: hci2: command tx timeout
[   64.054295][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[   64.481018][ T6236] netlink: 'syz.0.148': attribute type 1 has an invalid length.
[   64.484527][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'.
[   65.109758][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'.
[   65.634982][ T6274] Bluetooth: MGMT ver 1.23
[   65.870828][ T6292] netlink: 'syz.0.173': attribute type 1 has an invalid length.
[   66.103179][ T6309] Zero length message leads to an empty skb
[   66.734840][ T6353] netlink: 830 bytes leftover after parsing attributes in process `syz.0.202'.
[   66.834219][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.206'.
[   66.910749][ T6368] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.209'.
[   67.323282][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.228'.
[   67.448522][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'.
[   67.492880][ T6416] netlink: 'syz.0.232': attribute type 1 has an invalid length.
[   67.854991][ T6436] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   68.066102][ T6449] syzkaller0: entered promiscuous mode
[   68.071200][ T6449] syzkaller0: entered allmulticast mode
[   68.173022][ T6458] netlink: 'syz.1.253': attribute type 3 has an invalid length.
[   68.985404][ T6468] pim6reg1: entered promiscuous mode
[   68.987860][ T6468] pim6reg1: entered allmulticast mode
[   69.213751][ T6483] ip6gre1: entered promiscuous mode
[   69.346674][ T6495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.268'.
[   69.375587][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'.
[   70.052565][ T6562] netlink: 148 bytes leftover after parsing attributes in process `syz.0.299'.
[   70.084868][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'.
[   70.090654][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'.
[   70.127096][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'.
[   70.296516][ T6576] macsec1: entered promiscuous mode
[   70.300091][ T6576] macsec1: entered allmulticast mode
[   70.324370][ T6578] netlink: 3 bytes leftover after parsing attributes in process `syz.0.307'.
[   70.331646][ T6578] batadv1: entered promiscuous mode
[   70.333341][ T6578] batadv1: entered allmulticast mode
[   70.448725][ T6578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.307'.
[   70.505302][ T6586] syzkaller1: entered promiscuous mode
[   70.507282][ T6586] syzkaller1: entered allmulticast mode
[   70.748706][ T6589] block nbd0: server does not support multiple connections per device.
[   70.753737][ T6589] block nbd0: shutting down sockets
[   71.262296][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.264517][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.469301][ T6615] veth0_to_team: entered promiscuous mode
[   71.471882][ T6615] veth0_to_team: entered allmulticast mode
[   71.883672][ T6642] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   71.894832][    C1] Illegal XDP return value 16128 on prog  (id 34) dev bridge0, expect packet loss!
[   72.369812][ T6677] netlink: 'syz.2.352': attribute type 12 has an invalid length.
[   72.574325][ T6688] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.358'.
[   72.862395][ T6699] netlink: 'syz.2.363': attribute type 2 has an invalid length.
[   72.865358][ T6699] netlink: 'syz.2.363': attribute type 2 has an invalid length.
[   72.876391][ T6699] netlink: 100 bytes leftover after parsing attributes in process `syz.2.363'.
[   73.605186][ T6745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.639773][ T6745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.645477][ T6745] bond0 (unregistering): (slave bridge0): Releasing backup interface
[   73.665911][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.669430][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.683869][ T6745] bond0 (unregistering): Released all slaves
[   73.710837][ T6761] syzkaller1: entered promiscuous mode
[   73.712790][ T6761] syzkaller1: entered allmulticast mode
[   74.245630][ T6807] netlink: 'syz.1.406': attribute type 16 has an invalid length.
[   74.250336][ T6807] netlink: 'syz.1.406': attribute type 17 has an invalid length.
[   74.352225][ T6814] IPv6: NLM_F_REPLACE set, but no existing node found!
[   74.512208][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.529741][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.699030][ T6811] __nla_validate_parse: 3 callbacks suppressed
[   74.699041][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'.
[   74.727374][ T5891] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.730966][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.736751][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.739939][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.859736][ T6839] netlink: 17 bytes leftover after parsing attributes in process `syz.2.418'.
[   75.011895][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'.
[   75.074216][ T6859] netlink: 'syz.1.427': attribute type 3 has an invalid length.
[   75.136024][ T6866] netlink: 516 bytes leftover after parsing attributes in process `syz.1.430'.
[   75.515899][ T6908] netlink: 'syz.2.450': attribute type 2 has an invalid length.
[   75.519126][ T6908] netlink: 'syz.2.450': attribute type 1 has an invalid length.
[   75.586004][ T6915] netlink: 'syz.0.453': attribute type 2 has an invalid length.
[   75.592833][ T6915] netlink: 119 bytes leftover after parsing attributes in process `syz.0.453'.
[   75.736016][ T6929] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   75.797044][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'.
[   75.974719][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'.
[   76.002839][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.007861][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.119565][ T6952] netlink: 14 bytes leftover after parsing attributes in process `syz.0.468'.
[   76.378060][ T6952] bond0 (unregistering): Released all slaves
[   76.667159][ T6972] netlink: 136 bytes leftover after parsing attributes in process `syz.1.475'.
[   76.678415][ T6972] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   76.813668][ T6976] veth0_to_bond: entered allmulticast mode
[   76.857908][ T6981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.480'.
[   76.891936][ T6984] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   77.250615][ T7016] netlink: 'syz.0.496': attribute type 27 has an invalid length.
[   77.336835][ T7023] ieee802154 phy0 wpan0: encryption failed: -22
[   77.593406][ T7037] veth0_to_bond: left allmulticast mode
[   77.597088][ T7037] vlan0: left promiscuous mode
[   77.600385][ T7037] ip6gre1: left promiscuous mode
[   78.076494][ T7065] syzkaller1: entered promiscuous mode
[   78.079884][ T7065] syzkaller1: entered allmulticast mode
[   78.310471][ T7077] netlink: 'syz.0.525': attribute type 3 has an invalid length.
[   79.470337][ T7111] tap0: tun_chr_ioctl cmd 1074025678
[   79.472218][ T7111] tap0: group set to 0
[   80.746486][ T7147] __nla_validate_parse: 5 callbacks suppressed
[   80.746510][ T7147] netlink: 52 bytes leftover after parsing attributes in process `syz.0.553'.
