last executing test programs:

1.962389191s ago: executing program 1 (id=12369):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f00000003c0)="170000000000020000ffbe8c", 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x18, {0x732, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000)
sendto$inet6(r0, &(0x7f0000000ec0)="0a9f94", 0x3, 0x204c850, &(0x7f0000000300)={0xa, 0x100, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff)

1.962110776s ago: executing program 1 (id=12370):
syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2110, 0x0, 0x8}}}}}}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2110, 0x0, 0x8}}}}}}, 0x0) (async)
socket$kcm(0x11, 0x3, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)) (async)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async)

1.862197191s ago: executing program 1 (id=12371):
socket$netlink(0x10, 0x3, 0xc) (async)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000100)=0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c1}, {&(0x7f0000000600)}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)

1.002500286s ago: executing program 1 (id=12380):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r0], 0x10}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x0, 0xfd}]}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
pipe(&(0x7f0000000140)) (async)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000b00)={'gre0\x00', 0x0, 0x8, 0x8000, 0x67f6, 0x8, {{0x1b, 0x4, 0x3, 0x3f, 0x6c, 0x63, 0x0, 0x20, 0x2f, 0x0, @remote, @private=0xa010101, {[@end, @rr={0x7, 0x3, 0x9f}, @timestamp_addr={0x44, 0x2c, 0x32, 0x1, 0x6, [{@multicast1, 0x1}, {@loopback, 0x9}, {@multicast1, 0x9}, {@loopback}, {@multicast2, 0x3ff}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x71, 0x3, 0x4, [{@private=0xa010101}, {@rand_addr=0x64010101, 0x9}, {@rand_addr=0x64010101, 0x5}]}, @rr={0x7, 0x7, 0x27, [@remote]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000b00)={'gre0\x00', <r5=>0x0, 0x8, 0x8000, 0x67f6, 0x8, {{0x1b, 0x4, 0x3, 0x3f, 0x6c, 0x63, 0x0, 0x20, 0x2f, 0x0, @remote, @private=0xa010101, {[@end, @rr={0x7, 0x3, 0x9f}, @timestamp_addr={0x44, 0x2c, 0x32, 0x1, 0x6, [{@multicast1, 0x1}, {@loopback, 0x9}, {@multicast1, 0x9}, {@loopback}, {@multicast2, 0x3ff}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x71, 0x3, 0x4, [{@private=0xa010101}, {@rand_addr=0x64010101, 0x9}, {@rand_addr=0x64010101, 0x5}]}, @rr={0x7, 0x7, 0x27, [@remote]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x25, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000030007b82f77b60d267e0000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000034c673a7b89612de610da6b74196edb69841de4fd4b192d4340926e4f9007e096d8f7420463bc8b3", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186900000200000000000000050000001c700c00ffffffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff7f00008500000006000000183400000500000000000000000000008500000001000000", @ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x2000, 0x2f, &(0x7f0000000240)=""/47, 0x41100, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xb, 0x6, 0xfffffffe}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)=[{0x1, 0x1, 0xb, 0x6}, {0x1, 0x4, 0x2, 0x5}, {0x2, 0x1, 0x7, 0xc}, {0x5, 0x3, 0x7, 0x5}], 0x10, 0xffff7ffe}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x25, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000030007b82f77b60d267e0000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000034c673a7b89612de610da6b74196edb69841de4fd4b192d4340926e4f9007e096d8f7420463bc8b3", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186900000200000000000000050000001c700c00ffffffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff7f00008500000006000000183400000500000000000000000000008500000001000000", @ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x2000, 0x2f, &(0x7f0000000240)=""/47, 0x41100, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xb, 0x6, 0xfffffffe}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)=[{0x1, 0x1, 0xb, 0x6}, {0x1, 0x4, 0x2, 0x5}, {0x2, 0x1, 0x7, 0xc}, {0x5, 0x3, 0x7, 0x5}], 0x10, 0xffff7ffe}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@newtaction={0xa4, 0x30, 0x48b, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_nat={0x8c, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xfffffffd, 0x1, 0x0, 0x3}, @remote, @remote}}]}, {0x3a, 0x6, "7436b9f0bd68a646a33ce20aa6e7e86a2ddf754f7971cc697140620791142e020398e8d464d5fb57a2920d67b1be74d6f176ac29a306"}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async)
setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2) (async)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'rose0\x00', @link_local})
setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async)
setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) (async)
write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b)
socket$inet6(0xa, 0x4, 0x3) (async)
r10 = socket$inet6(0xa, 0x4, 0x3)
setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) (async)
setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e23, 0x1b, @mcast1}}, {{0xa, 0x0, 0x855f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e23, 0x1b, @mcast1}}, {{0xa, 0x0, 0x855f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}}}, 0x108)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa03000000000000001c0067000000000000000003b6c82417bb9ef35cc085ee2afac716c5c1ecc50c2910711ce499a97c6ed504ddda0d8fe918428b75fdfffffffffffffff1ebef92bc6da4f8bc8a26e2d576df45b93081351762ffd1c8483da564f1b231dd0ef5517c4ce607ed8cb52355e3ae5292c76ca80821e696dd6e517db6734c853eb5b2769fe89d9bc155253bbef5ca80a515090c5e54bceaa7b2547685cab66bc4000537da81c7b62c00"/190], 0x0)

921.015682ms ago: executing program 0 (id=12382):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x3, [@func={0xc, 0x0, 0x0, 0xc, 0x2}, @union={0x4, 0x7, 0x0, 0x5, 0x1, 0x3, [{0x5, 0x1, 0x9}, {0x8, 0x4, 0x6}, {0xc, 0x3, 0x80000001}, {0x2, 0x4, 0x1}, {0x1, 0x5, 0x1000}, {0xb, 0x1, 0x1}, {0x7, 0x4, 0x80c}]}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x1c, 0x0, 0x46, 0x4}, @fwd={0xa}, @typedef={0x5, 0x0, 0x0, 0x8, 0x1}, @fwd={0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xc, 0x5}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x4, 0x2}]}]}, {0x0, [0x30]}}, &(0x7f0000000980)=""/138, 0xf3, 0x8a, 0x0, 0xffffb9ef, 0x10000}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x4, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000200)=0x9, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1)
recvmsg(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2)
recvmsg$unix(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000121)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

792.418509ms ago: executing program 1 (id=12385):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x40049409, &(0x7f0000001680)={0x1})

789.88357ms ago: executing program 1 (id=12387):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd7000fcdb4c0f000000040000000008000a"], 0x20}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r3}, 0x18)
connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x0, @multicast, 'batadv_slave_0\x00'}}, 0x1e)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r5, 0x0, 0x180000}, 0x18)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r6, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

581.431437ms ago: executing program 2 (id=12389):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x400)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES64=r3], 0x58}, 0x1, 0x0, 0x0, 0xc4}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@getqdisc={0x3c, 0x26, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x5, 0x5}, {0x5, 0x7}, {0xfff1, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000"], 0x0, 0x6e, 0x0, 0x1}, 0x28)
r11 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001300010000000000000000", @ANYRES32=r12, @ANYBLOB="000000000000000010000c"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040)=r14, 0x4)
r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x1, '\x00', r12, r10, 0x3, 0x4, 0x5}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@call={0x85, 0x0, 0x0, 0xc62}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x9b, &(0x7f0000000480)=""/155, 0x41100, 0x23, '\x00', r12, 0x0, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x1, 0x7, 0x7}, 0x10, 0x1de42, r2, 0x0, &(0x7f0000000600)=[r13, r3, r13, r13, r6, r13, r13, 0x1, r15], 0x0, 0x10, 0xa0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r13}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r13}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r13, &(0x7f00000001c0)="9ad632f5d53e48b6657ac4023f35075a16eb3cd6a7c702f40ba6afaa0a2688b116772543345b3481c7567ab81d592796b779f8b6381dba2ccb0b5df6d2ea94662d5ee6acae65c6707085e30d018346441108cecc52195b6111285d68b63567f3fab09b4333c21b74d82150f85d38e6ed6c614a1aeab5e8a32da64fcd89f4728285a5e06a481c880d6a4524cc62e9e1c7724a702c34ac960dda193ba98e1d79ef14ade033cd1e7f86d9bca8eb9894a2d8ae8959a5add1153afb072f1ffe14", &(0x7f0000000040)=""/30}, 0x20)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf7700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)

372.730498ms ago: executing program 2 (id=12390):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0xfff0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0)

372.159124ms ago: executing program 2 (id=12391):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet6(0xa, 0x3, 0x6000000)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private=0xa010100, @in=@remote, 0x4e24, 0x0, 0x4e21, 0x10, 0xa, 0x0, 0x20, 0x0, 0x0, r3}, {0x8, 0xa048, 0x1, 0x8001, 0x4, 0x2, 0x4, 0xfffffffffffffffd}, {0x77, 0x8, 0x2, 0x7f}, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x4d6, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x3, 0xfffffffd, 0xffffffd9, 0x2}}, 0xe8)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}})

371.076016ms ago: executing program 2 (id=12392):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"], 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[], 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x3ad, 0x4)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4)
recvfrom$inet(r4, 0x0, 0x0, 0x2043, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'vlan1\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, 0x0, 0x0}, 0x20)
setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000100)={@remote, r7}, 0x14)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}})
writev(r3, 0x0, 0x0)

201.33664ms ago: executing program 2 (id=12393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x1094)

201.011458ms ago: executing program 2 (id=12394):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet(0x2, 0x3, 0x2)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x8000, @loopback}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000001440)=ANY=[@ANYBLOB="0800080002000600000014000000450a0014006600000b02907866010120ffffffff"], 0x22)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x36, 0x8, 0x2}, 0x50)
bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r4, 0xffffffffffffffff, 0x2c}, 0x20)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000)="e80ad7517013942ecd1d52e61299d6ed4cd4596cb39bbf9ff02c022ff9e831c12388ac31e8bbd3409f2dd98d8d4b36139be83fedc1a5424bb4be05a0e3fbfedef3a06dcc78e7e50eecb23aaca2583e5e5ef915dfae0b60cce97f7e4f511d468ae3832bb38c8c559c47399ec189e3795d9d301350b216a1500d3487c211bc4b7f9b1147678c95e1fb2d0752e10bdc03192957e01a8ad73123ca4f4421f4810bdcaeac34cc8c2291fd43cdbed5793618d0910dcaab2bfabdb1779bc30f261ed0ade2ac6a43b0ea090a073a87ed229b62da4c6b887492fccae86ad8df1afd0bbb6b8d422d7d426b27381bc80a70798c39e01c6114101c2b", &(0x7f0000000100)=@tcp6=r5, 0x1}, 0x20)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0)

51.802473ms ago: executing program 0 (id=12395):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4001af83, &(0x7f0000001680)={0x1})

51.377828ms ago: executing program 0 (id=12396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x421, 0x70bd25, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x40)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0x0, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x40400, 0xa90}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x2c40}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x3}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x40000)

909.603µs ago: executing program 0 (id=12397):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async)
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) (async)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000140)={'ip6_vti0\x00', 0x401}) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000301010200000000000000000a00fffe0c001980080002002c080000100002800c0002"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) (async)
setsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000040), 0x4) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0xfffffffffffffdf0, &(0x7f0000000240)={&(0x7f00000004c0)={0x4c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) (async)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x3, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x5, 0x200}, {0x3, 0x4, 0xe633}]}]}, {0x0, [0x2e]}}, &(0x7f0000000180)=""/118, 0x3f, 0x76, 0x0, 0xd792}, 0x28)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x30, r7, 0xa66d7000)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getpeername(r8, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f00000000c0)='pimreg1\x00')
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x110, r9, 0x2ecd6000) (async)
syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, <r10=>0x41424344}, 0x4, 0xffffffff)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x2e, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x898}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r10, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0)
write$tun(r6, &(0x7f0000000300)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@igmp={{0x31, 0x4, 0x2, 0x1, 0x19e, 0x67, 0x7, 0xfb, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp_addr={0x44, 0x34, 0x54, 0x1, 0x9, [{@broadcast, 0x9}, {@rand_addr=0x64010101, 0x5}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x7ff}, {@broadcast, 0xff}, {@multicast2, 0x8001}]}, @timestamp_prespec={0x44, 0x24, 0xb8, 0x3, 0xf, [{@rand_addr=0x64010102, 0x9}, {@loopback, 0x7}, {@loopback, 0x5}, {@multicast1, 0x4d84e9c2}]}, @cipso={0x86, 0x3c, 0xffffffffffffffff, [{0x1, 0x6, "ff772fce"}, {0x7, 0x3, "a0"}, {0x5, 0x7, "c91dadbcad"}, {0x7, 0xc, "b09dcdd8f6bd2feadc80"}, {0x0, 0xe, "ddb075d27ed501254f752a56"}, {0x0, 0x4, "1aec"}, {0x2, 0x8, "bb225e46f84f"}]}, @cipso={0x86, 0x19, 0x0, [{0x5, 0x7, "79956a2bf5"}, {0x6, 0xc, "78ce0d13f38a8ea2e799"}]}, @end]}}, {0x12, 0x4, 0x0, @loopback, "69c757f2b7548fe988f04a0683dabec0743997ff6d7d4dd3aebef23460debf86760a4830743d7fe65cc3b15e410a61cae7cec8b8e32b8d7e1fedddd8660bd6ed1114363b225abf9c957a9c816d4b280b31676038e081fbea6d01fc7dc4464d060cd60811229c4fce077b2433eb619600f95c8052d35b79169112f6a03ca1ce0513086b3b0bd22aad4f05e0e1ca80f2f5ceebf2f745fdfbc75fa90af4d39591d3e260152fe2409cc8b898fff468b86c156d78b2f5f89528db6866ab563016e0ab76fe2cfdcb040b359a3365d32bfa77eb4f8c"}}}}, 0x1ac)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x20000000, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x2, 0x1d, 0x0, 0xff, "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", 0x0, "5c8d586b6a88fa18030000000000000029e590ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x14c}}, 0x0)
ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

775.657µs ago: executing program 0 (id=12398):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd25, 0xfffffffe, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0)

