last executing test programs:

43.211311555s ago: executing program 2 (id=2239):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_bridge\x00'}]}, 0x3c}}, 0x0)

43.209045396s ago: executing program 2 (id=2241):
unshare(0x2c020400)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00')
ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0)

43.147174419s ago: executing program 2 (id=2243):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0xa)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9)
splice(r0, 0x0, r3, 0x0, 0x4, 0x9)

43.080118572s ago: executing program 2 (id=2245):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001700)=@newtaction={0x44, 0x5a, 0x1, 0xffffff7c, 0x25dfdbfa, {0x2}, [{0x30, 0x1, [@m_ct={0x2c, 0x1f, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0x44}}, 0x8080)

43.020077749s ago: executing program 2 (id=2247):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210b0000000000000000670000000c00240100"], 0x20}}, 0x0)

42.891502061s ago: executing program 2 (id=2251):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000200)=[{r1, 0xc210}, {r2, 0x116}], 0x2, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1)

42.763524026s ago: executing program 32 (id=2251):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000200)=[{r1, 0xc210}, {r2, 0x116}], 0x2, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1)

428.944369ms ago: executing program 1 (id=3333):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006e00)={0x3c, 0x3e, 0xc4faffb10e5e520f, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@nested={0x14, 0x14, 0x0, 0x1, [@nested={0x10, 0x19, 0x0, 0x1, [@typed={0xc, 0x23, 0x0, 0x0, @u64=0xb}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001180)='pimreg\x00', 0x10)
r5 = socket$kcm(0x2, 0xa, 0x2)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280)=0x6, 0x4)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fcdbdf250e00000008000300", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$sock_int(r5, 0x1, 0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r10, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1)
r11 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r11, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r11, 0x0)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982900fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xfce)

428.823267ms ago: executing program 3 (id=3334):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x5, 0x1, 0x3fd2}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

365.073261ms ago: executing program 3 (id=3337):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000010c0)={'veth1_vlan\x00', &(0x7f0000000fc0)=@ethtool_rxnfc={0x29, 0x12, 0x7, {0x2, @sctp_ip4_spec={@local, @loopback, 0x4e22, 0x4e20}, {0x0, @multicast, 0x1, 0xfffd, [0x401, 0x8000]}, @esp_ip4_spec={@broadcast, @dev={0xac, 0x14, 0x14, 0x44}, 0x1, 0xc}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x2fcd, 0x4, [0xc0000, 0x9f1]}, 0x800, 0x1}}})

364.535788ms ago: executing program 3 (id=3339):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x80)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

312.142934ms ago: executing program 3 (id=3340):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x40}, 0x20000000)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
unshare(0x6a060000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0xffffffff000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084fdffffff0a0000000200000000000022000000000000000105"], 0x0, 0x4c}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="010802040000000000000b0000000800", @ANYRES32=r7, @ANYRES8=r5], 0x44}}, 0x41)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4020010)
r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x300, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
read(r8, &(0x7f0000000180)=""/64, 0x40)
getsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f0000000000)={@empty}, &(0x7f0000000040)=0x14)

298.348179ms ago: executing program 1 (id=3341):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000002bc0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x1, [{@empty, 0x2}, {@multicast1, 0x80000000}, {@multicast2, 0xffff}]}]}}}], 0x30}}], 0x1, 0x0)

210.232591ms ago: executing program 1 (id=3342):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2001})
close(r0)

209.789447ms ago: executing program 0 (id=3344):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0xc0, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x84}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0xc0}}, 0x0)

128.596755ms ago: executing program 0 (id=3345):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="43bdb4c7", 0x4)

128.393216ms ago: executing program 0 (id=3346):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000540)=0x25)

128.169509ms ago: executing program 1 (id=3347):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

80.654413ms ago: executing program 0 (id=3348):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080)

80.466897ms ago: executing program 0 (id=3349):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x4002, 0x2310e}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc810)

1.719663ms ago: executing program 1 (id=3350):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000500)="0d81c81d98", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

1.415212ms ago: executing program 0 (id=3351):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)

1.099724ms ago: executing program 3 (id=3352):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x12, 0x0, &(0x7f0000001a00)="2000cb3c0000000022385ba988a88dc288a8", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

852.762µs ago: executing program 1 (id=3353):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

0s ago: executing program 3 (id=3354):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)

kernel console output (not intermixed with test programs):