[   80.890935][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'.
[   80.894916][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'.
[   81.091183][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.103635][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.282977][ T7165] tipc: Started in network mode
[   81.284642][ T7165] tipc: Node identity 426734fb6558, cluster identity 4711
[   81.287093][ T7165] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.290049][ T7166] syzkaller0: entered promiscuous mode
[   81.292334][ T7166] syzkaller0: entered allmulticast mode
[   81.305817][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.311252][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.344876][ T7162] tipc: Resetting bearer <eth:syzkaller0>
[   81.352460][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.358990][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.363494][ T7160] tipc: Resetting bearer <eth:syzkaller0>
[   81.374844][ T7160] tipc: Disabling bearer <eth:syzkaller0>
[   81.501327][   T10] cfg80211: failed to load regulatory.db
[   81.518496][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'.
[   81.527513][ T7186] syzkaller1: entered promiscuous mode
[   81.531242][ T7186] syzkaller1: entered allmulticast mode
[   81.618569][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'.
[   81.659084][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'.
[   81.662152][ T7198] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[   81.810970][ T7204] infiniband syz0: set down
[   81.812717][ T7204] infiniband syz0: added ipvlan1
[   81.844091][ T7204] RDS/IB: syz0: added
[   81.846393][ T7204] smc: adding ib device syz0 with port count 1
[   81.849566][ T7204] smc:    ib device syz0 port 1 has pnetid 
[   82.503808][ T7244] netlink: 5 bytes leftover after parsing attributes in process `syz.0.589'.
[   82.504280][ T7245] netlink: 'syz.1.590': attribute type 21 has an invalid length.
[   82.544569][ T7248] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   82.685688][ T7261] netlink: 'syz.0.598': attribute type 5 has an invalid length.
[   82.686373][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'.
[   82.693600][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'.
[   83.107852][ T7293] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[   83.897817][ T7326] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   83.905563][ T7326] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   83.956642][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'.
[   84.144949][ T7342] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   84.181484][ T7340] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   84.201833][ T7346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.204856][ T7346] IPv6: NLM_F_CREATE should be set when creating new route
[   84.208186][ T7346] IPv6: NLM_F_CREATE should be set when creating new route
[   84.228483][ T7346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.282165][ T7350] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   84.325289][ T7350] syz.0.632 (7350) used greatest stack depth: 19776 bytes left
[   84.573780][ T7372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.209250][ T7429] syzkaller1: entered promiscuous mode
[   85.211331][ T7429] syzkaller1: entered allmulticast mode
[   85.881900][ T7450] netlink: 'syz.2.679': attribute type 1 has an invalid length.
[   85.885758][ T7450] __nla_validate_parse: 13 callbacks suppressed
[   85.885774][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'.
[   85.901171][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'.
[   86.010063][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'.
[   86.014541][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'.
[   86.161261][ T7465] netlink: 'syz.0.685': attribute type 1 has an invalid length.
[   86.164764][ T7465] netlink: 'syz.0.685': attribute type 10 has an invalid length.
[   86.169860][ T7465] netlink: 236 bytes leftover after parsing attributes in process `syz.0.685'.
[   86.219832][ T7467] bridge3: entered promiscuous mode
[   86.222372][ T7467] bridge3: entered allmulticast mode
[   86.376660][ T7473] netlink: 'syz.0.688': attribute type 1 has an invalid length.
[   86.427786][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.690'.
[   86.521656][ T7481] batman_adv: batadv0: Adding interface: dummy0
[   86.524740][ T7481] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.535543][ T7481] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   86.548811][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'.
[   86.551819][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'.
[   86.699283][ T7492] netlink: 'syz.1.699': attribute type 15 has an invalid length.
[   86.837906][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'.
[   87.071930][ T7524] syzkaller1: entered promiscuous mode
[   87.072632][ T7526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.715'.
[   87.074073][ T7524] syzkaller1: entered allmulticast mode
[   87.714475][ T5857] nci: nci_rx_work: unknown MT 0x1
[   88.474223][ T7597] netlink: 'syz.2.746': attribute type 1 has an invalid length.
[   88.504946][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.519687][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.599798][ T7657] macvlan2: entered promiscuous mode
[   89.602191][ T7657] bond0: entered promiscuous mode
[   89.606658][ T7657] bond_slave_0: entered promiscuous mode
[   89.615113][ T7657] bond_slave_1: entered promiscuous mode
[   89.623274][ T7657] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   89.854018][ T7673] netlink: 'syz.0.781': attribute type 1 has an invalid length.
[   89.857220][ T7673] netlink: 'syz.0.781': attribute type 1 has an invalid length.
[   89.981165][ T7685] tipc: Started in network mode
[   89.989520][ T7685] tipc: Node identity 080211000001, cluster identity 4711
[   89.993759][ T7685] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.000048][ T7687] nbd: illegal input index -381222912
[   90.195925][ T7711] tipc: Started in network mode
[   90.197670][ T7711] tipc: Node identity 1e7c6b062ed9, cluster identity 4711
[   90.202381][ T7711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.205290][ T7711] syzkaller0: entered promiscuous mode
[   90.207199][ T7711] syzkaller0: entered allmulticast mode
[   90.236372][ T7711] tipc: Resetting bearer <eth:syzkaller0>
[   90.246552][ T7710] tipc: Resetting bearer <eth:syzkaller0>
[   90.266091][ T7710] tipc: Disabling bearer <eth:syzkaller0>
[   90.381701][ T7719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.462259][ T7719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.544797][ T7719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.633354][ T7719] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.760597][ T5891] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.775257][ T5891] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.780586][ T7739] netdevsim netdevsim1: Direct firmware load for .
[   90.780586][ T7739]  failed with error -2
[   90.786297][ T7739] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   90.786297][ T7739] 
[   90.800776][ T5891] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.806536][ T5891] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.009161][   T10] tipc: Node number set to 134418688
[   91.014889][ T7749] sctp: [Deprecated]: syz.2.817 (pid 7749) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.014889][ T7749] Use struct sctp_sack_info instead
[   91.024277][ T7749] sctp: [Deprecated]: syz.2.817 (pid 7749) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.024277][ T7749] Use struct sctp_sack_info instead
[   91.071517][ T7751] __nla_validate_parse: 10 callbacks suppressed
[   91.071533][ T7751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.818'.
