last executing test programs:

1.374677209s ago: executing program 0 (id=1521):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x1, 0x0)
vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)="7f", 0x1}, {&(0x7f0000001300)="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", 0xd01}, {&(0x7f00000002c0)="40288f34bcf7367c6993649e41118758375f199400b0a9755e1b624228bf7072cae3c38479baec", 0x27}, {&(0x7f0000000440)="155332af", 0x4}, {&(0x7f0000002040)="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", 0xfc1}], 0x6, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0)
write(r1, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x0, @empty, 0x4e23, 0x2, 'sh\x00', 0xc, 0x6, 0xffffdbfc}, 0x2c)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x3e163d19dfa7e90d}, 0xc, &(0x7f0000000280)={&(0x7f0000003040)={0x1014, 0x41, 0x100, 0x70bd2b, 0x25dfdbfc, {0xd}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x20008011}, 0x8000)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000200)=0x4)

999.10183ms ago: executing program 1 (id=1529):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000004d090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

899.353209ms ago: executing program 1 (id=1530):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

898.882651ms ago: executing program 1 (id=1531):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/13, 0xd}], 0x1}}], 0x2, 0x220, 0x0)

830.414684ms ago: executing program 1 (id=1532):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x8}, 0x18)

777.86988ms ago: executing program 1 (id=1533):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0)

729.406089ms ago: executing program 1 (id=1534):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffd}, 0x94)
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4)
recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0)

424.8708ms ago: executing program 0 (id=1539):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7ff, 0x30}, &(0x7f00000000c0)=0xc)

288.35361ms ago: executing program 0 (id=1540):
unshare(0x6020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x90)

288.077014ms ago: executing program 2 (id=1541):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r1, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)

208.996172ms ago: executing program 0 (id=1542):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0xa000, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0xc, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x64010101}}}})

208.413299ms ago: executing program 2 (id=1543):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)

207.969664ms ago: executing program 0 (id=1544):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x268, 0x1, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x4}, 0x0, 0x6, 0xfffe, 0x8, 0x27, 'syz0\x00', "342efc98edda6c80931ab42c143b974299d37374550c11721d0f196b8fee6af6", "c2753cb2fda57536cf1f266108c2f4a09fb99853abcab03bd6a4e9d795f179ea", [{0x9, 0x8000, {0x1, 0x2f14}}, {0x9, 0x4, {0x1, 0x6}}, {0x1, 0x1, {0x2}}, {0x268, 0x234, {0x0, 0x401}}, {0x7, 0x7, {0x2, 0x7}}, {0x8, 0x324d, {0x2, 0x100}}, {0x101, 0xf, {0x1, 0x4}}, {0x8, 0x1d0, {0x3}}, {0xd, 0x7ff, {0x3, 0x3}}, {0x7, 0x2, {0x0, 0xce2}}, {0x10}, {0xffff, 0x7fff, {0x2, 0x6}}, {0x4, 0x1, {0x0, 0x4}}, {0x2, 0x1, {0x3, 0x4}}, {0x3, 0x4, {0x0, 0xb5}}, {0x5, 0x7aa1, {0x2, 0x7f}}, {0x3, 0x6, {0x3, 0x1000}}, {0x8000, 0x9, {0x1, 0x6}}, {0x401, 0x5, {0x0, 0x8}}, {0xb4b2, 0x9, {0x0, 0x1}}, {0x9, 0x4, {0x1, 0xf}}, {0x1ff, 0x9, {0x0, 0x6}}, {0x4, 0x1, {0x1, 0x5}}, {0x6, 0xf6, {0x2}}, {0x9, 0x7b, {0x0, 0x3}}, {0x9, 0x1, {0x1, 0x20000000}}, {0x6, 0x4, {0x1, 0x3}}, {0x4, 0x2, {0x3, 0x6}}, {0x401, 0x2, {0x3, 0x3}}, {0x2, 0xfdb5, {0x3, 0x7}}, {0x3, 0x8, {0x1, 0x4}}, {0xfff3, 0x3, {0x3, 0x6}}, {0x6, 0xfffd, {0x2, 0x9}}, {0xa, 0x1}, {0xf48, 0x6, {0x3, 0x6}}, {0x1, 0x800, {0x1, 0x3}}, {0x9, 0x86b, {0x0, 0x2}}, {0x0, 0x91, {0x2, 0x5db3}}, {0x7, 0x7, {0x0, 0x6}}, {0x9, 0x200, {0x1, 0x8d27}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000140)=""/50, 0x32}], 0x2}, 0x2}], 0x1, 0x40000140, 0x0)

157.57349ms ago: executing program 2 (id=1545):
r0 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c)
sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x3}, 0x28, 0x0}, 0x0)

157.41144ms ago: executing program 2 (id=1546):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", '\x00', "fffffffffffffffd"}, 0x38)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close(0x4)

90.13366ms ago: executing program 2 (id=1547):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r0, 0x37}, 0x20)

