last executing test programs:

1.575444435s ago: executing program 2 (id=1193):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000800)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000580), 0x8)

1.37580818s ago: executing program 2 (id=1197):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.285386155s ago: executing program 2 (id=1201):
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0004000000000000000000faff00000000ab180415b60000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff})
sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x357}], 0x1}}], 0x2, 0x4048884)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

1.205322749s ago: executing program 1 (id=1202):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x300000000000000, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0x2}, 0x1c)

550.603544ms ago: executing program 0 (id=1211):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

490.114606ms ago: executing program 0 (id=1212):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x1c, 0x37, 0x61b, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x8d, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000d010}, 0x40884)

424.681147ms ago: executing program 0 (id=1213):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

268.508073ms ago: executing program 1 (id=1214):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000000e0000002000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00000100000000000000000000000000000000fcffffff92010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcff0100000000002abd500004350000020001003400000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

224.272048ms ago: executing program 2 (id=1215):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000080))

167.990516ms ago: executing program 1 (id=1216):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="77d2bcbdedb6eddc072584bc4ed3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

167.815322ms ago: executing program 2 (id=1217):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

148.336983ms ago: executing program 0 (id=1218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x1}, [@IFAL_ADDRESS={0x14, 0x1, @private1}]}, 0x30}}, 0x40080)

147.92659ms ago: executing program 1 (id=1219):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

54.435902ms ago: executing program 2 (id=1220):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00050073193c99a8772efb0c0002"], 0x3c}}, 0x20000000)

54.195105ms ago: executing program 1 (id=1221):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe37, &(0x7f0000000000)={&(0x7f00000006c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20000000)

53.988669ms ago: executing program 0 (id=1222):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000340)={0xa, 0x6e20, 0x4, @mcast2, 0xc}, 0x1c, 0x0}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0x5, @private2, 0xb04}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="140000000000000029000000080000000100000000000000140000000000000029"], 0x30}}], 0x2, 0x400c080)

319.759µs ago: executing program 0 (id=1223):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x6, 0x20, 0x0, 0xffffffff}]}, 0x10)