0s ago: executing program 0 (id=12399):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x34, r2, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x6, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0)

kernel console output (not intermixed with test programs):

unknown, defaulting to 1000
[  253.624691][T23415] gretap0: left allmulticast mode
[  253.637730][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  253.647773][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  253.653807][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  253.657373][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  253.810648][T23433] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.821452][T23433] syzkaller0: entered promiscuous mode
[  253.828430][T23433] syzkaller0: entered allmulticast mode
[  253.835795][T23433] tipc: Resetting bearer <eth:syzkaller0>
[  253.843599][T23431] tipc: Resetting bearer <eth:syzkaller0>
[  253.853333][T23431] tipc: Disabling bearer <eth:syzkaller0>
[  253.859913][T23421] lo speed is unknown, defaulting to 1000
[  254.146782][ T5841] Bluetooth: hci2: link tx timeout
[  254.148824][ T5841] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  254.151528][ T5841] Bluetooth: hci2: link tx timeout
[  254.153596][ T5841] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  254.156590][ T5841] Bluetooth: hci2: link tx timeout
[  254.159183][ T5841] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  254.161910][ T5841] Bluetooth: hci2: link tx timeout
[  254.163758][ T5841] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  254.219091][T23457] __nla_validate_parse: 2 callbacks suppressed
[  254.219106][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7722'.
[  254.232858][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7722'.
[  254.471843][T23484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7735'.
[  254.485314][T23486] vlan4: entered promiscuous mode
[  255.755441][T23532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7754'.
[  255.787027][T23534] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7756'.
[  255.824347][T23538] netlink: 'syz.2.7755': attribute type 4 has an invalid length.
[  255.833027][T23538] netlink: 'syz.2.7755': attribute type 4 has an invalid length.
[  255.922739][T23548] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  255.942912][T23549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7762'.
[  256.179077][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  256.397036][T23597] lo speed is unknown, defaulting to 1000
[  256.401887][T23602] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  257.808569][T23660] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  258.137355][T23671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7815'.
[  258.217749][T23668] netlink: 424 bytes leftover after parsing attributes in process `syz.1.7814'.
[  258.257671][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  258.570392][T23704] netlink: 'syz.2.7826': attribute type 303 has an invalid length.
[  258.683601][T23727] openvswitch: netlink: IP tunnel dst address not specified
[  258.963180][T23757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.187258][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7859'.
[  259.204372][T23781] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  259.209875][T23783] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7858'.
[  259.269591][T23787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7858'.
[  259.405567][T23797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7864'.
[  259.409508][T23797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7864'.
[  259.583807][T23817] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  259.591712][T23817] netlink: 'syz.1.7873': attribute type 10 has an invalid length.
[  259.596513][T23817] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  259.605470][T23817] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  259.606788][T23814] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7871'.
[  259.970788][T23871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7895'.
[  260.079370][T23884] lo speed is unknown, defaulting to 1000
[  260.265814][T23909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7912'.
[  260.306344][T23913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.323779][T23913] syzkaller0: entered promiscuous mode
[  260.326044][T23913] syzkaller0: entered allmulticast mode
[  260.344645][T23913] tipc: Resetting bearer <eth:syzkaller0>
[  260.347791][T23912] tipc: Resetting bearer <eth:syzkaller0>
[  260.409480][T23912] tipc: Disabling bearer <eth:syzkaller0>
[  260.836365][T23953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7930'.
[  260.931085][T23953] lo speed is unknown, defaulting to 1000
[  261.486281][T23977] sctp: [Deprecated]: syz.0.7940 (pid 23977) Use of int in max_burst socket option.
[  261.486281][T23977] Use struct sctp_assoc_value instead
[  261.699645][ T1137] block nbd6: Connection timed out, retrying (0/2 alive)
[  261.702243][ T1137] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  261.705563][ T1137] Buffer I/O error on dev nbd6, logical block 0, async page read
[  261.708886][ T8340] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  261.712068][ T8340] Buffer I/O error on dev nbd6, logical block 0, async page read
[  261.715085][ T8340] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  261.718663][ T8340] Buffer I/O error on dev nbd6, logical block 1, async page read
[  261.721523][ T8340] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  261.724760][ T8340] Buffer I/O error on dev nbd6, logical block 2, async page read
[  261.727682][ T8340] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  261.731074][ T8340] Buffer I/O error on dev nbd6, logical block 3, async page read
[  261.734339][ T8340] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  261.737732][ T8340] Buffer I/O error on dev nbd6, logical block 0, async page read
[  261.740674][ T8340] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  261.744477][ T8340] Buffer I/O error on dev nbd6, logical block 1, async page read
[  261.748282][ T8340] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  261.752400][ T8340] Buffer I/O error on dev nbd6, logical block 2, async page read
[  261.755354][ T8340] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  261.758854][ T8340] Buffer I/O error on dev nbd6, logical block 3, async page read
[  261.761596][ T8340] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  261.764786][ T8340] Buffer I/O error on dev nbd6, logical block 0, async page read
[  261.768503][ T8340] ldm_validate_partition_table(): Disk read failed.
[  261.771666][ T8340] Dev nbd6: unable to read RDB block 0
[  261.774316][ T8340]  nbd6: unable to read partition table
[  261.779963][ T8340] ldm_validate_partition_table(): Disk read failed.
[  261.783745][ T8340] Dev nbd6: unable to read RDB block 0
[  261.787026][ T8340]  nbd6: unable to read partition table
[  262.032874][T23998] lo speed is unknown, defaulting to 1000
[  262.128635][T24014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.279394][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7955'.
[  262.337793][   T60] block nbd4: Possible stuck request ffff888022700000: control (read@0,1024B). Runtime 90 seconds
[  262.342318][   T60] block nbd4: Possible stuck request ffff888022700200: control (read@1024,1024B). Runtime 90 seconds
[  262.346761][   T60] block nbd4: Possible stuck request ffff888022700400: control (read@2048,1024B). Runtime 90 seconds
[  262.351534][   T60] block nbd4: Possible stuck request ffff888022700600: control (read@3072,1024B). Runtime 90 seconds
[  262.569927][T24041] netlink: 'syz.0.7964': attribute type 32 has an invalid length.
[  262.572906][T24041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7964'.
[  262.703587][T24051] vlan2: entered allmulticast mode
[  262.705515][T24051] bond0: entered allmulticast mode
[  262.710097][T24051] bond_slave_0: entered allmulticast mode
[  262.712886][T24051] bond_slave_1: entered allmulticast mode
[  262.715075][T24051] batadv_slave_0: entered allmulticast mode
[  262.721450][T24053] pimreg: entered allmulticast mode
[  262.902813][T24069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7977'.
[  263.164488][T24087] syzkaller0: entered promiscuous mode
[  263.166477][T24087] syzkaller0: entered allmulticast mode
[  263.363892][T24097] vlan0: left promiscuous mode
[  263.367023][T24097] geneve2: left promiscuous mode
[  263.370301][T24097] geneve2: left allmulticast mode
[  263.372374][T24097] ip6gre2: left allmulticast mode
[  263.375986][T24097] vlan2: left allmulticast mode
[  263.378978][T24097] veth1: left allmulticast mode
[  263.380919][T24097] ip6tnl6: left promiscuous mode
[  263.382782][T24097] ip6tnl6: left allmulticast mode
[  263.387024][T24097] macvlan3: left promiscuous mode
[  263.393502][T24097] ip6tnl7: left promiscuous mode
[  263.397243][T24097] ip6tnl7: left allmulticast mode
[  263.408037][T24097] erspan0: left allmulticast mode
[  263.410658][T24097] macvtap1: left promiscuous mode
[  263.413010][T24097] macvtap1: left allmulticast mode
[  263.427992][T24097] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  263.433996][T24097] vlan4: left promiscuous mode
[  264.566437][T24162] lo speed is unknown, defaulting to 1000
[  265.540399][T24237] batadv0: left allmulticast mode
[  265.543619][T24237] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.576655][T24239] __nla_validate_parse: 2 callbacks suppressed
[  265.576669][T24239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8048'.
[  265.623876][T24243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  265.681478][T24248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8052'.
[  265.685495][T24248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8052'.
[  265.804976][ T5834] cgroup: fork rejected by pids controller in /syz1
[  266.108827][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  266.112716][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  266.116099][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  266.125504][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  266.128999][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  266.210035][T24267] lo speed is unknown, defaulting to 1000
[  266.241701][T24277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.278910][T24267] chnl_net:caif_netlink_parms(): no params data found
[  266.304167][T24267] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.307160][T24267] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.310376][T24267] bridge_slave_0: entered allmulticast mode
[  266.312875][T24267] bridge_slave_0: entered promiscuous mode
[  266.316009][T24267] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.318521][T24267] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.321596][T24267] bridge_slave_1: entered allmulticast mode
[  266.324517][T24267] bridge_slave_1: entered promiscuous mode
[  266.337396][T24267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.342213][T24267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.354092][T24267] team0: Port device team_slave_0 added
[  266.356995][T24267] team0: Port device team_slave_1 added
[  266.369451][T24267] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.371990][T24267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.381536][T24267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.388464][T24267] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.391817][T24267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.401662][T24267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.418505][T24267] hsr_slave_0: entered promiscuous mode
[  266.421485][T24267] hsr_slave_1: entered promiscuous mode
[  266.423647][T24267] debugfs: 'hsr0' already exists in 'hsr'
[  266.425655][T24267] Cannot create hsr debugfs directory
[  266.633305][T24267] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  266.638801][T24267] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  266.644073][T24267] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  266.649395][T24267] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  266.678885][T24267] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.682065][T24267] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.685197][T24267] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.688346][T24267] bridge0: port 1(bridge_slave_0) entered forwarding state
[  266.721175][T24267] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.731099][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.734626][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.743798][T24267] 8021q: adding VLAN 0 to HW filter on device team0
[  266.750559][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.753646][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  266.768979][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.771962][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.840900][T24267] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.860753][T24267] veth0_vlan: entered promiscuous mode
[  266.865603][T24267] veth1_vlan: entered promiscuous mode
[  266.877403][T24267] veth0_macvtap: entered promiscuous mode
[  266.881848][T24267] veth1_macvtap: entered promiscuous mode
[  266.888671][T24267] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.893488][T24267] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.900060][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.903790][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.910390][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.913725][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.941872][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.952297][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.965076][  T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.968290][  T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.049050][T24341] bridge1: entered promiscuous mode
[  267.051032][T24341] bridge1: entered allmulticast mode
[  267.053780][T24341] team0: Port device bridge1 added
[  267.095734][T24349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8086'.
[  267.103061][T24351] netlink: 'syz.0.8087': attribute type 3 has an invalid length.
[  267.275910][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8097'.
[  267.281573][T24372] bridge_slave_1: left allmulticast mode
[  267.284039][T24372] bridge_slave_1: left promiscuous mode
[  267.286473][T24372] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.292542][T24372] bridge_slave_0: left allmulticast mode
[  267.295032][T24372] bridge_slave_0: left promiscuous mode
[  267.297812][T24372] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.391434][T24387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8103'.
[  267.578769][   T33] audit: type=1800 audit(1756440146.703:13): pid=24394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8106" name="memory.events" dev="tmpfs" ino=13523 res=0 errno=0
[  267.866245][T24411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8114'.
[  267.988169][T24427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8122'.
[  268.120335][T24446] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8131'.
[  268.170756][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8135'.
[  268.178527][ T5840] Bluetooth: hci0: command tx timeout
[  268.874819][T24520] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  268.877314][T24520] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  268.914637][T24525] netlink: 'syz.2.8166': attribute type 18 has an invalid length.
[  269.910758][T24591] lo speed is unknown, defaulting to 1000
[  270.183215][T24615] tipc: Started in network mode
[  270.185599][T24615] tipc: Node identity 1e922547cfcb, cluster identity 4711
[  270.190821][T24615] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.194010][T24615] syzkaller0: entered promiscuous mode
[  270.196408][T24615] syzkaller0: entered allmulticast mode
[  270.204487][T24615] tipc: Resetting bearer <eth:syzkaller0>
[  270.214800][T24614] tipc: Resetting bearer <eth:syzkaller0>
[  270.225990][T24614] tipc: Disabling bearer <eth:syzkaller0>
[  270.257771][ T5840] Bluetooth: hci0: command tx timeout
[  270.714138][T24640] __nla_validate_parse: 8 callbacks suppressed
[  270.714148][T24640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8217'.
[  271.076648][T24689] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8238'.
[  271.082910][T24691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8239'.
[  271.086143][T24691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8239'.
[  271.125766][T24698] atomic_op ffff8880360c6998 conn xmit_atomic 0000000000000000
[  271.373059][T24723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8253'.
[  271.425423][T24729] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8256'.
[  271.522610][T24731] lo speed is unknown, defaulting to 1000
[  272.204220][T24754] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  272.299817][T24760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8269'.
[  272.338363][ T5840] Bluetooth: hci0: command tx timeout
[  272.379044][T24770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8274'.
[  272.392424][T24770] bond_slave_0: entered promiscuous mode
[  272.394785][T24770] bond_slave_1: entered promiscuous mode
[  272.397292][T24770] macvtap1: entered promiscuous mode
[  272.402200][T24770] bond0: entered promiscuous mode
[  272.404356][T24770] macvtap1: entered allmulticast mode
[  272.406334][T24770] bond0: entered allmulticast mode
[  272.411832][T24770] bond_slave_0: entered allmulticast mode
[  272.415116][T24770] bond_slave_1: entered allmulticast mode
[  272.419175][T24770] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  272.423473][T24770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8274'.
[  272.431841][T24770] bond0: left allmulticast mode
[  272.434041][T24770] bond_slave_0: left allmulticast mode
[  272.436327][T24770] bond_slave_1: left allmulticast mode
[  272.439119][T24770] bond0: left promiscuous mode
[  272.441366][T24770] bond_slave_0: left promiscuous mode
[  272.443621][T24770] bond_slave_1: left promiscuous mode
[  272.461874][T24779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8278'.
[  272.490683][T24783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.493872][T24783] syzkaller0: entered promiscuous mode
[  272.495961][T24783] syzkaller0: entered allmulticast mode
[  272.502511][T24783] tipc: Resetting bearer <eth:syzkaller0>
[  272.505151][T24782] tipc: Resetting bearer <eth:syzkaller0>
[  272.511803][T24782] tipc: Disabling bearer <eth:syzkaller0>
[  272.596067][T24789] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  272.601590][T24789] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  273.209979][T24861] netlink: 'syz.0.8313': attribute type 10 has an invalid length.
[  273.213648][T24861] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  273.252008][T24866] tipc: MTU too low for tipc bearer
[  273.265422][T24867] dvmrp8: entered allmulticast mode
[  273.323921][T24867] lo speed is unknown, defaulting to 1000
[  273.330344][T24874] netlink: 'syz.0.8315': attribute type 23 has an invalid length.
[  273.382758][T24864] dvmrp8: left allmulticast mode
[  273.691128][T24908] lo speed is unknown, defaulting to 1000
[  273.895012][T24935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.907843][T24935] syzkaller0: entered promiscuous mode
[  273.910623][T24935] syzkaller0: entered allmulticast mode
[  273.949303][T24935] tipc: Resetting bearer <eth:syzkaller0>
[  273.958457][T24934] tipc: Resetting bearer <eth:syzkaller0>
[  273.966663][T24934] tipc: Disabling bearer <eth:syzkaller0>
[  274.006036][T24942] netlink: 'syz.0.8349': attribute type 1 has an invalid length.
[  274.417578][ T5840] Bluetooth: hci0: command tx timeout
[  274.801995][T25001] syzkaller1: entered promiscuous mode
[  274.804366][T25001] syzkaller1: entered allmulticast mode
[  274.913990][T24970] netlink: 'syz.0.8360': attribute type 1 has an invalid length.
[  274.917114][T24970] NCSI netlink: No device for ifindex 813332851
[  274.971580][T25016] netlink: 'syz.1.8382': attribute type 20 has an invalid length.
[  275.287033][T25061] netlink: 'syz.0.8403': attribute type 39 has an invalid length.
[  275.762509][T25097] __nla_validate_parse: 10 callbacks suppressed
[  275.762523][T25097] netlink: 13 bytes leftover after parsing attributes in process `syz.0.8419'.
[  276.228898][T25122] netlink: 'syz.2.8431': attribute type 1 has an invalid length.
[  276.232179][T25122] netlink: 236 bytes leftover after parsing attributes in process `syz.2.8431'.
[  277.013495][T25161] bond7: entered promiscuous mode
[  277.015210][T25161] bond7: entered allmulticast mode
[  277.017083][T25161] 8021q: adding VLAN 0 to HW filter on device bond7
[  277.118004][T25165] wg1: entered promiscuous mode
[  277.120311][T25165] wg1: entered allmulticast mode
[  277.267189][T25167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.272120][T25167] syzkaller0: entered promiscuous mode
[  277.274591][T25167] syzkaller0: entered allmulticast mode
[  277.281854][T25167] tipc: Resetting bearer <eth:syzkaller0>
[  277.285345][T25166] tipc: Resetting bearer <eth:syzkaller0>
[  277.292358][T25166] tipc: Disabling bearer <eth:syzkaller0>
[  277.923708][ T5290] udevd[5290]: worker [6563] /devices/virtual/block/nbd1 timeout; kill it