89.628986ms ago: executing program 2 (id=1548):
r0 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
sendmsg$rds(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvmmsg(r1, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b702000014000000b7030000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/100, 0x64, <r5=>0x0, &(0x7f0000000200)=""/144, 0x90}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r5, 0x4)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=1549):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x40000003, 0x1083, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r4 = socket$inet6(0xa, 0x6, 0x200)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000680)={<r5=>r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6, 0x9, 0x7f, 0x2, 0x20, 0x0, 0x1}, &(0x7f0000000740)=0x9c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000a40)={r5, 0xffffffff}, &(0x7f0000000a80)=0x8)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x50, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e9a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x440c0}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
r8 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$netlink(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="e00000001300010000000000000000004015143f4529d72384a65b0f683ca0a21fdf11440000bf3bc8d961bdc2e3267150aaca5d87ea3a2d0572f6a7882ef366b38649334f9e14aa669004dbd601f7a573479bda64e1a21a8d8224968c420b2358508e8b0e65ea507a9d564c6e29ad53eb774cd5a8114674850d36744c882033716525c99530fc100d4a5998ba6bdfed"], 0xe0}], 0x1}, 0x0)
write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
sendmsg$nl_generic(r0, 0x0, 0x4044004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x7}, 0x80000002}], 0x4, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:25636' (ED25519) to the list of known hosts.
syzkaller login: [   56.221797][ T5773] cgroup: Unknown subsys name 'net'
[   56.355351][ T5773] cgroup: Unknown subsys name 'cpuset'
[   56.359272][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.071740][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.384172][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.387932][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.390718][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.394575][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.397296][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.559360][ T5875] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   71.287046][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.289763][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.513889][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.519690][ T5913] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.524005][ T5913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.527326][ T5918] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.535081][ T5918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.541660][ T5918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.545630][ T5918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.549432][ T5918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.554621][ T5918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.558981][ T5918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.571457][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.575351][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.578761][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.583218][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.586681][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.973056][ T5915] chnl_net:caif_netlink_parms(): no params data found
[   71.988292][ T5911] chnl_net:caif_netlink_parms(): no params data found
[   72.117542][ T5909] chnl_net:caif_netlink_parms(): no params data found
[   72.209062][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.213077][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.215856][ T5915] bridge_slave_0: entered allmulticast mode
[   72.218854][ T5915] bridge_slave_0: entered promiscuous mode
[   72.223337][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.225605][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.227978][ T5911] bridge_slave_0: entered allmulticast mode
[   72.230654][ T5911] bridge_slave_0: entered promiscuous mode
[   72.234678][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.236838][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.239365][ T5911] bridge_slave_1: entered allmulticast mode
[   72.243884][ T5911] bridge_slave_1: entered promiscuous mode
[   72.255575][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.257835][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.260148][ T5915] bridge_slave_1: entered allmulticast mode
[   72.263829][ T5915] bridge_slave_1: entered promiscuous mode
[   72.317437][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.320381][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.323718][ T5909] bridge_slave_0: entered allmulticast mode
[   72.327539][ T5909] bridge_slave_0: entered promiscuous mode
[   72.333257][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.335855][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.338413][ T5909] bridge_slave_1: entered allmulticast mode
[   72.342903][ T5909] bridge_slave_1: entered promiscuous mode
[   72.361027][ T5911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.379733][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.385674][ T5911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.417115][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.423893][ T5909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.457149][ T5909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.475755][ T5911] team0: Port device team_slave_0 added
[   72.486897][ T5915] team0: Port device team_slave_0 added
[   72.503863][ T5911] team0: Port device team_slave_1 added
[   72.508368][ T5915] team0: Port device team_slave_1 added
[   72.512796][ T5909] team0: Port device team_slave_0 added
[   72.546302][ T5909] team0: Port device team_slave_1 added
[   72.559713][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.562003][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.569301][ T5911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.587771][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.590684][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.601351][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.606195][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.608684][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.618111][ T5911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.637940][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.640722][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.651355][ T5909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.657728][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.660469][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.670411][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.694225][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.696926][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.706611][ T5909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.746643][ T5911] hsr_slave_0: entered promiscuous mode
[   72.749749][ T5911] hsr_slave_1: entered promiscuous mode
[   72.820837][ T5915] hsr_slave_0: entered promiscuous mode
[   72.824709][ T5915] hsr_slave_1: entered promiscuous mode
[   72.827539][ T5915] debugfs: 'hsr0' already exists in 'hsr'
[   72.829882][ T5915] Cannot create hsr debugfs directory
[   72.835661][ T5909] hsr_slave_0: entered promiscuous mode
[   72.838295][ T5909] hsr_slave_1: entered promiscuous mode
[   72.840939][ T5909] debugfs: 'hsr0' already exists in 'hsr'
[   72.843977][ T5909] Cannot create hsr debugfs directory
[   73.171564][ T5911] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.188955][ T5911] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.205709][ T5911] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.212699][ T5911] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.262989][ T5915] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.268390][ T5915] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.296573][ T5915] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.315964][ T5915] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.360393][ T5909] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.368048][ T5909] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.379532][ T5909] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.386178][ T5909] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.483017][ T5911] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.524360][ T5911] 8021q: adding VLAN 0 to HW filter on device team0
[   73.546974][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.549947][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.566928][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.581194][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.583780][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.612134][ T5913] Bluetooth: hci2: command tx timeout
[   73.642721][ T5909] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.647447][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[   73.673730][ T5909] 8021q: adding VLAN 0 to HW filter on device team0
[   73.679339][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.682200][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.691501][ T5913] Bluetooth: hci1: command tx timeout
[   73.693379][ T5913] Bluetooth: hci0: command tx timeout
[   73.707910][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.710636][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.716839][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.719471][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.737789][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.740764][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.856110][ T5909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.949382][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.026990][ T5911] veth0_vlan: entered promiscuous mode
[   74.056753][ T5911] veth1_vlan: entered promiscuous mode
[   74.065715][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.100244][ T5909] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.149072][ T5911] veth0_macvtap: entered promiscuous mode