0s ago: executing program 1 (id=1224):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32902' (ED25519) to the list of known hosts.
syzkaller login: [   55.952678][ T5775] cgroup: Unknown subsys name 'net'
[   56.058444][ T5775] cgroup: Unknown subsys name 'cpuset'
[   56.062990][ T5775] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.715480][ T5775] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.228458][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.230526][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.771232][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.775650][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.779461][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.783936][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.788936][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.813387][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.818763][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.825901][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.830719][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.835913][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.897112][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.903354][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.917869][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.930904][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.939070][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.187455][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   72.215600][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   72.367370][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.370297][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.373624][ T5869] bridge_slave_0: entered allmulticast mode
[   72.380931][ T5869] bridge_slave_0: entered promiscuous mode
[   72.408862][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.411507][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.413726][ T5869] bridge_slave_1: entered allmulticast mode
[   72.416896][ T5869] bridge_slave_1: entered promiscuous mode
[   72.420321][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.423068][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.426749][ T5872] bridge_slave_0: entered allmulticast mode
[   72.430597][ T5872] bridge_slave_0: entered promiscuous mode
[   72.435032][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.437705][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.439881][ T5872] bridge_slave_1: entered allmulticast mode
[   72.442419][ T5872] bridge_slave_1: entered promiscuous mode
[   72.445821][ T5874] chnl_net:caif_netlink_parms(): no params data found
[   72.487542][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.508893][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.513500][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.540607][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.579605][ T5869] team0: Port device team_slave_0 added
[   72.597179][ T5869] team0: Port device team_slave_1 added
[   72.618133][ T5872] team0: Port device team_slave_0 added
[   72.631555][ T5872] team0: Port device team_slave_1 added
[   72.634231][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.637722][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.640573][ T5874] bridge_slave_0: entered allmulticast mode
[   72.644350][ T5874] bridge_slave_0: entered promiscuous mode
[   72.683731][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.686741][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.689428][ T5874] bridge_slave_1: entered allmulticast mode
[   72.693801][ T5874] bridge_slave_1: entered promiscuous mode
[   72.699562][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.702059][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.712015][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.717605][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.720242][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.729785][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.746927][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.749079][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.757698][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.761463][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.763677][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.773656][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.802712][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.809033][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.892882][ T5869] hsr_slave_0: entered promiscuous mode
[   72.895488][ T5869] hsr_slave_1: entered promiscuous mode
[   72.900607][ T5874] team0: Port device team_slave_0 added
[   72.907284][ T5872] hsr_slave_0: entered promiscuous mode
[   72.910205][ T5872] hsr_slave_1: entered promiscuous mode
[   72.912897][ T5872] debugfs: 'hsr0' already exists in 'hsr'
[   72.915130][ T5872] Cannot create hsr debugfs directory
[   72.920373][ T5874] team0: Port device team_slave_1 added
[   72.984964][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.987822][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.997174][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.025916][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.028344][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.037619][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.123811][ T5874] hsr_slave_0: entered promiscuous mode
[   73.126721][ T5874] hsr_slave_1: entered promiscuous mode
[   73.129523][ T5874] debugfs: 'hsr0' already exists in 'hsr'
[   73.131681][ T5874] Cannot create hsr debugfs directory
[   73.314899][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.323785][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.356083][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.371456][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.409621][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.416086][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.437417][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.442201][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.463750][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.476608][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.483631][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.492783][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.584591][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.616166][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   73.633106][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.636014][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.649314][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.653568][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.656487][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.680034][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   73.702259][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.704853][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.712687][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.732575][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.735419][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.751445][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.762943][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   73.787884][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.790390][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.822874][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.825640][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.867092][ T5870] Bluetooth: hci1: command tx timeout
[   73.867098][   T54] Bluetooth: hci0: command tx timeout
[   73.994947][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.031760][ T5870] Bluetooth: hci2: command tx timeout
[   74.049870][ T5869] veth0_vlan: entered promiscuous mode
[   74.080140][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.087409][ T5869] veth1_vlan: entered promiscuous mode
[   74.134365][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.143748][ T5869] veth0_macvtap: entered promiscuous mode
[   74.153512][ T5869] veth1_macvtap: entered promiscuous mode
[   74.176997][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.188349][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.213842][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.217903][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.221673][ T5872] veth0_vlan: entered promiscuous mode
[   74.223969][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.235420][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.254733][ T5872] veth1_vlan: entered promiscuous mode
[   74.272184][ T5874] veth0_vlan: entered promiscuous mode
[   74.295406][ T5874] veth1_vlan: entered promiscuous mode