[   91.134290][ T7753] netlink: 'syz.2.819': attribute type 5 has an invalid length.
[   91.326881][ T7767] delete_channel: no stack
[   91.620172][ T7785] netlink: 47 bytes leftover after parsing attributes in process `syz.2.834'.
[   91.697560][ T7791] TCP: TCP_TX_DELAY enabled
[   92.481726][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.857'.
[   92.484742][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.857'.
[   92.488097][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'.
[   92.908326][ T7857] nbd: must specify at least one socket
[   93.095023][ T5891] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   93.179103][ T7872] netlink: 48 bytes leftover after parsing attributes in process `syz.1.874'.
[   93.840299][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'.
[   93.969305][ T7890] unsupported nlmsg_type 40
[   94.305213][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'.
[   94.321205][ T7926] netlink: 84 bytes leftover after parsing attributes in process `syz.2.898'.
[   94.405889][ T7932] netlink: 'syz.2.901': attribute type 39 has an invalid length.
[   94.458957][ T7937] netlink: 52 bytes leftover after parsing attributes in process `syz.0.903'.
[   94.537457][ T7943] syzkaller1: entered promiscuous mode
[   94.539858][ T7943] syzkaller1: entered allmulticast mode
[   96.547010][ T8030] netdevsim netdevsim2: Direct firmware load for 2Q failed with error -2
[   96.552460][ T8030] netdevsim netdevsim2: Falling back to sysfs fallback for: 2Q
[   96.637010][ T8040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.951'.
[   96.749240][ T8049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.955'.
[   97.333471][ T8082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.970'.
[   97.337259][ T8082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.970'.
[   97.424454][ T8085] delete_channel: no stack
[   97.568705][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.979'.
[   97.717019][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'.
[   97.723025][ T8116] netlink: 68 bytes leftover after parsing attributes in process `syz.2.987'.
[   97.726985][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'.
[   97.807002][ T8121] netlink: zone id is out of range
[   97.809841][ T8121] netlink: zone id is out of range
[   97.812060][ T8121] netlink: zone id is out of range
[   97.823135][ T8121] netlink: zone id is out of range
[   97.825940][ T8121] netlink: zone id is out of range
[   97.828038][ T8121] netlink: zone id is out of range
[   97.830166][ T8121] netlink: zone id is out of range
[   97.832807][ T8121] netlink: zone id is out of range
[   97.835324][ T8121] netlink: zone id is out of range
[   97.838217][ T8121] netlink: zone id is out of range
[   98.031146][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'.
[   98.034436][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'.
[   98.191468][ T8154] netlink: 'syz.2.1004': attribute type 7 has an invalid length.
[   98.194693][ T8154] netlink: 'syz.2.1004': attribute type 8 has an invalid length.
[   98.312621][   T10] IPVS: starting estimator thread 0...
[   98.398370][ T8169] IPVS: using max 76 ests per chain, 182400 per kthread
[   98.409493][ T8177] ieee802154 phy0 wpan0: encryption failed: -22
[   99.143445][ T8235] netlink: 'syz.2.1040': attribute type 2 has an invalid length.
[   99.516524][ T8256] tipc: Failed to remove unknown binding: 66,1,1/0:141688527/141688529
[   99.525089][ T8256] tipc: Failed to remove unknown binding: 66,1,1/0:141688527/141688529
[   99.530855][ T8256] tipc: Failed to remove unknown binding: 66,1,1/0:141688527/141688529
[  100.355619][ T8314] netlink: 'syz.0.1075': attribute type 3 has an invalid length.
[  100.523770][ T8333] netlink: 'syz.2.1083': attribute type 25 has an invalid length.
[  100.569300][ T8338] team0: Device gtp0 is of different type
[  100.696287][   T33] audit: type=1800 audit(1753744691.830:2): pid=8346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1090" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2072 res=0 errno=0
[  100.713519][   T33] audit: type=1804 audit(1753744691.840:3): pid=8346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1090" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2072 res=1 errno=0
[  100.804796][ T8359] netlink: 'syz.0.1097': attribute type 49 has an invalid length.
[  100.929478][ T8378] netlink: 'syz.1.1106': attribute type 1 has an invalid length.
[  101.025496][ T8389] bond0: left promiscuous mode
[  101.027544][ T8389] bond_slave_0: left promiscuous mode
[  101.033844][ T8389] bond_slave_1: left promiscuous mode
[  101.036432][ T8389] macvlan2: left promiscuous mode
[  101.045018][ T8384] v: renamed from dummy0
[  101.196751][ T8410] ieee802154 phy0 wpan0: encryption failed: -22
[  101.200993][ T8410] ieee802154 phy0 wpan0: encryption failed: -22
[  101.527124][ T8443] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.546877][ T8447] netlink: 'syz.2.1139': attribute type 13 has an invalid length.
[  101.555442][ T8443] tipc: Resetting bearer <eth:syzkaller0>
[  101.691703][ T8461] siw: device registration error -23
[  102.443433][   T10] IPVS: starting estimator thread 0...
[  102.529100][ T8524] IPVS: using max 77 ests per chain, 184800 per kthread
[  102.842014][ T8561] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.901363][ T8563] __nla_validate_parse: 16 callbacks suppressed
[  102.901406][ T8563] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1196'.
[  102.918309][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'.
[  102.922431][ T8563] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1196'.
[  102.927662][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'.
[  102.933042][ T8563] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1196'.
[  103.093330][ T8575] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1201'.
[  103.136951][ T8579] netlink: 'syz.2.1203': attribute type 7 has an invalid length.
[  103.143080][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1203'.
[  103.684027][ T8630] syzkaller1: entered promiscuous mode
[  103.686338][ T8630] syzkaller1: entered allmulticast mode
[  103.730042][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  104.211806][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'.
[  104.263934][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1246'.
[  104.275408][ T5891] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.279360][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1246'.
[  104.282669][ T5891] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.286592][ T5891] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.290906][ T5891] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.424488][ T8706] bridge0: entered allmulticast mode
[  104.444008][ T8706] pim6reg: entered allmulticast mode
[  104.467727][ T8708] net_ratelimit: 8 callbacks suppressed
[  104.467745][ T8708] openvswitch: netlink: Message has 1 unknown bytes.