[   74.165769][ T5911] veth1_macvtap: entered promiscuous mode
[   74.187082][ T5915] veth0_vlan: entered promiscuous mode
[   74.206423][ T5915] veth1_vlan: entered promiscuous mode
[   74.219843][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.225147][ T5909] veth0_vlan: entered promiscuous mode
[   74.235566][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.245766][ T5909] veth1_vlan: entered promiscuous mode
[   74.257150][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.268357][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.274767][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.284776][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.309654][ T5915] veth0_macvtap: entered promiscuous mode
[   74.337480][ T5915] veth1_macvtap: entered promiscuous mode
[   74.357840][ T5909] veth0_macvtap: entered promiscuous mode
[   74.385428][ T5909] veth1_macvtap: entered promiscuous mode
[   74.403430][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.415239][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.421959][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.444465][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.456942][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.476191][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.479590][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.486428][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.489481][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.490749][ T5909] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.502933][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.506292][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.531714][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.536486][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.541491][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.545083][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.675476][ T1354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.678596][ T1354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.741515][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.747650][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.785393][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.788685][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.844764][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.852459][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.998594][ T5987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.640088][ T6030] IPVS: Error connecting to the multicast addr
[   75.662040][ T6034] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.683003][ T5237] Bluetooth: hci2: command tx timeout
[   75.762513][ T5237] Bluetooth: hci0: command tx timeout
[   75.767960][ T5237] Bluetooth: hci1: command tx timeout
[   75.847307][ T6045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.58'.
[   75.967346][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'.
[   76.320419][ T6070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.68'.
[   76.350368][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.68'.
[   77.140007][ T6112] netlink: 'syz.1.87': attribute type 33 has an invalid length.
[   77.145024][ T6112] netlink: 152 bytes leftover after parsing attributes in process `syz.1.87'.
[   77.259275][ T6123] netlink: 128 bytes leftover after parsing attributes in process `syz.2.92'.
[   77.262510][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'.
[   77.322050][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[   77.360271][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'.
[   77.367367][ T6132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.763214][ T5237] Bluetooth: hci2: command tx timeout
[   77.851714][ T5913] Bluetooth: hci0: command tx timeout
[   77.854202][ T5237] Bluetooth: hci1: command tx timeout
[   78.005797][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'.
[   78.190113][ T6196] trusted_key: syz.1.120 sent an empty control message without MSG_MORE.
[   78.236546][ T6198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.289417][ T6200] syz.1.122 uses obsolete (PF_INET,SOCK_PACKET)
[   78.409529][ T6206] nicvf0: entered promiscuous mode
[   78.479174][ T6210] sctp: [Deprecated]: syz.0.127 (pid 6210) Use of int in max_burst socket option deprecated.
[   78.479174][ T6210] Use struct sctp_assoc_value instead
[   79.803838][ T6258] netlink: 'syz.1.148': attribute type 7 has an invalid length.
[   79.853865][ T5913] Bluetooth: hci2: command tx timeout
[   79.923009][ T5878] Bluetooth: hci0: command tx timeout
[   79.925188][ T5913] Bluetooth: hci1: command tx timeout
[   79.989425][ T6268] netlink: 'syz.0.152': attribute type 1 has an invalid length.
[   80.113996][ T6274] tipc: Started in network mode
[   80.117116][ T6274] tipc: Node identity c2a0f39d1015, cluster identity 4711
[   80.119559][ T6274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.123658][ T6274] syzkaller0: entered promiscuous mode
[   80.126224][ T6274] syzkaller0: entered allmulticast mode
[   80.167257][ T6274] tipc: Resetting bearer <eth:syzkaller0>
[   80.177637][ T6273] tipc: Resetting bearer <eth:syzkaller0>
[   80.204212][ T6273] tipc: Disabling bearer <eth:syzkaller0>
[   80.318999][ T6284] bridge1: entered promiscuous mode
[   80.322747][ T6284] macsec1: entered promiscuous mode
[   80.325143][ T6284] macsec1: entered allmulticast mode
[   80.328047][ T6284] bridge1: entered allmulticast mode
[   80.343267][ T6284] bridge1: port 1(macsec1) entered blocking state
[   80.346145][ T6284] bridge1: port 1(macsec1) entered disabled state
[   80.359948][ T6284] bridge1: left allmulticast mode
[   80.367271][ T6284] bridge1: left promiscuous mode
[   81.330449][ T6361] __nla_validate_parse: 12 callbacks suppressed
[   81.330472][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'.
[   81.565951][ T6374] syz_tun: entered allmulticast mode
[   81.584076][ T6374] dvmrp8: entered allmulticast mode
[   81.603363][ T6374] syz_tun: left allmulticast mode
[   81.605852][ T6374] dvmrp8: left allmulticast mode
[   81.921315][ T5913] Bluetooth: hci2: command 0x0405 tx timeout
[   82.012890][ T6390] netlink: 'syz.2.209': attribute type 5 has an invalid length.
[   82.088070][ T6394] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   82.153248][ T6394] Zero length message leads to an empty skb
[   84.167351][   T33] audit: type=1804 audit(1757535478.454:2): pid=6525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.263" name="memory.events" dev="tmpfs" ino=440 res=1 errno=0
[   84.197377][   T33] audit: type=1800 audit(1757535478.454:3): pid=6525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.263" name="memory.events" dev="tmpfs" ino=440 res=0 errno=0
[   84.394103][ T6535] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   84.470893][ T6551] netlink: 'syz.0.272': attribute type 64 has an invalid length.
[   84.580314][ T6557] syz_tun: entered allmulticast mode
[   84.590956][ T6557] dvmrp8: entered allmulticast mode
[   84.607363][ T6557] syz_tun: left allmulticast mode
[   84.609153][ T6557] dvmrp8: left allmulticast mode
[   84.664599][ T6563] netlink: 'syz.1.275': attribute type 23 has an invalid length.
[   85.532147][ T6580] warning: `syz.2.285' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.648395][  T974] cfg80211: failed to load regulatory.db
[   86.672069][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'.
[   86.865030][ T6619] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   86.933989][ T6626] netlink: 84 bytes leftover after parsing attributes in process `syz.1.302'.
[   86.937950][ T6626] team0: No ports can be present during mode change
[   87.316442][ T6657] Driver unsupported XDP return value 0 on prog  (id 43) dev N/A, expect packet loss!
[   87.432160][ T6664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.534349][ T6672] tipc: Cannot configure node identity twice
[   87.618142][ T6678] netlink: 'syz.1.324': attribute type 30 has an invalid length.
[   87.865302][ T6696] netlink: 'syz.2.330': attribute type 1 has an invalid length.
[   87.888707][ T6699] netlink: 224 bytes leftover after parsing attributes in process `syz.1.331'.
[   87.913435][ T6696] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.989529][ T6702] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.009152][ T6702] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   88.020453][ T6702] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   88.069162][ T6696] veth3: entered promiscuous mode
[   88.071881][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'.
[   88.075308][ T6696] bond2: (slave veth3): Enslaving as an active interface with a down link
[   88.080697][ T6713] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.085097][ T6706] netlink: 'syz.1.334': attribute type 16 has an invalid length.
[   88.088107][ T6706] netlink: 'syz.1.334': attribute type 17 has an invalid length.
[   88.106238][ T6706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.183282][ T6758] batadv_slave_1: entered promiscuous mode
[   89.187579][ T6757] batadv_slave_1: left promiscuous mode
[   89.306458][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'.
[   89.309289][ T6771] netlink: 'syz.1.359': attribute type 1 has an invalid length.
[   89.365177][ T6771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.359'.
[   91.299198][ T6812] netlink: 'syz.2.376': attribute type 1 has an invalid length.
[   91.386938][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'.
[   91.390725][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'.
[   91.429970][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'.
[   91.434116][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'.
[   91.499754][ T6834] netlink: 'syz.0.381': attribute type 13 has an invalid length.
[   91.511523][ T6834] netlink: 'syz.0.381': attribute type 17 has an invalid length.
[   91.632852][ T6834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.727550][ T6834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.793968][ T6834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.884511][ T6820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.030595][ T6870] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.036622][ T6870] syzkaller0: entered promiscuous mode
[   92.039097][ T6870] syzkaller0: entered allmulticast mode