[   74.378672][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.381946][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.408619][ T5874] veth0_macvtap: entered promiscuous mode
[   74.418716][ T5872] veth0_macvtap: entered promiscuous mode
[   74.423003][ T5874] veth1_macvtap: entered promiscuous mode
[   74.432715][ T5872] veth1_macvtap: entered promiscuous mode
[   74.440817][  T793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.444189][  T793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.474086][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.485072][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.487874][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.507042][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.526292][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.530198][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.533885][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.560022][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.571681][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.594131][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.598444][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.611063][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.632204][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.730322][ T5936] warning: `syz.1.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.754741][  T189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.760024][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.762806][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.766276][  T189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.818600][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.831107][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.838226][ T5940] netlink: 'syz.1.16': attribute type 26 has an invalid length.
[   74.886453][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.889516][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.049185][ T5948] Zero length message leads to an empty skb
[   75.619577][ T5984] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET)
[   75.635196][ T5984] dummy0: entered promiscuous mode
[   75.638073][ T5984] vlan2: entered promiscuous mode
[   75.694101][ T5987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37'.
[   75.699282][ T5987] netlink: 5 bytes leftover after parsing attributes in process `syz.1.37'.
[   75.702982][ T5987] netlink: 5 bytes leftover after parsing attributes in process `syz.1.37'.
[   75.732485][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.953778][ T5870] Bluetooth: hci0: command tx timeout
[   75.953797][   T54] Bluetooth: hci1: command tx timeout
[   76.107030][   T54] Bluetooth: hci2: command tx timeout
[   76.365428][ T6028] syzkaller0: entered promiscuous mode
[   76.379282][ T6028] syzkaller0: entered allmulticast mode
[   76.485656][ T6034] tipc: Started in network mode
[   76.490016][ T6034] tipc: Node identity 2ede6d55d52, cluster identity 4711
[   76.493893][ T6034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.507364][ T6034] syzkaller0: entered promiscuous mode
[   76.509521][ T6034] syzkaller0: entered allmulticast mode
[   76.522922][ T6034] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   76.549525][ T6034] Illegal XDP return value 4294967262 on prog  (id 5) dev N/A, expect packet loss!
[   76.609909][ T6034] tipc: Resetting bearer <eth:syzkaller0>
[   76.625689][ T6034] tipc: Disabling bearer <eth:syzkaller0>
[   76.814623][ T6051] netlink: 'syz.0.65': attribute type 13 has an invalid length.
[   76.818401][ T6051] netlink: 'syz.0.65': attribute type 17 has an invalid length.
[   76.871516][ T6051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.954353][ T6054] netlink: 'syz.0.66': attribute type 21 has an invalid length.
[   76.958390][ T6054] netlink: 128 bytes leftover after parsing attributes in process `syz.0.66'.
[   76.961958][ T6054] netlink: 'syz.0.66': attribute type 5 has an invalid length.
[   76.964916][ T6054] netlink: 'syz.0.66': attribute type 6 has an invalid length.
[   76.968788][ T6054] netlink: 3 bytes leftover after parsing attributes in process `syz.0.66'.
[   77.092558][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.69'.
[   77.264182][ T6070] netlink: 'syz.2.73': attribute type 58 has an invalid length.
[   77.267976][ T6070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.73'.
[   77.403260][ T6076] netlink: 'syz.2.76': attribute type 10 has an invalid length.
[   77.409226][ T6076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.76'.
[   77.414242][ T6076] batman_adv: batadv0: Adding interface: virt_wifi0
[   77.425941][ T6076] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.435612][ T6076] batman_adv: batadv0: Interface activated: virt_wifi0
[   77.449157][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'.
[   77.458102][ T6078] netlink: 'syz.0.78': attribute type 1 has an invalid length.
[   77.461303][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'.
[   78.026319][ T5870] Bluetooth: hci0: command tx timeout
[   78.028703][   T54] Bluetooth: hci1: command tx timeout
[   78.186040][   T54] Bluetooth: hci2: command tx timeout
[   78.908216][ T6125] block nbd0: not configured, cannot reconfigure
[   79.389499][ T6154] syz_tun: entered allmulticast mode
[   79.401553][ T6154] dvmrp8: entered allmulticast mode
[   79.506755][ T6159] netlink: 'syz.1.106': attribute type 23 has an invalid length.
[   80.112602][   T54] Bluetooth: hci1: command tx timeout
[   80.115121][   T54] Bluetooth: hci0: command tx timeout
[   80.197034][ T6171] lec:lec_atm_close: lec0: Shut down!
[   80.267507][   T54] Bluetooth: hci2: command tx timeout
[   80.957012][ T6222] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   81.079186][   T10] lec:lec_start_xmit: lec0:No lecd attached
[   81.187467][ T6234] netlink: 'syz.0.133': attribute type 1 has an invalid length.
[   81.190652][ T6234] __nla_validate_parse: 9 callbacks suppressed
[   81.190664][ T6234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.133'.
[   81.550840][ T6263] ieee802154 phy0 wpan0: encryption failed: -90
[   81.812903][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'.
[   81.859071][   T49] IPVS: starting estimator thread 0...
[   81.861842][ T6286] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   81.956645][ T6288] IPVS: using max 34 ests per chain, 81600 per kthread
[   82.459065][ T6317] netlink: 'syz.1.168': attribute type 13 has an invalid length.
[   82.572851][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.172'.
[   82.690227][ T6334] netlink: 'syz.2.177': attribute type 7 has an invalid length.
[   83.693180][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'.
[   83.915009][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'.
[   84.853896][ T6419] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.312534][ T6469] tipc: Started in network mode
[   86.314397][ T6469] tipc: Node identity ac14140f, cluster identity 4711
[   86.318560][ T6469] tipc: New replicast peer: 255.255.255.255
[   86.323017][ T6469] tipc: Enabled bearer <udp:syz2>, priority 10
[   86.330235][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'.
[   86.419577][ T6474] netlink: 200 bytes leftover after parsing attributes in process `syz.0.234'.
[   86.446946][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'.
[   86.604290][    T9] cfg80211: failed to load regulatory.db
[   86.675792][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms
[   86.678677][    C1] lec:lec_tx_timeout: lec0
[   86.680362][    C1] lec:lec_start_xmit: lec0:No lecd attached
[   86.913099][ T6491] netlink: 19 bytes leftover after parsing attributes in process `syz.2.242'.
[   87.335006][ T6517] netlink: 'syz.2.254': attribute type 9 has an invalid length.
[   87.436886][   T10] tipc: Node number set to 2886997007
[   87.586340][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'.
[   87.744732][ T6542] netlink: 'syz.2.265': attribute type 1 has an invalid length.
[   88.079287][ T6560] netlink: 'syz.1.270': attribute type 7 has an invalid length.
[   88.082324][ T6560] netlink: 'syz.1.270': attribute type 8 has an invalid length.
[   88.085049][ T6560] netlink: 36 bytes leftover after parsing attributes in process `syz.1.270'.
[   88.208253][ T6563] Bluetooth: MGMT ver 1.23
[   88.665436][ T6581] netlink: 'syz.1.279': attribute type 1 has an invalid length.
[   88.680777][ T6581] netlink: 'syz.1.279': attribute type 3 has an invalid length.
[   88.683989][ T6581] netlink: 224 bytes leftover after parsing attributes in process `syz.1.279'.
[   88.688388][ T6581] NCSI netlink: No device for ifindex 246
[   88.749826][ T6584] netlink: 232 bytes leftover after parsing attributes in process `syz.0.280'.
