last executing test programs:

760.832442ms ago: executing program 0 (id=1964):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)

760.506175ms ago: executing program 0 (id=1965):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000001640)={0x0, {{0x2, 0x4e22, @multicast2}}}, 0x88)

689.699274ms ago: executing program 0 (id=1968):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x14, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x8800}, 0x0)

688.694482ms ago: executing program 0 (id=1971):
socket$kcm(0x2c, 0x3, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd0525816d6b67bf927e4a75ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

620.113477ms ago: executing program 0 (id=1974):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)

520.11106ms ago: executing program 0 (id=1979):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000003c0), &(0x7f0000000440)=0x6)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f00000002c0)=""/4, &(0x7f0000000300)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r3, 0x0, 0x417}, 0x18)
r4 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="15", 0x1}], 0x1}, 0x4000080)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
r7 = socket(0x5, 0x5, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0xd, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000040)={{{@in=@private=0xa010102, @in=@loopback, 0x4e23, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80, 0x0, r9}, {0x0, 0x53, 0x2000000000000000, 0x8000000000000001, 0xfffbfffffffffffc, 0x1e6, 0xfffffffffffffffe, 0x8001}, {0x8000000000000001, 0x0, 0x80000001, 0x5}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0xa, @in6=@mcast1, 0x1, 0x4, 0x2, 0x0, 0x0, 0x3439, 0x400009}}, 0xe8)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x2}, 0x1c)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r10, 0x0, 0x5)

410.1253ms ago: executing program 1 (id=1981):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="9750017325c5099684c0d7985021aea6daf725276483ee8e0da1a614b7447724e5fb77ba493e69e6043fdc34108c23ff97ab6fb46c168ec469cd7d47c9820a7b46a0280568569b9b6a1815c1b761778f190e8e3d1e6b65c72e106c8cc41f2aaca03931fe9cdcdc285a20b87f3dd0be789d3fb773b30d1146dad7bfd6db63598606240e1a88424b25ed06283f803e6655"], 0x110)

409.563704ms ago: executing program 1 (id=1983):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

340.672657ms ago: executing program 1 (id=1984):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001fc0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x22c2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x6, 0x0, 0x15}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0)

340.180476ms ago: executing program 1 (id=1985):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1e, 0x0, 0x0, 0x0, 0x0, '\x00', 0xffffffff}})
write$cgroup_int(r0, &(0x7f0000000200), 0x806000)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, 0x0, 0xa)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="02011000018001000700aaabb1e988d80010cfcba84bc2abd62106af5f18416271d3bdb8307004000000b29850b76201581c9f25be134431812ce9c8b2be799068f0aac4294bb868400d18dea610f5d32924d4e797e26f801eb590408e3a7f6920202df76a13545379eaa3651d9d33e40f5ee19a838363317bb653ed3341bbb43904d67165f13a96b2e64302d6cb862cd01a51546c1ddba06b90fa76ec5402197348f0c5c1663364d88ac081746a54d78a8154e8f84315a834adf6b0472cc73404e52699020bd534d5def2beeed7fc0f9fe074cb59907ae9f1cc8f4201b97eed422497e373bc22bc1188a52cd7f06951286471302c0474505d58b8ec2b4ea935ea575a91eec77050509c6d65109468bb74d87ab7fb6da3150cef64ad83b9213b6db63a54693e22a13dc7d6547cbae9aecbbef96063eed8bf5b0d54c42c8eb5883dc18439f768123d4045c705d2a8206e509f83229c56a242e296ce06f4921fcc35442e"], 0xc0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={0xffffffffffffffff, r2}, 0xc)
unshare(0x24020400)
readv(r0, 0x0, 0x0)
write$tun(r0, 0x0, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6131, 0xffffffffffffffff, 0x0)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x44884)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000200000000000000000000030000000002000000020000000000000000000000000000010500000008000002000000000200000500000000000000000100"/92], 0x0, 0x66}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4f, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x2000c800)
r8 = socket$netlink(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="141dff00dd868bc3b63dfdd0705b7ad8944d3d", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf2514000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xca4ffd611946ea37)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

211.859717ms ago: executing program 2 (id=1988):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x12a}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000)

211.592982ms ago: executing program 2 (id=1989):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}, 0x80)

150.500573ms ago: executing program 2 (id=1990):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/50, 0x32}], 0x5}, 0xfffffffc}], 0x2, 0x42, 0x0)

105.165507ms ago: executing program 2 (id=1991):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='westwood\x00', 0x9)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000300))

103.671411ms ago: executing program 1 (id=1992):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x68, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000)

97.864978ms ago: executing program 2 (id=1993):
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5)
close(r0)

298.386µs ago: executing program 1 (id=1994):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10)