[  104.493253][ T8708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.923745][ T8739] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  105.332235][ T8772] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  105.347056][ T8774] netlink: 'syz.0.1283': attribute type 4 has an invalid length.
[  105.887846][ T8810] openvswitch: netlink: Flow key attr not present in new flow.
[  106.091807][ T5219] Bluetooth: hci2: link tx timeout
[  106.095694][ T5219] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.207718][ T8828] netlink: 'syz.0.1304': attribute type 39 has an invalid length.
[  106.481646][ T8841] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  107.334727][ T8899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.358415][ T8899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.381857][ T8899] tipc: Resetting bearer <eth:syzkaller0>
[  107.387188][ T8898] tipc: Disabling bearer <eth:syzkaller0>
[  108.128591][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  108.207293][ T8954] __nla_validate_parse: 10 callbacks suppressed
[  108.207310][ T8954] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.1358'.
[  108.408279][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1359'.
[  108.411334][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1359'.
[  108.814239][ T8985] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  108.896755][ T8999] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  108.977020][ T9011] netlink: 'syz.0.1385': attribute type 8 has an invalid length.
[  109.191192][ T9027] netlink: 'syz.0.1391': attribute type 1 has an invalid length.
[  109.220195][ T9027] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.281436][ T9038] netlink: 'syz.0.1396': attribute type 1 has an invalid length.
[  109.703712][ T9066] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  109.740526][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1410'.
[  109.825396][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1413'.
[  109.855428][ T9075] geneve2: entered promiscuous mode
[  109.857264][ T9075] geneve2: entered allmulticast mode
[  110.004821][ T9085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1417'.
[  110.016926][ T9085] IPv6: sit1: Disabled Multicast RS
[  110.024043][ T9085] sit1: entered allmulticast mode
[  110.071886][ T9087] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1419'.
[  110.075401][ T9087] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1419'.
[  110.107883][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'.
[  110.400768][ T9112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1431'.
[  111.395077][ T9195] netlink: 'syz.2.1468': attribute type 11 has an invalid length.
[  112.531370][ T9262] Bluetooth: MGMT ver 1.23
[  112.755417][ T9285] tun0: tun_chr_ioctl cmd 2147767507
[  112.856876][ T9291] netlink: 'syz.2.1510': attribute type 10 has an invalid length.
[  112.862453][ T9291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.869753][ T9291] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  113.262199][ T9319] __nla_validate_parse: 9 callbacks suppressed
[  113.262212][ T9319] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1526'.
[  113.433594][ T9336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1529'.
[  113.437235][ T9336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1529'.
[  113.443152][ T9336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1529'.
[  113.447050][ T9336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1529'.
[  113.741738][ T9362] macvtap0: entered allmulticast mode
[  113.749968][ T9362] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  114.410245][ T9376] netlink: 'syz.1.1549': attribute type 16 has an invalid length.
[  114.413745][ T9376] netlink: 'syz.1.1549': attribute type 17 has an invalid length.
[  114.460297][ T9376] 8021q: adding VLAN 0 to HW filter on device team0
[  114.468068][ T9376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.569135][ T9378] netlink: 'syz.0.1550': attribute type 5 has an invalid length.
[  114.662674][ T9382] netlink: 'syz.0.1552': attribute type 1 has an invalid length.
[  115.304645][ T9424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.473815][ T9436] netlink: 'syz.2.1567': attribute type 3 has an invalid length.
[  115.835210][ T9443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  115.853404][ T9443] vxcan2: entered promiscuous mode
[  116.523018][ T9482] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1595'.
[  116.526172][ T9482] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1595'.
[  116.585968][ T9488] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1598'.
[  116.713805][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1602'.
[  117.057547][ T9506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  117.151729][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'.
[  117.205593][ T9512] netlink: 'syz.0.1608': attribute type 32 has an invalid length.
[  117.788391][ T9548] netlink: 'syz.1.1622': attribute type 1 has an invalid length.
[  118.198293][ T9577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.202785][ T9577] syzkaller0: entered promiscuous mode
[  118.204658][ T9577] syzkaller0: entered allmulticast mode
[  118.218918][ T9577] tipc: Resetting bearer <eth:syzkaller0>
[  118.223223][ T9576] tipc: Resetting bearer <eth:syzkaller0>
[  118.234447][ T9576] tipc: Disabling bearer <eth:syzkaller0>
[  118.526711][ T9599] __nla_validate_parse: 4 callbacks suppressed
[  118.526722][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'.
[  118.646408][ T9608] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1651'.
[  118.828575][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'.
[  118.928803][ T9630] netlink: 'syz.0.1662': attribute type 1 has an invalid length.
[  118.932395][ T9630] netlink: 'syz.0.1662': attribute type 1 has an invalid length.
[  119.015740][ T9638] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1666'.
[  119.107298][ T9648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1671'.
[  119.151956][ T9650] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  119.171597][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1673'.
[  119.351883][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1680'.
[  119.362277][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1680'.
[  119.499716][ T9684] netlink: 'syz.0.1688': attribute type 32 has an invalid length.
[  119.784681][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'.
[  119.799280][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'.
[  120.661597][ T9741] netlink: 'syz.1.1708': attribute type 6 has an invalid length.
[  121.004902][ T9762] netlink: 'syz.1.1715': attribute type 7 has an invalid length.
[  121.013078][ T9764] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  121.025876][ T9762] : entered promiscuous mode
[  121.215315][ T9772] team0: Port device vlan0 removed
[  121.532722][ T9816] netlink: 'syz.0.1738': attribute type 1 has an invalid length.
[  121.590481][ T9816] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  121.616313][ T9816] 8021q: adding VLAN 0 to HW filter on device bond3
[  121.621073][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  121.733910][ T5891] bond3: (slave ip6gretap1): link status up again after 0 ms
[  121.737040][ T5891] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  121.751811][ T5891] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  121.849074][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  121.959460][ T5891] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  122.068646][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  122.146273][ T9887] netlink: 'syz.2.1771': attribute type 30 has an invalid length.
[  122.171684][ T9887] netlink: 'syz.2.1771': attribute type 30 has an invalid length.