device bond1
[   64.865411][ T6252] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.872076][ T6252] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[   64.876503][ T6252] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   64.885116][ T6252] bond1: (slave wireguard0): making interface the new active one
[   64.888775][ T6252] wireguard0: entered promiscuous mode
[   64.894428][ T6252] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[   64.909764][ T6252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   64.913412][ T6252] IPv6: NLM_F_CREATE should be set when creating new route
[   64.916511][ T6252] IPv6: NLM_F_CREATE should be set when creating new route
[   64.927978][ T6252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   64.937459][ T6252] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[   64.947140][ T6252] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[   65.105088][ T6272] netlink: 52 bytes leftover after parsing attributes in process `syz.2.146'.
[   65.108726][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'.
[   65.131963][ T6277] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.149'.
[   65.187591][ T6282] netlink: 'syz.0.152': attribute type 3 has an invalid length.
[   65.197444][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'.
[   65.311669][ T6290] netlink: 288 bytes leftover after parsing attributes in process `syz.1.154'.
[   65.426206][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'.
[   65.587818][ T6307] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.593356][ T6307] bond0: (slave bond1): Enslaving as an active interface with an up link
[   66.665676][ T6357] sctp: [Deprecated]: syz.2.184 (pid 6357) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.665676][ T6357] Use struct sctp_sack_info instead
[   67.123631][ T6384] smc: net device bond0 applied user defined pnetid SYZ2
[   67.269438][ T6397] wg1: entered promiscuous mode
[   67.272709][ T6397] wg1: entered allmulticast mode
[   68.585760][ T6484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.862787][ T6509] __nla_validate_parse: 13 callbacks suppressed
[   68.862801][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'.
[   68.958313][ T6513] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[   68.988492][ T6513] bond2: (slave vxcan1): Error -95 calling set_mac_address
[   69.057546][ T6509] macvlan2: entered promiscuous mode
[   69.059326][ T6509] macvlan2: entered allmulticast mode
[   69.061801][ T6509] bond2: (slave macvlan2): Error -98 calling set_mac_address
[   69.226458][ T6528] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   69.407338][ T6542] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   70.578083][ T6583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.286'.
[   71.006678][ T6607] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   71.053786][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'.
[   71.124123][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.254537][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'.
[   71.434084][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'.
[   71.437625][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'.
[   71.458257][ T6620] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   71.473410][ T6620] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   71.486508][ T6628] netlink: 'syz.0.304': attribute type 4 has an invalid length.
[   71.494578][ T6628] netlink: 'syz.0.304': attribute type 4 has an invalid length.
[   71.665970][ T6639] batadv_slave_1: entered promiscuous mode
[   71.684814][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.307'.
[   71.692272][ T6638] batadv_slave_1: left promiscuous mode
[   72.021138][ T6658] team0 (unregistering): Port device team_slave_0 removed
[   72.024767][ T6658] team0 (unregistering): Port device team_slave_1 removed
[   72.053419][ T6662] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   72.088444][ T6662] tipc: Resetting bearer <eth:syzkaller0>
[   72.130117][ T6661] tipc: Resetting bearer <eth:syzkaller0>
[   72.188845][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'.
[   72.870230][ T6661] tipc: Disabling bearer <eth:syzkaller0>
[   72.989490][ T6680] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[   73.044735][ T6680] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.067568][ T6680] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.071016][ T6680] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[   73.081902][ T6680] bond3: (slave vxcan1): Error -95 calling set_mac_address
[   73.149357][ T6687] veth3: entered promiscuous mode
[   73.157092][ T6687] bond3: (slave veth3): Enslaving as an active interface with a down link
[   73.184574][ T6680] erspan0: entered allmulticast mode
[   73.198355][ T6680] bond3: (slave erspan0): making interface the new active one
[   73.226539][ T6680] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   73.242314][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'.
[   73.279493][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'.
[   73.371271][ T6706] vxlan0: entered promiscuous mode
[   73.373038][ T6706] vxlan0: entered allmulticast mode
[   73.375140][ T5859] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.378947][ T5859] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.390897][ T5859] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.393821][ T5859] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.430746][ T6711] Bluetooth: MGMT ver 1.23
[   73.652329][ T6735] vlan2: entered promiscuous mode
[   73.660546][ T6735] vlan2: entered allmulticast mode
[   73.663401][ T6735] hsr_slave_1: entered allmulticast mode
[   74.092400][ T6767] netlink: 'syz.2.367': attribute type 83 has an invalid length.
[   74.396884][ T6783] delete_channel: no stack
[   74.400363][ T6784] __nla_validate_parse: 1 callbacks suppressed
[   74.400371][ T6784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.373'.
[   74.555859][ T6794] netlink: 'syz.2.377': attribute type 16 has an invalid length.
[   74.558996][ T6794] netlink: 'syz.2.377': attribute type 17 has an invalid length.
[   74.601818][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.604844][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.665760][ T6800] IPv6: NLM_F_REPLACE set, but no existing node found!
[   74.693738][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.703314][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.840240][ T6807] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.384'.
[   74.859089][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'.
[   74.876009][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.879585][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.883830][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.887274][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.088929][ T6819] bridge_slave_0: invalid flags given to default FDB implementation
[   75.380589][ T6832] netlink: 'syz.2.393': attribute type 29 has an invalid length.
[   75.384251][ T6832] netlink: 'syz.2.393': attribute type 29 has an invalid length.
[   75.388315][ T6832] netlink: 500 bytes leftover after parsing attributes in process `syz.2.393'.
[   75.395201][ T6832] unsupported nla_type 58
[   75.510153][ T5852] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   75.513619][ T5852] Bluetooth: hci2: command 0x0401 tx timeout
[   75.535162][ T6839] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   75.577868][ T6839] bond0: (slave bond_slave_0): Releasing backup interface
[   75.585036][ T6839] bond0: (slave bond_slave_1): Releasing backup interface
[   75.599495][ T6839] team0: Port device team_slave_0 removed
[   75.609456][ T6839] team0: Port device team_slave_1 removed
[   75.613195][ T6839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.616058][ T6839] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.622737][ T6839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.626751][ T6839] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.664709][ T6839] netlink: 'syz.1.395': attribute type 10 has an invalid length.
[   75.667496][ T6839] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   75.676240][ T6839] bond0: (slave wlan1): refused to change device type
[   75.719227][ T6851] netlink: 132 bytes leftover after parsing attributes in process `syz.2.400'.
[   76.131772][ T6868] syz_tun: entered allmulticast mode
[   76.137994][ T6867] syz_tun: left allmulticast mode
[   76.247001][ T6874] tipc: Started in network mode
[   76.249523][ T6874] tipc: Node identity ac14140f, cluster identity 4711
[   76.271874][ T6874] tipc: New replicast peer: 255.255.255.255
[   76.278352][ T6874] tipc: Enabled bearer <udp:syz2>, priority 10
[   76.285778][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'.
[   76.344622][ T3146] cfg80211: failed to load regulatory.db
[   76.364405][ T6839] syz.1.395 (6839) used greatest stack depth: 19864 bytes left
[   77.185496][ T6878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'.
[   77.196828][ T6878] openvswitch: netlink: Flow actions attr not present in new flow.
[   77.290213][ T5911] tipc: Node number set to 2886997007
[   77.323171][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'.
[   77.513051][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'.
[   77.686437][ T5911] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/2
[   77.700450][ T5911] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22
[   77.733853][ T6913] erspan0: left allmulticast mode
[   77.744448][ T6913] bond1: left promiscuous mode
[   77.746609][ T6913] wireguard0: left promiscuous mode
[   77.751280][ T6913] veth3: left promiscuous mode
[   78.100616][ T6933] syzkaller1: entered promiscuous mode
[   78.102822][ T6933] syzkaller1: entered allmulticast mode
[   78.111451][ T6935] sctp: [Deprecated]: syz.2.437 (pid 6935) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.111451][ T6935] Use struct sctp_sack_info instead
[   78.437227][ T6954] netlink: 76 bytes leftover after parsing attributes in process `syz.2.445'.
[   78.813689][ T6963] bond0: entered promiscuous mode
[   78.815988][ T6963] bond_slave_0: entered promiscuous mode
[   78.818527][ T6963] bond_slave_1: entered promiscuous mode
[   78.944539][ T6969] netlink: 'syz.2.451': attribute type 12 has an invalid length.
[   79.279850][ T6984] bond0: option mode: unable to set because the bond device has slaves
[   79.396928][ T6993] netlink: 'syz.2.462': attribute type 29 has an invalid length.
[   79.416048][ T6993] netlink: 'syz.2.462': attribute type 29 has an invalid length.
[   79.419615][ T6993] netlink: 'syz.2.462': attribute type 29 has an invalid length.
[   79.424794][ T6993] netlink: 'syz.2.462': attribute type 29 has an invalid length.
[   79.428209][ T6993] netlink: 'syz.2.462': attribute type 29 has an invalid length.
[   79.435623][ T6993] netlink: 'syz.2.462': attribute type 29 has an invalid length.
[   79.438504][ T6993] netlink: 'syz.2.462': attribute type 29 has an invalid length.
[   79.442244][ T6993] netlink: 'syz.2.462': attribute type 29 has an invalid length.
[   79.445413][ T6993] netlink: 'syz.2.462': attribute type 29 has an invalid length.
[   79.469335][ T6997] __nla_validate_parse: 1 callbacks suppressed
[   79.469344][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'.
[   79.630242][ T7005] netlink: 96 bytes leftover after parsing attributes in process `syz.1.468'.
[   79.646854][ T7005] vlan2: entered allmulticast mode
[   79.649034][ T7005] gretap0: entered allmulticast mode
[   79.765268][ T7011] nbd: couldn't find device at index 536870912
[   79.768514][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.471'.
[   80.045135][ T7022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.395231][ T7031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.480'.
[   80.398710][ T7031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.480'.
[   80.919362][ T7073] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   80.935772][ T7077] gretap1: entered promiscuous mode
[   80.937481][ T7077] gretap1: entered allmulticast mode
[   80.964962][ T7079] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   81.030826][ T7083] bond0: Device is already in use.
[   81.286828][ T7103] bridge: RTM_NEWNEIGH with invalid ether address
[   81.693721][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'.
[   81.942239][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'.
[   82.042561][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.547'.
[   82.371909][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'.
[   82.374759][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'.
[   82.413937][ T7197] nbd: socks must be embedded in a SOCK_ITEM attr
[   82.417111][ T7197] block nbd0: shutting down sockets
[   82.812487][ T7231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.035681][ T7308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.498868][ T7339] __nla_validate_parse: 4 callbacks suppressed
[   84.498882][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'.
[   84.626433][ T7343] netlink: 256 bytes leftover after parsing attributes in process `syz.2.627'.
[   84.767045][ T7355] validate_nla: 24 callbacks suppressed
[   84.767059][ T7355] netlink: 'syz.2.633': attribute type 1 has an invalid length.
[   85.515513][ T7387] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   85.523862][ T7385] x9ytes_recu: renamed from bridge_slave_0
[   85.813454][ T7403] syzkaller0: entered promiscuous mode
[   85.820493][ T7403] syzkaller0: entered allmulticast mode
[   86.978354][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'.
[   86.978702][ T7447] netlink: 'syz.0.674': attribute type 17 has an invalid length.
[   87.586883][ T7447] netlink: 2 bytes leftover after parsing attributes in process `syz.0.674'.
[   87.593586][ T7447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.825826][ T7472] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   87.982494][ T7490] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.694'.
[   88.112653][ T7505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.701'.
[   88.115655][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'.
[   88.130731][ T7505] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   88.888265][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'.
[   89.538265][ T7626] netlink: 'syz.2.736': attribute type 1 has an invalid length.
[   89.549167][ T7626] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.736'.
[   89.915370][ T7669] netlink: 'syz.2.745': attribute type 74 has an invalid length.
[   90.343171][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'.
[   90.353630][ T7714] macvtap1: entered promiscuous mode
[   90.355832][ T7714] erspan0: entered promiscuous mode
[   90.358209][ T7714] macvtap1: entered allmulticast mode
[   90.361248][ T7714] erspan0: entered allmulticast mode
[   90.371448][ T7714] erspan0: left allmulticast mode
[   90.373636][ T7714] erspan0: left promiscuous mode
[   90.406362][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'.
[   90.463152][ T7720] netlink: 348 bytes leftover after parsing attributes in process `syz.0.764'.
[   90.609619][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'.
[   90.675262][ T7739] netlink: 156 bytes leftover after parsing attributes in process `syz.2.772'.
[   90.886935][ T7759] netlink: 'syz.2.783': attribute type 2 has an invalid length.
[   90.889790][ T7759] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.783'.
[   91.093782][ T7775] netlink: 'syz.0.790': attribute type 21 has an invalid length.
[   91.108293][ T7776] netlink: 'syz.1.791': attribute type 83 has an invalid length.
[   91.112654][ T7775] netlink: 'syz.0.790': attribute type 1 has an invalid length.
[   91.844033][ T7812] netlink: 'syz.2.805': attribute type 4 has an invalid length.
[   93.204573][ T7856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.307400][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'.
[   93.833463][ T7926] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 2, id = 0
[   93.946481][ T7938] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   93.999715][ T3146] IPVS: starting estimator thread 0...
[   94.081461][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'.
[   94.085286][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'.
[   94.092937][ T7942] IPVS: using max 79 ests per chain, 189600 per kthread
[   94.214191][ T5877] IPVS: stop unused estimator thread 0...
[   95.745851][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'.
[   95.806835][ T8029] tipc: Enabled bearer <eth:macvtap0>, priority 10
[   95.837029][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'.
[   95.976034][ T8038] GUP no longer grows the stack in syz.2.903 (8038): 200000003000-20000000a000 (200000001000)
[   95.980019][ T8038] CPU: 0 UID: 0 PID: 8038 Comm: syz.2.903 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   95.980031][ T8038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.980036][ T8038] Call Trace:
[   95.980039][ T8038]  <TASK>
[   95.980043][ T8038]  dump_stack_lvl+0x189/0x250
[   95.980058][ T8038]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.980067][ T8038]  ? __pfx__printk+0x10/0x10
[   95.980076][ T8038]  ? find_vma+0xe7/0x160
[   95.980086][ T8038]  ? __lock_acquire+0xab9/0xd20
[   95.980101][ T8038]  __get_user_pages+0x24d0/0x2ce0
[   95.980111][ T8038]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[   95.980131][ T8038]  ? rcu_is_watching+0x15/0xb0
[   95.980141][ T8038]  __gup_longterm_locked+0xde9/0x1660
[   95.980155][ T8038]  ? sanity_check_pinned_pages+0x123a/0x1300
[   95.980167][ T8038]  gup_fast_fallback+0x1e6a/0x2010
[   95.980189][ T8038]  ? __pfx_gup_fast_fallback+0x10/0x10
[   95.980203][ T8038]  ? pin_user_pages_fast+0x4d/0xb0
[   95.980217][ T8038]  iov_iter_extract_pages+0x35a/0x5e0