0s ago: executing program 2 (id=1995):
syz_emit_ethernet(0x76, &(0x7f0000000240)={@local, @random="be9689ce9f88", @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x8, 0x4, 0x1, 0x1, 0x64, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0x7, 0x3d, [@multicast1]}, @generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x7, 0x2, 0x1, 0x0, 0x2, 0xc}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x6, {{0x9, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, 0x2, {0x1, 0x100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16601' (ED25519) to the list of known hosts.
syzkaller login: [   56.729306][ T5808] cgroup: Unknown subsys name 'net'
[   56.881761][ T5808] cgroup: Unknown subsys name 'cpuset'
[   56.888400][ T5808] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.320096][ T5808] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.048029][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.054295][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.059822][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.063077][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.068555][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.072416][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.075790][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.078864][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.124671][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.129241][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.129562][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.139383][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.143907][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.154630][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.159570][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.500523][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   65.595503][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   65.620210][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   65.664904][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.669373][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.673175][ T5846] bridge_slave_0: entered allmulticast mode
[   65.676059][ T5846] bridge_slave_0: entered promiscuous mode
[   65.681385][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.683783][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.686261][ T5846] bridge_slave_1: entered allmulticast mode
[   65.689250][ T5846] bridge_slave_1: entered promiscuous mode
[   65.771730][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.800555][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.864193][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.867158][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.870468][ T5855] bridge_slave_0: entered allmulticast mode
[   65.874251][ T5855] bridge_slave_0: entered promiscuous mode
[   65.908102][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.910586][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.913172][ T5855] bridge_slave_1: entered allmulticast mode
[   65.916209][ T5855] bridge_slave_1: entered promiscuous mode
[   65.930714][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.933289][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.935994][ T5850] bridge_slave_0: entered allmulticast mode
[   65.940162][ T5850] bridge_slave_0: entered promiscuous mode
[   65.946534][ T5846] team0: Port device team_slave_0 added
[   65.968786][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.972556][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.975392][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.979049][ T5850] bridge_slave_1: entered allmulticast mode
[   65.982924][ T5850] bridge_slave_1: entered promiscuous mode
[   65.988553][ T5846] team0: Port device team_slave_1 added
[   66.006275][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.078501][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.081229][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.092677][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.100557][ T5855] team0: Port device team_slave_0 added
[   66.106909][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.113230][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.115878][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.125487][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.130947][ T5855] team0: Port device team_slave_1 added
[   66.135116][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.186339][ T5850] team0: Port device team_slave_0 added
[   66.190449][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.192585][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.202348][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.208397][ T5850] team0: Port device team_slave_1 added
[   66.220988][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.223249][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.231355][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.256299][ T5846] hsr_slave_0: entered promiscuous mode
[   66.259223][ T5846] hsr_slave_1: entered promiscuous mode
[   66.283177][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.285953][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.295682][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.313750][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.316259][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.326495][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.414913][ T5855] hsr_slave_0: entered promiscuous mode
[   66.418550][ T5855] hsr_slave_1: entered promiscuous mode
[   66.421107][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   66.423300][ T5855] Cannot create hsr debugfs directory
[   66.444043][ T5850] hsr_slave_0: entered promiscuous mode
[   66.447155][ T5850] hsr_slave_1: entered promiscuous mode
[   66.450792][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   66.453037][ T5850] Cannot create hsr debugfs directory
[   66.784939][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.799481][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.807975][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.821495][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.870219][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.881224][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.889103][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.896341][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.962366][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.972750][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.983235][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.991795][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.130718][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.139216][ T5236] Bluetooth: hci0: command tx timeout
[   67.163308][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.175434][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.182959][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   67.199662][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.202396][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.213751][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   67.218168][ T5236] Bluetooth: hci2: command tx timeout
[   67.219260][ T5854] Bluetooth: hci1: command tx timeout
[   67.225852][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.228966][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.236643][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   67.249472][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.252330][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.264564][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.266983][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.281020][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.283336][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.289325][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.292327][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.382116][ T5855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   67.385995][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.583700][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.590737][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.625515][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.671688][ T5846] veth0_vlan: entered promiscuous mode
[   67.678113][ T5855] veth0_vlan: entered promiscuous mode
[   67.692959][ T5855] veth1_vlan: entered promiscuous mode
[   67.702377][ T5846] veth1_vlan: entered promiscuous mode
[   67.741095][ T5850] veth0_vlan: entered promiscuous mode
[   67.753046][ T5850] veth1_vlan: entered promiscuous mode
[   67.776273][ T5855] veth0_macvtap: entered promiscuous mode
[   67.789711][ T5846] veth0_macvtap: entered promiscuous mode
[   67.793698][ T5855] veth1_macvtap: entered promiscuous mode
[   67.800973][ T5846] veth1_macvtap: entered promiscuous mode
[   67.826522][ T5850] veth0_macvtap: entered promiscuous mode
[   67.835860][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.847713][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.851307][ T5850] veth1_macvtap: entered promiscuous mode
[   67.860989][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.865917][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.889159][ T5715] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.900385][ T5715] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.916107][ T5715] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.922644][ T5715] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.926323][ T5715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.940737][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.953469][ T5715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.958913][ T5715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.978128][ T5715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.991905][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.035815][ T5715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.041738][ T5715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.063195][ T5715] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.069422][ T5715] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.101994][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.110856][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.156332][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.160860][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.221503][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.227055][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.246068][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.250726][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.281517][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.284538][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.330804][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.333827][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.354253][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.447851][ T5915] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.3'.