[  122.171760][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.184143][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.192553][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.196395][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.209424][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  122.322845][ T5891] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  122.684001][ T9915] netlink: 'syz.1.1784': attribute type 1 has an invalid length.
[  122.729794][ T9915] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  122.752069][ T9915] veth3: entered promiscuous mode
[  122.757210][ T9915] bond0: (slave veth3): Enslaving as a backup interface with a down link
[  122.770604][ T9915] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.911050][ T9922] netlink: 'syz.1.1787': attribute type 1 has an invalid length.
[  123.057748][ T9935] nbd: must specify a size in bytes for the device
[  124.796940][T10082] netlink: 'syz.2.1831': attribute type 1 has an invalid length.
[  124.804715][T10082] __nla_validate_parse: 6 callbacks suppressed
[  124.804730][T10082] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1831'.
[  124.817639][T10082] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1831'.
[  124.861927][T10088] pim6reg1: entered promiscuous mode
[  124.863698][T10088] pim6reg1: entered allmulticast mode
[  125.116733][T10117] batman_adv: batadv0: Removing interface: dummy0
[  125.137152][T10117] bond0: (slave batadv0): Releasing backup interface
[  125.144161][T10117] bridge_slave_0: left allmulticast mode
[  125.146005][T10117] bridge_slave_0: left promiscuous mode
[  125.151938][T10117] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.156416][T10117] bridge_slave_1: left allmulticast mode
[  125.159379][T10117] bridge_slave_1: left promiscuous mode
[  125.161384][T10117] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.166139][T10117] bond0: (slave bond_slave_0): Releasing backup interface
[  125.172209][T10117] bond0: (slave bond_slave_1): Releasing backup interface
[  125.176007][T10117] team0: Failed to send options change via netlink (err -105)
[  125.180733][T10117] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  125.184283][T10117] team0: Port device team_slave_0 removed
[  125.187113][T10117] team0: Failed to send options change via netlink (err -105)
[  125.191258][T10117] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  125.195077][T10117] team0: Port device team_slave_1 removed
[  125.197291][T10117] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.201397][T10117] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.204840][T10121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1849'.
[  125.490065][T10134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1855'.
[  125.493634][T10134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1855'.
[  125.605848][T10141] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  125.711846][T10149] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1862'.
[  126.029214][ T5857] net_ratelimit: 35 callbacks suppressed
[  126.029242][ T5857] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  126.077981][T10179] tc_dump_action: action bad kind
[  126.138691][ T5891] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  126.248844][ T5857] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  126.358759][ T5857] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  126.406497][T10195] trusted_key: syz.0.1883 sent an empty control message without MSG_MORE.
[  126.468660][ T5857] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  126.493481][T10199] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1885'.
[  126.578702][ T5891] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  126.688838][ T5891] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  126.798567][ T5857] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  126.919014][ T5857] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  127.038372][ T5857] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  127.386133][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1894'.
[  127.551876][T10232] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1900'.
[  128.752000][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'.
[  129.675469][T10330] atomic_op ffff888023efe998 conn xmit_atomic 0000000000000000
[  129.777549][T10328] batman_adv: batadv0: Adding interface: ip6gretap1
[  129.781994][T10328] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.792147][T10328] batman_adv: batadv0: Interface activated: ip6gretap1
[  129.940925][T10351] syzkaller1: entered promiscuous mode
[  129.943136][T10351] syzkaller1: entered allmulticast mode
[  130.173284][T10372] __nla_validate_parse: 3 callbacks suppressed
[  130.173296][T10372] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1962'.
[  130.611347][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1980'.
[  130.650687][T10418] hsr_slave_1 (unregistering): left promiscuous mode
[  130.868593][T10438] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1990'.
[  130.877879][T10438] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1990'.
[  130.882839][T10438] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1990'.
[  131.119033][   T12] net_ratelimit: 121 callbacks suppressed
[  131.119048][   T12] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  131.188786][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'.
[  131.193749][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'.
[  131.203371][T10463] netlink: 'syz.2.2002': attribute type 1 has an invalid length.
[  131.231532][T10463] 8021q: adding VLAN 0 to HW filter on device bond3
[  131.247699][T10463] bond3: (slave gretap1): making interface the new active one
[  131.252603][T10463] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  131.281855][ T5891] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  131.343683][T10474] netlink: 'syz.2.2007': attribute type 4 has an invalid length.
[  131.388459][ T5891] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  131.498828][ T5857] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  131.618439][ T5857] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  131.728851][ T5891] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  131.839101][ T5857] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  131.958664][ T5857] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  132.042194][T10513] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  132.079021][T10513] bond4: entered promiscuous mode
[  132.081361][T10513] bond4: entered allmulticast mode
[  132.083927][T10513] 8021q: adding VLAN 0 to HW filter on device bond4
[  132.109004][ T5857] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  132.154901][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'.
[  132.218709][ T5724] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  132.605686][T10559] !: renamed from dummy0
[  132.692108][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.922547][T10582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.948593][T10582] syzkaller0: entered promiscuous mode
[  132.950502][T10582] syzkaller0: entered allmulticast mode
[  133.014025][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2057'.
[  133.065162][T10582] tipc: Resetting bearer <eth:syzkaller0>
[  133.098514][T10581] tipc: Resetting bearer <eth:syzkaller0>
[  133.158823][T10581] tipc: Disabling bearer <eth:syzkaller0>
[  133.218600][T10602] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  133.930362][T10665] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2077'.
[  133.972800][T10654] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.093983][T10654] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.175396][T10654] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.257145][T10654] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.333929][T10686] geneve3: entered promiscuous mode
[  134.383977][ T5724] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.406631][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.474889][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.478768][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.997050][T10750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.001510][T10750] syzkaller0: entered promiscuous mode
[  135.004253][T10750] syzkaller0: entered allmulticast mode
[  135.032027][T10750] tipc: Resetting bearer <eth:syzkaller0>
[  135.044517][T10749] tipc: Resetting bearer <eth:syzkaller0>
[  135.061448][T10749] tipc: Disabling bearer <eth:syzkaller0>
[  135.302340][T10780] __nla_validate_parse: 4 callbacks suppressed
[  135.302352][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'.
[  135.387409][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2140'.
[  135.484626][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'.