[  277.928771][ T5290] udevd[5290]: seq 11096 '/devices/virtual/block/nbd1' killed
[  278.202830][T25215] netlink: 'syz.0.8462': attribute type 1 has an invalid length.
[  278.206189][T25215] netlink: 'syz.0.8462': attribute type 3 has an invalid length.
[  278.210131][T25215] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8462'.
[  278.261500][T25220] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8464'.
[  278.515744][T25259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.519279][T25259] syzkaller0: entered promiscuous mode
[  278.521183][T25259] syzkaller0: entered allmulticast mode
[  278.525490][T25259] tipc: Resetting bearer <eth:syzkaller0>
[  278.529588][T25258] tipc: Resetting bearer <eth:syzkaller0>
[  278.532893][T25258] tipc: Disabling bearer <eth:syzkaller0>
[  278.846818][T25277] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  278.895294][T25281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8490'.
[  279.531343][T25315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8506'.
[  279.534574][T25315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8506'.
[  279.537760][T25315] netlink: 'syz.1.8506': attribute type 7 has an invalid length.
[  279.559057][T25317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8507'.
[  279.614442][T25321] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7
[  279.620100][   T60] block nbd1: Possible stuck request ffff888022648000: control (read@0,1024B). Runtime 210 seconds
[  279.624550][   T60] block nbd1: Possible stuck request ffff888022648200: control (read@1024,1024B). Runtime 210 seconds
[  279.631381][   T60] block nbd1: Possible stuck request ffff888022648400: control (read@2048,1024B). Runtime 210 seconds
[  279.638273][   T60] block nbd1: Possible stuck request ffff888022648600: control (read@3072,1024B). Runtime 210 seconds
[  280.046334][T25364] netlink: 'syz.0.8519': attribute type 4 has an invalid length.
[  280.271894][T25393] netlink: 'syz.0.8529': attribute type 1 has an invalid length.
[  280.275232][T25393] netlink: 'syz.0.8529': attribute type 1 has an invalid length.
[  280.396753][T25401] lo speed is unknown, defaulting to 1000
[  280.510961][T25404] lo speed is unknown, defaulting to 1000
[  280.767046][T25426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8543'.
[  280.780787][T25426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8543'.
[  281.217723][ T5841] Bluetooth: hci0: command 0x0405 tx timeout
[  281.268969][T25452] bond0: (slave bond_slave_1): Releasing backup interface
[  281.272824][T25452] bond_slave_1: left allmulticast mode
[  281.321497][T25458] netlink: 'syz.0.8557': attribute type 10 has an invalid length.
[  281.422269][T25473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8565'.
[  281.426149][T25473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8565'.
[  281.515647][T25485] vlan5: entered promiscuous mode
[  281.521566][T25485] batadv0: entered promiscuous mode
[  281.600729][T25495] netlink: 'syz.2.8574': attribute type 10 has an invalid length.
[  281.605225][T25495] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.609608][T25495] team0: Port device bond0 added
[  281.766440][T25499] lo speed is unknown, defaulting to 1000
[  281.923598][T25527] netlink: 'syz.1.8586': attribute type 1 has an invalid length.
[  282.002693][T25532] netlink: 'syz.1.8589': attribute type 12 has an invalid length.
[  283.088429][T25554] lo speed is unknown, defaulting to 1000
[  284.015322][T25641] netlink: 'syz.1.8635': attribute type 10 has an invalid length.
[  284.018525][T25641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8635'.
[  284.021859][T25641] dummy0: entered promiscuous mode
[  284.024393][T25641] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  284.235857][T25655] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  284.433840][T25685] syzkaller1: entered promiscuous mode
[  284.436203][T25685] syzkaller1: entered allmulticast mode
[  284.598513][T25704] syzkaller0: entered promiscuous mode
[  284.600672][T25704] syzkaller0: entered allmulticast mode
[  284.674492][T25712] vxcan1 speed is unknown, defaulting to 1000
[  284.676958][T25712] vxcan1 speed is unknown, defaulting to 1000
[  284.680192][T25712] vxcan1 speed is unknown, defaulting to 1000
[  284.725520][T25712] infiniband syz2: set active
[  284.727144][ T5875] vxcan1 speed is unknown, defaulting to 1000
[  284.729452][T25712] infiniband syz2: added vxcan1
[  284.740198][T25712] RDS/IB: syz2: added
[  284.742685][T25712] smc: adding ib device syz2 with port count 1
[  284.744792][T25712] smc:    ib device syz2 port 1 has pnetid 
[  284.746887][ T5875] vxcan1 speed is unknown, defaulting to 1000
[  284.749950][T25712] vxcan1 speed is unknown, defaulting to 1000
[  284.794026][T25712] vxcan1 speed is unknown, defaulting to 1000
[  284.838618][T25712] vxcan1 speed is unknown, defaulting to 1000
[  284.855145][T25718] lo speed is unknown, defaulting to 1000
[  284.900397][T25712] vxcan1 speed is unknown, defaulting to 1000
[  284.938132][T25718] vxcan1 speed is unknown, defaulting to 1000
[  285.003401][T25712] vxcan1 speed is unknown, defaulting to 1000
[  285.160025][T25731] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  285.197111][ T5867] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  285.201100][ T5867] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  285.203955][ T5867] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  285.206797][ T5867] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  285.237166][T25739] netlink: 'syz.2.8680': attribute type 1 has an invalid length.
[  285.240469][T25739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8680'.
[  285.244504][T25739] netlink: 'syz.2.8680': attribute type 1 has an invalid length.
[  285.381518][T25755] netlink: 'syz.2.8688': attribute type 21 has an invalid length.
[  285.384934][T25755] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8688'.
[  285.389074][T25755] netlink: 'syz.2.8688': attribute type 5 has an invalid length.
[  285.392393][T25755] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8688'.
[  285.493557][T25773] netlink: 'syz.2.8697': attribute type 1 has an invalid length.
[  285.505297][T25773] bond2: entered promiscuous mode
[  285.507356][T25773] bond2: entered allmulticast mode
[  285.511235][T25773] 8021q: adding VLAN 0 to HW filter on device bond2
[  285.521208][T25773] 8021q: adding VLAN 0 to HW filter on device bond3
[  285.524648][T25773] bond3: entered promiscuous mode
[  285.526699][T25773] bond3: entered allmulticast mode
[  285.530717][T25773] bond2: (slave bond3): Enslaving as a backup interface with a down link
[  285.802841][T25816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  285.831584][T25813] lo speed is unknown, defaulting to 1000
[  285.834748][T25813] vxcan1 speed is unknown, defaulting to 1000
[  286.002419][T25828] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8719'.
[  286.056875][T25838] nftables ruleset with unbound chain
[  286.099045][T25844] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8727'.
[  286.102915][T25844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8727'.
[  286.107022][T25844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8727'.
[  286.698152][T25876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.701360][T25876] syzkaller0: entered promiscuous mode
[  286.703806][T25876] syzkaller0: entered allmulticast mode
[  286.710204][T25876] tipc: Resetting bearer <eth:syzkaller0>
[  286.712847][T25875] tipc: Resetting bearer <eth:syzkaller0>
[  286.716566][T25875] tipc: Disabling bearer <eth:syzkaller0>
[  286.852722][T25889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8747'.
[  286.920738][T25897] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8751'.
[  286.941590][T25899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8752'.
[  287.061627][T25912] netlink: set zone limit has 4 unknown bytes
[  288.106507][T25950] netlink: 'syz.0.8775': attribute type 10 has an invalid length.
[  288.220538][T25965] netlink: 'syz.1.8780': attribute type 1 has an invalid length.
[  288.236910][T25965] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8780'.
[  288.388152][T25995] syzkaller1: entered promiscuous mode
[  288.390205][T25995] syzkaller1: entered allmulticast mode
[  288.890678][T26075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8833'.
[  288.894124][T26075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8833'.
[  290.020223][T26122] Bluetooth: MGMT ver 1.23
[  290.425017][T26159] sctp: [Deprecated]: syz.2.8871 (pid 26159) Use of int in max_burst socket option.
[  290.425017][T26159] Use struct sctp_assoc_value instead
[  290.441479][T26161] atomic_op ffff88811145a198 conn xmit_atomic 0000000000000000
[  290.636318][   T51] vxcan1 speed is unknown, defaulting to 1000
[  290.711870][T26175] lo speed is unknown, defaulting to 1000
[  290.715252][T26175] vxcan1 speed is unknown, defaulting to 1000
[  291.001630][T26175] netlink: 'syz.1.8879': attribute type 6 has an invalid length.
[  291.346729][T26184] netlink: 'syz.2.8881': attribute type 4 has an invalid length.
[  291.375804][T26186] __nla_validate_parse: 12 callbacks suppressed
[  291.375815][T26186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8882'.
[  291.385968][T26186] netlink: 'syz.2.8882': attribute type 2 has an invalid length.
[  291.556055][T26190] netlink: 'syz.2.8884': attribute type 1 has an invalid length.
[  291.584059][T26190] 8021q: adding VLAN 0 to HW filter on device bond4
[  291.588830][T26197] netlink: 'syz.0.8887': attribute type 6 has an invalid length.
[  291.601850][T26190] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[  291.606381][T26190] bond4: (slave wlan0): Enslaving as an active interface with a down link
[  291.616459][T26190] vlan3: entered allmulticast mode
[  291.619343][T26190] veth1: entered allmulticast mode
[  291.621606][T26190] bond4: (slave vlan3): Opening slave failed
[  292.121173][T26245] lo speed is unknown, defaulting to 1000
[  292.124434][T26245] vxcan1 speed is unknown, defaulting to 1000
[  292.427581][   T60] block nbd4: Possible stuck request ffff888022700000: control (read@0,1024B). Runtime 120 seconds
[  292.432176][   T60] block nbd4: Possible stuck request ffff888022700200: control (read@1024,1024B). Runtime 120 seconds
[  292.436547][   T60] block nbd4: Possible stuck request ffff888022700400: control (read@2048,1024B). Runtime 120 seconds
[  292.441392][   T60] block nbd4: Possible stuck request ffff888022700600: control (read@3072,1024B). Runtime 120 seconds
[  292.523950][T26298] bond6: (slave bridge8): Releasing active interface
[  292.535358][T26298] batman_adv: batadv0: Removing interface: ip6gretap2
[  292.553887][T26298] erspan0: left promiscuous mode
[  292.559980][T26298] ip6gretap0: left promiscuous mode
[  292.564524][T26298] 8021q: adding VLAN 0 to HW filter on device team0
[  292.569532][T26298] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  292.610785][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  292.713341][T26315] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8940'.
[  292.972434][T26355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8958'.
[  293.094881][T26375] netlink: 'syz.2.8968': attribute type 1 has an invalid length.
[  293.123732][T26375] 8021q: adding VLAN 0 to HW filter on device bond5
[  293.139951][T26375] 8021q: adding VLAN 0 to HW filter on device bond5
[  293.142944][T26375] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  293.149634][T26375] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  293.181572][T26386] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.8973'.
[  293.201367][T26389] veth3: entered promiscuous mode
[  293.206413][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.213844][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.248765][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  293.357846][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  293.395751][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  293.483149][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  293.598038][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  293.618048][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  293.681972][T26429] netlink: 'syz.2.8991': attribute type 11 has an invalid length.
[  293.685348][T26429] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8991'.
[  293.717668][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  293.828263][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  293.876776][T26447] netlink: 'syz.0.9000': attribute type 1 has an invalid length.
[  293.887387][T26447] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9000'.
[  293.894711][T26447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9000'.
[  293.940885][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  294.047764][T13657] bond4: (slave wlan0): failed to get link speed/duplex
[  294.157895][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  294.192382][T26477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9014'.
[  294.196522][T26477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9014'.
[  294.206279][T26482] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9016'.
[  294.279556][T26494] netlink: 'syz.1.9022': attribute type 4 has an invalid length.
[  294.292493][T26494] netlink: 'syz.1.9022': attribute type 4 has an invalid length.
[  294.425361][ T5867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  294.431321][ T5867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  294.817831][T12738] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  295.284233][T26537] team0: Port device dummy0 added
[  295.327003][T26543] macsec0: entered allmulticast mode
[  295.329853][T26543] veth1_macvtap: entered allmulticast mode
[  295.680393][T26582] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  295.683456][T26582] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  295.874238][T26590] lo speed is unknown, defaulting to 1000
[  295.877924][T26590] vxcan1 speed is unknown, defaulting to 1000
[  296.397113][T26620] __nla_validate_parse: 2 callbacks suppressed
[  296.400243][T26620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9077'.
[  296.423815][T26620] 8021q: adding VLAN 0 to HW filter on device bond8
[  296.449725][T26620] 8021q: adding VLAN 0 to HW filter on device bond8
[  296.455536][T26620] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  296.463106][T26620] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  296.472713][T26615] lo speed is unknown, defaulting to 1000
[  296.475860][T26615] vxcan1 speed is unknown, defaulting to 1000
[  296.878029][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  296.902072][T26637] lo speed is unknown, defaulting to 1000
[  296.905392][T26637] vxcan1 speed is unknown, defaulting to 1000
[  296.939098][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  297.286030][T26688] validate_nla: 3 callbacks suppressed
[  297.286043][T26688] netlink: 'syz.1.9105': attribute type 1 has an invalid length.
[  297.302086][T26688] 8021q: adding VLAN 0 to HW filter on device bond1
[  297.330215][T26688] bond1: (slave geneve2): making interface the new active one
[  297.338253][T26688] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  297.485355][T26713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9117'.
[  297.658394][   T12] net_ratelimit: 30 callbacks suppressed
[  297.658409][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  297.777863][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  297.790267][T26750] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9127'.
[  297.887775][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  297.994506][T26771] macvlan2: entered allmulticast mode
[  297.996506][T26771] veth1_vlan: entered allmulticast mode
[  297.999714][T26771] veth1_vlan: left allmulticast mode
[  298.019212][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  298.041563][T26783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9143'.
[  298.044667][T26783] netlink: 'syz.2.9143': attribute type 1 has an invalid length.
[  298.052558][T26783] netlink: 'syz.2.9143': attribute type 2 has an invalid length.
[  298.088081][T26792] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9146'.
[  298.127973][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  298.247662][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  298.357905][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  298.467734][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  298.579517][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  298.626177][T26853] netlink: 'syz.2.9171': attribute type 3 has an invalid length.
[  298.689738][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  298.737642][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  298.872507][T26892] netlink: 'syz.2.9188': attribute type 5 has an invalid length.
[  299.151287][T26923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.155097][T26923] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  299.159085][T26923] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  299.169039][T26923] tipc: Resetting bearer <eth:syzkaller0>
[  299.178648][T26918] lo speed is unknown, defaulting to 1000
[  299.181401][T26918] vxcan1 speed is unknown, defaulting to 1000
[  300.147595][ T5308] tipc: Node number set to 3512280391
[  300.536484][T27019] lo speed is unknown, defaulting to 1000
[  300.539079][T27019] vxcan1 speed is unknown, defaulting to 1000
[  300.634900][T27020] lo speed is unknown, defaulting to 1000
[  300.638702][T27020] vxcan1 speed is unknown, defaulting to 1000
[  300.826403][T27035] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9247'.
[  300.852884][T27035] vlan2: entered allmulticast mode
[  300.861633][T27035] gretap0: entered allmulticast mode
[  301.044626][T27058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9254'.
[  301.082350][T27064] netlink: 'syz.1.9257': attribute type 3 has an invalid length.
[  301.554188][T27112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9279'.
[  301.978318][T27165] netlink: 'syz.0.9298': attribute type 1 has an invalid length.
[  301.981082][T27165] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9298'.
[  302.024168][T27169] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9300'.
[  302.028063][T27169] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  302.031371][T27169] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  302.101286][T27174] netlink: 'syz.1.9302': attribute type 3 has an invalid length.
[  302.583194][T27201] netlink: 'syz.2.9315': attribute type 1 has an invalid length.
[  302.586011][T27201] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9315'.
[  302.590431][T27201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9315'.
[  302.689198][T13657] net_ratelimit: 34 callbacks suppressed
[  302.689208][T13657] bond4: (slave wlan0): failed to get link speed/duplex
[  302.694882][T27209] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.9319'.
[  302.797998][T13657] bond4: (slave wlan0): failed to get link speed/duplex
[  303.090240][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  303.119726][T27225] netlink: 'syz.0.9326': attribute type 4 has an invalid length.
[  303.209264][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  303.264793][T27253] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9334'.
[  303.275279][T27240] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9334'.
[  303.319799][T13657] bond4: (slave wlan0): failed to get link speed/duplex
[  303.371895][T27265] netlink: 'syz.2.9345': attribute type 3 has an invalid length.
[  303.416535][T27271] sctp: [Deprecated]: syz.0.9348 (pid 27271) Use of int in max_burst socket option.
[  303.416535][T27271] Use struct sctp_assoc_value instead
[  303.427872][T13657] bond4: (slave wlan0): failed to get link speed/duplex
[  303.457629][T27274] netlink: 'syz.2.9349': attribute type 1 has an invalid length.
[  303.461081][T27274] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9349'.
[  303.539218][ T5867] bond4: (slave wlan0): failed to get link speed/duplex
[  303.647985][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  303.757820][T13657] bond4: (slave wlan0): failed to get link speed/duplex
[  303.867807][T13657] bond4: (slave wlan0): failed to get link speed/duplex
[  303.922932][T27307] lo speed is unknown, defaulting to 1000
[  303.926253][T27307] vxcan1 speed is unknown, defaulting to 1000
[  304.091668][T27326] netlink: 'syz.2.9374': attribute type 30 has an invalid length.
[  304.094493][T27326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9374'.
[  304.098876][T27326] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  304.206602][T27329] lo speed is unknown, defaulting to 1000
[  304.210204][T27329] vxcan1 speed is unknown, defaulting to 1000
[  305.224949][T27393] lo speed is unknown, defaulting to 1000
[  305.232050][T27393] vxcan1 speed is unknown, defaulting to 1000
[  305.419597][T27404] syzkaller1: entered promiscuous mode
[  305.421522][T27404] syzkaller1: entered allmulticast mode
[  306.468550][T27511] sctp: [Deprecated]: syz.0.9456 (pid 27511) Use of struct sctp_assoc_value in delayed_ack socket option.
[  306.468550][T27511] Use struct sctp_sack_info instead
[  306.572912][T27525] syzkaller0: entered promiscuous mode
[  306.578562][T27525] syzkaller0: entered allmulticast mode
[  306.589517][T27525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.595779][T27525] tipc: Resetting bearer <eth:syzkaller0>