[   68.459280][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.462862][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.473907][ T5917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.570641][ T5922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5'.
[   68.674867][ T5927] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   68.728143][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'.
[   68.776567][ T5935] Zero length message leads to an empty skb
[   68.784134][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'.
[   68.996313][ T5949] netlink: 'syz.1.17': attribute type 2 has an invalid length.
[   69.097753][   T24] IPVS: starting estimator thread 0...
[   69.098344][ T5955] Bluetooth: MGMT ver 1.23
[   69.102075][ T5958] tipc: Started in network mode
[   69.103704][ T5958] tipc: Node identity ac1414aa, cluster identity 4711
[   69.106808][ T5958] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   69.112245][ T5958] tipc: Enabled bearer <udp:s>, priority 10
[   69.187716][ T5959] IPVS: using max 64 ests per chain, 153600 per kthread
[   69.191599][ T5964] netlink: 88 bytes leftover after parsing attributes in process `syz.1.24'.
[   69.211735][ T5966] warning: `syz.2.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.219331][ T5854] Bluetooth: hci0: command tx timeout
[   69.238334][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   69.297917][ T5854] Bluetooth: hci2: command tx timeout
[   69.298433][ T5236] Bluetooth: hci1: command tx timeout
[   69.372719][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[   69.377618][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   69.517317][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   69.613025][ T5992] netlink: 'syz.0.37': attribute type 21 has an invalid length.
[   69.657322][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   69.797361][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   69.937538][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   70.040729][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'.
[   70.044102][ T6018] chnl_net:caif_netlink_parms(): no params data found
[   70.077683][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   70.218452][   T24] tipc: Node number set to 2886997162
[   70.357328][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   70.627428][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   71.108159][ T6070] smc: net device bond0 applied user defined pnetid SYZ
[   71.221433][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.228170][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.377886][ T5236] Bluetooth: hci1: command tx timeout
[   71.388740][ T5236] Bluetooth: hci2: command tx timeout
[   71.615601][ T6117] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.885357][ T6134] syzkaller0: entered promiscuous mode
[   71.887754][ T6134] syzkaller0: entered allmulticast mode
[   72.290290][ T6145] Driver unsupported XDP return value 0 on prog  (id 19) dev N/A, expect packet loss!
[   72.894273][ T6140] lo speed is unknown, defaulting to 1000
[   72.912039][ T6140] lo speed is unknown, defaulting to 1000
[   72.916281][ T6140] lo speed is unknown, defaulting to 1000
[   72.921588][ T6140] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.929128][ T6140] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   72.945560][ T6147] pimreg: entered allmulticast mode
[   72.990413][ T6140] lo speed is unknown, defaulting to 1000
[   72.993311][ T6140] lo speed is unknown, defaulting to 1000
[   73.019390][ T6140] lo speed is unknown, defaulting to 1000
[   73.458245][ T5236] Bluetooth: hci2: command tx timeout
[   73.460310][ T5854] Bluetooth: hci1: command tx timeout
[   73.737428][ T6192] netlink: 'syz.2.111': attribute type 21 has an invalid length.
[   73.744589][ T6201] netlink: 'syz.1.113': attribute type 3 has an invalid length.
[   73.751235][ T6192] ipvlan2: entered promiscuous mode
[   73.754661][ T6192] bridge0: port 3(ipvlan2) entered blocking state
[   73.756779][ T6192] bridge0: port 3(ipvlan2) entered disabled state
[   73.760286][ T6192] ipvlan2: entered allmulticast mode
[   73.762307][ T6192] gretap0: entered allmulticast mode
[   73.770924][ T6192] ipvlan2: left allmulticast mode
[   73.772999][ T6192] gretap0: left allmulticast mode
[   74.257360][    C1] net_ratelimit: 3 callbacks suppressed
[   74.257397][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   74.540901][ T6242] tipc: Started in network mode
[   74.543050][ T6242] tipc: Node identity f2ad62552672, cluster identity 4711
[   74.546112][ T6242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.551080][ T6242] syzkaller0: entered promiscuous mode
[   74.553397][ T6242] syzkaller0: entered allmulticast mode
[   74.564729][ T6242] tipc: Resetting bearer <eth:syzkaller0>
[   74.603660][ T6254] tap0: tun_chr_ioctl cmd 2147767507
[   75.002165][ T6228] tipc: Resetting bearer <eth:syzkaller0>
[   75.028246][ T6228] tipc: Disabling bearer <eth:syzkaller0>
[   75.297476][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   76.016354][ T6333] __nla_validate_parse: 7 callbacks suppressed
[   76.016372][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'.
[   76.245994][ T6346] netlink: 64 bytes leftover after parsing attributes in process `syz.2.168'.
[   76.302143][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.171'.
[   76.322565][ T5715] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   76.326857][ T5715] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   76.337508][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   76.348441][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   76.371503][ T6355] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.394685][ T6355] bond_slave_0: entered promiscuous mode
[   76.397276][ T6355] bond_slave_1: entered promiscuous mode
[   76.400237][ T6355] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   76.404477][ T6355] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   76.422082][ T6355] bridge_slave_0: left allmulticast mode
[   76.423947][ T6355] bridge_slave_0: left promiscuous mode
[   76.427175][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.433562][ T6355] bridge_slave_1: left allmulticast mode
[   76.435429][ T6355] bridge_slave_1: left promiscuous mode
[   76.438786][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.445006][ T6355] bond0: (slave bond_slave_0): Releasing backup interface
[   76.453149][ T6355] bond_slave_0: left promiscuous mode
[   76.457984][ T6355] bond0: (slave bond_slave_1): Releasing backup interface
[   76.462778][ T6355] bond_slave_1: left promiscuous mode
[   76.479090][ T6355] team0: Port device team_slave_0 removed
[   76.490483][ T6355] team0: Port device team_slave_1 removed
[   76.493105][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.495664][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.505825][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.509019][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.514096][ T6355] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   76.522623][   T80] bond1: (slave macvlan2): speed changed to 0 on port 1
[   76.608675][   T12] bond1: (slave macvlan2): link status definitely down, disabling slave
[   76.619546][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'.
[   76.623050][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'.
[   76.626763][ T6367] netlink: 'syz.1.177': attribute type 12 has an invalid length.
[   76.768319][ T5878] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   76.852109][ T6383] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   76.856358][ T6383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.931046][ T6387] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   77.057760][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   77.125479][   T51] IPVS: starting estimator thread 0...
[   77.237539][ T6411] IPVS: using max 48 ests per chain, 115200 per kthread
[   77.377348][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   77.582846][ T6453] dvmrp8: entered allmulticast mode
[   77.638883][ T6453] lo speed is unknown, defaulting to 1000
[   77.912009][ T6475] netlink: 'syz.0.217': attribute type 2 has an invalid length.
[   77.916209][ T6475] netlink: 'syz.0.217': attribute type 1 has an invalid length.
[   77.926418][ T6474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.218'.
[   77.931525][ T6475] netlink: 'syz.0.217': attribute type 1 has an invalid length.
[   78.011706][ T6480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.417408][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   78.490869][ T6500] netlink: 'syz.2.227': attribute type 1 has an invalid length.
[   78.493702][ T6500] netlink: 140 bytes leftover after parsing attributes in process `syz.2.227'.
[   78.496773][ T6500] netlink: 96 bytes leftover after parsing attributes in process `syz.2.227'.
[   78.759140][ T6507] nbd: couldn't find device at index 536870912
[   79.186146][ T6519] veth3: entered promiscuous mode
[   79.222928][ T6523] sctp: [Deprecated]: syz.1.237 (pid 6523) Use of struct sctp_assoc_value in delayed_ack socket option.
[   79.222928][ T6523] Use struct sctp_sack_info instead
[   79.398909][ T6538] tipc: Started in network mode
[   79.400916][ T6538] tipc: Node identity c63281ab2a93, cluster identity 4711
[   79.403924][ T6538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.409535][ T6538] syzkaller0: entered promiscuous mode
[   79.411713][ T6538] syzkaller0: entered allmulticast mode
[   79.430350][ T6538] tipc: Resetting bearer <eth:syzkaller0>
[   79.433117][ T6537] tipc: Resetting bearer <eth:syzkaller0>
[   79.447139][ T6537] tipc: Disabling bearer <eth:syzkaller0>
[   79.457400][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   79.512146][ T6542] Bluetooth: MGMT ver 1.23
[   80.417450][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.497415][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   80.531837][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.535189][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.607926][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.614486][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.686446][  T795] lo speed is unknown, defaulting to 1000
[   80.686528][ T5911] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.689097][  T795] syz1: Port: 1 Link DOWN
[   80.707841][ T5911] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.711253][ T5911] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.714529][ T5911] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.165600][ T6657] netlink: 'syz.1.305': attribute type 1 has an invalid length.
[   81.204094][ T6657] bond2: entered promiscuous mode