[   92.118962][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.123214][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.233410][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.244130][ T6861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.376190][ T6861] veth3: left promiscuous mode
[   92.380565][ T6870] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   92.404646][ T6872] tipc: Resetting bearer <eth:syzkaller0>
[   92.407363][ T5883] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.413176][ T5883] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.425867][ T6869] tipc: Resetting bearer <eth:syzkaller0>
[   92.438742][ T6869] tipc: Disabling bearer <eth:syzkaller0>
[   92.468220][ T5883] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.472395][ T5883] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.549284][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'.
[   92.563204][ T6877] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   92.679832][ T6884] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.405'.
[   92.997981][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'.
[   93.047399][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.051505][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.693973][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'.
[   93.708279][ T6924] netlink: 'syz.1.422': attribute type 1 has an invalid length.
[   93.779239][ T6924] gretap1: entered allmulticast mode
[   93.784667][ T6924] bond2: (slave gretap1): making interface the new active one
[   93.787970][ T6924] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   94.242517][ T6965] tipc: Started in network mode
[   94.244877][ T6965] tipc: Node identity 2a3721a2a695, cluster identity 4711
[   94.251384][ T6965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.255046][ T6963] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   94.258167][ T6963] netlink: 140 bytes leftover after parsing attributes in process `syz.2.433'.
[   94.262189][ T6963] netlink: 96 bytes leftover after parsing attributes in process `syz.2.433'.
[   94.294473][ T6965] syzkaller0: entered promiscuous mode
[   94.296507][ T6965] syzkaller0: entered allmulticast mode
[   94.299687][ T6965] tipc: Resetting bearer <eth:syzkaller0>
[   94.310994][ T6964] tipc: Resetting bearer <eth:syzkaller0>
[   95.293604][ T5899] tipc: Node number set to 2359435682
[   95.413379][ T6964] tipc: Disabling bearer <eth:syzkaller0>
[   95.517499][ T6974] bridge0: entered allmulticast mode
[   95.524197][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'.
[   95.527860][ T6974] bridge_slave_1: left allmulticast mode
[   95.530053][ T6974] bridge_slave_1: left promiscuous mode
[   95.546527][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.554781][ T6974] bridge_slave_0: left allmulticast mode
[   95.558729][ T6974] bridge_slave_0: left promiscuous mode
[   95.568919][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.589641][ T6974] bridge0 (unregistering): left allmulticast mode
[   95.762130][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[   95.802778][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[   96.148646][ T7015] bond3: entered promiscuous mode
[   96.150654][ T7015] bond3: entered allmulticast mode
[   96.154560][ T7015] 8021q: adding VLAN 0 to HW filter on device bond3
[   97.189709][ T7041] netlink: 'syz.1.469': attribute type 10 has an invalid length.
[   97.200541][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'.
[   97.583981][ T7064] GUP no longer grows the stack in syz.1.480 (7064): 200000003000-20000000a000 (200000001000)
[   97.588573][ T7064] CPU: 0 UID: 0 PID: 7064 Comm: syz.1.480 Not tainted syzkaller #0 PREEMPT(full) 
[   97.588594][ T7064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.588603][ T7064] Call Trace:
[   97.588620][ T7064]  <TASK>
[   97.588627][ T7064]  dump_stack_lvl+0x189/0x250
[   97.588654][ T7064]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.588671][ T7064]  ? __pfx__printk+0x10/0x10
[   97.588688][ T7064]  ? find_vma+0xe7/0x160
[   97.588706][ T7064]  ? __lock_acquire+0xab9/0xd20
[   97.588736][ T7064]  __get_user_pages+0x24d0/0x2ce0
[   97.588754][ T7064]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[   97.588792][ T7064]  ? rcu_is_watching+0x15/0xb0
[   97.588810][ T7064]  __gup_longterm_locked+0xde9/0x1660
[   97.588867][ T7064]  ? sanity_check_pinned_pages+0x123a/0x1300
[   97.588892][ T7064]  gup_fast_fallback+0x1e6a/0x2010
[   97.588938][ T7064]  ? __pfx_gup_fast_fallback+0x10/0x10
[   97.588953][ T7064]  ? stack_trace_save+0x9c/0xe0
[   97.588970][ T7064]  ? __pfx_stack_trace_save+0x10/0x10
[   97.588995][ T7064]  ? pin_user_pages_fast+0x4d/0xb0
[   97.589015][ T7064]  iov_iter_extract_pages+0x35a/0x5e0
[   97.589046][ T7064]  extract_iter_to_sg+0xe46/0x24e0
[   97.589080][ T7064]  ? __pfx_extract_iter_to_sg+0x10/0x10
[   97.589113][ T7064]  ? __asan_memset+0x22/0x50
[   97.589130][ T7064]  af_alg_get_rsgl+0x436/0x810
[   97.589161][ T7064]  aead_recvmsg+0x4cc/0x13f0
[   97.589188][ T7064]  ? rcu_is_watching+0x15/0xb0
[   97.589208][ T7064]  ? __pfx_aead_recvmsg+0x10/0x10
[   97.589227][ T7064]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[   97.589243][ T7064]  ? __pfx_aead_recvmsg+0x10/0x10
[   97.589261][ T7064]  sock_recvmsg_nosec+0x186/0x1c0
[   97.589285][ T7064]  ____sys_recvmsg+0x3aa/0x460
[   97.589307][ T7064]  ? __pfx_____sys_recvmsg+0x10/0x10
[   97.589336][ T7064]  ? import_iovec+0x74/0xa0
[   97.589355][ T7064]  ___sys_recvmsg+0x1b5/0x510
[   97.589373][ T7064]  ? __pfx____sys_recvmsg+0x10/0x10
[   97.589416][ T7064]  ? __might_fault+0xb0/0x130
[   97.589438][ T7064]  do_recvmmsg+0x307/0x770
[   97.589461][ T7064]  ? __pfx_do_recvmmsg+0x10/0x10
[   97.589475][ T7064]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[   97.589508][ T7064]  ? __pfx_do_futex+0x10/0x10
[   97.589539][ T7064]  __x64_sys_recvmmsg+0x190/0x240
[   97.589558][ T7064]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[   97.589572][ T7064]  ? rcu_is_watching+0x15/0xb0
[   97.589590][ T7064]  ? do_syscall_64+0xbe/0x3b0
[   97.589607][ T7064]  do_syscall_64+0xfa/0x3b0
[   97.589619][ T7064]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.589637][ T7064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.589651][ T7064]  ? exc_page_fault+0x9f/0xf0
[   97.589672][ T7064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.589685][ T7064] RIP: 0033:0x7f904b78eba9
[   97.589700][ T7064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.589711][ T7064] RSP: 002b:00007f904c61e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   97.589726][ T7064] RAX: ffffffffffffffda RBX: 00007f904b9d5fa0 RCX: 00007f904b78eba9
[   97.589736][ T7064] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[   97.589745][ T7064] RBP: 00007f904b811e19 R08: 0000000000000000 R09: 0000000000000000
[   97.589754][ T7064] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[   97.589763][ T7064] R13: 00007f904b9d6038 R14: 00007f904b9d5fa0 R15: 00007fffac94ff68
[   97.589787][ T7064]  </TASK>
[   98.181424][ T7099] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   98.593922][ T7138] openvswitch: netlink: IPv4 tun info is not correct
[   98.715614][ T7148] netlink: 300 bytes leftover after parsing attributes in process `syz.2.518'.
[   98.847380][ T7156] tipc: Started in network mode
[   98.849516][ T7156] tipc: Node identity 8e1a37a471a3, cluster identity 4711
[   98.860993][ T7156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.872043][ T7156] syzkaller0: entered promiscuous mode
[   98.874436][ T7156] syzkaller0: entered allmulticast mode
[   98.911806][ T7156] tipc: Resetting bearer <eth:syzkaller0>
[   98.963062][ T7156] tipc: Resetting bearer <eth:syzkaller0>
[   98.980652][ T7156] tipc: Disabling bearer <eth:syzkaller0>
[   99.155678][ T7172] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   99.595495][ T7202] lo speed is unknown, defaulting to 1000
[   99.602727][ T7202] lo speed is unknown, defaulting to 1000
[   99.607607][ T7202] lo speed is unknown, defaulting to 1000
[   99.628470][ T7202] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   99.695503][ T7202] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   99.789758][ T7202] lo speed is unknown, defaulting to 1000
[   99.802256][ T7202] lo speed is unknown, defaulting to 1000
[   99.821801][ T7202] lo speed is unknown, defaulting to 1000
[  100.168561][ T7217] lo speed is unknown, defaulting to 1000
[  100.209373][ T7226] netlink: 'syz.0.553': attribute type 27 has an invalid length.
[  100.223835][ T7226] netlink: 'syz.0.553': attribute type 27 has an invalid length.
[  100.480448][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'.
[  100.484363][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'.
[  100.859842][ T7260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.568'.
[  101.744240][ T7309] netlink: 'syz.2.582': attribute type 1 has an invalid length.
[  101.800656][ T7309] bond3: entered promiscuous mode
[  101.811003][ T7309] 8021q: adding VLAN 0 to HW filter on device bond3
[  101.876267][ T7324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.586'.
[  101.910241][ T7316] 8021q: adding VLAN 0 to HW filter on device bond4
[  101.916011][ T7316] bond3: (slave bond4): making interface the new active one
[  101.919210][ T7316] bond4: entered promiscuous mode
[  101.927684][ T7316] bond3: (slave bond4): Enslaving as an active interface with an up link
[  101.946232][ T7309] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  101.956879][ T7309] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  101.975974][ T7324] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  102.000217][ T7321] lo speed is unknown, defaulting to 1000
[  102.092019][ T7327] lo speed is unknown, defaulting to 1000
[  102.254788][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.591'.
[  102.293140][ T7340] lo speed is unknown, defaulting to 1000
[  102.484831][ T7349] lo speed is unknown, defaulting to 1000
[  102.927966][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  103.274716][ T7412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.277822][ T7412] syzkaller0: entered promiscuous mode
[  103.279661][ T7412] syzkaller0: entered allmulticast mode
[  103.297325][ T7412] tipc: Resetting bearer <eth:syzkaller0>
[  103.305447][ T7410] tipc: Resetting bearer <eth:syzkaller0>
[  103.319172][ T7410] tipc: Disabling bearer <eth:syzkaller0>