[   88.753391][ T6584] netlink: 232 bytes leftover after parsing attributes in process `syz.0.280'.
[   88.762095][ T6584] netlink: 44 bytes leftover after parsing attributes in process `syz.0.280'.
[   89.166913][ T6618] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   89.523843][ T6638] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[   89.614397][ T6645] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   90.857788][ T6700] syzkaller1: entered promiscuous mode
[   90.862910][ T6700] syzkaller1: entered allmulticast mode
[   91.426457][ T6746] netlink: 'syz.2.349': attribute type 4 has an invalid length.
[   91.484395][ T6750] ieee802154 phy0 wpan0: encryption failed: -22
[   91.712019][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[   91.715185][    C1] lec:lec_tx_timeout: lec0
[   91.718025][    C1] lec:lec_start_xmit: lec0:No lecd attached
[   91.784362][ T6772] __nla_validate_parse: 3 callbacks suppressed
[   91.784376][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'.
[   92.123876][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'.
[   92.154874][ T6794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.373'.
[   92.179922][ T6793] syz_tun (unregistering): left allmulticast mode
[   92.358066][ T6808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.378'.
[   92.458862][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'.
[   92.461809][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'.
[   92.465471][ T6815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.381'.
[   92.625138][ T6831] netlink: 92 bytes leftover after parsing attributes in process `syz.2.387'.
[   92.858394][ T6844] syzkaller0: entered promiscuous mode
[   92.860673][ T6844] syzkaller0: entered allmulticast mode
[   92.877212][ T6848] netlink: 'syz.2.394': attribute type 3 has an invalid length.
[   92.883800][ T6847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.393'.
[   92.928554][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'.
[   94.109121][ T6917] bond1: entered promiscuous mode
[   94.426100][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout
[   94.428776][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   94.847661][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[   95.206838][ T6956] tipc: Enabled bearer <udp:s>, priority 10
[   95.835158][ T6993] netlink: 'syz.1.456': attribute type 30 has an invalid length.
[   96.650592][ T7041] tipc: Started in network mode
[   96.652396][ T7041] tipc: Node identity e6beb0eb26c, cluster identity 4711
[   96.655428][ T7041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.660928][ T7041] syzkaller0: entered promiscuous mode
[   96.663125][ T7041] syzkaller0: entered allmulticast mode
[   96.703065][ T7041] tipc: Resetting bearer <eth:syzkaller0>
[   96.713643][ T7040] tipc: Resetting bearer <eth:syzkaller0>
[   96.725866][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[   96.728672][    C1] lec:lec_tx_timeout: lec0
[   96.730655][    C1] lec:lec_start_xmit: lec0:No lecd attached
[   96.742805][ T7040] tipc: Disabling bearer <eth:syzkaller0>
[   97.888013][ T7077] __nla_validate_parse: 4 callbacks suppressed
[   97.888031][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'.
[   98.068318][ T7077] bridge_slave_1: left allmulticast mode
[   98.070541][ T7077] bridge_slave_1: left promiscuous mode
[   98.073449][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.123059][ T7077] bridge_slave_0: left allmulticast mode
[   98.126553][ T7077] bridge_slave_0: left promiscuous mode
[   98.129005][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.355892][ T7089] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   98.486441][ T7094] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   99.073493][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.077322][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.108052][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.124727][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.129008][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.154378][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.171658][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.205944][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.582790][ T7157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.627464][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  100.746078][ T5870] Bluetooth: hci2: command 0x0405 tx timeout
[  100.760788][ T7221] netlink: 'syz.0.538': attribute type 29 has an invalid length.
[  100.786151][ T7221] netlink: 'syz.0.538': attribute type 29 has an invalid length.
[  100.797289][ T7221] netlink: 500 bytes leftover after parsing attributes in process `syz.0.538'.
[  100.925611][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'.
[  100.996281][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'.
[  101.012868][ T7235] 8021q: adding VLAN 0 to HW filter on device bond3
[  101.017836][ T7235] bond2: (slave bond3): Enslaving as an active interface with an up link
[  101.023096][ T7241] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  101.027903][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'.
[  101.048587][ T7244] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.262441][ T7260] netlink: 'syz.1.555': attribute type 1 has an invalid length.
[  101.350836][ T7264] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  101.362368][ T7264] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  101.382477][ T7260] gretap1: entered promiscuous mode
[  101.389369][ T7260] bond2: (slave gretap1): making interface the new active one
[  101.399689][ T7260] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  101.524281][ T7275] netlink: 120 bytes leftover after parsing attributes in process `syz.1.561'.
[  101.684535][ T7288] netlink: 'syz.1.567': attribute type 10 has an invalid length.
[  101.702283][ T7288] team0: Port device dummy0 added
[  101.735791][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  101.738927][    C1] lec:lec_tx_timeout: lec0
[  101.740827][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  101.877564][ T7293] block nbd0: server does not support multiple connections per device.
[  101.885063][ T7293] block nbd0: shutting down sockets
[  101.996335][ T7307] netlink: 'syz.1.575': attribute type 5 has an invalid length.
[  102.000259][ T7307] netlink: 'syz.1.575': attribute type 2 has an invalid length.
[  102.003320][ T7307] netlink: 'syz.1.575': attribute type 1 has an invalid length.
[  102.009174][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[  102.560437][ T7340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.884767][ T7362] syz_tun: entered promiscuous mode
[  102.888593][ T7362] vlan2: entered promiscuous mode
[  103.091851][ T5310] IPVS: starting estimator thread 0...
[  103.176569][ T7369] IPVS: using max 53 ests per chain, 127200 per kthread
[  103.328315][ T7377] GUP no longer grows the stack in syz.2.607 (7377): 200000003000-20000000a000 (200000001000)
[  103.355367][ T7377] CPU: 0 UID: 0 PID: 7377 Comm: syz.2.607 Not tainted syzkaller #0 PREEMPT(full) 
[  103.355394][ T7377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.355406][ T7377] Call Trace:
[  103.355426][ T7377]  <TASK>
[  103.355435][ T7377]  dump_stack_lvl+0x189/0x250
[  103.355464][ T7377]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.355482][ T7377]  ? __pfx__printk+0x10/0x10
[  103.355499][ T7377]  ? find_vma+0xe7/0x160
[  103.355525][ T7377]  ? __lock_acquire+0xab9/0xd20
[  103.355557][ T7377]  __get_user_pages+0x24d0/0x2ce0
[  103.355575][ T7377]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  103.355612][ T7377]  ? rcu_is_watching+0x15/0xb0
[  103.355630][ T7377]  __gup_longterm_locked+0xde9/0x1660
[  103.355657][ T7377]  ? sanity_check_pinned_pages+0x123a/0x1300
[  103.355678][ T7377]  gup_fast_fallback+0x1e6a/0x2010
[  103.355742][ T7377]  ? __pfx_gup_fast_fallback+0x10/0x10
[  103.355771][ T7377]  ? pin_user_pages_fast+0x4d/0xb0
[  103.355790][ T7377]  iov_iter_extract_pages+0x35a/0x5e0
[  103.355819][ T7377]  extract_iter_to_sg+0xe46/0x24e0
[  103.355846][ T7377]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  103.355904][ T7377]  ? __asan_memset+0x22/0x50
[  103.355925][ T7377]  af_alg_get_rsgl+0x436/0x810
[  103.355957][ T7377]  aead_recvmsg+0x4cc/0x13f0
[  103.355988][ T7377]  ? rcu_is_watching+0x15/0xb0
[  103.356006][ T7377]  ? __pfx_aead_recvmsg+0x10/0x10
[  103.356029][ T7377]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  103.356046][ T7377]  ? __pfx_aead_recvmsg+0x10/0x10
[  103.356067][ T7377]  sock_recvmsg_nosec+0x186/0x1c0
[  103.356105][ T7377]  ____sys_recvmsg+0x3aa/0x460
[  103.356129][ T7377]  ? __pfx_____sys_recvmsg+0x10/0x10
[  103.356159][ T7377]  ? import_iovec+0x74/0xa0
[  103.356177][ T7377]  ___sys_recvmsg+0x1b5/0x510