[   81.207670][ T6657] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.231065][ T6657] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.233941][ T6657] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[   81.244672][ T6657] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   81.260358][ T6657] bond2: (slave wireguard0): making interface the new active one
[   81.263062][ T6657] wireguard0: entered promiscuous mode
[   81.269126][ T6657] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[   81.282242][ T6657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.285198][ T6657] IPv6: NLM_F_CREATE should be set when creating new route
[   81.287494][ T6657] IPv6: NLM_F_CREATE should be set when creating new route
[   81.294316][ T6657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.302674][ T6657] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[   81.322203][ T6657] bond2: (slave wireguard1): Enslaving as a backup interface with an up link
[   81.379185][ T6678] netlink: 'syz.1.312': attribute type 1 has an invalid length.
[   81.382492][ T6678] netlink: 'syz.1.312': attribute type 1 has an invalid length.
[   81.507582][ T6678] netlink: 'syz.1.312': attribute type 1 has an invalid length.
[   81.537367][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   81.565129][ T6678] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.571870][ T6685] bond3: (slave wlan0): Opening slave failed
[   81.579955][ T6693] ieee802154 phy0 wpan0: encryption failed: -22
[   81.599710][ T6678] vlan2: entered allmulticast mode
[   81.608053][ T6678] veth1: entered allmulticast mode
[   81.619549][ T6678] bond3: (slave vlan2): Opening slave failed
[   82.319485][ T5877] bond1: (slave macvlan2): link status definitely down, disabling slave
[   82.485703][ T6748] lo speed is unknown, defaulting to 1000
[   82.534372][ T6752] geneve2: entered promiscuous mode
[   82.536493][ T6752] geneve2: entered allmulticast mode
[   82.577377][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   82.681763][ T6760] netlink: 44 bytes leftover after parsing attributes in process `syz.0.350'.
[   82.686310][ T6760] netlink: 44 bytes leftover after parsing attributes in process `syz.0.350'.
[   82.692333][ T6760] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   83.617311][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   84.445091][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'.
[   84.657444][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   84.902163][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'.
[   84.908735][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'.
[   84.916063][ T6839] lo speed is unknown, defaulting to 1000
[   85.152220][ T6849] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.219502][ T6849] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.293497][ T6849] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.360692][ T6849] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.439007][ T5911] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.449129][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.461074][ T5911] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.472015][ T5911] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.697301][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   85.985165][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.400'.
[   86.002772][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'.
[   86.146775][ T6887] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   86.216404][ T6890] syzkaller1: entered promiscuous mode
[   86.219830][ T6890] syzkaller1: entered allmulticast mode
[   86.332179][ T6898] lo speed is unknown, defaulting to 1000
[   86.488210][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'.
[   86.594098][    T9] cfg80211: failed to load regulatory.db
[   86.737343][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   87.297662][ T6951] netlink: 64 bytes leftover after parsing attributes in process `syz.2.429'.
[   87.364585][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'.
[   87.571963][ T6971] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   87.777384][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   87.854116][ T6997] netlink: 'syz.0.453': attribute type 1 has an invalid length.
[   88.032734][ T7013] netlink: 'syz.2.462': attribute type 8 has an invalid length.
[   88.118452][ T7021] trusted_key: syz.2.464 sent an empty control message without MSG_MORE.
[   88.235787][ T7033] __nla_validate_parse: 3 callbacks suppressed
[   88.235805][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'.
[   88.492912][ T7057] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   88.572506][ T7065] netlink: 'syz.1.486': attribute type 1 has an invalid length.
[   88.574874][ T7065] netlink: 204 bytes leftover after parsing attributes in process `syz.1.486'.
[   88.580674][ T7065] netlink: 'syz.1.486': attribute type 1 has an invalid length.
[   88.817318][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   89.203887][ T7102] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   89.207752][ T7102] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.215222][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'.
[   89.400057][ T7114] syzkaller0: entered promiscuous mode
[   89.402153][ T7114] syzkaller0: entered allmulticast mode
[   89.858570][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   90.166069][ T7118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.510'.
[   90.170321][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'.
[   90.174374][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'.
[   90.390068][ T7122] netem: incorrect ge model size
[   90.392265][ T7122] netem: change failed
[   90.484958][ T7126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.514'.
[   90.492227][ T7126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.514'.
[   90.897401][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   91.937516][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   92.860343][ T7199] netlink: 128 bytes leftover after parsing attributes in process `syz.0.546'.
[   92.863744][ T7199] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   92.977265][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   93.312030][ T7237] netlink: 268 bytes leftover after parsing attributes in process `syz.2.564'.
[   93.345964][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.569'.
[   93.578531][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[   93.614329][ T7262] lo speed is unknown, defaulting to 1000
[   93.642504][ T7271] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.579'.
[   93.862308][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.880763][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.985443][ T7296] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   93.994161][ T7296] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len
[   93.999715][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.589'.
[   94.002599][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.589'.
[   94.017311][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   94.136423][ T7313] pim6reg1: entered promiscuous mode
[   94.138430][ T7313] pim6reg1: entered allmulticast mode
[   94.987505][ T7327] openvswitch: netlink: VXLAN extension 226 out of range max 1
[   95.037586][ T7329] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[   95.040596][ T7329] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[   95.057409][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   95.218295][ T7343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.610'.
[   96.095827][ T7376] syz.2.620 uses old SIOCAX25GETINFO
[   96.097355][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   96.188148][ T7378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.764627][ T7416] netlink: 'syz.0.635': attribute type 13 has an invalid length.
[   96.774798][ T7416] netlink: 'syz.0.635': attribute type 17 has an invalid length.
[   96.879031][ T7416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.905395][ T7407] lo speed is unknown, defaulting to 1000
[   96.991881][ T7416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.137307][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   97.211560][ T7438] syz.1.647 (7438) used obsolete PPPIOCDETACH ioctl
[   97.641638][ T7466] IPv6: Can't replace route, no match found
[   97.873873][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'.
[   97.900484][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'.
[   97.914653][ T7480] dvmrp8: entered allmulticast mode
[   97.970542][ T7480] lo speed is unknown, defaulting to 1000
[   97.977134][ T7485] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.036971][ T7489] netlink: 'syz.1.672': attribute type 1 has an invalid length.
[   98.117049][ T7489] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.142150][ T7491] bond4: (slave ip6erspan0): making interface the new active one
[   98.147651][ T7491] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link
[   98.177354][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   98.185432][ T7479] dvmrp8: left allmulticast mode
[   98.212078][ T7491] syz.1.672 (7491) used greatest stack depth: 19160 bytes left
[   98.549931][ T7523] IPVS: Error connecting to the multicast addr
[   98.659403][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[   99.079122][ T7553] netlink: 'syz.0.698': attribute type 23 has an invalid length.
[   99.217447][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   99.318867][ T7568] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1815685925)
[   99.322320][ T7568] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   99.566338][ T7588] netlink: 76 bytes leftover after parsing attributes in process `syz.0.715'.
[   99.755493][ T7601] macsec1: entered promiscuous mode
[   99.757912][ T7601] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   99.761121][ T7601] macsec1: entered allmulticast mode
[   99.763303][ T7601] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   99.965329][ T7607] lo speed is unknown, defaulting to 1000
[  100.136243][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'.
[  100.224737][ T7624] netlink: 212856 bytes leftover after parsing attributes in process `syz.2.730'.
[  100.257413][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  100.595332][ T7649] netlink: 17 bytes leftover after parsing attributes in process `syz.2.742'.
[  101.297595][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  101.683896][ T7681] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.282925][ T7714] netlink: 92 bytes leftover after parsing attributes in process `syz.0.772'.
[  102.300444][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.772'.
[  102.338528][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  102.369635][ T7718] netlink: 'syz.0.774': attribute type 3 has an invalid length.
[  102.372913][ T7718] netlink: 'syz.0.774': attribute type 3 has an invalid length.
[  102.684498][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'.