[   95.980234][ T8038]  extract_iter_to_sg+0xe46/0x24e0
[   95.980258][ T8038]  ? __pfx_extract_iter_to_sg+0x10/0x10
[   95.980286][ T8038]  ? __asan_memset+0x22/0x50
[   95.980302][ T8038]  af_alg_get_rsgl+0x436/0x810
[   95.980327][ T8038]  aead_recvmsg+0x4cc/0x13f0
[   95.980348][ T8038]  ? rcu_is_watching+0x15/0xb0
[   95.980366][ T8038]  ? __pfx_aead_recvmsg+0x10/0x10
[   95.980383][ T8038]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[   95.980397][ T8038]  ? __pfx_aead_recvmsg+0x10/0x10
[   95.980413][ T8038]  sock_recvmsg_nosec+0x186/0x1c0
[   95.980430][ T8038]  ____sys_recvmsg+0x3aa/0x460
[   95.980454][ T8038]  ? __pfx_____sys_recvmsg+0x10/0x10
[   95.980482][ T8038]  ? import_iovec+0x74/0xa0
[   95.980497][ T8038]  ___sys_recvmsg+0x1b5/0x510
[   95.980519][ T8038]  ? __pfx____sys_recvmsg+0x10/0x10
[   95.980554][ T8038]  ? __might_fault+0xb0/0x130
[   95.980569][ T8038]  do_recvmmsg+0x307/0x770
[   95.980591][ T8038]  ? __pfx_do_recvmmsg+0x10/0x10
[   95.980606][ T8038]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[   95.980631][ T8038]  ? __pfx_do_futex+0x10/0x10
[   95.980657][ T8038]  __x64_sys_recvmmsg+0x190/0x240
[   95.980673][ T8038]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[   95.980682][ T8038]  ? rcu_is_watching+0x15/0xb0
[   95.980707][ T8038]  ? do_syscall_64+0xbe/0x3b0
[   95.980754][ T8038]  do_syscall_64+0xfa/0x3b0
[   95.980767][ T8038]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.980782][ T8038]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.980793][ T8038]  ? exc_page_fault+0x9f/0xf0
[   95.980808][ T8038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.980818][ T8038] RIP: 0033:0x7fc3bf38ebe9
[   95.980829][ T8038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.980838][ T8038] RSP: 002b:00007fc3c0273038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   95.980851][ T8038] RAX: ffffffffffffffda RBX: 00007fc3bf5b5fa0 RCX: 00007fc3bf38ebe9
[   95.980860][ T8038] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[   95.980867][ T8038] RBP: 00007fc3bf411e19 R08: 0000000000000000 R09: 0000000000000000
[   95.980874][ T8038] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[   95.980881][ T8038] R13: 00007fc3bf5b6038 R14: 00007fc3bf5b5fa0 R15: 00007ffd98c76208
[   95.980902][ T8038]  </TASK>
[   96.246505][ T8050] netlink: 'syz.2.909': attribute type 1 has an invalid length.
[   96.251158][ T8050] netlink: 216 bytes leftover after parsing attributes in process `syz.2.909'.
[   96.366839][ T8062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.915'.
[   96.500269][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.921'.
[   96.503908][ T8078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.921'.
[   96.840132][ T5911] tipc: Node number set to 3603080708
[   96.906667][ T8103] netlink: 'syz.0.931': attribute type 1 has an invalid length.
[   96.910351][ T8103] netlink: 120 bytes leftover after parsing attributes in process `syz.0.931'.
[   97.265171][ T8122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.285991][ T8122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.940'.
[   97.600036][ T8130] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   97.760336][ T8141] netlink: 92 bytes leftover after parsing attributes in process `syz.2.948'.
[   97.764108][ T8141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.948'.
[   98.201821][ T8174] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   98.205436][ T8174] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   98.326955][ T8189] tls_set_device_offload_rx: netdev not found
[   98.484802][ T8208] trusted_key: syz.0.977 sent an empty control message without MSG_MORE.
[  100.084117][ T8319] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  100.128060][ T8321] netlink: 'syz.2.1028': attribute type 1 has an invalid length.
[  101.248590][ T8359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.712682][ T8384] tipc: Resetting bearer <eth:macvtap0>
[  101.830101][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.833220][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.836690][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.839795][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.882008][ T8398] __nla_validate_parse: 7 callbacks suppressed
[  101.882019][ T8398] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1064'.
[  102.236973][ T8439] tipc: Started in network mode
[  102.238823][ T8439] tipc: Node identity 7f000001, cluster identity 4711
[  102.260426][ T8439] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  102.271588][ T8439] tipc: Enabled bearer <udp:syz2>, priority 10
[  102.400246][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  102.423678][ T5856] cgroup: fork rejected by pids controller in /syz2
[  102.540840][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  102.680056][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  102.785309][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.788854][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.796295][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.803181][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.806640][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.820066][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  102.937486][ T8478] chnl_net:caif_netlink_parms(): no params data found
[  102.960061][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  102.977363][ T8489] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1104'.
[  102.982767][ T8489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.013094][ T8478] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.015616][ T8478] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.018428][ T8478] bridge_slave_0: entered allmulticast mode
[  103.021755][ T8478] bridge_slave_0: entered promiscuous mode
[  103.029135][ T8478] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.032268][ T8478] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.034958][ T8478] bridge_slave_1: entered allmulticast mode
[  103.037742][ T8478] bridge_slave_1: entered promiscuous mode
[  103.061631][ T8478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.066233][ T8478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.085234][ T8478] team0: Port device team_slave_0 added
[  103.088578][ T8478] team0: Port device team_slave_1 added
[  103.100133][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  103.116435][ T8478] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.118746][ T8478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.128177][ T8478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.133851][ T8478] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.136615][ T8478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.145970][ T8478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.173847][ T8478] hsr_slave_0: entered promiscuous mode
[  103.176464][ T8478] hsr_slave_1: entered promiscuous mode
[  103.179022][ T8478] debugfs: 'hsr0' already exists in 'hsr'
[  103.183954][ T8478] Cannot create hsr debugfs directory
[  103.240183][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  103.247629][ T3146] IPVS: starting estimator thread 0...
[  103.340262][ T8500] IPVS: using max 79 ests per chain, 189600 per kthread
[  103.380071][ T3146] tipc: Node number set to 2130706433
[  103.669005][ T8478] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  103.676161][ T8478] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  103.686689][ T8478] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  103.696615][ T8478] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  103.719128][ T8478] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.721775][ T8478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.724539][ T8478] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.727126][ T8478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.769027][ T8478] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.783895][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.788232][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.800616][ T8478] 8021q: adding VLAN 0 to HW filter on device team0
[  103.813592][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.816779][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.827867][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.831060][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.014339][ T8533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1116'.
[  104.017811][ T8478] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.064693][ T8478] veth0_vlan: entered promiscuous mode
[  104.077960][ T8478] veth1_vlan: entered promiscuous mode
[  104.105894][ T8478] veth0_macvtap: entered promiscuous mode
[  104.114077][ T8478] veth1_macvtap: entered promiscuous mode
[  104.128943][ T8478] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.139515][ T8478] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.151515][ T5877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.159414][ T5877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.175160][ T5877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.180749][ T5877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.253913][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.257214][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.297899][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.304024][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.582306][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'.
[  104.661352][ T8574] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1135'.
[  104.795608][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'.
[  104.799438][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'.
[  104.824793][ T8588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1142'.
[  104.829604][ T8588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1142'.
[  104.874886][ T5239] Bluetooth: hci2: command tx timeout
[  104.983548][ T8597] bond1: entered promiscuous mode
[  104.985665][ T8597] bond1: entered allmulticast mode
[  104.988067][ T8597] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.056138][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'.
[  105.350011][    C1] net_ratelimit: 3 callbacks suppressed
[  105.350021][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  105.598371][ T8643] syzkaller0: entered promiscuous mode
[  105.601193][ T8643] syzkaller0: entered allmulticast mode
[  106.390279][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  106.715734][ T8668] ksmbd: Unknown IPC event: 3, ignore.
[  106.950462][ T5239] Bluetooth: hci2: command tx timeout
[  107.291569][ T8720] __nla_validate_parse: 5 callbacks suppressed
[  107.291584][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'.
[  107.366088][ T5859] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  107.430097][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  108.148945][  T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.154631][  T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.466703][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1220'.
[  108.470089][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  109.034612][ T5239] Bluetooth: hci2: command tx timeout
[  109.240156][ T8836] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  109.383175][ T8851] netlink: 'syz.1.1247': attribute type 4 has an invalid length.
[  109.392672][ T8851] netlink: 'syz.1.1247': attribute type 4 has an invalid length.
[  109.473977][ T8857] netlink: 'syz.2.1251': attribute type 10 has an invalid length.
[  109.510116][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  109.527908][ T8864] netlink: 'syz.2.1254': attribute type 1 has an invalid length.
[  110.550097][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  110.638630][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'.
[  110.644883][ T8899] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  110.892835][ T8927] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1281'.
[  111.006433][ T8939] netlink: 'syz.1.1288': attribute type 1 has an invalid length.
[  111.011403][ T8939] netlink: 'syz.1.1288': attribute type 4 has an invalid length.
[  111.014729][ T8939] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1288'.
[  111.018884][ T8939] netlink: 'syz.1.1288': attribute type 1 has an invalid length.
[  111.027456][ T8939] netlink: 'syz.1.1288': attribute type 4 has an invalid length.
[  111.032657][ T8939] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1288'.
[  111.110210][ T5239] Bluetooth: hci2: command tx timeout
[  111.171379][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'.
[  111.175033][ T8958] netlink: 'syz.0.1295': attribute type 29 has an invalid length.
[  111.178201][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'.
[  111.282849][ T8965] vlan4: entered allmulticast mode
[  111.285048][ T8965] bond0: entered allmulticast mode
[  111.287604][ T8965] bond_slave_0: entered allmulticast mode
[  111.291516][ T8965] bond_slave_1: entered allmulticast mode
[  111.294332][ T8965] bond1: entered allmulticast mode
[  111.469672][ T8977] tipc: Started in network mode
[  111.474175][ T8977] tipc: Node identity , cluster identity 4711
[  111.476804][ T8977] tipc: Failed to obtain node identity
[  111.479116][ T8977] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.486161][ T8977] syzkaller0: entered promiscuous mode
[  111.489127][ T8977] syzkaller0: entered allmulticast mode
[  111.600072][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  111.770456][ T9001] syzkaller1: entered promiscuous mode
[  111.772816][ T9001] syzkaller1: entered allmulticast mode
[  111.784016][ T9001] netlink: 'syz.2.1316': attribute type 15 has an invalid length.
[  111.978071][ T9021] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.993412][ T9021] vlan2: entered promiscuous mode
[  111.995240][ T9021] bond1: entered promiscuous mode
[  111.998722][ T9021] vlan2: entered allmulticast mode
[  112.007674][ T9021] bond1: entered allmulticast mode
[  112.014100][ T9028] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1330'.
[  112.036072][ T9021] bond1: (slave gretap1): making interface the new active one
[  112.045194][ T9021] gretap1: entered promiscuous mode
[  112.047734][ T9021] gretap1: entered allmulticast mode
[  112.053474][ T9021] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  112.065166][ T9021] syz.2.1328 (9021) used greatest stack depth: 19432 bytes left
[  112.119152][ T9035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1335'.
[  112.147939][ T9041] tipc: Started in network mode
[  112.149831][ T9041] tipc: Node identity 82eadf78bdec, cluster identity 4711
[  112.158434][ T9041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.161818][ T9041] syzkaller0: entered promiscuous mode
[  112.163687][ T9041] syzkaller0: entered allmulticast mode
[  112.178498][ T9041] tipc: Resetting bearer <eth:syzkaller0>
[  112.183617][ T9039] tipc: Resetting bearer <eth:syzkaller0>
[  112.203366][ T9039] tipc: Disabling bearer <eth:syzkaller0>
[  112.234818][ T5877] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.248535][ T5877] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.255657][ T5877] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.258991][ T5877] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.630103][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  113.679208][ T9100] wireguard0: entered promiscuous mode
[  113.681642][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  113.685129][ T9100] wireguard0: entered allmulticast mode
[  113.719534][ T9106] mac80211_hwsim hwsim4 ": renamed from wlan0
[  113.744695][ T9111] Unsupported ieee802154 address type: 0
[  113.829824][ T9125] __nla_validate_parse: 4 callbacks suppressed
[  113.829834][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1374'.
[  113.980504][ T9140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1381'.
[  114.052675][ T9144] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1383'.
[  114.235233][ T9158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.247528][ T9160] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1389'.
[  114.346818][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'.
[  114.554462][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'.
[  114.689149][ T9184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.710130][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  114.801727][ T9191] validate_nla: 3 callbacks suppressed
[  114.801736][ T9191] netlink: 'syz.0.1405': attribute type 1 has an invalid length.
[  115.750727][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  115.795340][ T9208] vxcan2: entered promiscuous mode
[  115.877274][ T9218] syzkaller1: entered promiscuous mode
[  115.879647][ T9218] syzkaller1: entered allmulticast mode
[  116.022456][ T9226] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1418'.
[  116.151852][ T9240] netlink: 'syz.2.1425': attribute type 1 has an invalid length.
[  116.155201][ T9240] netlink: 'syz.2.1425': attribute type 1 has an invalid length.
[  116.296663][ T9250] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  116.456807][ T9267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.462278][ T9267] syzkaller0: entered promiscuous mode
[  116.464198][ T9267] syzkaller0: entered allmulticast mode
[  116.493126][ T9267] tipc: Resetting bearer <eth:syzkaller0>
[  116.495969][ T9267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.508124][ T9266] tipc: Resetting bearer <eth:syzkaller0>
[  116.524194][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1440'.
[  116.529058][ T9266] tipc: Disabling bearer <eth:syzkaller0>
[  116.790023][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  116.797871][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'.