[  306.719066][T27546] __nla_validate_parse: 7 callbacks suppressed
[  306.719077][T27546] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9471'.
[  306.764345][T27554] netlink: 216 bytes leftover after parsing attributes in process `syz.1.9475'.
[  306.769471][T27554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9475'.
[  306.774149][T27554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9475'.
[  306.881674][T27576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9484'.
[  307.000079][T27590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9491'.
[  307.176428][T27604] sctp: [Deprecated]: syz.0.9498 (pid 27604) Use of int in max_burst socket option deprecated.
[  307.176428][T27604] Use struct sctp_assoc_value instead
[  307.717552][   T51] tipc: Node number set to 147032235
[  307.777576][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  307.795108][T27613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9500'.
[  307.800849][   T12] net_ratelimit: 34 callbacks suppressed
[  307.800859][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  307.912006][T27629] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9509'.
[  307.919225][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  307.961599][T27637] netlink: 'syz.1.9512': attribute type 322 has an invalid length.
[  308.028052][T13657] bond4: (slave wlan0): failed to get link speed/duplex
[  308.106454][T27652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9517'.
[  308.110881][T27652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9517'.
[  308.139616][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  308.257651][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  308.370699][T13657] bond4: (slave wlan0): failed to get link speed/duplex
[  308.477824][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  308.597945][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  308.707690][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  308.817783][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  308.906739][T27714] syzkaller0: entered promiscuous mode
[  308.909383][T27714] syzkaller0: entered allmulticast mode
[  308.915950][T27714] macsec2: entered promiscuous mode
[  308.961323][T27711] lo speed is unknown, defaulting to 1000
[  308.966384][T27711] vxcan1 speed is unknown, defaulting to 1000
[  309.492637][T27780] rdma_op ffff88803272a1f0 conn xmit_rdma 0000000000000000
[  309.697676][   T60] block nbd1: Possible stuck request ffff888022648000: control (read@0,1024B). Runtime 240 seconds
[  309.702960][   T60] block nbd1: Possible stuck request ffff888022648200: control (read@1024,1024B). Runtime 240 seconds
[  309.708046][   T60] block nbd1: Possible stuck request ffff888022648400: control (read@2048,1024B). Runtime 240 seconds
[  309.712871][   T60] block nbd1: Possible stuck request ffff888022648600: control (read@3072,1024B). Runtime 240 seconds
[  310.651637][T27829] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  310.661245][T27829] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) !
[  310.713485][T27836] netlink: 'syz.0.9596': attribute type 1 has an invalid length.
[  311.050476][T27877] gretap0: entered promiscuous mode
[  311.052376][T27877] macvtap2: entered promiscuous mode
[  311.054335][T27877] macvtap2: entered allmulticast mode
[  311.593129][T27932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.595991][T27932] syzkaller0: entered promiscuous mode
[  311.598834][T27932] syzkaller0: entered allmulticast mode
[  311.603750][T27932] tipc: Resetting bearer <eth:syzkaller0>
[  311.606448][T27931] tipc: Resetting bearer <eth:syzkaller0>
[  311.610058][T27931] tipc: Disabling bearer <eth:syzkaller0>
[  311.786857][T27946] __nla_validate_parse: 9 callbacks suppressed
[  311.786866][T27946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9647'.
[  311.880927][T27960] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  312.214293][T28014] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.9679'.
[  312.323426][T28035] netlink: 'syz.2.9690': attribute type 1 has an invalid length.
[  312.331590][T28037] netlink: 'syz.0.9689': attribute type 4 has an invalid length.
[  312.351251][T28035] 8021q: adding VLAN 0 to HW filter on device bond6
[  312.366066][T28035] 8021q: adding VLAN 0 to HW filter on device bond6
[  312.369251][T28035] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  312.373413][T28035] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  312.447658][T28040] block nbd8: server does not support multiple connections per device.
[  312.451609][T28040] block nbd8: shutting down sockets
[  312.793122][T28092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.796401][T28092] syzkaller0: entered promiscuous mode
[  312.801281][T28092] syzkaller0: entered allmulticast mode
[  312.808410][T28092] tipc: Resetting bearer <eth:syzkaller0>
[  312.813779][T28091] tipc: Resetting bearer <eth:syzkaller0>
[  312.819593][T28091] tipc: Disabling bearer <eth:syzkaller0>
[  312.827740][T13657] net_ratelimit: 36 callbacks suppressed
[  312.827779][T13657] bond4: (slave wlan0): failed to get link speed/duplex
[  312.881445][T28107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9721'.
[  312.942514][T28113] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9724'.
[  312.947747][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  312.977905][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  313.058572][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  313.177790][ T6579] bond4: (slave wlan0): failed to get link speed/duplex
[  313.253909][T28136] lo speed is unknown, defaulting to 1000
[  313.256325][T28136] vxcan1 speed is unknown, defaulting to 1000
[  313.337654][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  313.432946][T28149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.436352][T28149] syzkaller0: entered promiscuous mode
[  313.439528][T28149] syzkaller0: entered allmulticast mode
[  313.446881][T28149] tipc: Resetting bearer <eth:syzkaller0>
[  313.465104][T28148] tipc: Resetting bearer <eth:syzkaller0>
[  313.472549][T28148] tipc: Disabling bearer <eth:syzkaller0>
[  313.498066][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  313.561322][T28153] syzkaller1: entered promiscuous mode
[  313.563611][T28153] syzkaller1: entered allmulticast mode
[  313.608159][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  313.682974][T28161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9745'.
[  313.717982][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  313.839168][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  313.966430][T13657] bond4: (slave wlan0): failed to get link speed/duplex
[  314.906045][T28211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9760'.
[  314.914200][T28213] sctp: [Deprecated]: syz.1.9761 (pid 28213) Use of struct sctp_assoc_value in delayed_ack socket option.
[  314.914200][T28213] Use struct sctp_sack_info instead
[  315.013366][T28225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9767'.
[  315.017574][T28225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9767'.
[  315.058057][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  315.086684][T28236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9771'.
[  315.106325][T28238] netlink: 'syz.0.9772': attribute type 10 has an invalid length.
[  315.113166][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9772'.
[  315.190622][T28250] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode
[  315.193883][T28250] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode
[  315.299139][T28265] netlink: 'syz.0.9785': attribute type 30 has an invalid length.
[  315.903907][T28322] syz_tun: entered allmulticast mode
[  315.910239][T28322] dvmrp8: entered allmulticast mode
[  316.031542][T28322] lo speed is unknown, defaulting to 1000
[  316.035077][T28322] vxcan1 speed is unknown, defaulting to 1000
[  316.135831][T28319] syz_tun: left allmulticast mode
[  316.138071][T28319] dvmrp8: left allmulticast mode
[  316.249566][T28356] netlink: 'syz.1.9813': attribute type 11 has an invalid length.
[  316.812135][T28412] netlink: 'syz.1.9829': attribute type 13 has an invalid length.
[  317.037280][T28412] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  317.053222][T28412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.146667][T28412] veth1_macvtap: left allmulticast mode
[  317.235744][   T24] vxcan1 speed is unknown, defaulting to 1000
[  317.241672][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.247666][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.251345][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.255286][   T24] syz2: Port: 1 Link DOWN
[  317.256871][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.272932][   T24] vxcan1 speed is unknown, defaulting to 1000
[  317.332303][T28433] __nla_validate_parse: 4 callbacks suppressed
[  317.332316][T28433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9835'.
[  317.356921][T28437] netlink: 'syz.1.9837': attribute type 10 has an invalid length.
[  317.368579][T28437] team0: Device hsr_slave_0 failed to register rx_handler
[  317.670054][T28494] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  317.673481][T28494] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  318.043840][T28522] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.9876'.
[  318.047824][T28522] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.9876'.
[  318.166256][T28532] syzkaller1: entered promiscuous mode
[  318.169621][T28532] syzkaller1: entered allmulticast mode
[  318.234951][T28538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9884'.
[  318.606840][   T33] audit: type=1800 audit(1756440197.723:14): pid=28563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9893" name="memory.events" dev="tmpfs" ino=8539 res=0 errno=0
[  318.790966][T28609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9912'.
[  318.792778][T28598] lo speed is unknown, defaulting to 1000
[  318.797017][T28598] vxcan1 speed is unknown, defaulting to 1000
[  318.892377][T28618] netlink: 'syz.2.9920': attribute type 1 has an invalid length.
[  318.894893][T28618] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9920'.
[  318.899500][T28619] netlink: 'syz.0.9919': attribute type 1 has an invalid length.
[  318.975160][T28636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9927'.
[  318.979007][T28636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9927'.
[  319.350142][T28667] team0: No ports can be present during mode change
[  319.408221][T28663] lo speed is unknown, defaulting to 1000
[  319.418196][T28663] vxcan1 speed is unknown, defaulting to 1000
[  319.702889][   T33] audit: type=1800 audit(1756440198.823:15): pid=28712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9959" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2995 res=0 errno=0
[  320.409653][T28783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9992'.
[  320.879605][T28822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10006'.
[  321.021329][T28836] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.026484][T28836] netem: change failed
[  321.158929][T28842] block nbd8: server does not support multiple connections per device.
[  321.162151][T28842] block nbd8: shutting down sockets
[  321.320031][T28846] netlink: 'syz.1.10017': attribute type 6 has an invalid length.
[  321.522568][T28866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.525126][T28866] IPv6: NLM_F_CREATE should be set when creating new route
[  321.527708][T28866] IPv6: NLM_F_CREATE should be set when creating new route
[  321.751036][T28879] netlink: 'syz.1.10033': attribute type 1 has an invalid length.
[  321.753890][T28879] netlink: 'syz.1.10033': attribute type 1 has an invalid length.
[  322.348715][T28971] net_ratelimit: 14 callbacks suppressed
[  322.348730][T28971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.408818][T28978] __nla_validate_parse: 8 callbacks suppressed
[  322.408832][T28978] netlink: 172 bytes leftover after parsing attributes in process `syz.0.10073'.
[  322.415475][T28978] netlink: 172 bytes leftover after parsing attributes in process `syz.0.10073'.
[  322.497897][   T60] block nbd4: Possible stuck request ffff888022700000: control (read@0,1024B). Runtime 150 seconds
[  322.502295][   T60] block nbd4: Possible stuck request ffff888022700200: control (read@1024,1024B). Runtime 150 seconds
[  322.506936][   T60] block nbd4: Possible stuck request ffff888022700400: control (read@2048,1024B). Runtime 150 seconds
[  322.512027][   T60] block nbd4: Possible stuck request ffff888022700600: control (read@3072,1024B). Runtime 150 seconds
[  322.695798][T29002] netlink: 'syz.0.10084': attribute type 3 has an invalid length.
[  322.781427][T29009] batadv_slave_0: entered promiscuous mode
[  322.784507][T29009] batadv_slave_0: left promiscuous mode
[  322.977390][T29031] vlan5: entered promiscuous mode
[  322.979938][T29031] bridge0: entered promiscuous mode
[  323.093893][T29048] netlink: 'syz.1.10101': attribute type 13 has an invalid length.
[  323.097055][T29048] netlink: 'syz.1.10101': attribute type 17 has an invalid length.
[  323.106138][T29048] gretap0: left promiscuous mode
[  323.146497][T29048] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.208288][T29052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10101'.
[  323.233141][T29048] 8021q: adding VLAN 0 to HW filter on device team0
[  323.236981][T29048] dummy0: left promiscuous mode
[  323.241112][T29048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.291171][T29048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.355046][T29050] lo speed is unknown, defaulting to 1000
[  323.357727][T29050] vxcan1 speed is unknown, defaulting to 1000
[  323.395991][T29063] netlink: 324 bytes leftover after parsing attributes in process `syz.2.10110'.
[  323.402508][T29063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10110'.
[  323.406576][T29063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10110'.
[  323.466348][T29069] netlink: 380 bytes leftover after parsing attributes in process `syz.2.10111'.
[  323.570662][T29077] netlink: 'syz.0.10116': attribute type 1 has an invalid length.
[  323.573939][T29077] netlink: 'syz.0.10116': attribute type 2 has an invalid length.
[  323.585713][T29077] netlink: 'syz.0.10116': attribute type 1 has an invalid length.
[  323.589214][T29077] netlink: 'syz.0.10116': attribute type 2 has an invalid length.
[  323.675714][T29083] lo speed is unknown, defaulting to 1000
[  323.678401][T29083] vxcan1 speed is unknown, defaulting to 1000
[  324.128235][T29124] lo speed is unknown, defaulting to 1000
[  324.130428][T29124] vxcan1 speed is unknown, defaulting to 1000
[  324.926053][T29165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10155'.
[  325.013129][T29173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10159'.
[  325.057541][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  325.079336][T29179] syzkaller0: left promiscuous mode
[  325.081491][T29179] syzkaller0: left allmulticast mode
[  325.234431][T29194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10168'.
[  325.245545][T29194] team0: No ports can be present during mode change
[  325.249990][T29194] vlan0: entered promiscuous mode
[  325.254201][T29194] tipc: Enabled bearer <eth:team0>, priority 0
[  326.398126][T29234] lo speed is unknown, defaulting to 1000
[  326.400864][T29234] vxcan1 speed is unknown, defaulting to 1000
[  327.509496][T29326] __nla_validate_parse: 6 callbacks suppressed
[  327.509507][T29326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10229'.
[  327.534964][T29326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10229'.
[  327.568409][T29333] validate_nla: 3 callbacks suppressed
[  327.568423][T29333] netlink: 'syz.2.10232': attribute type 1 has an invalid length.
[  327.643824][T29346] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  327.816292][T29380] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  327.830892][T29380] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  327.873266][T29386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.222250][T29465] vlan3: entered promiscuous mode
[  329.223992][T29465] vlan3: entered allmulticast mode
[  329.285594][T29473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10291'.
[  329.334446][T29478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10297'.
[  329.682354][T29523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10317'.
[  329.685418][T29523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.738687][T29535] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10323'.
[  329.741723][T29535] netlink: 'syz.1.10323': attribute type 1 has an invalid length.
[  329.786971][T29547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10329'.
[  329.791841][T29547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10329'.
[  329.794980][T29547] netlink: 'syz.1.10329': attribute type 20 has an invalid length.
[  329.797978][T29547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10329'.
[  329.801051][T29547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10329'.
[  329.804117][T29547] netlink: 'syz.1.10329': attribute type 20 has an invalid length.
[  329.859835][T29562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.105463][T29578] netlink: 'syz.1.10344': attribute type 2 has an invalid length.
[  330.110519][T29578] k*]: entered promiscuous mode
[  330.120302][T29578] tipc: Resetting bearer <eth:team0>
[  330.123008][T29578] tipc: Resetting bearer <eth:team0>
[  330.125958][T29578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  330.136760][T29578] veth0_to_team: entered promiscuous mode
[  330.139071][T29578] veth0_to_team: entered allmulticast mode
[  330.633787][T29632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.862935][T29654] lo speed is unknown, defaulting to 1000
[  330.868498][T29654] vxcan1 speed is unknown, defaulting to 1000
[  330.996922][T29671] lo speed is unknown, defaulting to 1000
[  331.000963][T29671] vxcan1 speed is unknown, defaulting to 1000
[  331.676327][T29709] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.681161][T29709] syzkaller0: entered promiscuous mode
[  331.683534][T29709] syzkaller0: entered allmulticast mode
[  331.691470][T29709] syzkaller0: Caught tx_queue_len zero misconfig
[  331.913451][T29731] netlink: 'syz.1.10411': attribute type 1 has an invalid length.
[  332.137849][T29758] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode
[  332.141038][T29758] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode
[  332.145235][T29758] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  332.259248][T29772] netlink: 'syz.1.10430': attribute type 2 has an invalid length.
[  332.265433][T29772] : entered promiscuous mode
[  332.732272][T29803] vxcan1 speed is unknown, defaulting to 1000
[  333.364429][T29824] netlink: 'syz.0.10453': attribute type 10 has an invalid length.
[  333.367238][T29824] __nla_validate_parse: 10 callbacks suppressed
[  333.367245][T29824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10453'.
[  333.380652][T29824] dummy0: entered promiscuous mode
[  333.382947][T29824] dummy0: entered allmulticast mode
[  333.385425][T29824] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  333.395752][T29826] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10454'.
[  333.440900][T29828] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  333.610898][T29847] netlink: 'syz.2.10463': attribute type 13 has an invalid length.
[  333.633010][T29847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10463'.
[  333.642840][T29847] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  333.726829][T29857] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.735287][T29861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10469'.
[  333.787121][T29866] bond0: entered promiscuous mode
[  333.789609][T29866] bond_slave_0: entered promiscuous mode
[  333.792257][T29866] bond_slave_1: entered promiscuous mode
[  333.795530][T29866] bond0: left promiscuous mode
[  333.801764][T29866] bond_slave_0: left promiscuous mode
[  333.804199][T29866] bond_slave_1: left promiscuous mode
[  333.853629][T29875] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.901881][T29880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10478'.
[  333.909938][ T5867] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  333.913226][T29880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10478'.
[  333.917384][T29875] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.928092][ T5867] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  333.931617][ T5867] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  333.935295][ T5867] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  333.979943][T29875] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.011800][T29875] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.062012][ T5867] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  334.070719][ T6579] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  334.078008][ T6579] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  334.085135][ T6579] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  334.225129][T29902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10486'.
[  334.230303][T29902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10486'.
[  335.106241][T29971] infiniband syz!: set down