[  103.356195][ T7377]  ? __pfx____sys_recvmsg+0x10/0x10
[  103.356239][ T7377]  ? __might_fault+0xb0/0x130
[  103.356260][ T7377]  do_recvmmsg+0x307/0x770
[  103.356283][ T7377]  ? __pfx_do_recvmmsg+0x10/0x10
[  103.356298][ T7377]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  103.356327][ T7377]  ? __pfx_do_futex+0x10/0x10
[  103.356353][ T7377]  __x64_sys_recvmmsg+0x190/0x240
[  103.356374][ T7377]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  103.356391][ T7377]  ? rcu_is_watching+0x15/0xb0
[  103.356405][ T7377]  ? do_syscall_64+0xbe/0x3b0
[  103.356420][ T7377]  do_syscall_64+0xfa/0x3b0
[  103.356430][ T7377]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.356454][ T7377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.356469][ T7377]  ? exc_page_fault+0x9f/0xf0
[  103.356491][ T7377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.356503][ T7377] RIP: 0033:0x7f352758ec29
[  103.356518][ T7377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.356533][ T7377] RSP: 002b:00007f3528331038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  103.356551][ T7377] RAX: ffffffffffffffda RBX: 00007f35277d5fa0 RCX: 00007f352758ec29
[  103.356561][ T7377] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[  103.356570][ T7377] RBP: 00007f3527611e41 R08: 0000000000000000 R09: 0000000000000000
[  103.356581][ T7377] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  103.356589][ T7377] R13: 00007f35277d6038 R14: 00007f35277d5fa0 R15: 00007ffd0db98678
[  103.356613][ T7377]  </TASK>
[  103.703467][ T7396] netlink: 'syz.2.615': attribute type 1 has an invalid length.
[  103.786120][ T5310] net_ratelimit: 8 callbacks suppressed
[  103.786137][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  103.870216][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.830358][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.999672][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  105.301003][ T7460] netlink: 60 bytes leftover after parsing attributes in process `syz.2.643'.
[  105.304359][ T7460] netlink: 60 bytes leftover after parsing attributes in process `syz.2.643'.
[  105.378106][ T7462] veth2: entered promiscuous mode
[  105.380141][ T7462] veth2: entered allmulticast mode
[  105.581146][ T7478] netlink: 'syz.2.651': attribute type 13 has an invalid length.
[  105.584181][ T7478] netlink: 'syz.2.651': attribute type 17 has an invalid length.
[  105.711916][ T7478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.867550][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.434516][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.710620][ T7510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.669'.
[  106.746135][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  106.749342][    C1] lec:lec_tx_timeout: lec0
[  106.753094][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  106.906579][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.138574][ T7541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.682'.
[  107.271512][ T7551] netlink: 'syz.1.688': attribute type 1 has an invalid length.
[  107.274886][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'.
[  107.778764][ T7585] netlink: 'syz.0.704': attribute type 1 has an invalid length.
[  107.785404][ T7585] netlink: 'syz.0.704': attribute type 2 has an invalid length.
[  107.898961][ T7592] netlink: 'syz.1.706': attribute type 1 has an invalid length.
[  107.947188][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.038281][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.279816][ T7611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'.
[  108.291051][ T7611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'.
[  108.862810][ T7654] netlink: 64 bytes leftover after parsing attributes in process `syz.0.735'.
[  108.871594][ T7654] block nbd0: not configured, cannot reconfigure
[  108.988772][ T5310] net_ratelimit: 4 callbacks suppressed
[  108.988783][ T5310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.161164][ T7678] geneve2: entered promiscuous mode
[  109.163037][ T7678] geneve2: entered allmulticast mode
[  109.234175][ T7690] netlink: 96 bytes leftover after parsing attributes in process `syz.1.749'.
[  109.512880][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'.
[  109.623487][ T7714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.627733][ T7714] syzkaller0: entered promiscuous mode
[  109.630098][ T7714] syzkaller0: entered allmulticast mode
[  109.650772][ T7714] tipc: Resetting bearer <eth:syzkaller0>
[  109.656414][ T7713] tipc: Resetting bearer <eth:syzkaller0>
[  109.669332][ T7713] tipc: Disabling bearer <eth:syzkaller0>
[  110.028543][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.303584][ T7750] Unsupported ieee802154 address type: 0
[  110.514210][ T7767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.520736][ T7767] syzkaller0: entered promiscuous mode
[  110.522367][ T7767] syzkaller0: entered allmulticast mode
[  110.546833][ T7767] tipc: Resetting bearer <eth:syzkaller0>
[  110.556225][ T7766] tipc: Resetting bearer <eth:syzkaller0>
[  110.606522][ T7766] tipc: Disabling bearer <eth:syzkaller0>
[  110.689820][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'.
[  110.693337][ T7778] netlink: 'syz.1.791': attribute type 30 has an invalid length.
[  110.877005][ T7792] netlink: 'syz.1.797': attribute type 1 has an invalid length.
[  110.918238][ T7788] 8021q: adding VLAN 0 to HW filter on device bond2
[  110.921977][ T7794] netlink: 48 bytes leftover after parsing attributes in process `syz.2.798'.
[  110.946262][ T7788] bond_slave_0: entered promiscuous mode
[  110.948185][ T7788] bond_slave_1: entered promiscuous mode
[  110.950441][ T7788] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  110.954544][ T7788] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[  111.007660][ T7788] bond0: (slave bond_slave_0): Releasing backup interface
[  111.015152][ T7788] bond_slave_0: left promiscuous mode
[  111.040778][ T7788] bond0: (slave bond_slave_1): Releasing backup interface
[  111.059996][ T7788] bond_slave_1: left promiscuous mode
[  111.066235][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.069635][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.088785][ T7788] team0: Port device team_slave_0 removed
[  111.099890][ T7788] team0: Port device team_slave_1 removed
[  111.112508][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.119142][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.129143][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.131471][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.141328][ T7788] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  111.149542][ T6400] bond2: (slave macvlan2): speed changed to 0 on port 1
[  111.245153][ T7813] IPv6: Can't replace route, no match found
[  111.257419][   T13] bond2: (slave macvlan2): link status definitely down, disabling slave
[  111.664376][ T7844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.710902][ T7844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.721352][ T7844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.732790][ T7844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.737210][ T7844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.755812][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  111.759443][    C1] lec:lec_tx_timeout: lec0
[  111.761515][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  111.912799][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'.
[  111.974999][ T7861] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  111.978097][   T13] bond0: (slave bond_slave_0): interface is now down
[  111.982864][   T13] bond0: (slave bond_slave_1): interface is now down
[  111.993197][   T13] bond0: now running without any active interface!
[  112.106849][ T7861] netlink: 'syz.2.826': attribute type 3 has an invalid length.
[  112.109998][ T7861] netlink: 'syz.2.826': attribute type 1 has an invalid length.
[  112.112955][ T7861] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.826'.
[  112.202955][ T7870] Bluetooth: MGMT ver 1.23
[  112.205037][ T7870] netlink: 64 bytes leftover after parsing attributes in process `syz.2.827'.
[  112.212395][ T7870] netlink: 'syz.2.827': attribute type 2 has an invalid length.
[  112.376225][ T7877] syzkaller1: entered promiscuous mode
[  112.379497][ T7877] syzkaller1: entered allmulticast mode
[  113.243966][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'.
[  113.660698][ T7933] netlink: 'syz.0.853': attribute type 29 has an invalid length.
[  113.665000][ T7933] netlink: 'syz.0.853': attribute type 29 has an invalid length.
[  113.668916][ T7933] netlink: 500 bytes leftover after parsing attributes in process `syz.0.853'.