[  116.815479][ T9303] team1: entered promiscuous mode
[  116.817295][ T9303] team1: entered allmulticast mode
[  116.819643][ T9303] 8021q: adding VLAN 0 to HW filter on device team1
[  117.068076][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'.
[  117.277016][ T9356] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  117.285216][ T9356] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  117.458780][ T9374] netlink: 'syz.0.1487': attribute type 1 has an invalid length.
[  117.617737][ T9392] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  117.806597][ T9413] batadv0: entered promiscuous mode
[  117.808628][ T9413] macvtap1: entered promiscuous mode
[  117.811214][ T9413] macvtap1: entered allmulticast mode
[  117.813478][ T9413] batadv0: entered allmulticast mode
[  117.815977][ T9413] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  117.823342][ T9413] batadv0: left allmulticast mode
[  117.825389][ T9413] batadv0: left promiscuous mode
[  117.830336][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  117.882420][ T9419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.887852][ T9419] syzkaller0: entered promiscuous mode
[  117.889859][ T9419] syzkaller0: entered allmulticast mode
[  117.921254][ T9419] tipc: Resetting bearer <eth:syzkaller0>
[  117.925768][ T9417] tipc: Resetting bearer <eth:syzkaller0>
[  117.943096][ T9417] tipc: Disabling bearer <eth:syzkaller0>
[  118.189565][ T9446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.199043][ T9446] syzkaller0: entered promiscuous mode
[  118.208632][ T9446] syzkaller0: entered allmulticast mode
[  118.227803][ T9449] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.234198][ T9446] tipc: Resetting bearer <eth:syzkaller0>
[  118.242083][ T9444] tipc: Resetting bearer <eth:syzkaller0>
[  118.258654][ T9444] tipc: Disabling bearer <eth:syzkaller0>
[  118.266120][ T9449] syzkaller0: entered promiscuous mode
[  118.268429][ T9449] syzkaller0: entered allmulticast mode
[  118.289378][ T9449] tipc: Resetting bearer <eth:syzkaller0>
[  118.302814][ T9448] tipc: Resetting bearer <eth:syzkaller0>
[  118.319609][ T9448] tipc: Disabling bearer <eth:syzkaller0>
[  118.739869][ T9482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.870079][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  118.954884][ T9505] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  119.102711][ T9513] __nla_validate_parse: 7 callbacks suppressed
[  119.102728][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'.
[  119.335776][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'.
[  119.703738][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'.
[  119.707398][ T9567] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  119.710821][ T9567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.950093][    C1] net_ratelimit: 1 callbacks suppressed
[  120.950114][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  121.094800][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'.
[  121.137768][ T9649] bridge0: port 3(erspan0) entered blocking state
[  121.147050][ T9649] bridge0: port 3(erspan0) entered disabled state
[  121.152647][ T9649] erspan0: entered allmulticast mode
[  121.157830][ T9649] erspan0: entered promiscuous mode
[  121.161009][ T9649] bridge0: port 3(erspan0) entered blocking state
[  121.163842][ T9649] bridge0: port 3(erspan0) entered forwarding state
[  121.168133][ T9649] erspan0: left allmulticast mode
[  121.170680][ T9649] erspan0: left promiscuous mode
[  121.173699][ T9649] bridge0: port 3(erspan0) entered disabled state
[  121.348404][ T9664] netlink: 420 bytes leftover after parsing attributes in process `syz.2.1619'.
[  121.767180][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1624'.
[  121.804865][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'.
[  121.990110][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  122.475657][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1644'.
[  122.488043][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.492033][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1644'.
[  122.495914][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.499605][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.510252][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.548545][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'.
[  122.560544][ T9723] netlink: 'syz.1.1646': attribute type 1 has an invalid length.
[  122.825496][ T9740] nbd: must specify an index to disconnect
[  123.030001][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  123.069663][ T9757] IPVS: Error connecting to the multicast addr
[  123.077586][ T9757] netlink: 'syz.0.1658': attribute type 16 has an invalid length.
[  123.081381][ T9757] netlink: 'syz.0.1658': attribute type 17 has an invalid length.
[  123.106825][ T5877] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.124124][ T5877] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.129312][ T5877] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.134332][ T5877] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.609197][ T9790] netlink: 'syz.1.1676': attribute type 2 has an invalid length.
[  124.070078][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  124.330730][ T9857] __nla_validate_parse: 6 callbacks suppressed
[  124.330743][ T9857] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1707'.
[  124.339305][ T9857] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1707'.
[  124.393781][ T9862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.397359][ T9862] syzkaller0: entered promiscuous mode
[  124.402132][ T9862] syzkaller0: entered allmulticast mode
[  124.416870][ T9862] tipc: Resetting bearer <eth:syzkaller0>
[  124.423395][ T9860] tipc: Resetting bearer <eth:syzkaller0>
[  124.442974][ T9860] tipc: Disabling bearer <eth:syzkaller0>
[  124.857580][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1728'.
[  124.864201][ T9904] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1728'.
[  124.965636][ T9919] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1734'.
[  125.110022][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  125.239581][ T9944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1747'.
[  125.245343][ T9944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1747'.
[  125.310699][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1750'.
[  125.873373][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'.
[  126.150177][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  126.188765][ T9974] netlink: 'syz.1.1760': attribute type 1 has an invalid length.
[  126.192818][ T9974] netlink: 'syz.1.1760': attribute type 2 has an invalid length.
[  126.313154][ T9988] netlink: 'syz.0.1767': attribute type 6 has an invalid length.
[  127.190029][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  127.437951][T10018] syzkaller1: entered promiscuous mode
[  127.443024][T10018] syzkaller1: entered allmulticast mode
[  127.737553][T10054] netlink: 'syz.2.1795': attribute type 21 has an invalid length.
[  127.742299][T10054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1795'.
[  128.062930][T10076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.065897][T10076] syzkaller0: entered promiscuous mode
[  128.067872][T10076] syzkaller0: entered allmulticast mode
[  128.081490][T10076] tipc: Resetting bearer <eth:syzkaller0>
[  128.085167][T10075] tipc: Resetting bearer <eth:syzkaller0>
[  128.093043][T10075] tipc: Disabling bearer <eth:syzkaller0>
[  128.240083][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  128.590046][T10098] nbd0: detected capacity change from 0 to 63
[  128.597169][T10102] block nbd0: NBD_DISCONNECT
[  128.599308][T10102] block nbd0: Disconnected due to user request.
[  128.603640][T10102] block nbd0: shutting down sockets
[  128.607559][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.611723][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  128.615159][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.619101][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  128.622390][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.626206][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  128.629474][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.633467][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  128.637010][ T9993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.641200][ T9993] Buffer I/O error on dev nbd0, logical block 0, async page read
[  128.644686][ T9993] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.670027][ T9993] Buffer I/O error on dev nbd0, logical block 1, async page read
[  128.673474][ T9993] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.677297][ T9993] Buffer I/O error on dev nbd0, logical block 2, async page read
[  128.690747][ T9993] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.696847][ T9993] Buffer I/O error on dev nbd0, logical block 3, async page read
[  128.709570][ T9993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.717663][ T9993] Buffer I/O error on dev nbd0, logical block 0, async page read
[  128.724942][ T9993] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  128.729643][ T9993] Buffer I/O error on dev nbd0, logical block 1, async page read
[  128.750883][ T9993] ldm_validate_partition_table(): Disk read failed.
[  128.769321][ T9993] Dev nbd0: unable to read RDB block 0
[  128.783614][ T9993]  nbd0: unable to read partition table
[  128.797957][T10114] nftables ruleset with unbound set
[  128.833228][ T9993] ldm_validate_partition_table(): Disk read failed.
[  128.839062][ T9993] Dev nbd0: unable to read RDB block 0
[  128.845307][ T9993]  nbd0: unable to read partition table
[  128.957733][T10128] netlink: 'syz.2.1827': attribute type 6 has an invalid length.
[  128.968562][T10128] IPv6: NLM_F_CREATE should be specified when creating new route
[  129.230008][T10148] netlink: 'syz.1.1837': attribute type 1 has an invalid length.
[  129.270087][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  129.374937][T10168] __nla_validate_parse: 1 callbacks suppressed
[  129.374950][T10168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1846'.
[  129.439315][T10174] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1850'.
[  129.579791][T10187] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1855'.
[  129.584834][T10187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1855'.
[  129.593187][T10187] lo speed is unknown, defaulting to 1000
[  129.599116][T10187] lo speed is unknown, defaulting to 1000
[  129.604125][T10187] lo speed is unknown, defaulting to 1000
[  129.688493][T10190] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.714727][T10190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.769344][T10187] infiniband syz0: set active
[  129.773435][ T5911] lo speed is unknown, defaulting to 1000
[  129.775892][ T5911] syz0: Port: 1 Link ACTIVE
[  129.778050][T10187] infiniband syz0: added lo
[  129.826002][T10187] RDS/IB: syz0: added
[  129.828238][T10187] smc: adding ib device syz0 with port count 1
[  129.833282][ T5239] Bluetooth: hci2: command tx timeout
[  129.835811][T10187] smc:    ib device syz0 port 1 has pnetid 
[  129.839756][ T5911] lo speed is unknown, defaulting to 1000
[  129.847835][T10187] lo speed is unknown, defaulting to 1000
[  130.039132][T10187] lo speed is unknown, defaulting to 1000
[  130.044967][T10212] netlink: 'syz.2.1866': attribute type 11 has an invalid length.
[  130.048259][T10212] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1866'.
[  130.283096][T10220] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.285782][T10220] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.310228][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  130.350891][T10220] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.362473][T10220] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.446898][T10190] syz.0.1855 (10190) used greatest stack depth: 18112 bytes left
[  130.469203][T10220] vlan2: left promiscuous mode
[  130.471898][T10220] bond1: left promiscuous mode
[  130.473887][T10220] gretap1: left promiscuous mode
[  130.476014][T10220] vlan2: left allmulticast mode
[  130.478112][T10220] bond1: left allmulticast mode
[  130.480428][T10220] gretap1: left allmulticast mode
[  130.483994][T10220] wireguard0: left promiscuous mode
[  130.485924][T10220] wireguard0: left allmulticast mode
[  130.488331][T10220] macvtap1: left promiscuous mode
[  130.492440][T10220] macvtap1: left allmulticast mode
[  130.500283][T10187] lo speed is unknown, defaulting to 1000
[  130.510828][ T5877] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.515159][ T5877] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.519269][ T5877] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.524743][ T5877] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.544243][ T5877] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.547251][ T5877] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.558014][ T5877] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.563467][ T5877] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.652188][T10231] netlink: 'syz.1.1874': attribute type 1 has an invalid length.
[  130.655391][T10231] netlink: 'syz.1.1874': attribute type 2 has an invalid length.
[  130.658723][T10231] netlink: 'syz.1.1874': attribute type 8 has an invalid length.
[  130.663583][T10231] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.1874'.
[  130.670604][T10230] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.1873'.
[  130.691452][T10187] lo speed is unknown, defaulting to 1000
[  131.021503][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'.
[  131.316173][T10261] lo speed is unknown, defaulting to 1000
[  131.360076][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  131.395700][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'.
[  131.405179][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'.
[  131.678992][T10283] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1
[  131.820331][   T33] audit: type=1804 audit(1755197120.346:2): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1898" name="memory.events" dev="tmpfs" ino=3310 res=1 errno=0
[  131.828270][   T33] audit: type=1800 audit(1755197120.346:3): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1898" name="memory.events" dev="tmpfs" ino=3310 res=0 errno=0
[  132.140161][T10314] netlink: 'syz.1.1910': attribute type 13 has an invalid length.
[  132.143467][T10314] netlink: 'syz.1.1910': attribute type 17 has an invalid length.
[  132.184313][T10314] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.189123][T10314] 8021q: adding VLAN 0 to HW filter on device team0
[  132.196260][T10314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.249105][T10314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.307666][T10314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.367644][T10314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.390181][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  133.345758][T10400] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  133.348361][T10400] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  133.369046][T10402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.395688][T10406] unsupported nlmsg_type 40
[  133.439994][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  133.523620][T10418] netlink: 'syz.0.1960': attribute type 1 has an invalid length.
[  133.931321][T10454] netlink: 'syz.1.1974': attribute type 62 has an invalid length.
[  134.470042][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  134.719654][T10490] syzkaller0: entered promiscuous mode
[  134.725989][T10490] syzkaller0: entered allmulticast mode
[  135.186692][T10514] __nla_validate_parse: 4 callbacks suppressed
[  135.186706][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'.
[  135.345692][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2008'.
[  135.367685][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'.
[  135.435733][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'.
[  135.506515][T10541] netlink: 'syz.0.2016': attribute type 39 has an invalid length.
[  135.513996][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  135.620761][T10544] netlink: 'syz.2.2017': attribute type 4 has an invalid length.
[  135.852849][T10567] tipc: Enabled bearer <eth:gre0>, priority 10
[  135.884106][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2028'.
[  135.889380][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2028'.
[  136.536417][T10594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.539564][T10594] IPv6: NLM_F_CREATE should be set when creating new route
[  136.542789][T10594] IPv6: NLM_F_CREATE should be set when creating new route
[  136.545922][T10594] IPv6: NLM_F_CREATE should be set when creating new route
[  136.560042][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  136.571103][T10594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.856342][ T5851] tipc: Node number set to 1057415032
[  136.918159][T10624] IPVS: Error connecting to the multicast addr
[  137.143259][T10644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2062'.
[  137.376772][T10661] netlink: 'syz.0.2068': attribute type 3 has an invalid length.
[  137.390635][T10661] netlink: 'syz.0.2068': attribute type 1 has an invalid length.
[  137.394604][T10661] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2068'.
[  137.546665][T10679] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2075'.
[  137.590058][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  138.052788][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'.