[  335.108938][T29971] infiniband syz!: added team_slave_0
[  335.125899][T29971] RDS/IB: syz!: added
[  335.127709][T29971] smc: adding ib device syz! with port count 1
[  335.129948][T29971] smc:    ib device syz! port 1 has pnetid 
[  335.370633][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10530'.
[  335.374604][T30001] netlink: 120 bytes leftover after parsing attributes in process `syz.1.10530'.
[  335.503262][T30025] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  335.513741][T30025] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  335.516495][T30025] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  335.539394][T30022] vxcan1 speed is unknown, defaulting to 1000
[  335.651991][T30031] tipc: New replicast peer: 255.255.255.255
[  335.654419][T30031] tipc: Enabled bearer <udp:syz2>, priority 6
[  337.454981][T30088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.472299][T30083] ipvlan2: entered promiscuous mode
[  337.515931][T30088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.578881][T30088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.816093][T30130] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.822057][T30130] syzkaller0: entered promiscuous mode
[  337.824157][T30130] syzkaller0: entered allmulticast mode
[  337.834441][T30130] tipc: Resetting bearer <eth:syzkaller0>
[  337.839338][T30129] tipc: Resetting bearer <eth:syzkaller0>
[  337.849160][T30129] tipc: Disabling bearer <eth:syzkaller0>
[  339.219868][T30240] macvtap3: entered allmulticast mode
[  339.221691][T30240] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  339.224628][T30240] batman_adv: batadv0: Adding interface: macvtap3
[  339.227137][T30240] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.244112][T30240] batman_adv: batadv0: Interface activated: macvtap3
[  339.782375][   T60] block nbd1: Possible stuck request ffff888022648000: control (read@0,1024B). Runtime 270 seconds
[  339.786779][   T60] block nbd1: Possible stuck request ffff888022648200: control (read@1024,1024B). Runtime 270 seconds
[  339.792380][   T60] block nbd1: Possible stuck request ffff888022648400: control (read@2048,1024B). Runtime 270 seconds
[  339.796591][   T60] block nbd1: Possible stuck request ffff888022648600: control (read@3072,1024B). Runtime 270 seconds
[  339.875759][T30319] __nla_validate_parse: 7 callbacks suppressed
[  339.875774][T30319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10673'.
[  339.881777][T30319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10673'.
[  339.886140][T30319] ip6tnl2: entered promiscuous mode
[  339.889451][T30319] ip6tnl2: entered allmulticast mode
[  340.429919][T30350] pimreg: tun_chr_ioctl cmd 2147767506
[  340.433443][T30349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.491605][T30351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.553490][T30349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.481762][T30396] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  341.676302][T30410] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  341.918230][T30439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10727'.
[  341.925039][T30443] bridge11: entered promiscuous mode
[  341.926865][T30443] bridge11: entered allmulticast mode
[  341.931271][T30443] team0: Port device bridge11 added
[  341.949152][T30445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10730'.
[  342.002600][T30456] netlink: 'syz.2.10736': attribute type 1 has an invalid length.
[  342.005227][T30456] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10736'.
[  342.011454][T30457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10735'.
[  342.044033][T30461] netlink: 'syz.0.10738': attribute type 3 has an invalid length.
[  342.084119][T30459] vxcan1 speed is unknown, defaulting to 1000
[  342.087625][T30469] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10742'.
[  342.395974][T30524] netlink: 'syz.0.10768': attribute type 4 has an invalid length.
[  342.553831][T30543] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10777'.
[  342.913858][T30564] batman_adv: batadv0: Adding interface: ip6gretap2
[  342.916705][T30564] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.927895][T30564] batman_adv: batadv0: Interface activated: ip6gretap2
[  343.015122][T30575] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10792'.
[  343.318636][T30607] team0: Port device bond0 removed
[  343.334490][T30607] team0: Port device dummy0 removed
[  343.336776][T30607] bridge_slave_0: left allmulticast mode
[  343.339487][T30607] bridge_slave_0: left promiscuous mode
[  343.341683][T30607] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.345388][T30607] bridge_slave_1: left allmulticast mode
[  343.349780][T30607] bridge_slave_1: left promiscuous mode
[  343.352468][T30607] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.360130][T30607] bond0: (slave bond_slave_0): Releasing backup interface
[  343.365265][T30607] bond_slave_0: left allmulticast mode
[  343.370490][T30607] team0: Port device team_slave_0 removed
[  343.374430][T30607] team0: Port device team_slave_1 removed
[  343.377062][T30614] rdma_op ffff88811134b1f0 conn xmit_rdma 0000000000000000
[  343.382014][T30607] bond0: (slave batadv_slave_0): Releasing backup interface
[  343.385262][T30607] batadv_slave_0: left allmulticast mode
[  343.388056][T30614] netlink: 'syz.2.10804': attribute type 10 has an invalid length.
[  343.391802][T30607] bond4: (slave wlan0): Releasing active interface
[  343.398042][T30607] bond2: (slave bond3): Releasing backup interface
[  343.405089][T30607] bond3: left promiscuous mode
[  343.407810][T30607] bond3: left allmulticast mode
[  343.411780][T30614] bond0: (slave wlan1): refused to change device type
[  343.514753][T30627] sctp: [Deprecated]: syz.1.10816 (pid 30627) Use of int in maxseg socket option.
[  343.514753][T30627] Use struct sctp_assoc_value instead
[  343.552136][T30632] netlink: 'syz.1.10819': attribute type 3 has an invalid length.
[  343.599226][T30637] netlink: 'syz.0.10818': attribute type 13 has an invalid length.
[  343.601993][T30637] netlink: 'syz.0.10818': attribute type 17 has an invalid length.
[  343.616177][T30637] dummy0: left promiscuous mode
[  343.618861][T30637] dummy0: left allmulticast mode
[  343.621675][T30637] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  343.648224][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  343.673289][T30637] vxcan1 speed is unknown, defaulting to 1000
[  343.687343][T30640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10818'.
[  343.694779][T30640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.700136][T30640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.763026][T30638] vxcan1 speed is unknown, defaulting to 1000
[  343.887863][ T6579] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  343.891233][ T6579] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  343.977016][T30651] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  344.063350][T30658] macvtap4: entered promiscuous mode
[  344.065432][T30658] bond0: entered promiscuous mode
[  344.067318][T30658] bond_slave_0: entered promiscuous mode
[  344.070322][T30658] bond_slave_1: entered promiscuous mode
[  344.072523][T30658] macvtap4: entered allmulticast mode
[  344.074641][T30658] bond0: entered allmulticast mode
[  344.076978][T30658] bond_slave_0: entered allmulticast mode
[  344.079844][T30658] bond_slave_1: entered allmulticast mode
[  344.083022][T30658] 8021q: adding VLAN 0 to HW filter on device macvtap4
[  344.160798][T30664] netlink: 'syz.1.10831': attribute type 11 has an invalid length.
[  344.338721][T30676] macsec2: entered promiscuous mode
[  344.341055][T30676] macvlan1: entered promiscuous mode
[  344.344348][T30676] macvlan1: left promiscuous mode
[  344.582872][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  344.649948][T30695] IPv6: Can't replace route, no match found
[  344.669094][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  344.752816][T30699] vxcan1 speed is unknown, defaulting to 1000
[  344.961733][T30718] netlink: 'syz.0.10854': attribute type 1 has an invalid length.
[  345.272268][T30749] __nla_validate_parse: 5 callbacks suppressed
[  345.272283][T30749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10869'.
[  345.278100][T30749] netlink: 'syz.2.10869': attribute type 1 has an invalid length.
[  345.625615][T30788] vcan0: tx drop: invalid da for name 0xfffffffffffffffb
[  345.671349][T30794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10889'.
[  345.878370][T30808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10895'.
[  345.881396][T30808] nbd: socks must be embedded in a SOCK_ITEM attr
[  345.883726][T30808] block nbd0: shutting down sockets
[  346.120124][T30831] netlink: 332 bytes leftover after parsing attributes in process `syz.2.10906'.
[  346.123145][T30831] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10906'.
[  346.126388][T30831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10906'.
[  346.174236][T30839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10909'.
[  346.179873][T30839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10909'.
[  346.280201][T30852] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10915'.
[  346.322983][T30859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10918'.
[  346.874738][    C1] vcan0: j1939_tp_rxtimer: 0xffff88812357d000: rx timeout, send abort
[  347.145724][T30949] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  347.197201][T30953] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  347.377619][    C1] vcan0: j1939_tp_rxtimer: 0xffff88812357d000: abort rx timeout. Force session deactivation
[  347.673580][T31018] validate_nla: 4 callbacks suppressed
[  347.673595][T31018] netlink: 'syz.0.10995': attribute type 9 has an invalid length.
[  347.681878][T31018] macvlan3: entered promiscuous mode
[  347.683751][T31018] macvlan3: entered allmulticast mode
[  347.686547][T31018] hsr0: entered allmulticast mode
[  347.691547][T31018] hsr_slave_0: entered allmulticast mode
[  348.027986][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  348.744684][T31121] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  349.542865][T31133] netlink: 'syz.1.11046': attribute type 1 has an invalid length.
[  350.041609][T31206] netlink: 'syz.2.11079': attribute type 1 has an invalid length.
[  350.055435][T31206] bond7 (unregistering): Released all slaves
[  350.070271][   T33] audit: type=1800 audit(1756440229.193:16): pid=31203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11078" name="memory.events" dev="tmpfs" ino=18263 res=0 errno=0
[  351.233597][T31279] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  351.238850][T31279] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  352.016205][T31303] __nla_validate_parse: 21 callbacks suppressed
[  352.016215][T31303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11119'.
[  352.115959][T31305] vxcan1 speed is unknown, defaulting to 1000
[  352.201810][T31327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11130'.
[  352.225217][T31329] netlink: 'syz.0.11131': attribute type 1 has an invalid length.
[  352.228322][T31329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11131'.
[  352.535742][T31357] team0: Device gtp2 is of different type
[  352.580852][   T60] block nbd4: Possible stuck request ffff888022700000: control (read@0,1024B). Runtime 180 seconds
[  352.584409][   T60] block nbd4: Possible stuck request ffff888022700200: control (read@1024,1024B). Runtime 180 seconds
[  352.588373][   T60] block nbd4: Possible stuck request ffff888022700400: control (read@2048,1024B). Runtime 180 seconds
[  352.592674][   T60] block nbd4: Possible stuck request ffff888022700600: control (read@3072,1024B). Runtime 180 seconds
[  352.661783][T31372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11149'.
[  353.209968][T31430] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  354.020845][T31480] macvlan1: entered promiscuous mode
[  354.024129][T31480] ipvlan0: entered promiscuous mode
[  354.030127][T31480] ipvlan0: left promiscuous mode
[  354.032885][T31480] macvlan1: left promiscuous mode
[  354.258279][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  354.434893][T31489] netlink: 'syz.0.11203': attribute type 4 has an invalid length.
[  354.443149][T31489] netlink: 'syz.0.11203': attribute type 4 has an invalid length.
[  354.680006][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11214'.
[  354.686212][T31512] dummy0: entered promiscuous mode
[  354.689036][T31512] macvtap2: entered promiscuous mode
[  354.691344][T31512] macvtap2: entered allmulticast mode
[  354.693574][T31512] dummy0: entered allmulticast mode
[  354.697257][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11214'.
[  354.703938][T31512] dummy0: left allmulticast mode
[  354.706288][T31512] dummy0: left promiscuous mode
[  354.772659][T31521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11218'.
[  354.861266][T31537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11226'.
[  354.889409][T31541] netlink: 'syz.1.11227': attribute type 3 has an invalid length.
[  354.961585][T31551] netlink: 'syz.1.11232': attribute type 10 has an invalid length.
[  355.252730][T31584] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11248'.
[  355.314357][T31592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11250'.
[  356.417607][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  356.473482][T31639] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  356.508456][ T5308] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  356.555976][T31651] netlink: 'syz.2.11274': attribute type 2 has an invalid length.
[  356.564286][T31651] : entered promiscuous mode
[  356.758215][ T5308] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  357.377715][ T5840] Bluetooth: hci2: command 0x0405 tx timeout
[  357.398722][T31660] __nla_validate_parse: 1 callbacks suppressed
[  357.398736][T31660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11277'.
[  357.599797][T31675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11284'.
[  357.607678][T31675] macvlan3: entered promiscuous mode
[  357.610045][T31675] bond0: entered promiscuous mode
[  357.613084][T31675] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  357.837149][T31698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11294'.
[  358.035327][T31695] vxcan1 speed is unknown, defaulting to 1000
[  358.270862][T31716] openvswitch: netlink: IP tunnel dst address not specified
[  358.332593][T31720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11304'.
[  358.401744][T31720] macvtap2: entered promiscuous mode
[  358.404031][T31720] team0: entered promiscuous mode
[  358.410454][T31720] macvtap2: entered allmulticast mode
[  358.412849][T31720] team0: entered allmulticast mode
[  358.415290][T31720] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  358.849596][T31740] pim6reg1: entered promiscuous mode
[  358.854031][T31740] pim6reg1: entered allmulticast mode
[  359.160613][T31748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11317'.
[  359.164680][T31748] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  359.179100][T31748] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  359.543466][T31789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.560023][T31791] _Z`Ԁ@: entered promiscuous mode
[  359.719275][T31818] openvswitch: netlink: Message has 16 unknown bytes.
[  360.038000][T31857] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11366'.
[  360.292578][T31909] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11391'.
[  360.305161][T31909] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  360.312332][T31909] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  360.382516][T31919] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.593626][T31947] netlink: del zone limit has 4 unknown bytes
[  360.603090][T31948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11409'.
[  361.185924][T31968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11418'.
[  361.189457][T31968] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11418'.
[  361.341321][T31984] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  361.344093][T31984] tipc: Enabled bearer <udp:s>, priority 6
[  361.477675][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  361.489011][T32002] netlink: 'syz.2.11434': attribute type 1 has an invalid length.
[  361.491672][T32002] netlink: 'syz.2.11434': attribute type 1 has an invalid length.
[  361.617765][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  361.683342][T32017] netlink: 'syz.2.11441': attribute type 7 has an invalid length.
[  361.767715][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  361.917602][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  362.067598][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  362.084505][T32061] nbd: socks must be embedded in a SOCK_ITEM attr
[  362.087322][ T8340] block nbd64: NBD_DISCONNECT
[  362.207695][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  362.357878][ T5308] tipc: Node number set to 343804388
[  362.497817][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  362.767701][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  363.297910][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  364.006754][T32115] __nla_validate_parse: 12 callbacks suppressed
[  364.006769][T32115] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11484'.
[  364.337617][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  364.682221][T32149] netlink: 'syz.1.11496': attribute type 10 has an invalid length.
[  364.691184][T32149] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  364.694135][T32149] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  364.698018][T32149] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  364.777381][T32157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11500'.
[  364.998858][T32176] netlink: 'syz.1.11508': attribute type 2 has an invalid length.
[  365.005853][T32176] netlink: 'syz.1.11508': attribute type 1 has an invalid length.
[  365.010625][T32176] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11508'.
[  365.037673][T32181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11510'.
[  365.152745][T32193] ip6erspan0: entered promiscuous mode
[  365.191664][T32197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.223794][T32197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.279796][T32197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.336500][T32197] bond0: (slave netdevsim0): Releasing backup interface
[  365.342532][T32197] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[  365.347583][T32197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.383730][T32221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11525'.
[  365.387089][T32221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11525'.
[  365.390759][T32221] netlink: 540 bytes leftover after parsing attributes in process `syz.2.11525'.
[  365.394246][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  365.400919][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  365.408719][T13657] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  365.416273][T13657] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  365.694166][T32248] netlink: 'syz.1.11538': attribute type 1 has an invalid length.
[  365.825288][T32264] netlink: 'syz.1.11546': attribute type 12 has an invalid length.
[  365.971782][T32288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11557'.
[  365.976823][T32288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11557'.
[  365.981544][T32288] netlink: 'syz.0.11557': attribute type 3 has an invalid length.
[  366.004361][T32293] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11559'.
[  366.978274][T32377] tipc: Resetting bearer <eth:syzkaller0>
[  366.985745][T32377] hsr0: left allmulticast mode
[  366.987747][T32377] hsr_slave_0: left allmulticast mode
[  367.085778][T32387] netlink: 'syz.2.11603': attribute type 5 has an invalid length.
[  367.180522][T32394] net_ratelimit: 4 callbacks suppressed
[  367.180536][T32394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.190559][T32394] tipc: Failed to remove unknown binding: 66,1,1/343804388:1078265242/1078265244
[  367.196599][T32394] tipc: Failed to remove unknown binding: 66,1,1/343804388:1078265242/1078265244
[  367.201172][T32394] tipc: Failed to remove unknown binding: 66,1,1/343804388:1078265242/1078265244
[  367.457650][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  367.546409][T32416] syzkaller1: entered promiscuous mode
[  367.549776][T32416] syzkaller1: entered allmulticast mode
[  367.758236][T32438] sock: sock_timestamping_bind_phc: sock not bind to device
[  367.966044][T32477] nbd: couldn't find a device at index 65546
[  368.083088][T32490] vxcan1 speed is unknown, defaulting to 1000
[  368.122537][T32496] netlink: 'syz.2.11650': attribute type 1 has an invalid length.
[  368.497597][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  368.658896][T32520] vxcan1 speed is unknown, defaulting to 1000
[  369.320536][T32568] openvswitch: netlink: Message has 20 unknown bytes.
[  369.323637][T32568] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.360211][T32570] __nla_validate_parse: 9 callbacks suppressed
[  369.360225][T32570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11682'.