[  135.830373][T10824] vlan2: entered promiscuous mode
[  135.832709][T10824] bridge0: entered promiscuous mode
[  135.957582][T10831] dvmrp0: entered allmulticast mode
[  136.102420][T10843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2164'.
[  136.218316][ T5891] net_ratelimit: 30 callbacks suppressed
[  136.218336][ T5891] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  136.284815][T10858] netlink: 'syz.0.2168': attribute type 16 has an invalid length.
[  136.287701][T10858] netlink: 'syz.0.2168': attribute type 17 has an invalid length.
[  136.322027][T10860] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  136.402094][T10866] IPv6: NLM_F_REPLACE set, but no existing node found!
[  136.422691][T10858] tipc: Resetting bearer <eth:syzkaller0>
[  136.452031][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'.
[  136.466602][ T5891] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.472136][ T5891] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.478670][ T5891] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.481808][ T5891] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.487388][T10868] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.494092][T10865] syzkaller0: entered promiscuous mode
[  136.498463][T10865] syzkaller0: entered allmulticast mode
[  136.501810][ T5891] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.505109][ T5891] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.519634][T10865] tipc: Resetting bearer <eth:syzkaller0>
[  136.523968][ T5891] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  136.528648][ T5891] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.532544][T10863] tipc: Resetting bearer <eth:syzkaller0>
[  136.543984][T10863] tipc: Disabling bearer <eth:syzkaller0>
[  136.678524][T10874] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2175'.
[  137.041368][T10893] geneve2: entered promiscuous mode
[  137.046284][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.058277][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.061928][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.087896][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.527046][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2198'.
[  138.042752][T10956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2213'.
[  138.061135][T10959] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.529501][T10995] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2232'.
[  139.242809][T11052] ==================================================================
[  139.246198][T11052] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  139.249537][T11052] Read of size 1 at addr ffff888111038c30 by task syz.1.2259/11052
[  139.253838][T11052] 
[  139.254874][T11052] CPU: 1 UID: 0 PID: 11052 Comm: syz.1.2259 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  139.254893][T11052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.254902][T11052] Call Trace:
[  139.254909][T11052]  <TASK>
[  139.254916][T11052]  dump_stack_lvl+0x189/0x250
[  139.254938][T11052]  ? __kasan_check_byte+0x12/0x40
[  139.254957][T11052]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.254972][T11052]  ? lock_release+0x4b/0x3e0
[  139.254987][T11052]  ? __virt_addr_valid+0x4a5/0x5c0
[  139.255004][T11052]  print_report+0xca/0x230
[  139.255024][T11052]  ? xfrm_state_find+0x2cf2/0x5400
[  139.255038][T11052]  kasan_report+0x118/0x150
[  139.255056][T11052]  ? xfrm_state_find+0x2cf2/0x5400
[  139.255072][T11052]  xfrm_state_find+0x2cf2/0x5400
[  139.255085][T11052]  ? __lock_acquire+0xab9/0xd20
[  139.255103][T11052]  ? xfrm_state_find+0x1da/0x5400
[  139.255118][T11052]  ? __pfx_xfrm_state_find+0x10/0x10
[  139.255137][T11052]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  139.255163][T11052]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  139.255181][T11052]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  139.255199][T11052]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  139.255217][T11052]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  139.255246][T11052]  ? xfrm_expand_policies+0x41f/0x6a0
[  139.255264][T11052]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  139.255309][T11052]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  139.255334][T11052]  xfrm_lookup_route+0x3c/0x1c0
[  139.255354][T11052]  raw_sendmsg+0x1039/0x18b0
[  139.255377][T11052]  ? __pfx_raw_sendmsg+0x10/0x10
[  139.255397][T11052]  ? aa_sk_perm+0x81e/0x950
[  139.255425][T11052]  ? __pfx_aa_sk_perm+0x10/0x10
[  139.255442][T11052]  ? tomoyo_socket_sendmsg_permission+0x216/0x300
[  139.255460][T11052]  ? sock_rps_record_flow+0x19/0x410
[  139.255479][T11052]  ? inet_sendmsg+0x2f4/0x370
[  139.255496][T11052]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  139.255512][T11052]  __sock_sendmsg+0x19c/0x270
[  139.255531][T11052]  ____sys_sendmsg+0x505/0x830
[  139.255548][T11052]  ? __pfx_____sys_sendmsg+0x10/0x10
[  139.255565][T11052]  ? import_iovec+0x74/0xa0
[  139.255584][T11052]  ___sys_sendmsg+0x21f/0x2a0
[  139.255601][T11052]  ? __pfx____sys_sendmsg+0x10/0x10
[  139.255628][T11052]  ? __fget_files+0x2a/0x420
[  139.255645][T11052]  ? __fget_files+0x3a0/0x420
[  139.255665][T11052]  __x64_sys_sendmsg+0x19b/0x260
[  139.255680][T11052]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  139.255701][T11052]  ? do_syscall_64+0xbe/0x3b0
[  139.255715][T11052]  do_syscall_64+0xfa/0x3b0
[  139.255727][T11052]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.255738][T11052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.255750][T11052]  ? exc_page_fault+0x9f/0xf0
[  139.255769][T11052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.255781][T11052] RIP: 0033:0x7f264198e9a9
[  139.255793][T11052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.255805][T11052] RSP: 002b:00007f264277a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  139.255819][T11052] RAX: ffffffffffffffda RBX: 00007f2641bb5fa0 RCX: 00007f264198e9a9