[  138.376612][T10679] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  138.379076][T10679] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  138.396720][T10679] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  138.401526][T10679] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  138.630070][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  139.191022][T10777] nbd: must specify at least one socket
[  139.287133][ T5878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  139.293087][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  139.300085][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  139.306565][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  139.670122][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  139.873892][T10821] netlink: 'syz.2.2127': attribute type 22 has an invalid length.
[  139.877937][T10821] netlink: 'syz.2.2127': attribute type 22 has an invalid length.
[  140.485593][T10878] macsec2: entered promiscuous mode
[  140.487881][T10878] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  140.497895][T10878] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  140.603199][T10891] netlink: 'syz.2.2158': attribute type 1 has an invalid length.
[  140.620054][T10893] __nla_validate_parse: 13 callbacks suppressed
[  140.620064][T10893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2157'.
[  140.625938][T10893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2157'.
[  140.629740][T10893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2157'.
[  140.633718][T10893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2157'.
[  140.637915][T10891] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  140.647810][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  140.648988][T10891] 8021q: adding VLAN 0 to HW filter on device bond2
[  140.719567][T10891] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  140.720034][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  140.724783][T10891] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[  140.731995][T10891] bond2 (unregistering): Released all slaves
[  140.822217][T10897] syz_tun: entered promiscuous mode
[  141.035996][T10905] vlan0: entered promiscuous mode
[  141.313980][T10923] sch_fq: defrate 0 ignored.
[  141.337496][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2174'.
[  141.514954][T10941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2182'.
[  141.518074][T10941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2182'.
[  141.544117][T10943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2183'.
[  141.547058][T10943] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2183'.
[  141.551355][T10943] tipc: Invalid UDP bearer configuration
[  141.551392][T10943] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  141.696836][T10950] netlink: 155800 bytes leftover after parsing attributes in process `syz.2.2186'.
[  141.760132][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  142.126092][T10993] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  142.297723][T11017] unknown channel width for channel at 909000KHz?
[  142.800813][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  142.858376][T11081] netlink: 'syz.2.2245': attribute type 1 has an invalid length.
[  143.207648][T11095] netlink: 'syz.1.2253': attribute type 7 has an invalid length.
[  143.326583][T11101] netlink: 'syz.0.2256': attribute type 1 has an invalid length.
[  143.355829][T11101] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.372842][T11101] bond2: (slave ip6gretap3): making interface the new active one
[  143.376021][T11101] bond2: (slave ip6gretap3): Enslaving as an active interface with an up link
[  143.400629][T11101] veth7: entered promiscuous mode
[  143.404194][T11101] bond2: (slave veth7): Enslaving as an active interface with a down link
[  143.415090][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.418405][T11101] erspan0: entered allmulticast mode
[  143.418454][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.424650][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.427903][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.432807][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.440203][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.443647][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.446221][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.449036][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.462796][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.514651][T11104] lo speed is unknown, defaulting to 1000
[  143.754549][T11104] chnl_net:caif_netlink_parms(): no params data found
[  143.825767][T11104] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.828577][T11104] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.831588][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  143.834590][T11104] bridge_slave_0: entered allmulticast mode
[  143.837759][T11104] bridge_slave_0: entered promiscuous mode
[  143.841641][T11104] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.844108][T11104] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.846652][T11104] bridge_slave_1: entered allmulticast mode
[  143.849382][T11104] bridge_slave_1: entered promiscuous mode
[  143.870273][T11104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.875089][T11104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.907735][T11104] team0: Port device team_slave_0 added
[  143.911719][T11104] team0: Port device team_slave_1 added
[  143.930634][T11104] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.933080][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.942627][T11104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.948211][T11104] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.950893][T11104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.959523][T11104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.003271][T11104] hsr_slave_0: entered promiscuous mode
[  144.006198][T11104] hsr_slave_1: entered promiscuous mode
[  144.008960][T11104] debugfs: 'hsr0' already exists in 'hsr'
[  144.011637][T11104] Cannot create hsr debugfs directory
[  144.167831][T11104] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  144.181389][T11104] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  144.195043][T11104] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  144.202862][T11104] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  144.255157][T11104] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.258504][T11104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.261337][T11104] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.263806][T11104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.348996][T11104] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.365562][  T188] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.370845][  T188] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.377748][T11135] sctp: [Deprecated]: syz.1.2263 (pid 11135) Use of struct sctp_assoc_value in delayed_ack socket option.
[  144.377748][T11135] Use struct sctp_sack_info instead
[  144.388550][T11135] sctp: [Deprecated]: syz.1.2263 (pid 11135) Use of struct sctp_assoc_value in delayed_ack socket option.
[  144.388550][T11135] Use struct sctp_sack_info instead
[  144.398783][T11104] 8021q: adding VLAN 0 to HW filter on device team0
[  144.409242][  T188] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.412370][  T188] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.431073][  T188] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.434312][  T188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.459613][T11104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  144.466604][T11104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  144.603671][T11104] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.634888][T11104] veth0_vlan: entered promiscuous mode
[  144.645535][T11104] veth1_vlan: entered promiscuous mode
[  144.693029][T11104] veth0_macvtap: entered promiscuous mode
[  144.708322][T11104] veth1_macvtap: entered promiscuous mode
[  144.729300][T11104] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.748161][T11104] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.772935][ T5877] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.776137][ T5877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.804474][ T5877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.808269][ T5877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.870106][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  144.926406][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.929856][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.997645][  T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.004738][  T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.263357][T11168] netlink: 'syz.3.2274': attribute type 3 has an invalid length.
[  145.520296][ T5852] Bluetooth: hci2: command tx timeout
[  145.910063][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  146.312640][T11222] netlink: 'syz.1.2298': attribute type 9 has an invalid length.
[  146.526513][T11229] __nla_validate_parse: 4 callbacks suppressed
[  146.526526][T11229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2300'.
[  146.631154][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2302'.
[  146.926249][T11260] netlink: 'syz.0.2314': attribute type 21 has an invalid length.
[  146.929279][T11260] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2314'.
[  146.938562][T11260] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2314'.
[  146.960047][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  147.114478][T11276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2322'.
[  147.187368][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'.
[  147.205842][T11283] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2324'.
[  147.475442][T11308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2335'.
[  147.590029][ T5852] Bluetooth: hci2: command tx timeout
[  147.654653][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2339'.
[  147.665020][T11315] batman_adv: batadv0: Adding interface: ip6gretap4
[  147.667191][T11315] batman_adv: batadv0: The MTU of interface ip6gretap4 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.677000][T11315] batman_adv: batadv0: Interface activated: ip6gretap4
[  147.990106][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  148.022218][T11328] nbd3: detected capacity change from 0 to 63
[  148.045171][T11332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.054692][   T56] block nbd3: Receive control failed (result -104)
[  148.063628][T11337] lo speed is unknown, defaulting to 1000
[  148.065646][T11337] lo speed is unknown, defaulting to 1000
[  148.068142][T11337] lo speed is unknown, defaulting to 1000
[  148.082446][T11337] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  148.097381][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2348'.
[  148.116239][T11338] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  148.123202][T11337] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  148.160698][T11332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.173530][T11337] lo speed is unknown, defaulting to 1000
[  148.177278][T11337] lo speed is unknown, defaulting to 1000
[  148.184527][T11337] lo speed is unknown, defaulting to 1000
[  148.188377][T11337] lo speed is unknown, defaulting to 1000
[  148.195164][T11337] lo speed is unknown, defaulting to 1000
[  148.216455][T11332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.291076][T11332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.391533][ T5877] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.413899][ T5877] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.437150][ T5877] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.454226][ T5877] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.750269][T11378] nbd0: detected capacity change from 0 to 63
[  148.763608][T11381] block nbd0: NBD_DISCONNECT
[  148.765685][T11381] block nbd0: Disconnected due to user request.
[  148.768346][T11381] block nbd0: shutting down sockets
[  148.789567][    C0] blk_print_req_error: 138 callbacks suppressed
[  148.789581][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  148.796197][    C0] buffer_io_error: 138 callbacks suppressed
[  148.796209][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.802197][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  148.806087][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  148.809475][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  148.813368][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  148.816550][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  148.820354][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  148.834494][T11106] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  148.846064][T11106] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.850532][T11106] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  148.871545][T11106] Buffer I/O error on dev nbd0, logical block 1, async page read
[  148.875216][T11106] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  148.895830][T11106] Buffer I/O error on dev nbd0, logical block 2, async page read
[  148.908462][T11106] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  148.912278][T11392] nbd: nbd3 already in use
[  148.915737][T11106] Buffer I/O error on dev nbd0, logical block 3, async page read
[  148.919440][T11106] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  148.922942][T11392] block nbd3: NBD_DISCONNECT
[  148.925714][T11106] Buffer I/O error on dev nbd0, logical block 0, async page read
[  148.929229][T11106] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  148.930687][T11392] block nbd3: Send disconnect failed -32
[  148.934837][T11106] Buffer I/O error on dev nbd0, logical block 1, async page read
[  148.942639][T11106] ldm_validate_partition_table(): Disk read failed.
[  148.943840][T11392] block nbd3: shutting down sockets
[  148.947200][T11106] Dev nbd0: unable to read RDB block 0
[  148.953073][T11106]  nbd0: unable to read partition table
[  148.962594][T11106] ldm_validate_partition_table(): Disk read failed.
[  148.969545][T11110] ldm_validate_partition_table(): Disk read failed.
[  148.977438][T11106] Dev nbd0: unable to read RDB block 0
[  148.983703][T11392] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  148.988190][T11110] Dev nbd3: unable to read RDB block 0
[  148.997162][T11106]  nbd0: unable to read partition table
[  149.020899][T11110]  nbd3: unable to read partition table
[  149.040120][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  149.072235][T11110] ldm_validate_partition_table(): Disk read failed.
[  149.076530][T11110] Dev nbd3: unable to read RDB block 0
[  149.084170][T11110]  nbd3: unable to read partition table
[  149.098526][T11400] netlink: 'syz.1.2371': attribute type 21 has an invalid length.
[  149.670470][ T5852] Bluetooth: hci2: command tx timeout
[  149.778931][T11453] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  149.809814][ T5859] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  149.815647][ T5859] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.827282][ T5859] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.832147][ T5859] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.884956][T11463] netlink: 'syz.3.2399': attribute type 1 has an invalid length.
[  150.008710][T11472] netlink: 'syz.0.2403': attribute type 10 has an invalid length.
[  150.016075][T11472] batadv0: left promiscuous mode
[  150.021053][T11472] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.024462][T11472] batadv0: entered allmulticast mode
[  150.032533][T11472] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  150.039384][T11472] netlink: 'syz.0.2403': attribute type 10 has an invalid length.
[  150.047036][T11472] batadv0: entered promiscuous mode
[  150.052561][T11472] bond0: (slave batadv0): Releasing backup interface
[  150.056517][T11472] bridge0: port 3(batadv0) entered blocking state
[  150.058626][T11472] bridge0: port 3(batadv0) entered disabled state
[  150.070087][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  150.077455][ T5878] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  150.080584][ T5878] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  150.477356][T11516] pimreg: entered allmulticast mode
[  150.667915][T11531] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  150.836418][T11535] bridge_slave_0: left allmulticast mode
[  150.838370][T11535] bridge_slave_0: left promiscuous mode
[  150.842580][T11535] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.848654][T11535] bridge_slave_1: left allmulticast mode
[  150.853356][T11535] bridge_slave_1: left promiscuous mode
[  150.855629][T11535] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.860963][T11535] bond0: (slave bond_slave_0): Releasing backup interface
[  150.866941][T11535] bond0: (slave bond_slave_1): Releasing backup interface
[  150.879029][T11535] team0: Port device team_slave_0 removed
[  150.889471][T11535] team0: Port device team_slave_1 removed
[  150.895395][T11535] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.898763][T11535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.903774][T11535] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.906602][T11535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.110069][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  151.498960][T11577] netlink: 'syz.3.2453': attribute type 29 has an invalid length.
[  151.585269][T11586] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  151.718370][T11600] tipc: Can't bind to reserved service type 2
[  151.750672][ T5852] Bluetooth: hci2: command tx timeout
[  152.160024][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  152.266846][T11626] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  152.505727][T11644] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  152.527278][T11644] bridge0: port 3(batadv0) entered disabled state