[  114.187111][ T5900] net_ratelimit: 56 callbacks suppressed
[  114.187126][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.226133][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.229660][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.028193][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.268258][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.765783][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  116.768156][    C1] lec:lec_tx_timeout: lec0
[  116.769641][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  116.771994][ T8014] netlink: 'syz.2.891': attribute type 3 has an invalid length.
[  116.774942][ T8014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.891'.
[  116.929551][ T8028] netlink: 'syz.2.897': attribute type 12 has an invalid length.
[  116.932828][ T8028] netlink: 'syz.2.897': attribute type 29 has an invalid length.
[  116.936506][ T8028] netlink: 148 bytes leftover after parsing attributes in process `syz.2.897'.
[  116.943148][ T8028] netlink: 59 bytes leftover after parsing attributes in process `syz.2.897'.
[  117.309282][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.374301][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'.
[  117.377798][ T8052] bridge_slave_1: left allmulticast mode
[  117.380125][ T8052] bridge_slave_1: left promiscuous mode
[  117.383146][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.420494][ T8052] bridge_slave_0: left allmulticast mode
[  117.422781][ T8052] bridge_slave_0: left promiscuous mode
[  117.435001][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.471877][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'.
[  117.602756][ T8066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.916'.
[  117.607450][ T8066] netlink: 64 bytes leftover after parsing attributes in process `syz.2.916'.
[  117.610495][ T8066] tipc: Invalid UDP bearer configuration
[  117.610527][ T8066] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  117.883063][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'.
[  118.282739][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.349226][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.946097][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout
[  119.948703][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  120.005301][ T8148] netlink: 'syz.2.953': attribute type 1 has an invalid length.
[  120.012496][ T8148] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.953'.
[  120.057102][ T8152] netlink: 96 bytes leftover after parsing attributes in process `syz.2.955'.
[  120.174982][ T8160] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  120.848522][ T8198] IPv6: sit1: Disabled Multicast RS
[  121.180116][ T8222] netlink: 'syz.2.988': attribute type 5 has an invalid length.
[  121.229015][ T8227] xt_l2tp: unknown flags: 51
[  121.275459][ T8231] netlink: 'syz.2.992': attribute type 1 has an invalid length.
[  121.775806][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  121.780167][    C1] lec:lec_tx_timeout: lec0
[  121.783337][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  121.968954][ T8276] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  122.027987][   T54] Bluetooth: hci1: command tx timeout
[  122.685585][ T8328] __nla_validate_parse: 7 callbacks suppressed
[  122.685602][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'.
[  122.692472][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'.
[  122.704219][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'.
[  123.071462][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'.
[  124.069122][ T8411] sit0: entered promiscuous mode
[  124.075146][ T8411] netlink: 'syz.1.1065': attribute type 1 has an invalid length.
[  124.078831][ T8411] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1065'.
[  124.405431][ T8438] delete_channel: no stack
[  124.471407][ T8444] netlink: 'syz.0.1080': attribute type 1 has an invalid length.
[  124.550903][ T8450] xt_limit: Overflow, try lower: 604147548/4200216962
[  124.569183][ T8451] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1082'.
[  124.646491][ T8457] netlink: 'syz.0.1086': attribute type 3 has an invalid length.
[  124.732105][ T8465] netlink: 508 bytes leftover after parsing attributes in process `syz.0.1089'.
[  126.212160][ T8491] netlink: 'syz.2.1102': attribute type 1 has an invalid length.
[  126.214674][ T8491] netlink: 'syz.2.1102': attribute type 4 has an invalid length.
[  126.217685][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'.
[  126.408366][ T8510] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  126.411447][ T8510] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  126.710719][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1120'.
[  126.730107][ T8534] netlink: 'syz.2.1121': attribute type 1 has an invalid length.
[  126.781889][ T8538] netlink: 'syz.2.1123': attribute type 1 has an invalid length.
[  126.795843][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  126.799635][    C1] lec:lec_tx_timeout: lec0
[  126.801593][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  126.810082][ T8538] 8021q: adding VLAN 0 to HW filter on device bond5
[  126.849764][ T8538] bond5: (slave veth5): Enslaving as an active interface with a down link
[  126.873507][ T8538] macvlan0: entered promiscuous mode
[  126.876306][ T8538] macvlan0: entered allmulticast mode
[  126.879897][ T8538] bond5: entered promiscuous mode
[  126.882668][ T8538] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  126.886661][ T8538] bond5: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  126.893781][ T8538] bond5: left promiscuous mode
[  127.113999][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'.
[  127.218004][ T8564] netlink: 'syz.2.1134': attribute type 32 has an invalid length.
[  127.531037][ T8590] netlink: 'syz.0.1147': attribute type 4 has an invalid length.
[  127.745077][ T8602] netlink: 'syz.0.1151': attribute type 11 has an invalid length.
[  127.748496][ T8602] __nla_validate_parse: 1 callbacks suppressed
[  127.748507][ T8602] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1151'.
[  128.250553][ T8628] nbd: socks must be embedded in a SOCK_ITEM attr
[  128.447757][ T8632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.010825][ T8724] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1205'.
[  130.340417][ T8735] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  130.963489][   T56] block nbd1: Receive control failed (result -32)
[  130.999037][    C0] ==================================================================
[  131.001450][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  131.003855][    C0] Write of size 8 at addr ffff888011ab0030 by task syz.1.1224/8763
[  131.007487][    C0] 
[  131.008310][    C0] CPU: 0 UID: 0 PID: 8763 Comm: syz.1.1224 Not tainted syzkaller #0 PREEMPT(full) 
[  131.008327][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.008336][    C0] Call Trace:
[  131.008344][    C0]  <IRQ>
[  131.008350][    C0]  dump_stack_lvl+0x189/0x250
[  131.008372][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  131.008388][    C0]  ? rcu_is_watching+0x15/0xb0
[  131.008402][    C0]  ? __kasan_check_byte+0x12/0x40
[  131.008418][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.008426][    C0]  ? rcu_is_watching+0x15/0xb0
[  131.008433][    C0]  ? lock_release+0x4b/0x3e0
[  131.008445][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  131.008453][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  131.008461][    C0]  print_report+0xca/0x240
[  131.008474][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  131.008483][    C0]  kasan_report+0x118/0x150
[  131.008493][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  131.008503][    C0]  __xfrm_state_delete+0x696/0xca0
[  131.008514][    C0]  xfrm_timer_handler+0x18f/0xa00
[  131.008524][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  131.008532][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  131.008544][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.008556][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  131.008566][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  131.008577][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  131.008585][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  131.008593][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  131.008608][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  131.008619][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  131.008631][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  131.008639][    C0]  handle_softirqs+0x286/0x870
[  131.008650][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  131.008657][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  131.008669][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  131.008678][    C0]  __irq_exit_rcu+0xca/0x1f0