[  139.255829][T11052] RDX: 0000000020002880 RSI: 0000200000001640 RDI: 0000000000000006
[  139.255837][T11052] RBP: 00007f2641a10d69 R08: 0000000000000000 R09: 0000000000000000
[  139.255845][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.255852][T11052] R13: 0000000000000000 R14: 00007f2641bb5fa0 R15: 00007ffefc307858
[  139.255866][T11052]  </TASK>
[  139.255871][T11052] 
[  139.400210][T11052] Allocated by task 8830:
[  139.402115][T11052]  kasan_save_track+0x3e/0x80
[  139.404179][T11052]  __kasan_slab_alloc+0x6c/0x80
[  139.406224][T11052]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  139.408460][T11052]  xfrm_state_alloc+0x24/0x2f0
[  139.410465][T11052]  __find_acq_core+0x8a7/0x1c00
[  139.412573][T11052]  xfrm_find_acq+0x78/0xa0
[  139.414536][T11052]  xfrm_alloc_userspi+0x6b3/0xc90
[  139.416690][T11052]  xfrm_user_rcv_msg+0x7a3/0xab0
[  139.418965][T11052]  netlink_rcv_skb+0x208/0x470
[  139.421070][T11052]  xfrm_netlink_rcv+0x79/0x90
[  139.423081][T11052]  netlink_unicast+0x82f/0x9e0
[  139.425179][T11052]  netlink_sendmsg+0x805/0xb30
[  139.427320][T11052]  __sock_sendmsg+0x21c/0x270
[  139.429314][T11052]  ____sys_sendmsg+0x505/0x830
[  139.431402][T11052]  ___sys_sendmsg+0x21f/0x2a0
[  139.433431][T11052]  __x64_sys_sendmsg+0x19b/0x260
[  139.435530][T11052]  do_syscall_64+0xfa/0x3b0
[  139.437469][T11052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.440073][T11052] 
[  139.441178][T11052] Freed by task 47:
[  139.442924][T11052]  kasan_save_track+0x3e/0x80
[  139.444990][T11052]  kasan_save_free_info+0x46/0x50
[  139.447310][T11052]  __kasan_slab_free+0x62/0x70
[  139.449516][T11052]  kmem_cache_free+0x18f/0x400
[  139.451686][T11052]  xfrm_state_gc_task+0x518/0x6a0
[  139.453968][T11052]  process_scheduled_works+0xae1/0x17b0
[  139.456516][T11052]  worker_thread+0x8a0/0xda0
[  139.458624][T11052]  kthread+0x711/0x8a0
[  139.460420][T11052]  ret_from_fork+0x3fc/0x770
[  139.462439][T11052]  ret_from_fork_asm+0x1a/0x30
[  139.464483][T11052] 
[  139.465576][T11052] The buggy address belongs to the object at ffff888111038900
[  139.465576][T11052]  which belongs to the cache xfrm_state of size 928
[  139.471523][T11052] The buggy address is located 816 bytes inside of
[  139.471523][T11052]  freed 928-byte region [ffff888111038900, ffff888111038ca0)
[  139.477592][T11052] 
[  139.478736][T11052] The buggy address belongs to the physical page:
[  139.481551][T11052] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888111039200 pfn:0x111038
[  139.486118][T11052] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  139.489732][T11052] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  139.492945][T11052] page_type: f5(slab)
[  139.494629][T11052] raw: 057ff00000000040 ffff88801db29280 dead000000000122 0000000000000000
[  139.498216][T11052] raw: ffff888111039200 00000000800e000d 00000000f5000000 0000000000000000
[  139.501837][T11052] head: 057ff00000000040 ffff88801db29280 dead000000000122 0000000000000000
[  139.505510][T11052] head: ffff888111039200 00000000800e000d 00000000f5000000 0000000000000000
[  139.509144][T11052] head: 057ff00000000002 ffffea0004440e01 00000000ffffffff 00000000ffffffff
[  139.512614][T11052] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  139.516064][T11052] page dumped because: kasan: bad access detected
[  139.518217][T11052] page_owner tracks the page as allocated
[  139.520062][T11052] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6290, tgid 6288 (syz.1.171), ts 65816758998, free_ts 65770668277
[  139.527443][T11052]  post_alloc_hook+0x240/0x2a0
[  139.529307][T11052]  get_page_from_freelist+0x21e4/0x22c0
[  139.531138][T11052]  __alloc_frozen_pages_noprof+0x181/0x370
[  139.533064][T11052]  alloc_pages_mpol+0x232/0x4a0
[  139.535023][T11052]  allocate_slab+0x8a/0x3b0
[  139.536769][T11052]  ___slab_alloc+0xbfc/0x1480
[  139.538435][T11052]  kmem_cache_alloc_noprof+0x283/0x3c0
[  139.540355][T11052]  xfrm_state_alloc+0x24/0x2f0
[  139.541997][T11052]  pfkey_add+0x6e4/0x2e00
[  139.543550][T11052]  pfkey_sendmsg+0xbfe/0x1090
[  139.545128][T11052]  __sock_sendmsg+0x21c/0x270
[  139.546745][T11052]  ____sys_sendmsg+0x52d/0x830
[  139.548810][T11052]  ___sys_sendmsg+0x21f/0x2a0
[  139.550858][T11052]  __sys_sendmmsg+0x227/0x430
[  139.552533][T11052]  __x64_sys_sendmmsg+0xa0/0xc0
[  139.554168][T11052]  do_syscall_64+0xfa/0x3b0
[  139.555713][T11052] page last free pid 5836 tgid 5836 stack trace:
[  139.557989][T11052]  __free_frozen_pages+0xc71/0xe70
[  139.559727][T11052]  __put_partials+0x161/0x1c0
[  139.561499][T11052]  put_cpu_partial+0x17c/0x250
[  139.563441][T11052]  __slab_free+0x2f7/0x400
[  139.565205][T11052]  qlist_free_all+0x97/0x140
[  139.567040][T11052]  kasan_quarantine_reduce+0x148/0x160
[  139.569209][T11052]  __kasan_slab_alloc+0x22/0x80
[  139.570833][T11052]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  139.572814][T11052]  getname_flags+0xb8/0x540
[  139.574385][T11052]  __x64_sys_unlink+0x3a/0x50
[  139.575984][T11052]  do_syscall_64+0xfa/0x3b0
[  139.577528][T11052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.579550][T11052] 
[  139.580599][T11052] Memory state around the buggy address:
[  139.582856][T11052]  ffff888111038b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  139.585966][T11052]  ffff888111038b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  139.588935][T11052] >ffff888111038c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  139.591582][T11052]                                      ^
[  139.593625][T11052]  ffff888111038c80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  139.596239][T11052]  ffff888111038d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  139.598971][T11052] ==================================================================
[  139.620421][T11053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  139.623547][T11053] IPv6: NLM_F_CREATE should be set when creating new route