[  152.535423][T11644] bridge_slave_0: left allmulticast mode
[  152.537348][T11644] bridge_slave_0: left promiscuous mode
[  152.539504][T11644] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.543636][T11644] bridge_slave_1: left allmulticast mode
[  152.545965][T11644] bridge_slave_1: left promiscuous mode
[  152.548349][T11644] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.556844][T11644] bond0: (slave bond_slave_0): Releasing backup interface
[  152.561006][T11644] bond_slave_0: left allmulticast mode
[  152.564748][T11644] bond0: (slave bond_slave_1): Releasing backup interface
[  152.568604][T11644] bond_slave_1: left allmulticast mode
[  152.572271][T11644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.576122][T11644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.582327][T11644] bond0: (slave bond1): Releasing backup interface
[  152.586934][T11644] bond1: left allmulticast mode
[  152.595130][T11644] bond2: (slave ip6gretap3): Releasing active interface
[  152.598104][T11644] bond2: (slave ip6gretap3): the permanent HWaddr of slave - de:52:f5:48:78:ae - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  152.608760][T11644] bond2: (slave veth7): Releasing active interface
[  152.617700][T11644] batman_adv: batadv0: Interface deactivated: ip6gretap4
[  152.621724][T11644] batman_adv: batadv0: Removing interface: ip6gretap4
[  152.626855][ T5922] lo speed is unknown, defaulting to 1000
[  152.654466][T11644] netlink: 'syz.0.2485': attribute type 10 has an invalid length.
[  152.657716][T11644] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  152.664065][T11644] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  152.669337][T11644] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  152.678444][T11644] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  152.685602][T11644] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  153.104607][T11676] __nla_validate_parse: 14 callbacks suppressed
[  153.104622][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2498'.
[  153.142796][    C0] vcan0: j1939_session_tx_dat: 0xffff88801f570800: queue data error: -100
[  153.145932][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.148940][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.152137][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.154947][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.157572][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.160238][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.163250][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.165866][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.168524][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.171421][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.174364][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.177569][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.181017][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.184331][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.187731][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.191128][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.194806][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.198122][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.200039][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  153.201835][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.207290][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.210843][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.214343][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.217754][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.221294][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.224699][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.228031][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.231553][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.235066][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.238400][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.241178][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.243910][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.246791][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.249812][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.252904][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.255899][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.258865][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.261971][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.264929][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.267890][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.270895][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.273883][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.276704][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.279873][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.283016][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.285925][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.288563][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.291733][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.294889][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.297832][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.300734][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.303606][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.306411][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.309347][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.312059][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.315154][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.318183][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.320928][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.323797][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.326643][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.329732][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.333105][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.336363][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.339452][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.342602][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.345685][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.348645][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.351937][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.354982][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.358238][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.361476][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.364498][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.367676][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.370852][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.373930][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.377134][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.380515][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.383693][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.386737][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.389812][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.392909][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.395995][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.398893][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.401666][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.404173][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.406767][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.409179][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.412124][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.415068][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.418128][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.421052][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.424102][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.427065][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.430299][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.433356][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.436154][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.438938][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.441937][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.445041][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.448259][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.451391][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.454813][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.458032][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.461163][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.464060][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.467026][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.469976][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.472932][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.475763][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.478675][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.481634][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.484553][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.487467][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.490709][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.493772][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.496844][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.499677][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.502821][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.505744][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.508717][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.511717][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.514688][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.517590][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.520609][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.523571][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.526501][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.529470][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.532569][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.535518][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.539227][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.542488][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.545710][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.548765][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.551628][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.554165][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.556729][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.559314][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.562267][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.564776][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.567645][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.570188][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.572793][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.575600][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.578498][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.581565][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.584144][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.586997][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.590460][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.593409][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.596108][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.598555][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.601182][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.604027][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.606942][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.609777][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.612930][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.615885][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.618833][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.621929][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.624955][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.627877][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.630929][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.633898][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.637029][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.639530][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.642391][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.645279][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.648358][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.651351][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.654031][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.656535][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.659100][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.661873][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.664456][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.667316][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.670432][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.673359][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.676267][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.679224][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.682483][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.685330][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.688079][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.690981][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.694037][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.696972][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.700013][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.703003][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.706029][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.708917][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.712020][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.714908][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.717727][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.720618][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.723549][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.726345][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.728881][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.731883][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.734839][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.737623][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.740563][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.743190][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.746002][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.748440][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.751266][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.753866][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.756472][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.758878][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.761528][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.764085][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.766602][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.769094][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.772127][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.774836][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.777642][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.780260][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.782827][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.785357][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.787950][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.790634][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.793191][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.795693][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.798292][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.801294][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.804223][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.807115][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.810183][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.812615][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.815086][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.817533][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.820122][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.822962][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.825964][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.828932][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.832155][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.835116][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.838278][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.841556][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.844556][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.847638][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.850772][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.853607][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.856473][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.859430][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.862595][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.865347][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.868465][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.871651][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.874693][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.877678][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.880687][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.883835][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.887104][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.890248][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.892981][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.895903][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  153.898552][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  153.901236][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  154.240057][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  154.408772][T11727] netlink: 'syz.3.2521': attribute type 1 has an invalid length.