[  102.701416][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'.
[  102.707558][ T5715] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.711074][ T5877] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.718217][ T5877] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.724131][ T5877] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.749778][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'.
[  102.753206][ T7736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.783'.
[  103.377348][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  103.806232][ T7778] 8021q: adding VLAN 0 to HW filter on device bond2
[  103.991856][ T7788] ieee802154 phy0 wpan0: encryption failed: -22
[  104.063935][ T7793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.417268][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  104.749110][ T7843] netlink: 'syz.2.830': attribute type 3 has an invalid length.
[  104.861646][ T7851] netlink: 'syz.1.836': attribute type 1 has an invalid length.
[  104.866001][ T7854] __nla_validate_parse: 6 callbacks suppressed
[  104.866013][ T7854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.834'.
[  104.872689][ T7854] netlink: 'syz.2.834': attribute type 7 has an invalid length.
[  104.876070][ T7854] netlink: 'syz.2.834': attribute type 8 has an invalid length.
[  104.879716][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'.
[  104.881505][ T7855] netlink: 132 bytes leftover after parsing attributes in process `syz.0.835'.
[  104.954006][ T7857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.958670][ T7857] syzkaller0: entered promiscuous mode
[  104.969385][ T7857] syzkaller0: entered allmulticast mode
[  104.983616][ T7857] tipc: Resetting bearer <eth:syzkaller0>
[  104.989086][ T7856] tipc: Resetting bearer <eth:syzkaller0>
[  105.016794][ T7856] tipc: Disabling bearer <eth:syzkaller0>
[  105.260805][ T7884] bond2: left promiscuous mode
[  105.262880][ T7884] wireguard0: left promiscuous mode
[  105.457417][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  105.715961][ T5911] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.719379][ T5911] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.722417][ T5911] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.725386][ T5911] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.816108][ T7912] batman_adv: batadv0: Adding interface: dummy0
[  105.819304][ T7912] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.833569][ T7912] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  105.970112][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'.
[  106.025133][ T7938] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  106.030525][ T7938] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  106.100533][ T7942] netlink: 'syz.1.877': attribute type 1 has an invalid length.
[  106.144853][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.879'.
[  106.273231][ T7958] netlink: 44 bytes leftover after parsing attributes in process `syz.1.885'.
[  106.497333][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  106.558924][ T7991] syzkaller1: entered promiscuous mode
[  106.560916][ T7991] syzkaller1: entered allmulticast mode
[  106.752084][ T8011] netlink: 'syz.1.907': attribute type 3 has an invalid length.
[  106.755055][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'.
[  106.834001][ T8015] tun0: tun_chr_ioctl cmd 2148045848
[  106.836672][ T8015] tun0: tun_chr_ioctl cmd 21731
[  106.926252][ T8021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.930436][ T8021] syzkaller0: entered promiscuous mode
[  106.932799][ T8021] syzkaller0: entered allmulticast mode
[  106.952791][ T8021] tipc: Resetting bearer <eth:syzkaller0>
[  106.961457][ T8020] tipc: Resetting bearer <eth:syzkaller0>
[  106.976074][ T8020] tipc: Disabling bearer <eth:syzkaller0>
[  107.275994][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'.
[  107.289781][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.916'.
[  107.537356][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  107.843901][ T8050] netlink: 'syz.0.926': attribute type 2 has an invalid length.
[  107.846763][ T8050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.926'.
[  107.895145][ T8055] netlink: 'syz.1.928': attribute type 9 has an invalid length.
[  108.038536][ T8070] netlink: 'syz.2.934': attribute type 1 has an invalid length.
[  108.577384][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  109.619524][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  109.691356][ T8142] openvswitch: netlink: IPv4 tun info is not correct
[  109.926764][ T8167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.132290][ T8185] __nla_validate_parse: 2 callbacks suppressed
[  110.132304][ T8185] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.983'.
[  110.657404][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  111.119670][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'.
[  111.341219][ T8253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  111.522038][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'.
[  111.541050][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'.
[  111.549665][ T8265] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.557780][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'.
[  111.572320][ T8265] macvlan2: entered promiscuous mode
[  111.574432][ T8265] macvlan2: entered allmulticast mode
[  111.577415][ T8265] bond1: entered promiscuous mode
[  111.580093][ T8265] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  111.584423][ T8265] bond1: left promiscuous mode
[  111.667171][ T8272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.697293][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  111.762302][ T8279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.766434][ T8279] syzkaller0: entered promiscuous mode
[  111.770096][ T8279] syzkaller0: entered allmulticast mode
[  111.787084][ T8279] tipc: Resetting bearer <eth:syzkaller0>
[  111.794286][ T8277] tipc: Resetting bearer <eth:syzkaller0>
[  111.805210][ T8277] tipc: Disabling bearer <eth:syzkaller0>
[  111.912631][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'.
[  112.158810][ T8313] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  112.333804][ T8333] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1055'.
[  112.620826][ T8361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'.
[  112.737380][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  113.777376][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  113.898829][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'.
[  113.909207][ T8438] bridge3: entered allmulticast mode
[  114.004704][ T8444] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  114.029661][ T8446] netlink: 'syz.1.1108': attribute type 1 has an invalid length.
[  114.032847][ T8446] netlink: 'syz.1.1108': attribute type 2 has an invalid length.
[  114.035754][ T8446] netlink: 'syz.1.1108': attribute type 8 has an invalid length.
[  114.041309][ T8446] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.1108'.
[  114.817375][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  114.877440][ T8524] netlink: 'syz.2.1143': attribute type 10 has an invalid length.
[  115.169790][ T8548] pimreg: tun_chr_ioctl cmd 1074025677
[  115.172077][ T8548] pimreg: linktype set to 1
[  115.303026][ T8557] __nla_validate_parse: 2 callbacks suppressed
[  115.303038][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1160'.
[  115.444210][ T8574] veth1_to_bond: entered allmulticast mode
[  115.446653][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'.
[  115.477961][ T8574] bond0: (slave bond_slave_1): Releasing backup interface
[  115.484216][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'.
[  115.495843][ T8574] veth1_to_bond (unregistering): left allmulticast mode
[  115.502766][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'.
[  115.534533][ T5877] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  115.857510][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  116.434549][ T8600] team0: Device gtp0 is of different type
[  116.663671][ T8623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1185'.
[  116.704979][ T8623] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1185'.
[  116.710800][ T8625] netlink: 'syz.2.1186': attribute type 3 has an invalid length.
[  116.723403][ T8625] ip6_vti0: entered allmulticast mode
[  116.755953][ T8625] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  116.784547][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'.
[  116.839030][ T8632] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.842909][ T8632] 8021q: adding VLAN 0 to HW filter on device team0
[  116.846516][ T8632] batman_adv: batadv0: Interface activated: dummy0
[  116.860208][ T8632] batadv0: mtu less than device minimum
[  116.863281][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  116.867311][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  116.871417][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  116.875968][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  116.880569][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  116.884834][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  116.888959][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  116.893079][ T8632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  116.941295][ T8638] syzkaller1: entered promiscuous mode
[  116.948860][ T8638] syzkaller1: entered allmulticast mode
[  116.983233][ T8624] ip6_vti0: left allmulticast mode
[  118.053605][ T8719] nftables ruleset with unbound chain
[  118.204732][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'.
[  118.513300][ T8752] netlink: 'syz.0.1237': attribute type 1 has an invalid length.
[  118.515895][ T8752] netlink: 'syz.0.1237': attribute type 1 has an invalid length.
[  118.775150][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'.
[  118.832669][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'.
[  119.679625][ T8828] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  119.891157][ T8848] netlink: 'syz.1.1283': attribute type 7 has an invalid length.
[  119.955635][ T8858] pim6reg: entered allmulticast mode
[  119.959005][ T8858] pim6reg: left allmulticast mode
[  120.437074][ T8895] __nla_validate_parse: 2 callbacks suppressed
[  120.437093][ T8895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1303'.
[  120.457811][ T8895] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1303'.
[  120.461318][ T8895] netlink: 'syz.0.1303': attribute type 5 has an invalid length.
[  120.464523][ T8895] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1303'.
[  120.578584][ T8895] lo speed is unknown, defaulting to 1000
[  120.600006][ T8907] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1303'.
[  120.941726][ T8929] netlink: 'syz.0.1318': attribute type 10 has an invalid length.
[  121.057363][    C1] net_ratelimit: 16 callbacks suppressed