[  369.537577][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  369.674788][T32593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11692'.
[  369.713134][T32598] netlink: 9 bytes leftover after parsing attributes in process `syz.2.11694'.
[  369.717199][T32598] ..0: renamed from hsr0
[  369.722684][T32598] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  369.728174][T32598] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  369.804001][T32606] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  369.859242][   T60] block nbd1: Possible stuck request ffff888022648000: control (read@0,1024B). Runtime 300 seconds
[  369.862965][   T60] block nbd1: Possible stuck request ffff888022648200: control (read@1024,1024B). Runtime 300 seconds
[  369.866700][   T60] block nbd1: Possible stuck request ffff888022648400: control (read@2048,1024B). Runtime 300 seconds
[  369.871258][   T60] block nbd1: Possible stuck request ffff888022648600: control (read@3072,1024B). Runtime 300 seconds
[  370.120518][T32641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11713'.
[  370.155335][T32646] IPVS: Error connecting to the multicast addr
[  370.159967][T32648] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  370.283156][T32667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.443909][T32683] netlink: 75 bytes leftover after parsing attributes in process `syz.2.11733'.
[  370.513639][T32693] netlink: 'syz.2.11737': attribute type 16 has an invalid length.
[  370.516420][T32693] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.11737'.
[  370.577674][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  370.622091][T32705] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11743'.
[  370.642263][T32707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.644955][T32707] syzkaller0: entered promiscuous mode
[  370.646867][T32707] syzkaller0: entered allmulticast mode
[  370.653238][T32707] tipc: Resetting bearer <eth:syzkaller0>
[  370.655714][T32706] tipc: Resetting bearer <eth:syzkaller0>
[  370.659551][T32706] tipc: Disabling bearer <eth:syzkaller0>
[  370.926530][T32738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.929388][T32740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11760'.
[  370.946156][T32738] syzkaller0: entered promiscuous mode
[  370.949597][T32738] syzkaller0: entered allmulticast mode
[  371.013926][T32738] tipc: Resetting bearer <eth:syzkaller0>
[  371.018767][T32737] tipc: Resetting bearer <eth:syzkaller0>
[  371.022835][T32737] tipc: Disabling bearer <eth:syzkaller0>
[  371.060522][T32748] netlink: 'syz.1.11764': attribute type 1 has an invalid length.
[  371.230228][T32761] vxcan1 speed is unknown, defaulting to 1000
[  372.100886][  T323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11781'.
[  372.123849][  T325] netlink: 'syz.2.11782': attribute type 10 has an invalid length.
[  372.127721][  T325] bond0: (slave wlan1): refused to change device type
[  372.204924][  T333] team0: Device macvlan2 is already an upper device of the team interface
[  372.312505][  T336] vxcan1 speed is unknown, defaulting to 1000
[  372.657524][    C0] net_ratelimit: 2 callbacks suppressed
[  372.657534][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  372.713567][  T348] netlink: 'syz.1.11791': attribute type 1 has an invalid length.
[  372.716217][  T348] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11791'.
[  372.859757][  T360] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  372.863011][  T360] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  373.010233][  T363] "syz.0.11798" (363) uses obsolete ecb(arc4) skcipher
[  373.697707][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  373.794626][  T374] tipc: Resetting bearer <eth:team0>
[  373.808125][  T374] batman_adv: batadv0: Interface deactivated: macvtap3
[  373.811215][  T374] mac80211_hwsim hwsim24 wlan0: left allmulticast mode
[  373.814832][  T374] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  373.819342][  T374] bond0: left allmulticast mode
[  373.825728][  T374] bond_slave_0: left allmulticast mode
[  373.829139][  T374] bond_slave_1: left allmulticast mode
[  373.841789][  T374] bond0: left promiscuous mode
[  373.843850][  T374] bond_slave_0: left promiscuous mode
[  373.846180][  T374] bond_slave_1: left promiscuous mode
[  373.871319][ T6579] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.874256][ T6579] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.883601][ T6579] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  373.890598][ T6579] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  374.031737][  T412] netlink: 'syz.0.11815': attribute type 2 has an invalid length.
[  374.178903][  T445] netlink: 'syz.0.11827': attribute type 30 has an invalid length.
[  374.270029][  T460] syzkaller1: entered promiscuous mode
[  374.271941][  T460] syzkaller1: entered allmulticast mode
[  374.503177][  T479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.694807][  T502] __nla_validate_parse: 2 callbacks suppressed
[  374.694818][  T502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11854'.
[  374.737674][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  375.106093][  T512] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.485331][  T520] vxcan1 speed is unknown, defaulting to 1000
[  375.687818][  T545] veth7: entered promiscuous mode
[  375.692554][  T547] netlink: 268 bytes leftover after parsing attributes in process `syz.1.11873'.
[  375.695714][  T547] unsupported nla_type 65024
[  375.777638][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  375.840459][  T561] lo: entered allmulticast mode
[  375.842205][  T561] lo: left allmulticast mode
[  375.976608][  T577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11888'.
[  376.002999][  T577] 8021q: adding VLAN 0 to HW filter on device bond5
[  376.007150][  T577] bond4: (slave bond5): Enslaving as an active interface with an up link
[  376.012155][  T577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11888'.
[  376.016818][  T577] 8021q: adding VLAN 0 to HW filter on device bond4
[  376.510146][  T622] netlink: 'syz.1.11906': attribute type 2 has an invalid length.
[  376.817648][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  376.907744][  T652] netlink: 'syz.1.11920': attribute type 10 has an invalid length.
[  377.857589][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  378.066863][  T712] netlink: 332 bytes leftover after parsing attributes in process `syz.2.11945'.
[  378.072767][  T712] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11945'.
[  378.076885][  T712] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11945'.
[  378.081502][  T714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11946'.
[  378.188718][  T738] netlink: 'syz.2.11957': attribute type 5 has an invalid length.
[  378.226511][  T745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11960'.
[  378.240602][  T745] vlan3: entered allmulticast mode
[  378.242371][  T745] bond7: entered allmulticast mode
[  378.284322][  T756] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11966'.
[  378.333338][   T51] IPVS: starting estimator thread 0...
[  378.440100][  T767] IPVS: using max 71 ests per chain, 170400 per kthread
[  378.897595][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  379.344530][  T847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  379.434617][  T864] atomic_op ffff88803ac55998 conn xmit_atomic 0000000000000000
[  379.594070][  T895] netlink: 'syz.1.12027': attribute type 2 has an invalid length.
[  379.598368][  T895] : entered promiscuous mode
[  379.653438][  T890] vxcan1 speed is unknown, defaulting to 1000
[  379.937619][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  380.611404][  T940] netlink: 'syz.0.12042': attribute type 1 has an invalid length.
[  380.614109][  T940] __nla_validate_parse: 1 callbacks suppressed
[  380.614120][  T940] netlink: 112 bytes leftover after parsing attributes in process `syz.0.12042'.
[  380.653710][  T946] netlink: 'syz.1.12044': attribute type 2 has an invalid length.
[  380.672394][  T949] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12047'.
[  380.676916][  T946] : entered promiscuous mode
[  380.977621][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  381.040565][ T1013] netlink: 'syz.1.12077': attribute type 21 has an invalid length.
[  381.043352][ T1013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12077'.
[  381.098312][ T1027] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  382.017689][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  382.043535][ T1086] sctp: [Deprecated]: syz.1.12100 (pid 1086) Use of int in max_burst socket option deprecated.
[  382.043535][ T1086] Use struct sctp_assoc_value instead
[  382.059433][ T1086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12100'.
[  382.137088][ T1097] sctp: [Deprecated]: syz.2.12103 (pid 1097) Use of int in maxseg socket option.
[  382.137088][ T1097] Use struct sctp_assoc_value instead
[  382.671658][   T60] block nbd4: Possible stuck request ffff888022700000: control (read@0,1024B). Runtime 210 seconds
[  382.675153][   T60] block nbd4: Possible stuck request ffff888022700200: control (read@1024,1024B). Runtime 210 seconds
[  382.679017][   T60] block nbd4: Possible stuck request ffff888022700400: control (read@2048,1024B). Runtime 210 seconds
[  382.682930][   T60] block nbd4: Possible stuck request ffff888022700600: control (read@3072,1024B). Runtime 210 seconds
[  383.057584][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  383.130599][ T1115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  383.135598][ T1103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12106'.
[  383.149404][ T1090] smc: removing ib device syz2
[  383.160703][ T1119] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12110'.
[  383.292619][ T1120] netlink: 'syz.2.12110': attribute type 1 has an invalid length.
[  383.295713][ T1120] netlink: 'syz.2.12110': attribute type 1 has an invalid length.
[  383.299060][ T1120] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12110'.
[  383.711021][ T1128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12113'.
[  384.097778][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  384.126328][ T1145] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  384.204479][ T1151] netlink: 'syz.2.12119': attribute type 3 has an invalid length.
[  384.321372][ T1155] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  384.392366][ T1165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12122'.
[  384.398061][ T1165] bridge4: entered allmulticast mode
[  385.147613][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  385.336075][ T1180] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  385.447235][ T1193] geneve3: entered promiscuous mode
[  385.452906][ T6579] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.456795][ T6579] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.462431][ T6579] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.467656][ T6579] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.482667][ T1193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12129'.
[  385.569196][ T1202] veth1_to_bond: entered allmulticast mode
[  385.572732][ T1202] bond_slave_1: entered promiscuous mode
[  385.576562][ T1202] bond_slave_1: left promiscuous mode
[  385.581019][ T1202] veth1_to_bond: left allmulticast mode
[  385.684392][ T1209] __nla_validate_parse: 2 callbacks suppressed
[  385.684407][ T1209] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12133'.
[  385.921841][ T1228] syzkaller0: entered promiscuous mode
[  385.924117][ T1228] syzkaller0: entered allmulticast mode
[  386.046445][ T1238] block nbd0: Unsupported socket: shutdown callout must be supported.
[  386.057745][ T1240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.083140][ T1240] tipc: Disabling bearer <eth:syzkaller0>
[  386.177613][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  386.223274][ T1267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12149'.
[  386.257195][ T1268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12144'.
[  386.261896][ T1268] hsr_slave_0: left promiscuous mode
[  386.264708][ T1268] hsr_slave_1: left promiscuous mode
[  386.301127][ T1270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12150'.
[  386.361694][ T1276] netlink: 'syz.2.12152': attribute type 1 has an invalid length.
[  386.365997][ T1276] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12152'.
[  386.370016][ T1277] netlink: 'syz.2.12152': attribute type 1 has an invalid length.
[  386.373496][ T1277] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12152'.
[  386.516477][ T1283] macsec0: entered allmulticast mode
[  386.549935][ T1285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12155'.
[  386.624109][ T1287] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  386.703634][ T1298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12159'.
[  386.765340][ T1298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12159'.
[  386.773589][ T1298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12159'.
[  386.783661][ T1302] syzkaller1: entered promiscuous mode
[  386.785471][ T1302] syzkaller1: entered allmulticast mode
[  386.865916][ T1307] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  386.870933][ T1307] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  386.879133][ T1307] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  387.165783][ T1320] netlink: 'syz.2.12165': attribute type 13 has an invalid length.
[  387.169807][ T1320] netlink: 'syz.2.12165': attribute type 17 has an invalid length.
[  387.186780][ T1320] gretap0: left promiscuous mode
[  387.187957][ T1343] netlink: 'syz.0.12173': attribute type 1 has an invalid length.
[  387.194984][ T1320] erspan0: entered promiscuous mode
[  387.217637][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  387.222214][ T1320] 8021q: adding VLAN 0 to HW filter on device team0
[  387.227509][ T1320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  387.258396][ T1343] bond10: entered promiscuous mode
[  387.266575][ T1343] 8021q: adding VLAN 0 to HW filter on device bond10
[  387.277759][ T1348] 8021q: adding VLAN 0 to HW filter on device bond10
[  387.281132][ T1348] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address
[  387.285104][ T1348] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  387.291943][ T1348] bond10: (slave wireguard0): making interface the new active one
[  387.296027][ T1348] wireguard0: entered promiscuous mode
[  387.298616][ T1348] bond10: (slave wireguard0): Enslaving as an active interface with an up link
[  387.315266][ T1343] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address
[  387.322752][ T1343] bond10: (slave wireguard1): Enslaving as a backup interface with an up link
[  387.446627][ T1366] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20001
[  387.477963][ T1369] netlink: 'syz.2.12179': attribute type 1 has an invalid length.
[  387.481659][ T1369] netlink: 'syz.2.12179': attribute type 1 has an invalid length.
[  387.521236][ T1374] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  387.701726][ T1397] veth0_to_bond: entered allmulticast mode
[  387.804875][ T1416] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.852200][ T1416] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.890008][ T1416] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.943214][ T1416] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  388.004242][ T5867] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  388.040476][ T5867] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  388.043822][ T5867] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  388.053873][ T6579] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  388.134734][ T1439] batadv1: entered promiscuous mode
[  388.136890][ T1439] batadv1: entered allmulticast mode
[  388.257597][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  388.400209][ T1447] validate_nla: 1 callbacks suppressed
[  388.400222][ T1447] netlink: 'syz.2.12199': attribute type 1 has an invalid length.
[  388.412569][ T1447] 8021q: adding VLAN 0 to HW filter on device bond8
[  388.423012][ T1447] 8021q: adding VLAN 0 to HW filter on device bond8
[  388.425725][ T1447] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  388.438329][ T1447] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  388.465981][ T1450] macsec2: entered promiscuous mode
[  388.468930][ T1450] team0: entered promiscuous mode
[  388.471188][ T1450] team_slave_0: entered promiscuous mode
[  388.473575][ T1450] team_slave_1: entered promiscuous mode
[  388.522377][ T1451] veth9: entered promiscuous mode
[  388.528214][ T1451] bond8: (slave veth9): Enslaving as an active interface with a down link
[  388.533984][ T1447] 8021q: adding VLAN 0 to HW filter on device bond8
[  388.699068][ T1476] netlink: 'syz.2.12210': attribute type 1 has an invalid length.
[  388.702331][ T1476] netlink: 'syz.2.12210': attribute type 1 has an invalid length.
[  388.772681][ T1480] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  388.776826][ T1480] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  389.065054][ T1508] netlink: 'syz.2.12221': attribute type 11 has an invalid length.
[  389.068827][ T1508] netlink: 'syz.2.12221': attribute type 11 has an invalid length.
[  389.297673][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  389.314954][ T1523] 8021q: VLANs not supported on vxcan1
[  389.459834][ T1537] geneve3: entered promiscuous mode
[  389.463438][ T5867] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.466286][ T5867] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.469421][ T5867] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.472488][ T5867] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.512029][ T1541] netlink: 'syz.2.12233': attribute type 1 has an invalid length.
[  389.680977][ T1552] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  389.718196][ T1562] netlink: 'syz.2.12242': attribute type 1 has an invalid length.
[  389.730026][ T1562] 8021q: adding VLAN 0 to HW filter on device bond9
[  389.768592][ T1569] ksmbd: Unknown IPC event: 3, ignore.
[  390.070494][ T1608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  390.245286][ T1620] veth1_macvtap: entered allmulticast mode
[  390.247344][ T1620] macsec0: left allmulticast mode
[  390.249172][ T1620] veth1_macvtap: left allmulticast mode
[  390.337633][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  390.542003][ T1655] team0: Port device bridge11 removed
[  390.544576][ T1655] bond10: (slave wireguard0): Releasing backup interface
[  390.548714][ T1655] wireguard0: left promiscuous mode
[  390.550517][ T1655] bond10: (slave wireguard1): making interface the new active one
[  390.555901][ T1655] wireguard1: entered promiscuous mode
[  390.563754][ T1655] bond10: (slave wireguard1): Releasing backup interface
[  390.576922][ T1655] wireguard1: left promiscuous mode
[  390.585527][ T1655] netlink: 'syz.0.12266': attribute type 10 has an invalid length.
[  390.588970][ T1655] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  390.592195][ T1655] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  390.803882][ T1667] bond8: (slave veth9): Releasing active interface
[  390.816512][ T1669] lo speed is unknown, defaulting to 1000
[  390.820887][ T1669] lo speed is unknown, defaulting to 1000
[  390.823549][ T1669] lo speed is unknown, defaulting to 1000
[  390.826219][ T1667] team0: Mode changed to "loadbalance"
[  390.830526][ T1669] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  390.841521][ T1669] lo speed is unknown, defaulting to 1000
[  390.844675][ T1669] lo speed is unknown, defaulting to 1000
[  390.852560][ T1669] lo speed is unknown, defaulting to 1000
[  390.856503][ T1669] lo speed is unknown, defaulting to 1000
[  390.862049][ T1669] lo speed is unknown, defaulting to 1000
[  390.867234][ T1671] netlink: 'syz.2.12273': attribute type 1 has an invalid length.
[  390.914009][ T1671] gretap5: entered allmulticast mode
[  390.918745][ T1671] bond10: (slave gretap5): making interface the new active one
[  390.922244][ T1671] bond10: (slave gretap5): Enslaving as an active interface with an up link
[  390.969267][ T1676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.973192][ T1676] __nla_validate_parse: 34 callbacks suppressed
[  390.973206][ T1676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12274'.
[  390.980705][ T1678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12275'.
[  391.151208][ T1684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12276'.
[  391.251878][ T1686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12277'.
[  391.297600][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  391.301692][ T1692] netlink: 108 bytes leftover after parsing attributes in process `syz.2.12279'.
[  391.304976][ T1692] netlink: 108 bytes leftover after parsing attributes in process `syz.2.12279'.
[  391.308926][ T1692] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12279'.
[  391.377734][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  391.401350][ T1703] netpci0: tun_chr_ioctl cmd 2147767507
[  391.513268][ T1713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12288'.
[  391.517031][ T1713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12288'.
[  391.522388][ T1715] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12288'.
[  391.526435][ T1713] netlink: 'syz.0.12288': attribute type 1 has an invalid length.