[  154.899729][T11749] netlink: 536 bytes leftover after parsing attributes in process `syz.3.2532'.
[  154.925125][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2532'.
[  155.237510][T11760] netlink: 'syz.0.2537': attribute type 83 has an invalid length.
[  155.270111][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  155.477829][T11786] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2549'.
[  155.545157][T11794] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  155.858837][T11833] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2571'.
[  156.319998][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  156.706231][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2578'.
[  156.953913][T11877] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2591'.
[  157.047881][T11890] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2596'.
[  157.126245][T11897] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2600'.
[  157.207313][T11901] netlink: 'syz.0.2602': attribute type 1 has an invalid length.
[  157.210718][T11901] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2602'.
[  157.350015][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  157.432635][T11913] netlink: 'syz.0.2608': attribute type 13 has an invalid length.
[  157.436133][T11913] netlink: 'syz.0.2608': attribute type 11 has an invalid length.
[  157.807509][T11937] tipc: Started in network mode
[  157.809189][T11937] tipc: Node identity fe28aaa34abd, cluster identity 4711
[  157.812344][T11937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.818044][T11937] syzkaller0: entered promiscuous mode
[  157.820150][T11937] syzkaller0: entered allmulticast mode
[  157.846287][T11937] tipc: Resetting bearer <eth:syzkaller0>
[  157.851958][T11936] tipc: Resetting bearer <eth:syzkaller0>
[  157.870840][T11936] tipc: Disabling bearer <eth:syzkaller0>
[  158.400009][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  158.465383][T12001] netlink: 'syz.3.2649': attribute type 1 has an invalid length.
[  158.468092][T12001] __nla_validate_parse: 7 callbacks suppressed
[  158.468098][T12001] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2649'.
[  158.475141][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2649'.
[  158.908011][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2659'.
[  158.975694][T12028] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2661'.
[  158.985607][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.989774][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.996497][T12028] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.001867][T12028] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  159.185925][T12037] netlink: 'syz.1.2665': attribute type 1 has an invalid length.
[  159.218674][T12039] netlink: 'syz.1.2666': attribute type 1 has an invalid length.
[  159.432465][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  159.774704][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2672'.
[  159.858312][T12061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.865419][T12061] syzkaller0: entered promiscuous mode
[  159.867387][T12061] syzkaller0: entered allmulticast mode
[  159.943422][T12062] netlink: 'syz.3.2674': attribute type 1 has an invalid length.
[  159.946468][T12062] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2674'.
[  160.015416][T12069] netlink: 'syz.3.2678': attribute type 10 has an invalid length.
[  160.060505][T12065] tipc: Resetting bearer <eth:syzkaller0>
[  160.067191][T12069] team0: Port device dummy0 added
[  160.069716][T12071] netlink: 'syz.3.2678': attribute type 10 has an invalid length.
[  160.085788][T12059] tipc: Resetting bearer <eth:syzkaller0>
[  160.097883][T12059] tipc: Disabling bearer <eth:syzkaller0>
[  160.109503][T12071] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  160.124674][T12071] team0: Failed to send options change via netlink (err -105)
[  160.128090][T12071] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  160.136366][T12071] team0: Port device dummy0 removed
[  160.402939][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2689'.
[  160.406209][T12095] netlink: 'syz.0.2690': attribute type 4 has an invalid length.
[  160.470060][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  160.492163][T12101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2693'.
[  160.527636][T12107] atomic_op ffff888021c00998 conn xmit_atomic 0000000000000000
[  160.673396][T12123] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.676305][T12123] syzkaller0: entered promiscuous mode
[  160.678286][T12123] syzkaller0: entered allmulticast mode
[  160.691633][T12123] tipc: Resetting bearer <eth:syzkaller0>
[  160.695098][T12122] tipc: Resetting bearer <eth:syzkaller0>
[  160.704647][T12122] tipc: Disabling bearer <eth:syzkaller0>
[  160.900509][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2706'.
[  161.388949][T12167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.394500][T12167] syzkaller0: entered promiscuous mode
[  161.396406][T12167] syzkaller0: entered allmulticast mode
[  161.407602][T12167] tipc: Resetting bearer <eth:syzkaller0>
[  161.413423][T12166] tipc: Resetting bearer <eth:syzkaller0>
[  161.422260][T12166] tipc: Disabling bearer <eth:syzkaller0>
[  161.461635][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2723'.
[  161.510105][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  161.542916][T12178] pim6reg: entered allmulticast mode
[  161.545656][T12178] pim6reg: left allmulticast mode
[  161.766124][T12195] bond0: Device is already in use.
[  162.526708][T12232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.550349][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  162.563686][T12232] syzkaller0: entered promiscuous mode
[  162.565631][T12232] syzkaller0: entered allmulticast mode
[  162.567796][T12232] tipc: Resetting bearer <eth:syzkaller0>
[  162.588715][T12231] tipc: Resetting bearer <eth:syzkaller0>
[  163.592426][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  163.673771][T12231] tipc: Disabling bearer <eth:syzkaller0>
[  163.678189][T12245] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  163.682640][T12245] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  163.785196][T12264] __nla_validate_parse: 3 callbacks suppressed
[  163.785206][T12264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2760'.
[  163.839520][T12270] validate_nla: 3 callbacks suppressed
[  163.839530][T12270] netlink: 'syz.1.2763': attribute type 1 has an invalid length.
[  163.872173][T12274] netlink: 'syz.0.2765': attribute type 2 has an invalid length.
[  164.113663][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2775'.
[  164.177132][T12308] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2780'.
[  164.237791][T12313] siw: device registration error -23
[  164.294767][T12320] netlink: 'syz.1.2786': attribute type 26 has an invalid length.
[  164.298179][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'.
[  164.630085][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  164.753787][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'.
[  164.999802][T12382] netlink: 'syz.0.2816': attribute type 3 has an invalid length.
[  165.003609][T12382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.507431][T12397] lo speed is unknown, defaulting to 1000
[  165.662812][T12397] lo speed is unknown, defaulting to 1000
[  165.670233][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  166.134682][T12418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2829'.
[  166.155273][T12418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2829'.
[  166.384819][T12442] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  166.387975][T12442] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  166.401463][T12446] lo speed is unknown, defaulting to 1000
[  166.586515][T12446] lo speed is unknown, defaulting to 1000
[  166.594109][T12454] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  166.710075][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  166.994483][T12471] netlink: 'syz.1.2854': attribute type 4 has an invalid length.
[  167.005138][T12471] netlink: 'syz.1.2854': attribute type 4 has an invalid length.
[  167.061168][T12473] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.2855'.
[  167.086386][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'.
[  167.093590][T12475] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2856'.
[  167.103021][T12475] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  167.108454][T12475] gretap1: entered promiscuous mode
[  167.305132][T12481] team0: Mode changed to "activebackup"
[  167.750143][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  168.544808][T12549] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.579823][T12549] syzkaller0: entered promiscuous mode
[  168.582254][T12549] syzkaller0: entered allmulticast mode
[  168.585152][T12549] tipc: Resetting bearer <eth:syzkaller0>
[  168.613274][T12548] tipc: Resetting bearer <eth:syzkaller0>
[  168.793134][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  168.885262][T12557] netlink: 'syz.3.2891': attribute type 13 has an invalid length.
[  169.575419][T12548] tipc: Disabling bearer <eth:syzkaller0>
[  169.830017][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  170.060187][T12589] netlink: 'syz.0.2906': attribute type 2 has an invalid length.
[  170.063465][T12589] netlink: 'syz.0.2906': attribute type 8 has an invalid length.
[  170.066617][T12589] __nla_validate_parse: 5 callbacks suppressed
[  170.066627][T12589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2906'.
[  170.179317][T12595] lo speed is unknown, defaulting to 1000
[  170.289432][T12595] lo speed is unknown, defaulting to 1000
[  170.415928][T12608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.534213][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2919'.
[  170.598686][T12608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.612756][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2919'.
[  170.777153][T12629] netlink: 'syz.1.2922': attribute type 3 has an invalid length.
[  170.787037][T12608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.870101][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  170.918112][T12608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.958311][T12638] macsec1: entered promiscuous mode
[  170.961089][T12638] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  170.964106][T12638] macsec1: entered allmulticast mode
[  170.966257][T12638] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  171.056622][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.078507][ T5859] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.092313][ T5859] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.126714][ T5859] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.817626][T12687] sctp: [Deprecated]: syz.3.2948 (pid 12687) Use of int in max_burst socket option.
[  171.817626][T12687] Use struct sctp_assoc_value instead
[  171.910703][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  171.997986][T12651] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  172.087403][ T5912] IPVS: starting estimator thread 0...
[  172.100916][T12713] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  172.148337][T12718] netlink: 83 bytes leftover after parsing attributes in process `syz.1.2963'.
[  172.203236][T12714] IPVS: using max 44 ests per chain, 105600 per kthread
[  172.226526][T12724] veth0_to_bridge: entered promiscuous mode
[  172.251970][ T5877] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.255380][ T5877] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.267616][T12728] bond0: (slave wlan1): Releasing backup interface
[  172.272842][T12728] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  172.276988][T12723] veth0_to_bridge: left promiscuous mode
[  172.296180][ T5877] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.299832][ T5877] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.405613][T12739] netlink: 'syz.1.2974': attribute type 3 has an invalid length.
[  172.800839][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2988'.
[  172.950099][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  172.964474][T12781] netlink: 'syz.3.2993': attribute type 1 has an invalid length.
[  172.967738][T12781] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2993'.
[  172.975195][T12781] netlink: 'syz.3.2993': attribute type 1 has an invalid length.
[  172.978449][T12781] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2993'.
[  173.238798][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'.
[  173.327546][T12806] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  173.505899][T12817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3010'.
[  173.556853][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3011'.
[  173.672977][T12827] veth0_to_bond: entered allmulticast mode
[  173.931137][T12851] lo speed is unknown, defaulting to 1000
[  173.991281][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  174.046688][T12854] netlink: 'syz.0.3024': attribute type 1 has an invalid length.
[  174.151791][T12851] lo speed is unknown, defaulting to 1000
[  175.030093][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  175.849036][T12929] tipc: New replicast peer: 0.0.0.0
[  175.853620][T12929] tipc: Enabled bearer <udp:syz2>, priority 10
[  175.856223][T12929] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  176.070343][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  176.096459][T12955] __nla_validate_parse: 7 callbacks suppressed
[  176.096474][T12955] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3071'.
[  176.345716][T12976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3080'.
[  176.355225][T12978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3082'.
[  176.428125][T12986] netlink: 'syz.1.3086': attribute type 1 has an invalid length.
[  176.622838][T13008] netlink: 'syz.3.3096': attribute type 4 has an invalid length.
[  176.870539][   T10] tipc: Node number set to 3029707427
[  176.935726][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'.
[  177.111301][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  177.270066][T13053] netlink: 'syz.0.3117': attribute type 15 has an invalid length.
[  177.586502][T13083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3132'.
[  177.591178][T13081] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  177.708162][T13090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3135'.
[  178.150121][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  178.703428][T13119] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3143'.
[  178.721782][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3145'.
[  178.732649][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3145'.
[  178.743899][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3145'.
[  178.822453][T13121] veth0_to_bond: left allmulticast mode
[  178.873100][T13121] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  178.999103][T13139] sctp: [Deprecated]: syz.1.3153 (pid 13139) Use of struct sctp_assoc_value in delayed_ack socket option.
[  178.999103][T13139] Use struct sctp_sack_info instead
[  179.183764][T13153] block nbd0: not configured, cannot reconfigure
[  179.190117][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  179.273702][T13159] netlink: 'syz.0.3163': attribute type 2 has an invalid length.
[  179.384018][T13172] netlink: 'syz.1.3169': attribute type 83 has an invalid length.
[  179.548164][T13187] tipc: New replicast peer: 255.255.255.255
[  179.552373][T13187] tipc: Enabled bearer <udp:s>, priority 10
[  179.753011][ T5239] Bluetooth: hci2: command 0x0405 tx timeout
[  179.849123][T13212] syzkaller1: entered promiscuous mode
[  179.853246][T13212] syzkaller1: entered allmulticast mode
[  180.230087][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  180.419629][T13243] netlink: 'syz.1.3200': attribute type 7 has an invalid length.
[  180.436787][T13243] : entered promiscuous mode
[  180.441735][T13243] netlink: 'syz.1.3200': attribute type 2 has an invalid length.
[  180.909081][T13279] netlink: 'syz.0.3218': attribute type 10 has an invalid length.
[  181.174026][T13313] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  181.179262][T13309] __nla_validate_parse: 45 callbacks suppressed
[  181.179271][T13309] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3233'.
[  181.270068][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  181.283809][T13323] lo speed is unknown, defaulting to 1000
[  181.284609][T13325] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3240'.
[  181.289365][T13325] nbd: illegal input index 65508
[  181.410664][T13328] lo speed is unknown, defaulting to 1000
[  181.446522][T13332] syzkaller1: entered promiscuous mode
[  181.448725][T13332] syzkaller1: entered allmulticast mode
[  181.454465][T13323] lo speed is unknown, defaulting to 1000
[  181.514089][T13328] lo speed is unknown, defaulting to 1000
[  181.852449][T13346] netlink: zone id is out of range
[  181.855520][T13346] netlink: zone id is out of range
[  181.857626][T13346] netlink: zone id is out of range
[  181.859761][T13346] netlink: zone id is out of range
[  182.287138][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3257'.
[  183.350113][    C1] net_ratelimit: 311 callbacks suppressed
[  183.350129][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  184.277924][T13449] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3290'.