[  121.057382][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  121.306439][ T8965] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1334'.
[  121.371849][ T8973] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  121.530925][   T55] block nbd0: Receive control failed (result -32)
[  121.724789][ T8998] netlink: 'syz.1.1349': attribute type 1 has an invalid length.
[  121.745752][ T8998] 8021q: adding VLAN 0 to HW filter on device bond6
[  121.768152][ T8998] bond6: (slave geneve2): making interface the new active one
[  121.771894][ T8998] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  121.775035][ T5715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.777467][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.781768][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.784119][ T5715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.784466][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.790711][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.798592][ T5715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.802119][ T5715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.035538][ T9013] tipc: New replicast peer: 255.255.255.255
[  122.038782][ T9013] tipc: Enabled bearer <udp:syz2>, priority 10
[  122.097503][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  122.169569][ T9019] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1359'.
[  122.212646][ T9021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.215837][ T9021] syzkaller0: entered promiscuous mode
[  122.218674][ T9021] syzkaller0: entered allmulticast mode
[  122.237110][ T9021] tipc: Resetting bearer <eth:syzkaller0>
[  122.243077][ T9020] tipc: Resetting bearer <eth:syzkaller0>
[  122.254089][ T9020] tipc: Disabling bearer <eth:syzkaller0>
[  122.576797][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1371'.
[  123.137538][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  124.081406][ T9103] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  124.176569][ T9111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.177305][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  124.181978][ T9111] syzkaller0: entered promiscuous mode
[  124.186910][ T9111] syzkaller0: entered allmulticast mode
[  124.215754][ T9111] tipc: Resetting bearer <eth:syzkaller0>
[  124.221411][ T9110] tipc: Resetting bearer <eth:syzkaller0>
[  124.234755][ T9110] tipc: Disabling bearer <eth:syzkaller0>
[  124.244530][ T9116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1402'.
[  124.368917][ T9128] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0
[  124.494062][ T9141] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1415'.
[  124.499723][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'.
[  125.003305][ T9193] netlink: 'syz.1.1435': attribute type 6 has an invalid length.
[  125.103390][ T9207] netlink: 'syz.0.1441': attribute type 10 has an invalid length.
[  125.113365][ T9207] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  125.545091][ T9242] __nla_validate_parse: 7 callbacks suppressed
[  125.545108][ T9242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1457'.
[  125.556531][ T9242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1457'.
[  125.694073][ T9257] netlink: 'syz.0.1464': attribute type 1 has an invalid length.
[  125.708067][ T9257] netlink: 'syz.0.1464': attribute type 2 has an invalid length.
[  125.713986][ T9257] netlink: 'syz.0.1464': attribute type 1 has an invalid length.
[  125.716991][ T9257] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.1464'.
[  125.795164][ T9261] lo speed is unknown, defaulting to 1000
[  125.851683][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'.
[  125.855108][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'.
[  126.146164][ T9277] netlink: 'syz.0.1473': attribute type 9 has an invalid length.
[  126.257777][    C1] net_ratelimit: 1 callbacks suppressed
[  126.257827][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  126.293827][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'.
[  126.335483][ T9286] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  126.556610][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'.
[  126.563152][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'.
[  126.603883][ T9324] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1494'.
[  126.685554][ T9329] netlink: 'syz.2.1496': attribute type 1 has an invalid length.
[  127.003438][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'.
[  127.007456][ T9343] openvswitch: netlink: nsh attr 0 has unexpected len 60 expected 0
[  127.011051][ T9343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.297453][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  127.419355][ T9360] dvmrp1: tun_chr_ioctl cmd 1074025681
[  128.002225][ T9414] lo speed is unknown, defaulting to 1000
[  128.337373][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  128.380799][ T9418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.406980][ T9418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.421122][ T9418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.429257][ T9418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.440329][ T9418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.309251][ T9485] geneve2: entered promiscuous mode
[  129.311076][ T9485] geneve2: entered allmulticast mode
[  129.314147][ T5715] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.322251][ T5715] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.331798][ T5715] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.335245][ T5715] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.776739][ T9529] 8021q: adding VLAN 0 to HW filter on device bond7
[  129.781752][ T9529] bridge0: port 3(bond7) entered blocking state
[  129.784352][ T9529] bridge0: port 3(bond7) entered disabled state
[  129.786734][ T9529] bond7: entered allmulticast mode
[  129.792853][ T9529] bond7: entered promiscuous mode
[  131.351182][ T9596] net_ratelimit: 58 callbacks suppressed
[  131.351211][ T9596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.357947][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.435164][ T9602] netlink: 'syz.2.1615': attribute type 3 has an invalid length.
[  131.457411][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  131.589908][ T9618] netlink: 'syz.1.1623': attribute type 4 has an invalid length.
[  131.632993][ T9614] lo speed is unknown, defaulting to 1000
[  131.669247][ T9622] __nla_validate_parse: 8 callbacks suppressed
[  131.669297][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1623'.
[  131.680518][ T9623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.706204][ T9623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.711493][ T9623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.714819][ T9623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.752735][ T9623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.756099][ T9623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.766075][ T9623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.781609][ T9626] netlink: 'syz.1.1625': attribute type 9 has an invalid length.
[  131.784726][ T9626] netlink: 147436 bytes leftover after parsing attributes in process `syz.1.1625'.
[  131.813865][ T9614] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1621'.
[  131.926564][ T9634] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  131.931672][ T9634] bridge_slave_0: left allmulticast mode
[  131.933554][ T9634] bridge_slave_0: left promiscuous mode
[  131.938048][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.943826][ T9634] bridge_slave_1: left allmulticast mode
[  131.946219][ T9634] bridge_slave_1: left promiscuous mode
[  131.949019][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.955481][ T9634] bond0: (slave bond_slave_0): Releasing backup interface
[  131.973459][ T9634] team0: Port device team_slave_0 removed
[  131.983572][ T9634] team0: Port device team_slave_1 removed
[  131.985813][ T9634] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.991569][ T9634] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.001713][ T9634] netlink: 'syz.1.1629': attribute type 10 has an invalid length.
[  132.002626][ T9639] pim6reg: entered allmulticast mode
[  132.006554][ T9634] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  132.011951][ T9634] bond0: (slave wlan1): Opening slave failed
[  132.014941][ T9639] pim6reg: left allmulticast mode
[  132.037531][ T9634] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  132.041598][ T9634] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  132.660863][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.663364][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.852602][ T5877] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  133.644694][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'.
[  133.692991][ T9703] vlan3: entered allmulticast mode
[  133.695516][ T9703] bridge0: entered allmulticast mode
[  133.698612][ T9703] bridge4: port 1(vlan3) entered blocking state
[  133.701612][ T9703] bridge4: port 1(vlan3) entered disabled state
[  133.705482][ T9703] vlan3: entered promiscuous mode
[  133.707845][ T9703] bridge0: entered promiscuous mode
[  133.861101][ T9719] dvmrp1: tun_chr_ioctl cmd 1074025677
[  133.865325][ T9719] dvmrp1: linktype set to 805
[  133.913947][ T9725] netlink: 'syz.1.1668': attribute type 3 has an invalid length.
[  133.916663][ T9725] netlink: 'syz.1.1668': attribute type 1 has an invalid length.
[  133.919505][ T9725] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1668'.
[  134.008283][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'.
[  134.021980][ T9729] dvmrp1: entered allmulticast mode
[  134.063621][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'.
[  134.083687][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'.
[  134.174643][ T9757] sctp: [Deprecated]: syz.1.1682 (pid 9757) Use of int in maxseg socket option.
[  134.174643][ T9757] Use struct sctp_assoc_value instead
[  135.485866][ T9810] tc_dump_action: action bad kind
[  135.536954][ T9815] syzkaller1: entered promiscuous mode
[  135.539542][ T9815] syzkaller1: entered allmulticast mode
[  136.657283][    C1] net_ratelimit: 8 callbacks suppressed
[  136.657294][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  136.685315][ T5715] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.698319][ T5715] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.701143][ T5715] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.703884][ T5715] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.821080][ T9889] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.829635][ T9889] syzkaller0: entered promiscuous mode
[  136.831641][ T9889] syzkaller0: entered allmulticast mode
[  136.855125][ T9889] tipc: Resetting bearer <eth:syzkaller0>
[  136.864902][ T9888] tipc: Resetting bearer <eth:syzkaller0>
[  136.888324][ T9888] tipc: Disabling bearer <eth:syzkaller0>