[  391.529710][ T1715] netlink: 'syz.0.12288': attribute type 1 has an invalid length.
[  391.676420][ T1728] netlink: 'syz.2.12291': attribute type 1 has an invalid length.
[  391.686043][ T1728] 8021q: adding VLAN 0 to HW filter on device bond11
[  391.772337][ T1742] tipc: Resetting bearer <eth:syzkaller0>
[  391.810951][ T1744] dummy0: entered promiscuous mode
[  391.813320][ T1744] dummy0: entered allmulticast mode
[  391.818312][ T1744] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  391.911832][ T6579] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  391.955160][ T1759] 8021q: adding VLAN 0 to HW filter on device bond12
[  392.013195][ T1759] bond0: (slave dummy0): Releasing backup interface
[  392.016329][ T1759] dummy0: left allmulticast mode
[  392.019552][ T1759] dummy0: left promiscuous mode
[  392.029459][ T1759] bond10: (slave gretap5): Releasing active interface
[  392.106394][ T1762] sctp: [Deprecated]: syz.2.12301 (pid 1762) Use of int in max_burst socket option.
[  392.106394][ T1762] Use struct sctp_assoc_value instead
[  392.359759][ T1770] bond0: left promiscuous mode
[  392.365845][ T1770] team0: left allmulticast mode
[  392.369412][ T1770] team0: left promiscuous mode
[  392.401355][ T6579] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.406499][ T6579] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.411507][ T6579] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.415163][ T6579] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.417602][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  392.419419][ T6579] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.425208][ T6579] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.430189][ T6579] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.433652][ T6579] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.724193][ T1775] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  392.838693][ T1789] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  392.843101][ T1789] gretap1: entered promiscuous mode
[  392.881873][ T1791] IPVS: length: 49 != 24
[  393.252573][ T1809] xt_time: unknown flags 0xf4
[  393.457710][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  393.823889][ T1829] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  393.829934][ T1829] tipc: New replicast peer: 255.255.255.255
[  393.832871][ T1829] tipc: Enabled bearer <udp:s>, priority 6
[  393.853763][ T1831] vlan1: entered promiscuous mode
[  393.856130][ T1831] hsr_slave_1: entered promiscuous mode
[  393.859223][ T1831] vlan1: entered allmulticast mode
[  393.861801][ T1831] hsr_slave_1: entered allmulticast mode
[  393.994232][ T1844] validate_nla: 3 callbacks suppressed
[  393.994237][ T1845] netlink: 'syz.0.12328': attribute type 6 has an invalid length.
[  393.994246][ T1844] netlink: 'syz.0.12328': attribute type 6 has an invalid length.
[  394.098246][ T1852] nbd0: detected capacity change from 0 to 63
[  394.101821][ T1857] block nbd0: NBD_DISCONNECT
[  394.104031][ T1857] block nbd0: Disconnected due to user request.
[  394.106970][ T1857] block nbd0: shutting down sockets
[  394.111558][    C0] blk_print_req_error: 135 callbacks suppressed
[  394.111571][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  394.118300][    C0] buffer_io_error: 135 callbacks suppressed
[  394.118308][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  394.123239][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  394.123405][ T1856] syzkaller1: entered promiscuous mode
[  394.126479][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  394.126516][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  394.126525][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  394.126543][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  394.129524][ T1856] syzkaller1: entered allmulticast mode
[  394.131650][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  394.132317][ T8340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  394.150593][ T8340] Buffer I/O error on dev nbd0, logical block 0, async page read
[  394.153799][ T8340] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  394.156976][ T8340] Buffer I/O error on dev nbd0, logical block 1, async page read
[  394.160084][ T8340] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  394.163192][ T8340] Buffer I/O error on dev nbd0, logical block 2, async page read
[  394.165895][ T8340] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  394.170205][ T8340] Buffer I/O error on dev nbd0, logical block 3, async page read
[  394.172974][ T8340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  394.176243][ T8340] Buffer I/O error on dev nbd0, logical block 0, async page read
[  394.182966][ T8340] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  394.186726][ T8340] Buffer I/O error on dev nbd0, logical block 1, async page read
[  394.192909][ T8340] ldm_validate_partition_table(): Disk read failed.
[  394.199356][ T8340] Dev nbd0: unable to read RDB block 0
[  394.202764][ T8340]  nbd0: unable to read partition table
[  394.219842][ T8340] ldm_validate_partition_table(): Disk read failed.
[  394.223843][ T8340] Dev nbd0: unable to read RDB block 0
[  394.229413][ T8340]  nbd0: unable to read partition table
[  394.326537][ T1866] smc: net device bond0 applied user defined pnetid SYZ2
[  394.507584][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  394.740298][ T1897] wireguard0: entered promiscuous mode
[  394.743077][ T1897] wireguard0: entered allmulticast mode
[  394.925532][ T1902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  394.929731][ T1902] syzkaller0: entered promiscuous mode
[  394.931755][ T1902] syzkaller0: entered allmulticast mode
[  394.939631][ T1902] tipc: Resetting bearer <eth:syzkaller0>
[  394.943015][ T1901] tipc: Resetting bearer <eth:syzkaller0>
[  394.947121][ T1901] tipc: Disabling bearer <eth:syzkaller0>
[  395.387291][ T1931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.437142][ T1936] netlink: 'syz.1.12357': attribute type 10 has an invalid length.
[  395.437143][ T1935] netlink: 'syz.1.12357': attribute type 10 has an invalid length.
[  395.439275][ T1935] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  395.537644][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  395.620915][ T1945] netlink: 'syz.1.12360': attribute type 5 has an invalid length.
[  395.915485][ T1975] ip6tnl1: entered promiscuous mode
[  395.917944][ T1975] ip6tnl1: entered allmulticast mode
[  395.920936][ T1975] team0: Device ip6tnl1 is of different type
[  396.394945][ T1996] __nla_validate_parse: 31 callbacks suppressed
[  396.394989][ T1996] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12377'.
[  396.577728][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  397.160402][ T2033] vxcan1: entered allmulticast mode
[  397.163054][ T2033] vxcan1: left allmulticast mode
[  397.189920][ T2034] team0: left promiscuous mode
[  397.196785][ T2034] team_slave_0: left promiscuous mode
[  397.206633][ T2034] team_slave_1: left promiscuous mode
[  397.222689][T13657] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.229849][T13657] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.233603][T13657] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.237184][T13657] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.323923][ T2038] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12389'.
[  397.347534][ T2038] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12389'.
[  397.351525][ T2038] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12389'.
[  397.359390][ T2038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12389'.
[  397.425828][ T2038] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  397.555697][ T2046] syzkaller1: entered allmulticast mode
[  397.617632][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  397.666122][ T2051] syzkaller1: entered promiscuous mode
[  397.670883][ T2051] syzkaller1: entered allmulticast mode
[  397.835874][ T2060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12397'.
[  397.879922][ T2065] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  397.897263][ T2067] lo speed is unknown, defaulting to 1000
[  397.899628][ T2067] lo speed is unknown, defaulting to 1000
[  397.901795][ T2067] lo speed is unknown, defaulting to 1000
[  397.906103][ T2067] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  397.906182][    C1] ==================================================================
[  397.911860][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  397.914627][    C1] Write of size 8 at addr ffff888125cd3ab0 by task swapper/1/0
[  397.917817][    C1] 
[  397.919007][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  397.919017][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  397.919022][    C1] Call Trace:
[  397.919027][    C1]  <IRQ>
[  397.919030][    C1]  dump_stack_lvl+0x189/0x250
[  397.919041][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  397.919050][    C1]  ? rcu_is_watching+0x15/0xb0
[  397.919057][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  397.919064][    C1]  ? rcu_is_watching+0x15/0xb0
[  397.919091][    C1]  ? lock_release+0x4b/0x3e0
[  397.919104][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  397.919112][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  397.919120][    C1]  print_report+0xca/0x240
[  397.919130][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  397.919136][    C1]  kasan_report+0x118/0x150
[  397.919146][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  397.919153][    C1]  __xfrm_state_delete+0x696/0xca0
[  397.919162][    C1]  xfrm_timer_handler+0x18f/0xa00
[  397.919169][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  397.919175][    C1]  ? rcu_is_watching+0x15/0xb0
[  397.919181][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  397.919191][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  397.919200][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  397.919206][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  397.919212][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  397.919222][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  397.919228][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  397.919236][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  397.919243][    C1]  handle_softirqs+0x286/0x870
[  397.919253][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  397.919260][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  397.919267][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  397.919275][    C1]  __irq_exit_rcu+0xca/0x1f0
[  397.919281][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  397.919289][    C1]  irq_exit_rcu+0x9/0x30
[  397.919294][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  397.919305][    C1]  </IRQ>
[  397.919307][    C1]  <TASK>
[  397.919310][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  397.919317][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  397.919327][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 36 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  397.919333][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  397.919340][    C1] RAX: 604f732a7363c800 RBX: ffffffff819683b8 RCX: 604f732a7363c800
[  397.919346][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  397.919350][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  397.919358][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38530
[  397.919362][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  397.919368][    C1]  ? do_idle+0x1e8/0x510
[  397.919375][    C1]  ? do_idle+0x1e8/0x510
[  397.919381][    C1]  default_idle+0x13/0x20
[  397.919388][    C1]  default_idle_call+0x74/0xb0
[  397.919394][    C1]  do_idle+0x1e8/0x510
[  397.919401][    C1]  ? __pfx_do_idle+0x10/0x10
[  397.919409][    C1]  cpu_startup_entry+0x44/0x60
[  397.919415][    C1]  start_secondary+0x101/0x110
[  397.919425][    C1]  common_startup_64+0x13e/0x147
[  397.919436][    C1]  </TASK>
[  397.919439][    C1] 
[  398.036227][    C1] Allocated by task 32424:
[  398.037808][    C1]  kasan_save_track+0x3e/0x80
[  398.039409][    C1]  __kasan_slab_alloc+0x6c/0x80
[  398.041098][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  398.043040][    C1]  xfrm_state_alloc+0x24/0x2f0
[  398.044731][    C1]  __find_acq_core+0x8a7/0x1c00
[  398.046457][    C1]  xfrm_find_acq+0x78/0xa0
[  398.048015][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  398.050150][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  398.052243][    C1]  netlink_rcv_skb+0x208/0x470
[  398.054382][    C1]  xfrm_netlink_rcv+0x79/0x90
[  398.056409][    C1]  netlink_unicast+0x82f/0x9e0
[  398.058366][    C1]  netlink_sendmsg+0x805/0xb30
[  398.059980][    C1]  __sock_sendmsg+0x21c/0x270
[  398.061593][    C1]  ____sys_sendmsg+0x505/0x830
[  398.063235][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  398.065145][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  398.067232][    C1]  do_syscall_64+0xfa/0x3b0
[  398.068913][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.070931][    C1] 
[  398.071757][    C1] Freed by task 51:
[  398.073094][    C1]  kasan_save_track+0x3e/0x80
[  398.074989][    C1]  kasan_save_free_info+0x46/0x50
[  398.077133][    C1]  __kasan_slab_free+0x5b/0x80
[  398.078985][    C1]  kmem_cache_free+0x18f/0x400
[  398.080743][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  398.082679][    C1]  process_scheduled_works+0xae1/0x17b0
[  398.084825][    C1]  worker_thread+0x8a0/0xda0
[  398.086863][    C1]  kthread+0x711/0x8a0
[  398.088537][    C1]  ret_from_fork+0x3fc/0x770
[  398.090395][    C1]  ret_from_fork_asm+0x1a/0x30
[  398.092463][    C1] 
[  398.093544][    C1] The buggy address belongs to the object at ffff888125cd3a80
[  398.093544][    C1]  which belongs to the cache xfrm_state of size 928
[  398.099212][    C1] The buggy address is located 48 bytes inside of
[  398.099212][    C1]  freed 928-byte region [ffff888125cd3a80, ffff888125cd3e20)
[  398.104862][    C1] 
[  398.105830][    C1] The buggy address belongs to the physical page:
[  398.108155][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x125cd0
[  398.111378][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  398.114351][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  398.116992][    C1] page_type: f5(slab)
[  398.118357][    C1] raw: 057ff00000000040 ffff88801c357b40 dead000000000122 0000000000000000
[  398.121237][    C1] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  398.124165][    C1] head: 057ff00000000040 ffff88801c357b40 dead000000000122 0000000000000000
[  398.127040][    C1] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  398.129955][    C1] head: 057ff00000000002 ffffea0004973401 00000000ffffffff 00000000ffffffff
[  398.132857][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  398.135652][    C1] page dumped because: kasan: bad access detected
[  398.137763][    C1] page_owner tracks the page as allocated
[  398.139681][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 30056, tgid 30055 (syz.1.10554), ts 336944546724, free_ts 327786456230
[  398.146676][    C1]  post_alloc_hook+0x240/0x2a0
[  398.148635][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  398.150696][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  398.152725][    C1]  alloc_pages_mpol+0x232/0x4a0
[  398.154468][    C1]  allocate_slab+0x8a/0x370
[  398.156048][    C1]  ___slab_alloc+0xbeb/0x1410
[  398.157699][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  398.159575][    C1]  xfrm_state_alloc+0x24/0x2f0
[  398.161310][    C1]  xfrm_state_find+0x37d4/0x5400
[  398.162996][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  398.165257][    C1]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  398.167122][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  398.168768][    C1]  rawv6_sendmsg+0xdab/0x1820
[  398.170402][    C1]  __sock_sendmsg+0x19c/0x270
[  398.172088][    C1]  ____sys_sendmsg+0x52d/0x830
[  398.173717][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  398.175559][    C1] page last free pid 29374 tgid 29374 stack trace:
[  398.178149][    C1]  __free_frozen_pages+0xbc4/0xd30
[  398.179829][    C1]  __slab_free+0x303/0x3c0
[  398.181323][    C1]  qlist_free_all+0x97/0x140
[  398.182885][    C1]  kasan_quarantine_reduce+0x148/0x160
[  398.184794][    C1]  __kasan_slab_alloc+0x22/0x80
[  398.186703][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  398.188824][    C1]  vm_area_dup+0x2b/0x680
[  398.190441][    C1]  __split_vma+0x1a9/0xa00
[  398.192098][    C1]  vma_modify+0x13b3/0x1970
[  398.193910][    C1]  vma_modify_flags+0x1e8/0x230
[  398.195835][    C1]  mprotect_fixup+0x407/0x9c0
[  398.197732][    C1]  do_mprotect_pkey+0x8cd/0xce0
[  398.199720][    C1]  __x64_sys_mprotect+0x80/0x90
[  398.201463][    C1]  do_syscall_64+0xfa/0x3b0
[  398.203064][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.205328][    C1] 
[  398.206287][    C1] Memory state around the buggy address:
[  398.208430][    C1]  ffff888125cd3980: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  398.211440][    C1]  ffff888125cd3a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  398.214430][    C1] >ffff888125cd3a80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  398.217217][    C1]                                      ^
[  398.219256][    C1]  ffff888125cd3b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  398.222520][    C1]  ffff888125cd3b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  398.225592][    C1] ==================================================================
[  398.228985][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  398.231456][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  398.234443][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  398.238536][    C1] Call Trace:
[  398.239972][    C1]  <IRQ>
[  398.241240][    C1]  dump_stack_lvl+0x99/0x250
[  398.243224][    C1]  ? __asan_memcpy+0x40/0x70
[  398.245288][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  398.247553][    C1]  ? __pfx__printk+0x10/0x10
[  398.249195][    C1]  vpanic+0x281/0x750
[  398.250549][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  398.252350][    C1]  ? __pfx_vpanic+0x10/0x10
[  398.253967][    C1]  panic+0xb9/0xc0
[  398.255646][    C1]  ? __pfx_panic+0x10/0x10
[  398.257529][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  398.260054][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  398.262771][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  398.265234][    C1]  check_panic_on_warn+0x89/0xb0
[  398.267471][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  398.269807][    C1]  end_report+0x78/0x160
[  398.271734][    C1]  kasan_report+0x129/0x150
[  398.273701][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  398.276048][    C1]  __xfrm_state_delete+0x696/0xca0
[  398.278331][    C1]  xfrm_timer_handler+0x18f/0xa00
[  398.280551][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  398.283003][    C1]  ? rcu_is_watching+0x15/0xb0
[  398.285050][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  398.287606][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  398.290410][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  398.292863][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  398.295181][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  398.297359][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  398.299680][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  398.301729][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  398.303495][    C1]  handle_softirqs+0x286/0x870
[  398.305133][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  398.306845][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  398.308792][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  398.310705][    C1]  __irq_exit_rcu+0xca/0x1f0
[  398.312373][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  398.314159][    C1]  irq_exit_rcu+0x9/0x30
[  398.315566][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  398.317857][    C1]  </IRQ>
[  398.319097][    C1]  <TASK>
[  398.320177][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  398.322330][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  398.324435][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 36 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  398.331821][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  398.333961][    C1] RAX: 604f732a7363c800 RBX: ffffffff819683b8 RCX: 604f732a7363c800
[  398.337287][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  398.340086][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  398.342890][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38530
[  398.345577][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  398.348398][    C1]  ? do_idle+0x1e8/0x510
[  398.350013][    C1]  ? do_idle+0x1e8/0x510
[  398.351719][    C1]  default_idle+0x13/0x20
[  398.353238][    C1]  default_idle_call+0x74/0xb0
[  398.355210][    C1]  do_idle+0x1e8/0x510
[  398.356746][    C1]  ? __pfx_do_idle+0x10/0x10
[  398.358524][    C1]  cpu_startup_entry+0x44/0x60
[  398.360183][    C1]  start_secondary+0x101/0x110
[  398.361818][    C1]  common_startup_64+0x13e/0x147
[  398.363525][    C1]  </TASK>
[  398.365347][    C1] Kernel Offset: disabled
[  398.366831][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:04:37  Registers:
info registers vcpu 0