[  139.626467][T11053] IPv6: NLM_F_CREATE should be set when creating new route
[  139.649448][T11052] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  139.651893][T11052] CPU: 1 UID: 0 PID: 11052 Comm: syz.1.2259 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  139.656099][T11052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.660062][T11052] Call Trace:
[  139.661309][T11052]  <TASK>
[  139.662326][T11052]  dump_stack_lvl+0x99/0x250
[  139.663885][T11052]  ? __asan_memcpy+0x40/0x70
[  139.665477][T11052]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.667749][T11052]  ? __pfx__printk+0x10/0x10
[  139.669528][T11052]  panic+0x2db/0x790
[  139.670984][T11052]  ? __pfx_panic+0x10/0x10
[  139.672594][T11052]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  139.674618][T11052]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  139.677268][T11052]  ? print_memory_metadata+0x314/0x400
[  139.679491][T11052]  ? xfrm_state_find+0x2cf2/0x5400
[  139.681315][T11052]  check_panic_on_warn+0x89/0xb0
[  139.683013][T11052]  ? xfrm_state_find+0x2cf2/0x5400
[  139.684878][T11052]  end_report+0x78/0x160
[  139.686523][T11052]  kasan_report+0x129/0x150
[  139.688376][T11052]  ? xfrm_state_find+0x2cf2/0x5400
[  139.690177][T11052]  xfrm_state_find+0x2cf2/0x5400
[  139.692084][T11052]  ? __lock_acquire+0xab9/0xd20
[  139.694150][T11052]  ? xfrm_state_find+0x1da/0x5400
[  139.696121][T11052]  ? __pfx_xfrm_state_find+0x10/0x10
[  139.698356][T11052]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  139.700821][T11052]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  139.703246][T11052]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  139.705985][T11052]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  139.708457][T11052]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  139.710789][T11052]  ? xfrm_expand_policies+0x41f/0x6a0
[  139.712797][T11052]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  139.714800][T11052]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  139.716943][T11052]  xfrm_lookup_route+0x3c/0x1c0
[  139.718818][T11052]  raw_sendmsg+0x1039/0x18b0
[  139.720690][T11052]  ? __pfx_raw_sendmsg+0x10/0x10
[  139.722461][T11052]  ? aa_sk_perm+0x81e/0x950
[  139.724017][T11052]  ? __pfx_aa_sk_perm+0x10/0x10
[  139.725683][T11052]  ? tomoyo_socket_sendmsg_permission+0x216/0x300
[  139.728077][T11052]  ? sock_rps_record_flow+0x19/0x410
[  139.729909][T11052]  ? inet_sendmsg+0x2f4/0x370
[  139.731523][T11052]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  139.733328][T11052]  __sock_sendmsg+0x19c/0x270
[  139.734944][T11052]  ____sys_sendmsg+0x505/0x830
[  139.736620][T11052]  ? __pfx_____sys_sendmsg+0x10/0x10
[  139.738489][T11052]  ? import_iovec+0x74/0xa0
[  139.740028][T11052]  ___sys_sendmsg+0x21f/0x2a0
[  139.741593][T11052]  ? __pfx____sys_sendmsg+0x10/0x10
[  139.743548][T11052]  ? __fget_files+0x2a/0x420
[  139.745212][T11052]  ? __fget_files+0x3a0/0x420
[  139.746810][T11052]  __x64_sys_sendmsg+0x19b/0x260
[  139.748825][T11052]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  139.750648][T11052]  ? do_syscall_64+0xbe/0x3b0
[  139.752242][T11052]  do_syscall_64+0xfa/0x3b0
[  139.753784][T11052]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.755900][T11052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.758273][T11052]  ? exc_page_fault+0x9f/0xf0
[  139.759904][T11052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.761940][T11052] RIP: 0033:0x7f264198e9a9
[  139.763473][T11052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.769901][T11052] RSP: 002b:00007f264277a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  139.772747][T11052] RAX: ffffffffffffffda RBX: 00007f2641bb5fa0 RCX: 00007f264198e9a9
[  139.775851][T11052] RDX: 0000000020002880 RSI: 0000200000001640 RDI: 0000000000000006
[  139.778884][T11052] RBP: 00007f2641a10d69 R08: 0000000000000000 R09: 0000000000000000
[  139.781781][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.784802][T11052] R13: 0000000000000000 R14: 00007f2641bb5fa0 R15: 00007ffefc307858
[  139.787619][T11052]  </TASK>
[  139.789414][T11052] Kernel Offset: disabled
[  139.790880][T11052] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:18:50  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820d9282 RBX=ffffc90000007810 RCX=921a547c98694a00 RDX=0000000000000001
RSI=ffffffff8db87667 RDI=ffffffff820d9282 RBP=ffffc90000007850 RSP=ffffc900000077a8
R8 =ffffc90000007ad0 R9 =0000000000000000 R10=ffffc90000007818 R11=fffff52000000f05
R12=ffff888027425640 R13=1ffff92000000f24 R14=dffffc0000000000 R15=1ffff92000000f02
RIP=ffffffff8172a957 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f731d39e6c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001640 CR3=000000003c192000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81686f8f ffffffff8133a4fe
XMM02=ffffffff894bb849 ffffffff8133a4fe XMM03=ffffffff823b5fc4 ffffffff823b5e5d
XMM04=00007f26426ed100 00007f2641b86440 XMM05=00007f2641b86458 00007f2641b864a0
XMM06=00007f2641b86498 00007f2641b86490 XMM07=00007f2641b86488 00007f2641b86480
XMM08=0000000000000000 00007f2641a11de3 XMM09=0000000000000000 00007f2641a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000132d RDI=000000000000132e RBP=00000000000003f8 RSP=ffffc900073e68f0
R8 =ffff888021868237 R9 =1ffff1100430d046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99af18ba R14=ffffffff99df64c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f264277a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3031dff8 CR3=000000003c192000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2641b86478 00007f2641b86450 XMM03=00007f2641b86488 00007f2641b86480
XMM04=00007f26426ed100 00007f2641b86440 XMM05=00007f2641b86458 00007f2641b864a0
XMM06=00007f2641b86498 00007f2641b86490 XMM07=00007f2641b86488 00007f2641b86480
XMM08=0000000000000000 00007f2641a11de3 XMM09=0000000000000000 00007f2641a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