[  103.658049][ T7447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.627'.
[  103.858065][ T7459] netlink: 'syz.0.633': attribute type 2 has an invalid length.
[  103.976865][ T7467] bond_slave_0: entered promiscuous mode
[  103.979308][ T7467] bond_slave_1: entered promiscuous mode
[  103.982022][ T7467] vlan2: entered promiscuous mode
[  103.984065][ T7467] bond0: entered promiscuous mode
[  104.015555][ T7463] netlink: 'syz.1.635': attribute type 4 has an invalid length.
[  104.504865][ T7496] netlink: 'syz.1.649': attribute type 1 has an invalid length.
[  104.508116][ T7496] netlink: 'syz.1.649': attribute type 2 has an invalid length.
[  104.644859][ T7503] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  104.713730][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'.
[  104.791240][ T7507] 8021q: adding VLAN 0 to HW filter on device bond6
[  104.795699][ T7507] bond5: (slave bond6): Enslaving as an active interface with an up link
[  104.816933][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'.
[  104.837036][ T7507] bond5 (unregistering): (slave bond6): Releasing backup interface
[  104.855383][ T7507] bond5 (unregistering): Released all slaves
[  104.899250][ T7517] lo speed is unknown, defaulting to 1000
[  105.082127][ T7525] nbd0: detected capacity change from 0 to 127
[  105.099498][   T57] block nbd0: Receive control failed (result -32)
[  105.109637][ T5850] block nbd0: Dead connection, failed to find a fallback
[  105.244662][ T7540] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  105.249599][ T7540] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  105.765229][ T7565] bridge: RTM_NEWNEIGH with invalid ether address
[  105.920703][ T7575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.923903][ T7575] IPv6: NLM_F_CREATE should be set when creating new route
[  105.926274][ T7575] IPv6: NLM_F_CREATE should be set when creating new route
[  106.125017][ T7588] nbd2: detected capacity change from 0 to 63
[  106.127347][ T7591] block nbd2: NBD_DISCONNECT
[  106.129105][ T7591] block nbd2: Disconnected due to user request.
[  106.138593][ T5864] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  106.143121][ T5864] Buffer I/O error on dev nbd2, logical block 2, async page read
[  106.149311][ T5864] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  106.153273][ T5864] Buffer I/O error on dev nbd2, logical block 3, async page read
[  106.156166][ T7591] block nbd2: shutting down sockets
[  106.173726][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  106.177702][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  106.180639][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  106.183761][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  106.186477][ T5864] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  106.189676][ T5864] Buffer I/O error on dev nbd2, logical block 0, async page read
[  106.206457][ T5864] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  106.209961][ T5864] Buffer I/O error on dev nbd2, logical block 1, async page read
[  106.223552][ T5864] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  106.227578][ T5864] Buffer I/O error on dev nbd2, logical block 2, async page read
[  106.232721][ T5864] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  106.236579][ T5864] Buffer I/O error on dev nbd2, logical block 3, async page read
[  106.240077][ T5864] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  106.243742][ T5864] Buffer I/O error on dev nbd2, logical block 0, async page read
[  106.249686][ T5864] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  106.253432][ T5864] Buffer I/O error on dev nbd2, logical block 1, async page read
[  106.263634][ T5864] ldm_validate_partition_table(): Disk read failed.
[  106.268810][ T5864] Dev nbd2: unable to read RDB block 0
[  106.275135][ T5864]  nbd2: unable to read partition table
[  106.284388][ T5864] ldm_validate_partition_table(): Disk read failed.
[  106.288793][ T5864] Dev nbd2: unable to read RDB block 0
[  106.302278][ T5864]  nbd2: unable to read partition table
[  106.302487][ T7588] bond5: entered promiscuous mode
[  106.311998][ T7588] bond5: entered allmulticast mode
[  106.316442][ T7588] 8021q: adding VLAN 0 to HW filter on device bond5
[  106.508656][ T7616] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.694'.
[  107.216207][ T7663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.719'.
[  108.405539][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.744'.
[  108.410406][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.744'.
[  108.579134][ T7734] netlink: 116 bytes leftover after parsing attributes in process `syz.0.752'.
[  108.678354][ T7745] tc_dump_action: action bad kind
[  108.695272][ T7748] netlink: 'syz.2.759': attribute type 1 has an invalid length.
[  108.709596][ T7748] netlink: 'syz.2.759': attribute type 1 has an invalid length.
[  108.787371][ T7754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.763'.
[  108.790762][ T7754] netlink: 3 bytes leftover after parsing attributes in process `syz.0.763'.
[  108.813493][ T7754] netlink: 36 bytes leftover after parsing attributes in process `syz.0.763'.
[  108.843878][ T7761] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  109.028491][ T7776] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  109.174387][ T7789] bond0: entered promiscuous mode
[  109.176605][ T7789] bond_slave_0: entered promiscuous mode
[  109.179142][ T7789] bond_slave_1: entered promiscuous mode
[  109.188580][ T7789] batadv0: entered promiscuous mode
[  109.193885][ T7789] hsr1: entered allmulticast mode
[  109.195896][ T7789] bond0: entered allmulticast mode
[  109.197933][ T7789] bond_slave_0: entered allmulticast mode
[  109.200207][ T7789] bond_slave_1: entered allmulticast mode
[  109.206443][ T7789] batadv0: entered allmulticast mode
[  109.209199][ T7789] 8021q: adding VLAN 0 to HW filter on device hsr1
[  109.214820][ T7789] bond0: left promiscuous mode
[  109.216796][ T7789] bond_slave_0: left promiscuous mode
[  109.219313][ T7789] bond_slave_1: left promiscuous mode
[  109.226105][ T7789] batadv0: left promiscuous mode
[  109.382834][ T5877] IPVS: starting estimator thread 0...
[  109.493921][ T7798] IPVS: using max 64 ests per chain, 153600 per kthread
[  109.649815][ T7814] vlan2: entered allmulticast mode
[  109.783246][ T7820] xt_HMARK: spi-set and port-set can't be combined
[  109.861345][ T7824] : renamed from batadv_slave_1 (while UP)
[  110.012788][ T7834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.025493][ T7834] syzkaller0: entered promiscuous mode
[  110.027806][ T7834] syzkaller0: entered allmulticast mode
[  110.029547][ T7840] __nla_validate_parse: 6 callbacks suppressed
[  110.029571][ T7840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.798'.
[  110.037332][ T7840] netlink: 224 bytes leftover after parsing attributes in process `syz.0.798'.
[  110.044633][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'.
[  110.122990][ T7834] tipc: Resetting bearer <eth:syzkaller0>
[  110.128914][ T7832] tipc: Resetting bearer <eth:syzkaller0>
[  110.182419][ T7832] tipc: Disabling bearer <eth:syzkaller0>
[  110.373998][ T7864] netlink: 'syz.1.809': attribute type 21 has an invalid length.
[  110.377063][ T7864] netlink: 152 bytes leftover after parsing attributes in process `syz.1.809'.
[  110.467572][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'.
[  110.646323][ T7887] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  110.806010][ T7897] netlink: 'syz.1.820': attribute type 1 has an invalid length.
[  110.870754][ T7897] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  110.881529][ T5883] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  110.893730][ T7897] 8021q: adding VLAN 0 to HW filter on device bond6
[  111.001403][ T7897] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  111.007371][ T7897] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface
[  111.015098][ T7897] bond6 (unregistering): Released all slaves
[  111.257893][ T7908] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  111.261003][ T7908] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  111.418101][ T7919] netlink: 256 bytes leftover after parsing attributes in process `syz.2.823'.
[  111.420964][ T7919] netlink: 48 bytes leftover after parsing attributes in process `syz.2.823'.
[  111.442434][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'.
[  111.445993][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'.
[  111.465332][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'.
[  111.489402][ T7923] 8021q: adding VLAN 0 to HW filter on device bond6
[  111.728353][   T33] audit: type=1800 audit(1757535506.014:4): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.830" name="cgroup.controllers" dev="tmpfs" ino=1461 res=0 errno=0
[  112.038046][ T7952] lo speed is unknown, defaulting to 1000
[  112.241720][ T5850] block nbd0: shutting down sockets
[  112.244060][ T5850] blk_print_req_error: 138 callbacks suppressed
[  112.244073][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.262401][ T5850] buffer_io_error: 138 callbacks suppressed
[  112.262418][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.272166][ T5850] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.275956][ T5850] Buffer I/O error on dev nbd0, logical block 1, async page read
[  112.279337][ T5850] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.303801][ T5850] Buffer I/O error on dev nbd0, logical block 2, async page read
[  112.307104][ T5850] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.310762][ T5850] Buffer I/O error on dev nbd0, logical block 3, async page read
[  112.320266][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.328773][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.333151][ T5850] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.337343][ T5850] Buffer I/O error on dev nbd0, logical block 1, async page read
[  112.340995][ T5850] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.345682][ T5850] Buffer I/O error on dev nbd0, logical block 2, async page read
[  112.349188][ T5850] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.353059][ T5850] Buffer I/O error on dev nbd0, logical block 3, async page read
[  112.356504][ T5850] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.360137][ T5850] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.364818][ T7968] dummy0: entered allmulticast mode