CPU#0
RAX=d09d2c24f3e35600 RBX=ffffffff819683b8 RCX=d09d2c24f3e35600 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38530 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79f3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0497574c40 CR3=00000001117cc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=006b636f73762d74 736f68762f766564
XMM02=d0183679d5becd43 fd91228ccc34acae XMM03=add01e260fc39b77 b1bdfa2babca0d91
XMM04=da629b22ed873a07 0a09eab0436aace2 XMM05=2b1c1014611ce039 8c79700ac81b3827
XMM06=6b427d2d428d6bbb 0bfd1adfd86ae8ca XMM07=fc9274886b4cda62 9b22ed873a070a09
XMM08=eab0436aace2add0 1e260fc39b77b1bd XMM09=0000000000000000 00007fd335812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff888021218237 R9 =1ffff11004243046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb8cb R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2810ab CR3=0000000043e92000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000001010a00 000000280a000000
XMM02=307a797300010009 00000002d5ff1a5e XMM03=0000002c03000000 4002000800000000
XMM04=0100110000001400 000000327a797300 XMM05=0300090000000030 7a79730001000900
XMM06=00000200000000ff e6000003010a0300 XMM07=00002c0300000040 0200080000000030
XMM08=0000000000000000 00007f5379412ee7 XMM09=0000000000000000 00007f5379412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