[  137.011872][ T9897] netlink: 'syz.0.1744': attribute type 28 has an invalid length.
[  137.236002][ T9921] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1756'.
[  137.239970][ T9921] unsupported nlmsg_type 40
[  137.475650][ T9954] openvswitch: netlink: IP tunnel dst address not specified
[  137.514536][ T9956] netlink: 'syz.0.1771': attribute type 1 has an invalid length.
[  137.520469][ T9956] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1771'.
[  137.602384][ T9961] lo speed is unknown, defaulting to 1000
[  137.697348][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  137.943630][ T9977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1779'.
[  137.947382][ T9977] netlink: 'syz.0.1779': attribute type 32 has an invalid length.
[  137.950258][ T9977] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  138.045026][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'.
[  138.101971][ T9984] netlink: 'syz.2.1783': attribute type 39 has an invalid length.
[  138.592035][T10019] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1798'.
[  138.690378][T10032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.693929][T10032] syzkaller0: entered promiscuous mode
[  138.696173][T10032] syzkaller0: entered allmulticast mode
[  138.703407][T10032] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) !
[  138.737313][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  138.738090][T10032] tipc: Resetting bearer <eth:syzkaller0>
[  138.745175][T10031] tipc: Resetting bearer <eth:syzkaller0>
[  138.759644][T10031] tipc: Disabling bearer <eth:syzkaller0>
[  138.829960][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'.
[  139.234882][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1818'.
[  139.314057][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.317655][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.410588][T10065] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  139.777419][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  140.071662][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1841'.
[  140.238673][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'.
[  140.318830][T10119] pim6reg: entered allmulticast mode
[  140.326329][T10119] pim6reg: left allmulticast mode
[  140.527345][   T51] tipc: Node number set to 3571409493
[  140.817275][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  141.261670][T10135] IPVS: Scheduler module ip_vs_sip not found
[  141.567930][T10154] lo speed is unknown, defaulting to 1000
[  141.622382][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'.
[  141.857332][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  142.039795][T10194] netlink: 'syz.2.1873': attribute type 1 has an invalid length.
[  142.042893][T10194] netlink: 'syz.2.1873': attribute type 2 has an invalid length.
[  142.049020][T10194] netlink: 'syz.2.1873': attribute type 1 has an invalid length.
[  142.052144][T10194] netlink: 'syz.2.1873': attribute type 2 has an invalid length.
[  142.410096][T10224] __nla_validate_parse: 5 callbacks suppressed
[  142.410113][T10224] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1886'.
[  142.568747][T10245] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1895'.
[  142.649030][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1899'.
[  142.658282][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1899'.
[  142.898574][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  142.962568][T10264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.970875][T10264] syzkaller0: entered promiscuous mode
[  142.976250][T10264] syzkaller0: entered allmulticast mode
[  143.034336][ T5846] cgroup: fork rejected by pids controller in /syz1
[  143.530427][T10263] tipc: Resetting bearer <eth:syzkaller0>
[  143.575536][T10263] tipc: Disabling bearer <eth:syzkaller0>
[  143.595968][T10280] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  144.046744][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  144.050551][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  144.053376][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  144.056981][T10307] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1923'.
[  144.061851][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  144.066297][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  144.107005][T10304] lo speed is unknown, defaulting to 1000
[  144.263592][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'.
[  144.300063][T10304] chnl_net:caif_netlink_parms(): no params data found
[  144.402148][T10304] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.404458][T10304] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.406669][T10304] bridge_slave_0: entered allmulticast mode
[  144.409675][T10304] bridge_slave_0: entered promiscuous mode
[  144.414135][T10304] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.416345][T10304] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.421695][T10304] bridge_slave_1: entered allmulticast mode
[  144.424976][T10304] bridge_slave_1: entered promiscuous mode
[  144.486314][T10304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.493540][T10304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.534923][T10304] team0: Port device team_slave_0 added
[  144.539658][T10304] team0: Port device team_slave_1 added
[  144.542964][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'.
[  144.583709][T10304] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.586246][T10304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.598172][T10304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.603400][T10304] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.606078][T10304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.626958][T10304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.683760][T10304] hsr_slave_0: entered promiscuous mode
[  144.687102][T10304] hsr_slave_1: entered promiscuous mode
[  144.691663][T10304] debugfs: 'hsr0' already exists in 'hsr'
[  144.693653][T10304] Cannot create hsr debugfs directory
[  144.713238][T10348] pim6reg1: entered promiscuous mode
[  144.714990][T10348] pim6reg1: entered allmulticast mode
[  144.883085][T10356] netlink: 'syz.0.1943': attribute type 24 has an invalid length.
[  144.886582][T10356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1943'.
[  144.901349][T10356] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  144.904415][T10356] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  145.162028][T10304] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  145.170103][T10304] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  145.176641][T10304] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  145.184983][T10304] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  145.196249][T10369] lo speed is unknown, defaulting to 1000
[  145.233886][T10377] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1949'.
[  145.316608][T10304] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.375215][T10304] 8021q: adding VLAN 0 to HW filter on device team0
[  145.400494][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.403217][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.426251][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.429181][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.432631][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1950'.
[  145.644388][T10304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.712276][T10304] veth0_vlan: entered promiscuous mode
[  145.724081][T10304] veth1_vlan: entered promiscuous mode
[  145.758108][T10304] veth0_macvtap: entered promiscuous mode
[  145.763811][T10304] veth1_macvtap: entered promiscuous mode
[  145.786407][T10304] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.798984][T10304] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.812275][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.815692][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.820163][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.823259][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.891454][   T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.894584][   T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.925313][ T2253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.931273][ T2253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.098771][ T5854] Bluetooth: hci0: command tx timeout
[  146.385495][T10450] mac80211_hwsim hwsim13 ;: renamed from wlan0 (while UP)
[  146.646277][T10472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
Connection to localhost closed by remote host.
[  147.279999][ T5911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.403204][ T5911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.486440][ T5911] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.566559][ T5911] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.286883][ T5911] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  148.293821][ T5911] bond0 (unregistering): Released all slaves
[  148.370037][ T5911] bond1 (unregistering): Released all slaves
[  148.456246][ T5911] bond2 (unregistering): Released all slaves
[  148.546809][ T5911] tipc: Left network mode
[  148.726712][ T5911] hsr_slave_0: left promiscuous mode
[  148.734089][ T5911] hsr_slave_1: left promiscuous mode
[  148.736958][ T5911] batman_adv: batadv0: Interface deactivated: dummy0
[  148.741514][ T5911] batman_adv: batadv0: Removing interface: dummy0
[  149.681096][ T5911] ==================================================================
[  149.683953][ T5911] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  149.686398][ T5911] Write of size 8 at addr ffff8881088e16b0 by task kworker/u8:4/5911
[  149.690511][ T5911] 
[  149.691385][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  149.691396][ T5911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.691403][ T5911] Workqueue: netns cleanup_net
[  149.691416][ T5911] Call Trace:
[  149.691421][ T5911]  <TASK>
[  149.691426][ T5911]  dump_stack_lvl+0x189/0x250
[  149.691438][ T5911]  ? __virt_addr_valid+0x1c8/0x5c0
[  149.691449][ T5911]  ? rcu_is_watching+0x15/0xb0
[  149.691456][ T5911]  ? __kasan_check_byte+0x12/0x40
[  149.691467][ T5911]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.691505][ T5911]  ? rcu_is_watching+0x15/0xb0
[  149.691518][ T5911]  ? lock_release+0x4b/0x3e0
[  149.691537][ T5911]  ? __virt_addr_valid+0x1c8/0x5c0
[  149.691552][ T5911]  ? __virt_addr_valid+0x4a5/0x5c0
[  149.691563][ T5911]  print_report+0xca/0x240
[  149.691571][ T5911]  ? __xfrm_state_delete+0x696/0xca0
[  149.691580][ T5911]  kasan_report+0x118/0x150
[  149.691591][ T5911]  ? __xfrm_state_delete+0x696/0xca0
[  149.691600][ T5911]  __xfrm_state_delete+0x696/0xca0
[  149.691611][ T5911]  xfrm_state_flush+0x45f/0x770
[  149.691621][ T5911]  xfrm6_tunnel_net_exit+0x3c/0x100
[  149.691632][ T5911]  ops_undo_list+0x49a/0x990
[  149.691641][ T5911]  ? __pfx_ops_undo_list+0x10/0x10
[  149.691649][ T5911]  ? do_raw_spin_unlock+0x4d/0x240