[  112.369550][ T5850] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.375248][ T5850] Buffer I/O error on dev nbd0, logical block 1, async page read
[  112.380691][ T5850] ldm_validate_partition_table(): Disk read failed.
[  112.389012][ T5850] Dev nbd0: unable to read RDB block 0
[  112.393940][ T5850]  nbd0: unable to read partition table
[  112.409537][ T5850] ldm_validate_partition_table(): Disk read failed.
[  112.415953][ T5850] Dev nbd0: unable to read RDB block 0
[  112.419854][ T5850]  nbd0: unable to read partition table
[  113.172603][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.176499][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.397290][ T8039] team0: Device gtp0 is of different type
[  113.914576][ T8075] netlink: 'syz.1.902': attribute type 1 has an invalid length.
[  113.917778][ T8075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.038212][  T974] lo speed is unknown, defaulting to 1000
[  114.409892][ T8117] macsec1: entered promiscuous mode
[  114.413233][ T8117] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  114.416169][ T8117] macsec1: entered allmulticast mode
[  114.418491][ T8117] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  114.436859][ T8117] macsec2: entered promiscuous mode
[  114.446693][ T8117] macsec2: entered allmulticast mode
[  115.460246][ T8154] netlink: 'syz.0.938': attribute type 1 has an invalid length.
[  115.463314][ T8154] __nla_validate_parse: 8 callbacks suppressed
[  115.463324][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'.
[  115.605865][ T8163] netlink: 'syz.2.942': attribute type 5 has an invalid length.
[  116.183104][ T8205] lo speed is unknown, defaulting to 1000
[  116.217290][ T8208] netlink: 'syz.1.951': attribute type 10 has an invalid length.
[  116.227638][ T8208] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.233357][ T8208] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  116.244609][ T8205] netlink: 'syz.1.951': attribute type 10 has an invalid length.
[  116.247712][ T8205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.951'.
[  116.690420][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.955'.
[  116.871655][ T5237] Bluetooth: hci2: link tx timeout
[  116.874798][ T5237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.878752][ T5913] Bluetooth: hci2: link tx timeout
[  116.880910][ T5913] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.884407][ T5913] Bluetooth: hci2: link tx timeout
[  116.886617][ T5913] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.889540][ T5913] Bluetooth: hci2: link tx timeout
[  116.891903][ T5913] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.894827][ T5913] Bluetooth: hci2: link tx timeout
[  116.896890][ T5913] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.899876][ T5913] Bluetooth: hci2: link tx timeout
[  116.902135][ T5913] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.245786][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.969'.
[  117.298651][ T8253] netlink: 32 bytes leftover after parsing attributes in process `syz.0.970'.
[  117.487153][ T8261] lo speed is unknown, defaulting to 1000
[  117.802866][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.974'.
[  117.810922][ T8261] vlan0: entered promiscuous mode
[  117.819128][ T8261] gretap0: entered promiscuous mode
[  118.044636][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'.
[  118.165378][ T8298] syzkaller0: entered promiscuous mode
[  118.167461][ T8298] syzkaller0: entered allmulticast mode
[  118.872549][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.990'.
[  118.965588][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  119.912394][ T8345] netlink: 'syz.2.1008': attribute type 8 has an invalid length.
[  120.054528][ T8358] macvlan2: entered allmulticast mode
[  120.058286][ T8358] veth1_vlan: entered allmulticast mode
[  120.064504][ T8358] veth1_vlan: left allmulticast mode
[  120.100448][ T8361] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  120.629219][ T8390] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.1025'.
[  120.636883][ T8390] syz_tun: entered allmulticast mode
[  120.668130][ T8389] syz_tun: left allmulticast mode
[  120.912450][ T8400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1030'.
[  123.100901][ T8540] netlink: 'syz.0.1094': attribute type 2 has an invalid length.
[  123.227160][ T8551] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  123.485522][ T8559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'.
[  123.563515][ T8563] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1103'.
[  123.607612][ T8565] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1104'.
[  123.610725][ T8565] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1104'.
[  123.614366][ T8565] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1104'.
[  123.927375][ T8575] netlink: 'syz.0.1108': attribute type 4 has an invalid length.
[  124.136783][ T8580] team0: entered promiscuous mode
[  124.138811][ T8580] team_slave_0: entered promiscuous mode
[  124.141291][ T8580] team_slave_1: entered promiscuous mode
[  124.144360][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'.
[  124.222852][ T8580] team0 (unregistering): left promiscuous mode
[  124.224850][ T8580] team_slave_0: left promiscuous mode
[  124.226728][ T8580] team_slave_1: left promiscuous mode
[  124.230463][ T8580] team0 (unregistering): Port device team_slave_0 removed
[  124.234697][ T8580] team0 (unregistering): Port device team_slave_1 removed
[  126.092895][ T8607] dummy0: entered promiscuous mode
[  126.095276][ T8607] macsec2: entered promiscuous mode
[  126.102795][ T8607] dummy0: left promiscuous mode
[  126.229460][ T8617] netlink: 'syz.1.1125': attribute type 1 has an invalid length.
[  126.234770][ T8617] netlink: 'syz.1.1125': attribute type 4 has an invalid length.
[  126.237917][ T8617] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1125'.
[  126.245243][ T8617] netlink: 'syz.1.1125': attribute type 1 has an invalid length.
[  126.253381][ T8617] netlink: 'syz.1.1125': attribute type 4 has an invalid length.
[  126.256724][ T8617] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1125'.
[  126.274092][ T8619] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  126.728019][ T8655] netlink: 'syz.2.1144': attribute type 11 has an invalid length.
[  126.834672][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'.
[  126.840030][ T8657] lo speed is unknown, defaulting to 1000
[  126.844240][ T8657] lo speed is unknown, defaulting to 1000
[  126.847531][ T8657] lo speed is unknown, defaulting to 1000
[  126.859887][ T8657] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  126.881003][ T8657] lo speed is unknown, defaulting to 1000
[  126.885911][ T8657] lo speed is unknown, defaulting to 1000
[  126.889040][ T8657] lo speed is unknown, defaulting to 1000
[  126.923097][ T8657] netlink: 'syz.2.1146': attribute type 4 has an invalid length.
[  127.356027][ T8699] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.1163'.
[  127.664400][ T8729] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1177'.
[  127.746747][ T8735] lo speed is unknown, defaulting to 1000
[  127.816289][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'.
[  127.871594][ T8743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.675463][ T8782] netlink: 'syz.1.1201': attribute type 7 has an invalid length.
[  128.771618][ T8788] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1205'.
[  129.222520][ T8811] veth1: mtu greater than device maximum
[  129.313361][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'.
[  129.354686][ T8825] netlink: 'syz.2.1223': attribute type 1 has an invalid length.
[  129.388127][ T8825] 8021q: adding VLAN 0 to HW filter on device bond7
[  129.402993][ T8825] veth5: entered promiscuous mode
[  129.408012][ T8825] bond7: (slave veth5): Enslaving as an active interface with an up link
[  129.695661][ T8839] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  129.787424][ T8851] syzkaller0: entered promiscuous mode
[  129.789603][ T8851] syzkaller0: entered allmulticast mode
[  130.016674][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'.
[  130.161984][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1248'.
[  130.395273][ T5938] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  131.483538][   T56] block nbd1: Receive control failed (result -32)
[  131.796091][ T8917] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1264'.
[  132.110061][ T8926] netlink: 'syz.2.1267': attribute type 10 has an invalid length.
[  132.115182][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.125281][ T8926] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  132.232932][ T8929] netlink: 'syz.2.1268': attribute type 1 has an invalid length.
[  132.236111][ T8929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1268'.
[  132.322033][ T8933] dvmrp1: entered allmulticast mode
[  132.466755][ T8947] netlink: 'syz.0.1277': attribute type 3 has an invalid length.
[  132.559141][ T8955] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  132.705888][ T8965] netlink: 'syz.1.1286': attribute type 2 has an invalid length.
[  132.708995][ T8965] netlink: 'syz.1.1286': attribute type 2 has an invalid length.
[  132.715500][ T8965] netlink: 'syz.1.1286': attribute type 2 has an invalid length.
[  132.718363][ T8965] netlink: 'syz.1.1286': attribute type 2 has an invalid length.
[  132.729346][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.732718][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.745498][ T8965] netlink: 'syz.1.1286': attribute type 2 has an invalid length.
[  132.810359][ T8973] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1289'.
[  132.815225][ T8971] IPVS: Error connecting to the multicast addr
[  132.830506][ T8973] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1289'.
[  132.859633][ T8975] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1290'.
[  132.963642][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'.
[  133.024785][ T8992] batadv_slave_1: entered promiscuous mode
[  133.039942][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'.
[  133.051862][ T8992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.078714][ T8992] batadv_slave_1 (unregistering): left promiscuous mode