[  184.283114][T13449] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3290'.
[  184.286910][T13449] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3290'.
[  184.386003][T13459] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3295'.
[  184.390117][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  184.447386][T13465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3298'.
[  184.523636][T13474] tun0: tun_chr_ioctl cmd 2147767520
[  184.572418][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  184.576861][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  184.585880][   T10] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  184.852887][T13489] netlink: 'syz.1.3304': attribute type 13 has an invalid length.
[  184.855671][T13489] netlink: 'syz.1.3304': attribute type 17 has an invalid length.
[  184.872158][T13489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.223717][T13530] netlink: 508 bytes leftover after parsing attributes in process `syz.1.3324'.
[  185.236985][T13527] lo speed is unknown, defaulting to 1000
[  185.278981][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3325'.
[  185.357612][T13527] lo speed is unknown, defaulting to 1000
[  185.430144][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  185.488130][T13550] netlink: 'syz.1.3333': attribute type 1 has an invalid length.
[  185.494455][T13550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.514962][T13554] netlink: 'syz.3.3334': attribute type 1 has an invalid length.
[  185.687753][T13565] lo speed is unknown, defaulting to 1000
[  185.826800][T13565] lo speed is unknown, defaulting to 1000
[  185.844235][T13582] netlink: 'syz.1.3347': attribute type 4 has an invalid length.
[  185.851847][T13582] netlink: 'syz.1.3347': attribute type 4 has an invalid length.
[  185.987993][T13598] ==================================================================
[  185.990968][T13598] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  185.993793][T13598] Read of size 2 at addr ffff888034d83bc2 by task syz.3.3356/13598
[  185.997433][T13598] 
[  185.998250][T13598] CPU: 1 UID: 0 PID: 13598 Comm: syz.3.3356 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  185.998261][T13598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.998266][T13598] Call Trace:
[  185.998271][T13598]  <TASK>
[  185.998275][T13598]  dump_stack_lvl+0x189/0x250
[  185.998286][T13598]  ? __kasan_check_byte+0x12/0x40
[  185.998298][T13598]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.998307][T13598]  ? lock_release+0x4b/0x3e0
[  185.998320][T13598]  ? __virt_addr_valid+0x4a5/0x5c0
[  185.998329][T13598]  print_report+0xca/0x240
[  185.998337][T13598]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  185.998348][T13598]  kasan_report+0x118/0x150
[  185.998358][T13598]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  185.998368][T13598]  __xfrm_state_lookup+0x6ad/0x8d0
[  185.998379][T13598]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  185.998390][T13598]  ? xfrm_state_lookup+0x45/0x1e0
[  185.998400][T13598]  xfrm_state_lookup+0x11e/0x1e0
[  185.998412][T13598]  xfrm_add_sa_expire+0x19c/0x4b0
[  185.998420][T13598]  ? __pfx_xfrm_add_sa_expire+0x10/0x10
[  185.998428][T13598]  ? __nla_parse+0x40/0x60
[  185.998437][T13598]  xfrm_user_rcv_msg+0x7a3/0xab0
[  185.998445][T13598]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  185.998451][T13598]  ? bpf_trace_run2+0x322/0x4b0
[  185.998467][T13598]  ? rcu_is_watching+0x15/0xb0
[  185.998474][T13598]  ? trace_contention_end+0x39/0x120
[  185.998482][T13598]  ? __mutex_lock+0x335/0x1360
[  185.998493][T13598]  netlink_rcv_skb+0x208/0x470
[  185.998502][T13598]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  185.998509][T13598]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  185.998520][T13598]  ? netlink_deliver_tap+0x2e/0x1b0
[  185.998529][T13598]  ? netlink_deliver_tap+0x2e/0x1b0
[  185.998539][T13598]  xfrm_netlink_rcv+0x79/0x90
[  185.998545][T13598]  netlink_unicast+0x82f/0x9e0
[  185.998554][T13598]  ? __pfx_netlink_unicast+0x10/0x10
[  185.998562][T13598]  ? netlink_sendmsg+0x642/0xb30
[  185.998570][T13598]  ? skb_put+0x11b/0x210
[  185.998580][T13598]  netlink_sendmsg+0x805/0xb30
[  185.998590][T13598]  ? __pfx_netlink_sendmsg+0x10/0x10
[  185.998599][T13598]  ? aa_sock_msg_perm+0xf1/0x1d0
[  185.998608][T13598]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  185.998616][T13598]  ? __pfx_netlink_sendmsg+0x10/0x10
[  185.998624][T13598]  __sock_sendmsg+0x21c/0x270
[  185.998633][T13598]  ____sys_sendmsg+0x505/0x830
[  185.998644][T13598]  ? __pfx_____sys_sendmsg+0x10/0x10
[  185.998655][T13598]  ? import_iovec+0x74/0xa0
[  185.998662][T13598]  ___sys_sendmsg+0x21f/0x2a0
[  185.998672][T13598]  ? __pfx____sys_sendmsg+0x10/0x10
[  185.998687][T13598]  ? __fget_files+0x2a/0x420
[  185.998698][T13598]  ? __fget_files+0x3a0/0x420
[  185.998709][T13598]  __x64_sys_sendmsg+0x19b/0x260
[  185.998719][T13598]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  185.998731][T13598]  ? rcu_is_watching+0x15/0xb0
[  185.998738][T13598]  ? do_syscall_64+0xbe/0x3b0
[  185.998748][T13598]  do_syscall_64+0xfa/0x3b0
[  185.998756][T13598]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.998764][T13598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.998771][T13598]  ? exc_page_fault+0x9f/0xf0
[  185.998785][T13598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.998792][T13598] RIP: 0033:0x7f7481f8ebe9
[  185.998800][T13598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.998807][T13598] RSP: 002b:00007f7482e13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.998817][T13598] RAX: ffffffffffffffda RBX: 00007f74821b5fa0 RCX: 00007f7481f8ebe9
[  185.998823][T13598] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003
[  185.998828][T13598] RBP: 00007f7482011e19 R08: 0000000000000000 R09: 0000000000000000
[  185.998833][T13598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.998838][T13598] R13: 00007f74821b6038 R14: 00007f74821b5fa0 R15: 00007ffe2d53b618
[  185.998847][T13598]  </TASK>
[  185.998850][T13598] 
[  186.132883][T13598] Allocated by task 12434:
[  186.134609][T13598]  kasan_save_track+0x3e/0x80
[  186.136183][T13598]  __kasan_slab_alloc+0x6c/0x80
[  186.137781][T13598]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  186.139783][T13598]  xfrm_state_alloc+0x24/0x2f0
[  186.141474][T13598]  __find_acq_core+0x8a7/0x1c00
[  186.143323][T13598]  xfrm_find_acq+0x78/0xa0
[  186.145045][T13598]  xfrm_alloc_userspi+0x6b3/0xc90
[  186.146842][T13598]  xfrm_user_rcv_msg+0x7a3/0xab0
[  186.148446][T13598]  netlink_rcv_skb+0x208/0x470
[  186.150368][T13598]  xfrm_netlink_rcv+0x79/0x90
[  186.152362][T13598]  netlink_unicast+0x82f/0x9e0
[  186.154111][T13598]  netlink_sendmsg+0x805/0xb30
[  186.155658][T13598]  __sock_sendmsg+0x21c/0x270
[  186.157359][T13598]  ____sys_sendmsg+0x505/0x830
[  186.159364][T13598]  ___sys_sendmsg+0x21f/0x2a0
[  186.161316][T13598]  __x64_sys_sendmsg+0x19b/0x260
[  186.163378][T13598]  do_syscall_64+0xfa/0x3b0
[  186.165155][T13598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.167157][T13598] 
[  186.168153][T13598] Freed by task 5851:
[  186.169605][T13598]  kasan_save_track+0x3e/0x80
[  186.171229][T13598]  kasan_save_free_info+0x46/0x50
[  186.172978][T13598]  __kasan_slab_free+0x5b/0x80
[  186.174556][T13598]  kmem_cache_free+0x18f/0x400
[  186.176142][T13598]  xfrm_state_gc_task+0x52d/0x6b0
[  186.178079][T13598]  process_scheduled_works+0xae1/0x17b0
[  186.180337][T13598]  worker_thread+0x8a0/0xda0
[  186.182179][T13598]  kthread+0x711/0x8a0
[  186.183808][T13598]  ret_from_fork+0x3fc/0x770
[  186.185330][T13598]  ret_from_fork_asm+0x1a/0x30
[  186.186896][T13598] 
[  186.187760][T13598] The buggy address belongs to the object at ffff888034d83a80
[  186.187760][T13598]  which belongs to the cache xfrm_state of size 928
[  186.192242][T13598] The buggy address is located 322 bytes inside of
[  186.192242][T13598]  freed 928-byte region [ffff888034d83a80, ffff888034d83e20)
[  186.196733][T13598] 
[  186.197541][T13598] The buggy address belongs to the physical page:
[  186.199566][T13598] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34d80
[  186.202603][T13598] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  186.205414][T13598] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  186.208004][T13598] page_type: f5(slab)
[  186.209349][T13598] raw: 00fff00000000040 ffff888104f603c0 dead000000000122 0000000000000000
[  186.212361][T13598] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  186.215416][T13598] head: 00fff00000000040 ffff888104f603c0 dead000000000122 0000000000000000
[  186.218472][T13598] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  186.221545][T13598] head: 00fff00000000002 ffffea0000d36001 00000000ffffffff 00000000ffffffff
[  186.224835][T13598] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  186.228101][T13598] page dumped because: kasan: bad access detected
[  186.230309][T13598] page_owner tracks the page as allocated
[  186.232559][T13598] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10965, tgid 10964 (syz.1.2193), ts 141789080733, free_ts 141118604316
[  186.239082][T13598]  post_alloc_hook+0x240/0x2a0
[  186.240677][T13598]  get_page_from_freelist+0x21e4/0x22c0
[  186.242524][T13598]  __alloc_frozen_pages_noprof+0x181/0x370
[  186.244452][T13598]  alloc_pages_mpol+0x232/0x4a0
[  186.246376][T13598]  allocate_slab+0x8a/0x370
[  186.247987][T13598]  ___slab_alloc+0xbeb/0x1410
[  186.249872][T13598]  kmem_cache_alloc_noprof+0x283/0x3c0
[  186.251897][T13598]  xfrm_state_alloc+0x24/0x2f0
[  186.253462][T13598]  xfrm_state_find+0x37d4/0x5400
[  186.255085][T13598]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  186.257433][T13598]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  186.259475][T13598]  xfrm_lookup_route+0x3c/0x1c0
[  186.261276][T13598]  rawv6_sendmsg+0xdab/0x1820
[  186.263066][T13598]  __sock_sendmsg+0x19c/0x270
[  186.264636][T13598]  ____sys_sendmsg+0x52d/0x830
[  186.266239][T13598]  ___sys_sendmsg+0x21f/0x2a0
[  186.267819][T13598] page last free pid 10911 tgid 10910 stack trace:
[  186.269938][T13598]  __free_frozen_pages+0xbc4/0xd30
[  186.271556][T13598]  __put_partials+0x156/0x1a0
[  186.273158][T13598]  put_cpu_partial+0x17c/0x250
[  186.274721][T13598]  __slab_free+0x2d5/0x3c0
[  186.276164][T13598]  qlist_free_all+0x97/0x140
[  186.277697][T13598]  kasan_quarantine_reduce+0x148/0x160
[  186.279499][T13598]  __kasan_slab_alloc+0x22/0x80
[  186.281128][T13598]  __kmalloc_cache_node_noprof+0x1c0/0x3d0
[  186.283123][T13598]  __get_vm_area_node+0x13f/0x300
[  186.284755][T13598]  __vmalloc_node_range_noprof+0x301/0x12f0
[  186.286709][T13598]  __vmalloc_noprof+0xb1/0xf0
[  186.288291][T13598]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  186.290080][T13598]  bpf_prog_alloc+0x3c/0x1a0
[  186.291596][T13598]  bpf_prog_load+0x735/0x1930
[  186.293214][T13598]  __sys_bpf+0x528/0x870
[  186.294937][T13598]  __x64_sys_bpf+0x7c/0x90
[  186.296708][T13598] 
[  186.297686][T13598] Memory state around the buggy address:
[  186.299882][T13598]  ffff888034d83a80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.303059][T13598]  ffff888034d83b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.306198][T13598] >ffff888034d83b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.309429][T13598]                                            ^
[  186.311848][T13598]  ffff888034d83c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.314633][T13598]  ffff888034d83c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.317879][T13598] ==================================================================
[  186.337582][T13598] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  186.340637][T13598] CPU: 1 UID: 0 PID: 13598 Comm: syz.3.3356 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  186.345492][T13598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  186.349634][T13598] Call Trace:
[  186.351070][T13598]  <TASK>
[  186.352330][T13598]  dump_stack_lvl+0x99/0x250
[  186.354291][T13598]  ? __asan_memcpy+0x40/0x70
[  186.356265][T13598]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.358468][T13598]  ? __pfx__printk+0x10/0x10
[  186.360486][T13598]  vpanic+0x281/0x750
[  186.362225][T13598]  ? preempt_schedule+0xae/0xc0
[  186.364286][T13598]  ? __pfx_vpanic+0x10/0x10
[  186.366145][T13598]  ? preempt_schedule_common+0x83/0xd0
[  186.368409][T13598]  ? preempt_schedule+0xae/0xc0
[  186.370428][T13598]  ? __pfx_preempt_schedule+0x10/0x10
[  186.372617][T13598]  panic+0xb9/0xc0
[  186.373937][T13598]  ? __pfx_panic+0x10/0x10
[  186.375413][T13598]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  186.377360][T13598]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  186.379314][T13598]  check_panic_on_warn+0x89/0xb0
[  186.381360][T13598]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  186.383553][T13598]  end_report+0x78/0x160
[  186.385274][T13598]  kasan_report+0x129/0x150
[  186.387166][T13598]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  186.389342][T13598]  __xfrm_state_lookup+0x6ad/0x8d0
[  186.391439][T13598]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  186.393738][T13598]  ? xfrm_state_lookup+0x45/0x1e0
[  186.395804][T13598]  xfrm_state_lookup+0x11e/0x1e0
[  186.397830][T13598]  xfrm_add_sa_expire+0x19c/0x4b0
[  186.399833][T13598]  ? __pfx_xfrm_add_sa_expire+0x10/0x10
[  186.402029][T13598]  ? __nla_parse+0x40/0x60
[  186.403947][T13598]  xfrm_user_rcv_msg+0x7a3/0xab0
[  186.405535][T13598]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  186.407300][T13598]  ? bpf_trace_run2+0x322/0x4b0
[  186.408986][T13598]  ? rcu_is_watching+0x15/0xb0
[  186.410880][T13598]  ? trace_contention_end+0x39/0x120
[  186.412984][T13598]  ? __mutex_lock+0x335/0x1360
[  186.414896][T13598]  netlink_rcv_skb+0x208/0x470
[  186.416874][T13598]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  186.419103][T13598]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  186.421271][T13598]  ? netlink_deliver_tap+0x2e/0x1b0
[  186.423117][T13598]  ? netlink_deliver_tap+0x2e/0x1b0
[  186.424867][T13598]  xfrm_netlink_rcv+0x79/0x90
[  186.426424][T13598]  netlink_unicast+0x82f/0x9e0
[  186.428012][T13598]  ? __pfx_netlink_unicast+0x10/0x10
[  186.429738][T13598]  ? netlink_sendmsg+0x642/0xb30
[  186.431434][T13598]  ? skb_put+0x11b/0x210
[  186.432870][T13598]  netlink_sendmsg+0x805/0xb30
[  186.434573][T13598]  ? __pfx_netlink_sendmsg+0x10/0x10
[  186.436470][T13598]  ? aa_sock_msg_perm+0xf1/0x1d0
[  186.438181][T13598]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  186.440291][T13598]  ? __pfx_netlink_sendmsg+0x10/0x10
[  186.442359][T13598]  __sock_sendmsg+0x21c/0x270
[  186.443952][T13598]  ____sys_sendmsg+0x505/0x830
[  186.445529][T13598]  ? __pfx_____sys_sendmsg+0x10/0x10
[  186.447495][T13598]  ? import_iovec+0x74/0xa0
[  186.449366][T13598]  ___sys_sendmsg+0x21f/0x2a0
[  186.451300][T13598]  ? __pfx____sys_sendmsg+0x10/0x10
[  186.453108][T13598]  ? __fget_files+0x2a/0x420
[  186.454669][T13598]  ? __fget_files+0x3a0/0x420
[  186.456470][T13598]  __x64_sys_sendmsg+0x19b/0x260
[  186.458328][T13598]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  186.460246][T13598]  ? rcu_is_watching+0x15/0xb0
[  186.462023][T13598]  ? do_syscall_64+0xbe/0x3b0
[  186.463640][T13598]  do_syscall_64+0xfa/0x3b0
[  186.465105][T13598]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.466801][T13598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.468807][T13598]  ? exc_page_fault+0x9f/0xf0
[  186.470615][T13598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.472653][T13598] RIP: 0033:0x7f7481f8ebe9
[  186.474140][T13598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.480337][T13598] RSP: 002b:00007f7482e13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.482995][T13598] RAX: ffffffffffffffda RBX: 00007f74821b5fa0 RCX: 00007f7481f8ebe9
[  186.485549][T13598] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003
[  186.488121][T13598] RBP: 00007f7482011e19 R08: 0000000000000000 R09: 0000000000000000
[  186.490963][T13598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  186.493682][T13598] R13: 00007f74821b6038 R14: 00007f74821b5fa0 R15: 00007ffe2d53b618
[  186.496249][T13598]  </TASK>
[  186.497982][T13598] Kernel Offset: disabled
[  186.499336][T13598] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:46:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=1ffff11026cc7f61 RCX=ffff8880221b5640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002eff6c0 RSP=ffffc90002eff538
R8 =ffffffff8fa34737 R9 =1ffffffff1f468e6 R10=dffffc0000000000 R11=fffffbfff1f468e7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81bfabb0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558c106500 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000024100000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f0c13a12e53
XMM06=0000000000000000 00007f0c13a12e4d XMM07=0000000000000000 00007f0c13a12e61
XMM08=0000000000000000 00007f0c13a12ee7 XMM09=0000000000000000 00007f0c13a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001281 RDI=0000000000001282 RBP=00000000000003f8 RSP=ffffc9000320ea30
R8 =ffff888107bc8237 R9 =1ffff11020f79046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af490f R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7482e136c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=0000000110fc4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7482187498 00007f7482187470 XMM03=00007f74821874a8 00007f74821874a0
XMM04=00007f7482ced100 00007f7482187460 XMM05=00007f7482187478 00007f74821874c0
XMM06=00007f74821874b8 00007f74821874b0 XMM07=00007f74821874a8 00007f74821874a0
XMM08=0000000000000000 00007f7482012ee7 XMM09=0000000000000000 00007f7482012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