[  131.008684][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  131.008692][    C0]  irq_exit_rcu+0x9/0x30
[  131.008698][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  131.008709][    C0]  </IRQ>
[  131.008713][    C0]  <TASK>
[  131.008716][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  131.008725][    C0] RIP: 0010:its_return_thunk+0x0/0x10
[  131.008734][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 6b a2 bd f5 cc
[  131.008741][    C0] RSP: 0018:ffffc9000332f390 EFLAGS: 00000282
[  131.008749][    C0] RAX: 0000000000000000 RBX: ffffffff9036dc01 RCX: d6b4c0b03e4a3a00
[  131.008754][    C0] RDX: ffffc9000332f401 RSI: ffffffff8be33ee0 RDI: ffffffff8be33ea0
[  131.008760][    C0] RBP: dffffc0000000000 R08: ffffc9000332f5b0 R09: 0000000000000000
[  131.008765][    C0] R10: ffffc9000332f4d8 R11: fffff52000665e9d R12: ffffc9000332f5c0
[  131.008770][    C0] R13: ffffc90003328000 R14: ffffc9000332f488 R15: ffffffff8172c195
[  131.008776][    C0]  ? unwind_next_frame+0xa5/0x2390
[  131.008788][    C0]  rcu_is_watching+0x15/0xb0
[  131.008794][    C0]  ? unwind_next_frame+0xa5/0x2390
[  131.008801][    C0]  unwind_next_frame+0x1965/0x2390
[  131.008810][    C0]  ? unwind_next_frame+0xa5/0x2390
[  131.008817][    C0]  ? stack_trace_save+0x9c/0xe0
[  131.008825][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  131.008833][    C0]  arch_stack_walk+0x11c/0x150
[  131.008843][    C0]  ? kasan_save_track+0x3e/0x80
[  131.008852][    C0]  stack_trace_save+0x9c/0xe0
[  131.008859][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  131.008868][    C0]  ? __lock_acquire+0xab9/0xd20
[  131.008877][    C0]  kasan_save_track+0x3e/0x80
[  131.008895][    C0]  ? unlink_anon_vmas+0x2cc/0x670
[  131.008906][    C0]  kasan_save_free_info+0x46/0x50
[  131.008913][    C0]  __kasan_slab_free+0x5b/0x80
[  131.008922][    C0]  kmem_cache_free+0x18f/0x400
[  131.008933][    C0]  unlink_anon_vmas+0x2cc/0x670
[  131.008944][    C0]  free_pgtables+0x72b/0x9c0
[  131.008957][    C0]  ? __pfx_free_pgtables+0x10/0x10
[  131.008968][    C0]  ? __pfx_down_write+0x10/0x10
[  131.008976][    C0]  ? __mas_set_range+0x12f/0x3c0
[  131.009017][    C0]  exit_mmap+0x444/0xb50
[  131.009026][    C0]  ? uprobe_clear_state+0x20f/0x290
[  131.009035][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  131.009044][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  131.009053][    C0]  ? __pfx_exit_aio+0x10/0x10
[  131.009065][    C0]  ? uprobe_clear_state+0x274/0x290
[  131.009078][    C0]  __mmput+0x118/0x430
[  131.009089][    C0]  exit_mm+0x1da/0x2c0
[  131.009098][    C0]  ? __pfx_exit_mm+0x10/0x10
[  131.009107][    C0]  ? rcu_is_watching+0x15/0xb0
[  131.009114][    C0]  do_exit+0x648/0x2300
[  131.009124][    C0]  ? preempt_schedule_common+0x83/0xd0
[  131.009134][    C0]  ? preempt_schedule+0xae/0xc0
[  131.009144][    C0]  ? __pfx_do_exit+0x10/0x10
[  131.009153][    C0]  ? preempt_schedule_thunk+0x16/0x30
[  131.009164][    C0]  do_group_exit+0x21c/0x2d0
[  131.009174][    C0]  __x64_sys_exit_group+0x3f/0x40
[  131.009182][    C0]  x64_sys_call+0x21f7/0x2200
[  131.009191][    C0]  do_syscall_64+0xfa/0x3b0
[  131.009198][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.009208][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.009215][    C0]  ? exc_page_fault+0x9f/0xf0
[  131.009226][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.009233][    C0] RIP: 0033:0x7f48f738ec29
[  131.009239][    C0] Code: Unable to access opcode bytes at 0x7f48f738ebff.
[  131.009244][    C0] RSP: 002b:00007ffde957f058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  131.009251][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f48f738ec29
[  131.009256][    C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  131.009261][    C0] RBP: 00007ffde957f0bc R08: 00000003e957f14f R09: 00000000000927c0
[  131.009266][    C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000183
[  131.009270][    C0] R13: 00000000000927c0 R14: 000000000001fee8 R15: 00007ffde957f110
[  131.009278][    C0]  </TASK>
[  131.009281][    C0] 
[  131.226198][    C0] Allocated by task 6141:
[  131.227908][    C0]  kasan_save_track+0x3e/0x80
[  131.229812][    C0]  __kasan_slab_alloc+0x6c/0x80
[  131.231715][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  131.233939][    C0]  xfrm_state_alloc+0x24/0x2f0
[  131.235905][    C0]  __find_acq_core+0x8a7/0x1c00
[  131.237853][    C0]  xfrm_find_acq+0x78/0xa0
[  131.239881][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  131.241826][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  131.243810][    C0]  netlink_rcv_skb+0x208/0x470
[  131.245722][    C0]  xfrm_netlink_rcv+0x79/0x90
[  131.247624][    C0]  netlink_unicast+0x82f/0x9e0
[  131.249466][    C0]  netlink_sendmsg+0x805/0xb30
[  131.251372][    C0]  __sock_sendmsg+0x21c/0x270
[  131.253240][    C0]  ____sys_sendmsg+0x505/0x830
[  131.255137][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  131.257057][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  131.259002][    C0]  do_syscall_64+0xfa/0x3b0
[  131.260792][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.263111][    C0] 
[  131.264062][    C0] Freed by task 9:
[  131.265550][    C0]  kasan_save_track+0x3e/0x80
[  131.267423][    C0]  kasan_save_free_info+0x46/0x50
[  131.269416][    C0]  __kasan_slab_free+0x5b/0x80
[  131.271299][    C0]  kmem_cache_free+0x18f/0x400
[  131.273234][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  131.275191][    C0]  process_scheduled_works+0xae1/0x17b0
[  131.277380][    C0]  worker_thread+0x8a0/0xda0
[  131.279161][    C0]  kthread+0x711/0x8a0
[  131.280781][    C0]  ret_from_fork+0x439/0x7d0
[  131.282601][    C0]  ret_from_fork_asm+0x1a/0x30
[  131.284519][    C0] 
[  131.285478][    C0] The buggy address belongs to the object at ffff888011ab0000
[  131.285478][    C0]  which belongs to the cache xfrm_state of size 928
[  131.290758][    C0] The buggy address is located 48 bytes inside of
[  131.290758][    C0]  freed 928-byte region [ffff888011ab0000, ffff888011ab03a0)
[  131.295943][    C0] 
[  131.296898][    C0] The buggy address belongs to the physical page:
[  131.299376][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ab0
[  131.302792][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  131.306111][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  131.308923][    C0] page_type: f5(slab)
[  131.310198][    C0] raw: 00fff00000000040 ffff88801c788b40 dead000000000122 0000000000000000
[  131.312797][    C0] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  131.315996][    C0] head: 00fff00000000040 ffff88801c788b40 dead000000000122 0000000000000000
[  131.319397][    C0] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  131.322707][    C0] head: 00fff00000000002 ffffea000046ac01 00000000ffffffff 00000000ffffffff
[  131.326080][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  131.329177][    C0] page dumped because: kasan: bad access detected
[  131.331152][    C0] page_owner tracks the page as allocated
[  131.333016][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6141, tgid 6138 (syz.1.101), ts 79101900761, free_ts 79101218473
[  131.339817][    C0]  post_alloc_hook+0x240/0x2a0
[  131.341595][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  131.343332][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  131.345241][    C0]  alloc_pages_mpol+0x232/0x4a0
[  131.347079][    C0]  allocate_slab+0x8a/0x370
[  131.348732][    C0]  ___slab_alloc+0xbeb/0x1420
[  131.350589][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  131.352595][    C0]  xfrm_state_alloc+0x24/0x2f0
[  131.354432][    C0]  __find_acq_core+0x8a7/0x1c00
[  131.356361][    C0]  xfrm_find_acq+0x78/0xa0
[  131.358107][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  131.360082][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  131.362030][    C0]  netlink_rcv_skb+0x208/0x470
[  131.363936][    C0]  xfrm_netlink_rcv+0x79/0x90
[  131.365849][    C0]  netlink_unicast+0x82f/0x9e0
[  131.367763][    C0]  netlink_sendmsg+0x805/0xb30
[  131.369680][    C0] page last free pid 6140 tgid 6131 stack trace:
[  131.372171][    C0]  __free_frozen_pages+0xbc4/0xd30
[  131.374183][    C0]  stack_depot_save_flags+0x436/0x860
[  131.376303][    C0]  kasan_save_track+0x4f/0x80
[  131.378180][    C0]  __kasan_slab_alloc+0x6c/0x80
[  131.380146][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  131.382244][    C0]  dst_alloc+0x105/0x170
[  131.383953][    C0]  ip_route_output_key_hash_rcu+0x1560/0x23e0
[  131.386340][    C0]  ip_route_output_key_hash+0x174/0x280
[  131.388489][    C0]  ip_route_output_flow+0x2a/0x150
[  131.390479][    C0]  udp_sendmsg+0x142e/0x2170