[  133.082449][ T8992] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.239877][ T9005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'.
[  133.916775][ T9056] validate_nla: 47 callbacks suppressed
[  133.916800][ T9056] netlink: 'syz.0.1330': attribute type 3 has an invalid length.
[  134.084478][ T9070] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1337'.
[  134.297410][ T9080] lo speed is unknown, defaulting to 1000
[  134.628137][ T9089] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  134.638708][ T9089] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.826729][ T5883] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.830550][ T5883] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.836235][ T5883] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.851969][ T5971] IPVS: starting estimator thread 0...
[  134.854649][ T9110] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  134.917910][ T5883] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.936313][ T9113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.956828][ T9111] IPVS: using max 43 ests per chain, 103200 per kthread
[  135.009774][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'.
[  135.024353][ T9113] syzkaller0: entered promiscuous mode
[  135.026642][ T9113] syzkaller0: entered allmulticast mode
[  135.029530][ T9113] tipc: Resetting bearer <eth:syzkaller0>
[  135.038745][ T9112] tipc: Resetting bearer <eth:syzkaller0>
[  136.021588][   T24] tipc: Node number set to 3535139741
[  136.412111][ T9112] tipc: Disabling bearer <eth:syzkaller0>
[  136.762740][ T9138] nbd2: detected capacity change from 0 to 549764202496
[  136.769342][   T56] block nbd2: Receive control failed (result -104)
[  136.896106][ T9152] siw: device registration error -23
[  136.937315][ T9158] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1375'.
[  137.007526][ T9166] sctp: [Deprecated]: syz.0.1380 (pid 9166) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.007526][ T9166] Use struct sctp_sack_info instead
[  137.029587][ T9168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.033129][ T9168] syzkaller0: entered promiscuous mode
[  137.035263][ T9168] syzkaller0: entered allmulticast mode
[  137.058905][ T9168] tipc: Resetting bearer <eth:syzkaller0>
[  137.068841][ T9167] tipc: Resetting bearer <eth:syzkaller0>
[  137.088208][ T9167] tipc: Disabling bearer <eth:syzkaller0>
[  137.314611][ T9186] 8021q: adding VLAN 0 to HW filter on device bond7
[  137.335395][ T9186] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  137.344661][ T9189] syzkaller1: entered promiscuous mode
[  137.346769][ T9189] syzkaller1: entered allmulticast mode
[  137.432036][ T5938] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  137.544237][   T13] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  137.772946][ T9216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1403'.
[  137.916730][ T9232] netlink: 'syz.1.1411': attribute type 12 has an invalid length.
[  137.920011][ T9232] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1411'.
[  138.020697][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'.
[  138.026356][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'.
[  138.030449][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'.
[  138.035444][ T9239] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1414'.
[  138.052681][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'.
[  138.136791][ T9245] tun0: tun_chr_ioctl cmd 2148045848
[  138.160859][ T9245] tun0: tun_chr_ioctl cmd 21731
[  138.184804][ T9254] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1420'.
[  138.845991][ T9301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1443'.
[  139.210370][ T9317] lo speed is unknown, defaulting to 1000
[  139.359333][ T9321] netlink: 'syz.0.1452': attribute type 2 has an invalid length.
[  139.363284][ T9321] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  139.489395][ T9335] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  139.511627][ T9335] bond0: (slave batadv0): Releasing backup interface
[  139.534135][ T9335] bond0: (slave bond_slave_0): Releasing backup interface
[  139.540299][ T9335] bond_slave_0: left allmulticast mode
[  139.550588][ T9335] bond0: (slave bond_slave_1): Releasing backup interface
[  139.564693][ T9335] bond_slave_1: left allmulticast mode
[  139.589131][ T9335] team0: Port device team_slave_0 removed
[  139.605693][ T9335] team0: Port device team_slave_1 removed
[  139.612976][ T9335] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.616094][ T9335] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.620695][ T9335] batman_adv: batadv0: Interface deactivated: 26
[  139.625318][ T9335] batman_adv: batadv0: Removing interface: 26
[  139.632979][ T9347] netlink: 'syz.1.1458': attribute type 10 has an invalid length.
[  139.642761][ T9335] bond2: (slave gretap1): Releasing active interface
[  139.652724][ T9335] bond7: (slave ip6gretap2): Removing an active aggregator
[  139.656294][ T9335] bond7: (slave ip6gretap2): Releasing backup interface
[  139.690103][ T9347] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  139.694734][ T9347] bond0: (slave wlan1): Opening slave failed
[  139.726390][ T9335] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.745794][ T9335] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.924906][ T9357] lo speed is unknown, defaulting to 1000
[  140.626486][ T9376] batadv0: entered promiscuous mode
[  140.630492][ T9376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.122847][ T9404] team0 (unregistering): Port device team_slave_0 removed
[  141.128098][ T9404] team0 (unregistering): Port device team_slave_1 removed
[  141.214201][ T9411] bridge3: entered promiscuous mode
[  141.216323][ T9411] bridge3: entered allmulticast mode
[  141.229640][ T9411] team0: Port device bridge3 added
[  141.731481][ T9449] netlink: 'syz.2.1506': attribute type 10 has an invalid length.
[  141.734604][ T9449] bond0: (slave wlan1): Opening slave failed
[  141.738270][ T9449] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  141.845125][ T5971] lo speed is unknown, defaulting to 1000
[  141.847806][ T5971] syz2: Port: 1 Link ACTIVE
[  142.085176][ T9477] __nla_validate_parse: 11 callbacks suppressed
[  142.085189][ T9477] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1520'.
[  142.280439][ T9479] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  142.377967][ T9499] netlink: 'syz.1.1528': attribute type 1 has an invalid length.
[  142.382752][ T9499] netlink: 'syz.1.1528': attribute type 2 has an invalid length.
[  142.386756][ T9499] netlink: 'syz.1.1528': attribute type 8 has an invalid length.
[  142.390066][ T9499] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.1528'.
[  142.768547][ T9514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1535'.
[  142.773007][ T9514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1535'.
[  143.625204][ T9550] ==================================================================
[  143.628368][ T9550] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  143.631595][ T9550] Write of size 8 at addr ffff88802115c4b0 by task syz.2.1548/9550
[  143.635817][ T9550] 
[  143.636817][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.2.1548 Not tainted syzkaller #0 PREEMPT(full) 
[  143.636838][ T9550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.636848][ T9550] Call Trace:
[  143.636855][ T9550]  <TASK>
[  143.636862][ T9550]  dump_stack_lvl+0x189/0x250
[  143.636882][ T9550]  ? __kasan_check_byte+0x12/0x40
[  143.636904][ T9550]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.636919][ T9550]  ? lock_release+0x4b/0x3e0
[  143.636941][ T9550]  ? __virt_addr_valid+0x4a5/0x5c0
[  143.636958][ T9550]  print_report+0xca/0x240
[  143.636971][ T9550]  ? __xfrm_state_delete+0x696/0xca0
[  143.636983][ T9550]  kasan_report+0x118/0x150
[  143.637003][ T9550]  ? __xfrm_state_delete+0x696/0xca0
[  143.637019][ T9550]  __xfrm_state_delete+0x696/0xca0
[  143.637036][ T9550]  xfrm_state_flush+0x45f/0x770
[  143.637053][ T9550]  pfkey_flush+0x13f/0x340
[  143.637066][ T9550]  ? __pfx_pfkey_flush+0x10/0x10
[  143.637078][ T9550]  ? kmem_cache_free+0x18f/0x400
[  143.637101][ T9550]  pfkey_sendmsg+0xbfe/0x1090
[  143.637117][ T9550]  ? trace_sched_exit_tp+0x36/0x110
[  143.637136][ T9550]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  143.637157][ T9550]  ? aa_sock_msg_perm+0xf1/0x1d0
[  143.637170][ T9550]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  143.637185][ T9550]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  143.637198][ T9550]  __sock_sendmsg+0x21c/0x270
[  143.637218][ T9550]  ____sys_sendmsg+0x505/0x830
[  143.637234][ T9550]  ? __pfx_____sys_sendmsg+0x10/0x10
[  143.637251][ T9550]  ? import_iovec+0x74/0xa0
[  143.637267][ T9550]  ___sys_sendmsg+0x21f/0x2a0
[  143.637282][ T9550]  ? __pfx____sys_sendmsg+0x10/0x10
[  143.637308][ T9550]  ? __fget_files+0x2a/0x420
[  143.637327][ T9550]  ? __fget_files+0x3a0/0x420
[  143.637350][ T9550]  __x64_sys_sendmsg+0x19b/0x260
[  143.637365][ T9550]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  143.637382][ T9550]  ? rcu_is_watching+0x15/0xb0
[  143.637397][ T9550]  ? do_syscall_64+0xbe/0x3b0
[  143.637411][ T9550]  do_syscall_64+0xfa/0x3b0
[  143.637422][ T9550]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.637441][ T9550]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.637454][ T9550]  ? exc_page_fault+0x9f/0xf0
[  143.637474][ T9550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.637488][ T9550] RIP: 0033:0x7f873a58eba9
[  143.637502][ T9550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.637513][ T9550] RSP: 002b:00007f873b423038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  143.637530][ T9550] RAX: ffffffffffffffda RBX: 00007f873a7d6090 RCX: 00007f873a58eba9
[  143.637540][ T9550] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  143.637549][ T9550] RBP: 00007f873a611e19 R08: 0000000000000000 R09: 0000000000000000
[  143.637558][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.637601][ T9550] R13: 00007f873a7d6128 R14: 00007f873a7d6090 R15: 00007ffcb4661768
[  143.637618][ T9550]  </TASK>
[  143.637623][ T9550] 
[  143.752316][ T9550] Allocated by task 6950:
[  143.754069][ T9550]  kasan_save_track+0x3e/0x80
[  143.755988][ T9550]  __kasan_slab_alloc+0x6c/0x80
[  143.757947][ T9550]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  143.760121][ T9550]  xfrm_state_alloc+0x24/0x2f0