[  149.691659][ T5911]  cleanup_net+0x4c5/0x800
[  149.691667][ T5911]  ? __pfx_cleanup_net+0x10/0x10
[  149.691674][ T5911]  ? _raw_spin_unlock_irq+0x23/0x50
[  149.691681][ T5911]  ? process_scheduled_works+0x9ef/0x17b0
[  149.691689][ T5911]  ? process_scheduled_works+0x9ef/0x17b0
[  149.691696][ T5911]  process_scheduled_works+0xae1/0x17b0
[  149.691707][ T5911]  ? __pfx_process_scheduled_works+0x10/0x10
[  149.691717][ T5911]  worker_thread+0x8a0/0xda0
[  149.691725][ T5911]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  149.691733][ T5911]  ? __kthread_parkme+0x7b/0x200
[  149.691743][ T5911]  kthread+0x711/0x8a0
[  149.691753][ T5911]  ? __pfx_worker_thread+0x10/0x10
[  149.691760][ T5911]  ? __pfx_kthread+0x10/0x10
[  149.691769][ T5911]  ? _raw_spin_unlock_irq+0x23/0x50
[  149.691775][ T5911]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.691783][ T5911]  ? __pfx_kthread+0x10/0x10
[  149.691792][ T5911]  ret_from_fork+0x3fc/0x770
[  149.691800][ T5911]  ? __pfx_ret_from_fork+0x10/0x10
[  149.691808][ T5911]  ? __switch_to_asm+0x39/0x70
[  149.691818][ T5911]  ? __switch_to_asm+0x33/0x70
[  149.691827][ T5911]  ? __pfx_kthread+0x10/0x10
[  149.691836][ T5911]  ret_from_fork_asm+0x1a/0x30
[  149.691849][ T5911]  </TASK>
[  149.691852][ T5911] 
[  149.779370][ T5911] Allocated by task 8295:
[  149.780762][ T5911]  kasan_save_track+0x3e/0x80
[  149.782255][ T5911]  __kasan_slab_alloc+0x6c/0x80
[  149.783799][ T5911]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  149.785480][ T5911]  xfrm_state_alloc+0x24/0x2f0
[  149.786955][ T5911]  __find_acq_core+0x8a7/0x1c00
[  149.788403][ T5911]  xfrm_find_acq+0x78/0xa0
[  149.789753][ T5911]  xfrm_alloc_userspi+0x6b3/0xc90
[  149.791330][ T5911]  xfrm_user_rcv_msg+0x7a3/0xab0
[  149.792881][ T5911]  netlink_rcv_skb+0x208/0x470
[  149.794396][ T5911]  xfrm_netlink_rcv+0x79/0x90
[  149.795905][ T5911]  netlink_unicast+0x82f/0x9e0
[  149.797505][ T5911]  netlink_sendmsg+0x805/0xb30
[  149.799324][ T5911]  __sock_sendmsg+0x21c/0x270
[  149.801280][ T5911]  ____sys_sendmsg+0x505/0x830
[  149.803239][ T5911]  ___sys_sendmsg+0x21f/0x2a0
[  149.805086][ T5911]  __x64_sys_sendmsg+0x19b/0x260
[  149.806988][ T5911]  do_syscall_64+0xfa/0x3b0
[  149.808754][ T5911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.810556][ T5911] 
[  149.811484][ T5911] Freed by task 51:
[  149.812654][ T5911]  kasan_save_track+0x3e/0x80
[  149.814061][ T5911]  kasan_save_free_info+0x46/0x50
[  149.815645][ T5911]  __kasan_slab_free+0x5b/0x80
[  149.817484][ T5911]  kmem_cache_free+0x18f/0x400
[  149.819269][ T5911]  xfrm_state_gc_task+0x52d/0x6b0
[  149.821184][ T5911]  process_scheduled_works+0xae1/0x17b0
[  149.822824][ T5911]  worker_thread+0x8a0/0xda0
[  149.824189][ T5911]  kthread+0x711/0x8a0
[  149.825421][ T5911]  ret_from_fork+0x3fc/0x770
[  149.826813][ T5911]  ret_from_fork_asm+0x1a/0x30
[  149.828242][ T5911] 
[  149.828984][ T5911] The buggy address belongs to the object at ffff8881088e1680
[  149.828984][ T5911]  which belongs to the cache xfrm_state of size 928
[  149.833103][ T5911] The buggy address is located 48 bytes inside of
[  149.833103][ T5911]  freed 928-byte region [ffff8881088e1680, ffff8881088e1a20)
[  149.837109][ T5911] 
[  149.837862][ T5911] The buggy address belongs to the physical page:
[  149.839886][ T5911] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881088e2400 pfn:0x1088e0
[  149.843065][ T5911] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  149.845556][ T5911] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  149.848105][ T5911] page_type: f5(slab)
[  149.849490][ T5911] raw: 057ff00000000040 ffff88801c7c6b40 dead000000000122 0000000000000000
[  149.852357][ T5911] raw: ffff8881088e2400 00000000800e000a 00000000f5000000 0000000000000000
[  149.854884][ T5911] head: 057ff00000000040 ffff88801c7c6b40 dead000000000122 0000000000000000
[  149.857562][ T5911] head: ffff8881088e2400 00000000800e000a 00000000f5000000 0000000000000000
[  149.860842][ T5911] head: 057ff00000000002 ffffea0004223801 00000000ffffffff 00000000ffffffff
[  149.863585][ T5911] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  149.866380][ T5911] page dumped because: kasan: bad access detected
[  149.868474][ T5911] page_owner tracks the page as allocated
[  149.870326][ T5911] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6488, tgid 6487 (syz.0.225), ts 78861970590, free_ts 67685553695
[  149.876299][ T5911]  post_alloc_hook+0x240/0x2a0
[  149.877998][ T5911]  get_page_from_freelist+0x21e4/0x22c0
[  149.880047][ T5911]  __alloc_frozen_pages_noprof+0x181/0x370
[  149.881933][ T5911]  alloc_pages_mpol+0x232/0x4a0
[  149.883403][ T5911]  allocate_slab+0x8a/0x370
[  149.884834][ T5911]  ___slab_alloc+0xbeb/0x1420
[  149.886575][ T5911]  kmem_cache_alloc_noprof+0x283/0x3c0
[  149.888703][ T5911]  xfrm_state_alloc+0x24/0x2f0
[  149.890531][ T5911]  xfrm_state_find+0x37d4/0x5400
[  149.892353][ T5911]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  149.894288][ T5911]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  149.896323][ T5911]  xfrm_lookup_route+0x3c/0x1c0
[  149.898052][ T5911]  udp_sendmsg+0x142e/0x2170
[  149.899512][ T5911]  __sock_sendmsg+0x19c/0x270
[  149.901199][ T5911]  ____sys_sendmsg+0x52d/0x830
[  149.903088][ T5911]  ___sys_sendmsg+0x21f/0x2a0
[  149.904755][ T5911] page last free pid 5846 tgid 5846 stack trace:
[  149.906624][ T5911]  __free_frozen_pages+0xbc4/0xd30
[  149.908199][ T5911]  __slab_free+0x303/0x3c0
[  149.909650][ T5911]  qlist_free_all+0x97/0x140
[  149.911289][ T5911]  kasan_quarantine_reduce+0x148/0x160
[  149.913194][ T5911]  __kasan_slab_alloc+0x22/0x80
[  149.914973][ T5911]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  149.917006][ T5911]  __alloc_skb+0x112/0x2d0
[  149.918682][ T5911]  netlink_sendmsg+0x5c6/0xb30
[  149.920500][ T5911]  __sock_sendmsg+0x21c/0x270
[  149.922280][ T5911]  __sys_sendto+0x3bd/0x520
[  149.923961][ T5911]  __x64_sys_sendto+0xde/0x100
[  149.925699][ T5911]  do_syscall_64+0xfa/0x3b0
[  149.927132][ T5911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.928973][ T5911] 
[  149.929687][ T5911] Memory state around the buggy address:
[  149.931413][ T5911]  ffff8881088e1580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  149.933923][ T5911]  ffff8881088e1600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  149.936767][ T5911] >ffff8881088e1680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  149.939294][ T5911]                                      ^
[  149.941152][ T5911]  ffff8881088e1700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  149.943673][ T5911]  ffff8881088e1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  149.946170][ T5911] ==================================================================
[  149.949133][ T5911] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  149.951619][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  149.954435][ T5911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.957610][ T5911] Workqueue: netns cleanup_net
[  149.959122][ T5911] Call Trace:
[  149.960138][ T5911]  <TASK>
[  149.961096][ T5911]  dump_stack_lvl+0x99/0x250
[  149.962511][ T5911]  ? __asan_memcpy+0x40/0x70
[  149.963927][ T5911]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.965588][ T5911]  ? __pfx__printk+0x10/0x10
[  149.967327][ T5911]  vpanic+0x281/0x750
[  149.968753][ T5911]  ? __pfx_print_hex_dump+0x10/0x10
[  149.970530][ T5911]  ? __pfx_vpanic+0x10/0x10
[  149.972003][ T5911]  ? irqentry_exit+0x74/0x90
[  149.973423][ T5911]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.975104][ T5911]  panic+0xb9/0xc0
[  149.976639][ T5911]  ? __pfx_panic+0x10/0x10
[  149.978236][ T5911]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  149.980232][ T5911]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  149.982325][ T5911]  ? __xfrm_state_delete+0x696/0xca0
[  149.984197][ T5911]  check_panic_on_warn+0x89/0xb0
[  149.985950][ T5911]  ? __xfrm_state_delete+0x696/0xca0
[  149.988061][ T5911]  end_report+0x78/0x160
[  149.989764][ T5911]  kasan_report+0x129/0x150
[  149.991410][ T5911]  ? __xfrm_state_delete+0x696/0xca0
[  149.993175][ T5911]  __xfrm_state_delete+0x696/0xca0
[  149.994975][ T5911]  xfrm_state_flush+0x45f/0x770
[  149.996561][ T5911]  xfrm6_tunnel_net_exit+0x3c/0x100
[  149.998151][ T5911]  ops_undo_list+0x49a/0x990
[  149.999583][ T5911]  ? __pfx_ops_undo_list+0x10/0x10
[  150.001224][ T5911]  ? do_raw_spin_unlock+0x4d/0x240
[  150.002952][ T5911]  cleanup_net+0x4c5/0x800
[  150.004485][ T5911]  ? __pfx_cleanup_net+0x10/0x10
[  150.006017][ T5911]  ? _raw_spin_unlock_irq+0x23/0x50
[  150.007663][ T5911]  ? process_scheduled_works+0x9ef/0x17b0
[  150.009513][ T5911]  ? process_scheduled_works+0x9ef/0x17b0
[  150.011304][ T5911]  process_scheduled_works+0xae1/0x17b0
[  150.013178][ T5911]  ? __pfx_process_scheduled_works+0x10/0x10
[  150.015432][ T5911]  worker_thread+0x8a0/0xda0
[  150.017191][ T5911]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  150.019145][ T5911]  ? __kthread_parkme+0x7b/0x200
[  150.020665][ T5911]  kthread+0x711/0x8a0
[  150.021936][ T5911]  ? __pfx_worker_thread+0x10/0x10
[  150.023553][ T5911]  ? __pfx_kthread+0x10/0x10
[  150.025018][ T5911]  ? _raw_spin_unlock_irq+0x23/0x50
[  150.027023][ T5911]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.028672][ T5911]  ? __pfx_kthread+0x10/0x10
[  150.030115][ T5911]  ret_from_fork+0x3fc/0x770
[  150.031578][ T5911]  ? __pfx_ret_from_fork+0x10/0x10
[  150.033189][ T5911]  ? __switch_to_asm+0x39/0x70
[  150.034717][ T5911]  ? __switch_to_asm+0x33/0x70
[  150.036279][ T5911]  ? __pfx_kthread+0x10/0x10
[  150.037734][ T5911]  ret_from_fork_asm+0x1a/0x30
[  150.039220][ T5911]  </TASK>
[  150.040812][ T5911] Kernel Offset: disabled
[  150.042182][ T5911] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:18:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004aaf090
R8 =ffff8880218b8237 R9 =1ffff11004317046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b01900 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f610beb0897 CR3=0000000025720000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000ff00 000000000000ff00 XMM01=2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
XMM02=0000000000000000 ff00000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000000000ff00 000000000000ff00 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=1ffff11009608341 RCX=ffff888107b95640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900046bf700 RSP=ffffc900046bf580
R8 =ffffffff8fa38f37 R9 =1ffffffff1f471e6 R10=dffffc0000000000 R11=fffffbfff1f471e7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44fb6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056337411ba18 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=0000000000000000 0000000000000000
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=00000000000000ff 000000000000ff00
XMM04=0000000000ff0000 0000ff0000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