[  131.392294][    C0]  udpv6_sendmsg+0xc1c/0x2510
[  131.394144][    C0]  __sock_sendmsg+0xe5/0x270
[  131.395987][    C0]  __sys_sendto+0x3bd/0x520
[  131.397782][    C0]  __x64_sys_sendto+0xde/0x100
[  131.399620][    C0]  do_syscall_64+0xfa/0x3b0
[  131.401373][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.403668][    C0] 
[  131.404627][    C0] Memory state around the buggy address:
[  131.406824][    C0]  ffff888011aaff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  131.409918][    C0]  ffff888011aaff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  131.413064][    C0] >ffff888011ab0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  131.416146][    C0]                                      ^
[  131.418334][    C0]  ffff888011ab0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  131.421375][    C0]  ffff888011ab0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  131.424535][    C0] ==================================================================
[  131.427860][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  131.430655][    C0] CPU: 0 UID: 0 PID: 8763 Comm: syz.1.1224 Not tainted syzkaller #0 PREEMPT(full) 
[  131.434247][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.438152][    C0] Call Trace:
[  131.439432][    C0]  <IRQ>
[  131.440550][    C0]  dump_stack_lvl+0x99/0x250
[  131.442328][    C0]  ? __asan_memcpy+0x40/0x70
[  131.444138][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.446122][    C0]  ? __pfx__printk+0x10/0x10
[  131.447845][    C0]  vpanic+0x281/0x750
[  131.449084][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  131.450632][    C0]  ? __pfx_vpanic+0x10/0x10
[  131.452022][    C0]  ? irqentry_exit+0x74/0x90
[  131.453493][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.455120][    C0]  panic+0xb9/0xc0
[  131.456569][    C0]  ? __pfx_panic+0x10/0x10
[  131.458293][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  131.460684][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  131.463158][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  131.465219][    C0]  check_panic_on_warn+0x89/0xb0
[  131.467152][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  131.469149][    C0]  end_report+0x78/0x160
[  131.470797][    C0]  kasan_report+0x129/0x150
[  131.472576][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  131.474647][    C0]  __xfrm_state_delete+0x696/0xca0
[  131.476649][    C0]  xfrm_timer_handler+0x18f/0xa00
[  131.478621][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  131.480798][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  131.483128][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.485153][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  131.487446][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  131.489884][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  131.492031][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  131.494172][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  131.496201][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  131.498400][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  131.500649][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  131.502649][    C0]  handle_softirqs+0x286/0x870
[  131.504553][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  131.506512][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  131.508603][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  131.510633][    C0]  __irq_exit_rcu+0xca/0x1f0
[  131.512457][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  131.514477][    C0]  irq_exit_rcu+0x9/0x30
[  131.516151][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  131.518333][    C0]  </IRQ>
[  131.519398][    C0]  <TASK>
[  131.520340][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  131.522122][    C0] RIP: 0010:its_return_thunk+0x0/0x10
[  131.523754][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 6b a2 bd f5 cc
[  131.529657][    C0] RSP: 0018:ffffc9000332f390 EFLAGS: 00000282
[  131.531487][    C0] RAX: 0000000000000000 RBX: ffffffff9036dc01 RCX: d6b4c0b03e4a3a00
[  131.533849][    C0] RDX: ffffc9000332f401 RSI: ffffffff8be33ee0 RDI: ffffffff8be33ea0
[  131.536895][    C0] RBP: dffffc0000000000 R08: ffffc9000332f5b0 R09: 0000000000000000
[  131.539865][    C0] R10: ffffc9000332f4d8 R11: fffff52000665e9d R12: ffffc9000332f5c0
[  131.542885][    C0] R13: ffffc90003328000 R14: ffffc9000332f488 R15: ffffffff8172c195
[  131.545931][    C0]  ? unwind_next_frame+0xa5/0x2390
[  131.547894][    C0]  rcu_is_watching+0x15/0xb0
[  131.549658][    C0]  ? unwind_next_frame+0xa5/0x2390
[  131.551606][    C0]  unwind_next_frame+0x1965/0x2390
[  131.553554][    C0]  ? unwind_next_frame+0xa5/0x2390
[  131.555511][    C0]  ? stack_trace_save+0x9c/0xe0
[  131.557411][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  131.559780][    C0]  arch_stack_walk+0x11c/0x150
[  131.561637][    C0]  ? kasan_save_track+0x3e/0x80
[  131.563511][    C0]  stack_trace_save+0x9c/0xe0
[  131.565359][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  131.567476][    C0]  ? __lock_acquire+0xab9/0xd20
[  131.569372][    C0]  kasan_save_track+0x3e/0x80
[  131.571237][    C0]  ? unlink_anon_vmas+0x2cc/0x670
[  131.573183][    C0]  kasan_save_free_info+0x46/0x50
[  131.575168][    C0]  __kasan_slab_free+0x5b/0x80
[  131.577017][    C0]  kmem_cache_free+0x18f/0x400
[  131.578863][    C0]  unlink_anon_vmas+0x2cc/0x670
[  131.580758][    C0]  free_pgtables+0x72b/0x9c0
[  131.582556][    C0]  ? __pfx_free_pgtables+0x10/0x10
[  131.584560][    C0]  ? __pfx_down_write+0x10/0x10
[  131.586440][    C0]  ? __mas_set_range+0x12f/0x3c0
[  131.588371][    C0]  exit_mmap+0x444/0xb50
[  131.590023][    C0]  ? uprobe_clear_state+0x20f/0x290
[  131.592025][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  131.593866][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  131.596030][    C0]  ? __pfx_exit_aio+0x10/0x10
[  131.597844][    C0]  ? uprobe_clear_state+0x274/0x290
[  131.599822][    C0]  __mmput+0x118/0x430
[  131.601417][    C0]  exit_mm+0x1da/0x2c0
[  131.603003][    C0]  ? __pfx_exit_mm+0x10/0x10
[  131.604783][    C0]  ? rcu_is_watching+0x15/0xb0
[  131.606649][    C0]  do_exit+0x648/0x2300
[  131.608262][    C0]  ? preempt_schedule_common+0x83/0xd0
[  131.610352][    C0]  ? preempt_schedule+0xae/0xc0
[  131.612181][    C0]  ? __pfx_do_exit+0x10/0x10
[  131.613976][    C0]  ? preempt_schedule_thunk+0x16/0x30
[  131.616077][    C0]  do_group_exit+0x21c/0x2d0
[  131.617865][    C0]  __x64_sys_exit_group+0x3f/0x40
[  131.619843][    C0]  x64_sys_call+0x21f7/0x2200
[  131.621664][    C0]  do_syscall_64+0xfa/0x3b0
[  131.623439][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.625417][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.627713][    C0]  ? exc_page_fault+0x9f/0xf0
[  131.629554][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.631820][    C0] RIP: 0033:0x7f48f738ec29
[  131.633621][    C0] Code: Unable to access opcode bytes at 0x7f48f738ebff.
[  131.636323][    C0] RSP: 002b:00007ffde957f058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  131.639528][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f48f738ec29
[  131.642611][    C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  131.645698][    C0] RBP: 00007ffde957f0bc R08: 00000003e957f14f R09: 00000000000927c0
[  131.648749][    C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000183
[  131.651805][    C0] R13: 00000000000927c0 R14: 000000000001fee8 R15: 00007ffde957f110
[  131.654845][    C0]  </TASK>
[  131.656789][    C0] Kernel Offset: disabled
[  131.658512][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:54:21  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff8880210f8237 R9 =1ffff1100421f046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad7901 R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055559385a500 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f35283056c0 CR3=0000000028dba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f48f7412e7b
XMM06=0000000000000000 00007f48f7412e75 XMM07=0000000000000000 00007f48f7412e89
XMM08=0000000000000000 00007f48f7412f0f XMM09=0000000000000000 00007f48f7412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000008 RBX=0000000000000023 RCX=9e986e755b373f00 RDX=0000000000000000
RSI=ffffffff8e13a1a0 RDI=ffff888022e08c08 RBP=ffff888022e08c08 RSP=ffffc90003c6f298
R8 =0000000000000000 R9 =ffffffff822e753a R10=dffffc0000000000 R11=fffff940008abf81
R12=0000000000000007 R13=0000000000000007 R14=ffffffff8e13a1a0 R15=ffff888022e08000
RIP=ffffffff8b72ee12 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555583222500 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562106086000 CR3=000000001c2a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