[  143.762069][ T9550]  __find_acq_core+0x8a7/0x1c00
[  143.764030][ T9550]  xfrm_find_acq+0x78/0xa0
[  143.765823][ T9550]  xfrm_alloc_userspi+0x6b3/0xc90
[  143.767844][ T9550]  xfrm_user_rcv_msg+0x7a3/0xab0
[  143.769826][ T9550]  netlink_rcv_skb+0x208/0x470
[  143.771764][ T9550]  xfrm_netlink_rcv+0x79/0x90
[  143.773650][ T9550]  netlink_unicast+0x82f/0x9e0
[  143.775446][ T9550]  netlink_sendmsg+0x805/0xb30
[  143.777333][ T9550]  __sock_sendmsg+0x21c/0x270
[  143.779235][ T9550]  ____sys_sendmsg+0x505/0x830
[  143.781166][ T9550]  ___sys_sendmsg+0x21f/0x2a0
[  143.783052][ T9550]  __x64_sys_sendmsg+0x19b/0x260
[  143.785063][ T9550]  do_syscall_64+0xfa/0x3b0
[  143.786916][ T9550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.789240][ T9550] 
[  143.790208][ T9550] Freed by task 5971:
[  143.791843][ T9550]  kasan_save_track+0x3e/0x80
[  143.793753][ T9550]  kasan_save_free_info+0x46/0x50
[  143.795855][ T9550]  __kasan_slab_free+0x5b/0x80
[  143.797907][ T9550]  kmem_cache_free+0x18f/0x400
[  143.799902][ T9550]  xfrm_state_gc_task+0x52d/0x6b0
[  143.801959][ T9550]  process_scheduled_works+0xae1/0x17b0
[  143.804195][ T9550]  worker_thread+0x8a0/0xda0
[  143.806056][ T9550]  kthread+0x711/0x8a0
[  143.807730][ T9550]  ret_from_fork+0x3fc/0x770
[  143.809589][ T9550]  ret_from_fork_asm+0x1a/0x30
[  143.811583][ T9550] 
[  143.812607][ T9550] The buggy address belongs to the object at ffff88802115c480
[  143.812607][ T9550]  which belongs to the cache xfrm_state of size 928
[  143.818037][ T9550] The buggy address is located 48 bytes inside of
[  143.818037][ T9550]  freed 928-byte region [ffff88802115c480, ffff88802115c820)
[  143.823431][ T9550] 
[  143.824415][ T9550] The buggy address belongs to the physical page:
[  143.827023][ T9550] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802115e400 pfn:0x2115c
[  143.831157][ T9550] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  143.834573][ T9550] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  143.837583][ T9550] page_type: f5(slab)
[  143.839217][ T9550] raw: 00fff00000000040 ffff88801e249280 dead000000000122 0000000000000000
[  143.842614][ T9550] raw: ffff88802115e400 00000000800e000b 00000000f5000000 0000000000000000
[  143.846134][ T9550] head: 00fff00000000040 ffff88801e249280 dead000000000122 0000000000000000
[  143.849633][ T9550] head: ffff88802115e400 00000000800e000b 00000000f5000000 0000000000000000
[  143.852946][ T9550] head: 00fff00000000002 ffffea0000845701 00000000ffffffff 00000000ffffffff
[  143.856256][ T9550] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  143.859780][ T9550] page dumped because: kasan: bad access detected
[  143.862371][ T9550] page_owner tracks the page as allocated
[  143.864743][ T9550] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6053, tgid 6052 (syz.2.61), ts 75973573576, free_ts 75567320095
[  143.872216][ T9550]  post_alloc_hook+0x240/0x2a0
[  143.874177][ T9550]  get_page_from_freelist+0x21e4/0x22c0
[  143.876378][ T9550]  __alloc_frozen_pages_noprof+0x181/0x370
[  143.878637][ T9550]  alloc_pages_mpol+0x232/0x4a0
[  143.880565][ T9550]  allocate_slab+0x8a/0x370
[  143.882358][ T9550]  ___slab_alloc+0xbeb/0x1410
[  143.884244][ T9550]  kmem_cache_alloc_noprof+0x283/0x3c0
[  143.886378][ T9550]  xfrm_state_alloc+0x24/0x2f0
[  143.888247][ T9550]  xfrm_add_sa+0x17d1/0x4070
[  143.890167][ T9550]  xfrm_user_rcv_msg+0x7a3/0xab0
[  143.892211][ T9550]  netlink_rcv_skb+0x208/0x470
[  143.894189][ T9550]  xfrm_netlink_rcv+0x79/0x90
[  143.896084][ T9550]  netlink_unicast+0x82f/0x9e0
[  143.898007][ T9550]  netlink_sendmsg+0x805/0xb30
[  143.899923][ T9550]  __sock_sendmsg+0x21c/0x270
[  143.901807][ T9550]  ____sys_sendmsg+0x505/0x830
[  143.903737][ T9550] page last free pid 5915 tgid 5915 stack trace:
[  143.906231][ T9550]  __free_frozen_pages+0xbc4/0xd30
[  143.908299][ T9550]  __slab_free+0x303/0x3c0
[  143.910072][ T9550]  qlist_free_all+0x97/0x140
[  143.911951][ T9550]  kasan_quarantine_reduce+0x148/0x160
[  143.914154][ T9550]  __kasan_slab_alloc+0x22/0x80
[  143.916129][ T9550]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  143.918314][ T9550]  getname_flags+0xb8/0x540
[  143.920138][ T9550]  vfs_fstatat+0x43/0x170
[  143.921871][ T9550]  __x64_sys_newfstatat+0x116/0x190
[  143.923929][ T9550]  do_syscall_64+0xfa/0x3b0
[  143.925726][ T9550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.928110][ T9550] 
[  143.929103][ T9550] Memory state around the buggy address:
[  143.931324][ T9550]  ffff88802115c380: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  143.934496][ T9550]  ffff88802115c400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  143.937748][ T9550] >ffff88802115c480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.940911][ T9550]                                      ^
[  143.943208][ T9550]  ffff88802115c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.946394][ T9550]  ffff88802115c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.949596][ T9550] ==================================================================
[  143.952957][ T9550] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  143.956029][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.2.1548 Not tainted syzkaller #0 PREEMPT(full) 
[  143.959799][ T9550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.963741][ T9550] Call Trace:
[  143.965116][ T9550]  <TASK>
[  143.966283][ T9550]  dump_stack_lvl+0x99/0x250
[  143.968121][ T9550]  ? __asan_memcpy+0x40/0x70
[  143.969963][ T9550]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.972035][ T9550]  ? __pfx__printk+0x10/0x10
[  143.974010][ T9550]  vpanic+0x281/0x750
[  143.975764][ T9550]  ? __pfx_vpanic+0x10/0x10
[  143.977808][ T9550]  ? irqentry_exit+0x74/0x90
[  143.979755][ T9550]  panic+0xb9/0xc0
[  143.981337][ T9550]  ? __pfx_panic+0x10/0x10
[  143.983156][ T9550]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  143.985531][ T9550]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  143.987754][ T9550]  ? __xfrm_state_delete+0x696/0xca0
[  143.992674][ T9550]  check_panic_on_warn+0x89/0xb0
[  143.994502][ T9550]  ? __xfrm_state_delete+0x696/0xca0
[  143.996406][ T9550]  end_report+0x78/0x160
[  143.997976][ T9550]  kasan_report+0x129/0x150
[  143.999692][ T9550]  ? __xfrm_state_delete+0x696/0xca0
[  144.001610][ T9550]  __xfrm_state_delete+0x696/0xca0
[  144.003438][ T9550]  xfrm_state_flush+0x45f/0x770
[  144.005265][ T9550]  pfkey_flush+0x13f/0x340
[  144.007091][ T9550]  ? __pfx_pfkey_flush+0x10/0x10
[  144.009031][ T9550]  ? kmem_cache_free+0x18f/0x400
[  144.011082][ T9550]  pfkey_sendmsg+0xbfe/0x1090
[  144.012952][ T9550]  ? trace_sched_exit_tp+0x36/0x110
[  144.014823][ T9550]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  144.016713][ T9550]  ? aa_sock_msg_perm+0xf1/0x1d0
[  144.018526][ T9550]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  144.020461][ T9550]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  144.022299][ T9550]  __sock_sendmsg+0x21c/0x270
[  144.024044][ T9550]  ____sys_sendmsg+0x505/0x830
[  144.025801][ T9550]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.027684][ T9550]  ? import_iovec+0x74/0xa0
[  144.029384][ T9550]  ___sys_sendmsg+0x21f/0x2a0
[  144.031150][ T9550]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.033169][ T9550]  ? __fget_files+0x2a/0x420
[  144.034981][ T9550]  ? __fget_files+0x3a0/0x420
[  144.036805][ T9550]  __x64_sys_sendmsg+0x19b/0x260
[  144.038642][ T9550]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  144.042914][ T9550]  ? rcu_is_watching+0x15/0xb0
[  144.044708][ T9550]  ? do_syscall_64+0xbe/0x3b0
[  144.046450][ T9550]  do_syscall_64+0xfa/0x3b0
[  144.048164][ T9550]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.050208][ T9550]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.052697][ T9550]  ? exc_page_fault+0x9f/0xf0
[  144.054626][ T9550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.056937][ T9550] RIP: 0033:0x7f873a58eba9
[  144.058815][ T9550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.067096][ T9550] RSP: 002b:00007f873b423038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.070434][ T9550] RAX: ffffffffffffffda RBX: 00007f873a7d6090 RCX: 00007f873a58eba9
[  144.073487][ T9550] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  144.076554][ T9550] RBP: 00007f873a611e19 R08: 0000000000000000 R09: 0000000000000000
[  144.079624][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.082774][ T9550] R13: 00007f873a7d6128 R14: 00007f873a7d6090 R15: 00007ffcb4661768
[  144.085976][ T9550]  </TASK>
[  144.088065][ T9550] Kernel Offset: disabled
[  144.089871][ T9550] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:18:58  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000ebb RDI=0000000000000ebc RBP=00000000000003f8 RSP=ffffc90006346eb0
R8 =ffff8880207e0237 R9 =1ffff110040fc046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8f1 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f873b4236c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e215ff8 CR3=000000010f67a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f873a7a7498 00007f873a7a7470 XMM03=00007f873a7a74a8 00007f873a7a74a0
XMM04=00007f873b30d100 00007f873a7a7460 XMM05=00007f873a7a7478 00007f873a7a74c0
XMM06=00007f873a7a74b8 00007f873a7a74b0 XMM07=00007f873a7a74a8 00007f873a7a74a0
XMM08=0000000000000000 00007f873a612ee7 XMM09=0000000000000000 00007f873a612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81843988 RBX=ffffc900027aece0 RCX=ba0a12b079719e00 RDX=0000000000000001
RSI=ffffffff81843988 RDI=ffffc900027aece0 RBP=ffffc900027aecb0 RSP=ffffc900027aec20
R8 =ffffc900027afad0 R9 =0000000000000000 R10=ffffc900027aec78 R11=ffffffff81ac3820
R12=ffff888105ef5640 R13=1ffff920004f5db0 R14=ffffffff81ac3820 R15=ffffc900027aec28
RIP=ffffffff81ac3824 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f904c61e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f873b402d58 CR3=000000001fd50000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81688a1f ffffffff8133c57e
XMM02=390008751f158a00 ffffffff8133c57e XMM03=00fef50001001100 0a0f1200000e0307
XMM04=a5f701d6db049066 aa149e4f334986b3 XMM05=eddf6bba98594a0d 10fc3095c9256571
XMM06=3320884c74360d85 744611a8d54c77eb XMM07=53ad296e4c569d7a 50ea650e8b8e5058
XMM08=230b428c9624828d 1aa2e164da9b4773 XMM09=0000000000000000 00007f5d2d012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
