last executing test programs:

609.914429ms ago: executing program 2 (id=3385):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa4, 0x0, r1}, 0x48)

548.750267ms ago: executing program 0 (id=3387):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x1, 0xfffffffffffffff8, 0x5})

548.497681ms ago: executing program 2 (id=3388):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
splice(r2, &(0x7f0000000040)=0x1, r3, &(0x7f00000000c0)=0x2, 0x9, 0x0)
unshare(0x20000400)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r1, r0, &(0x7f0000000140)=0x33, 0x1000)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'gre0\x00'}}, 0x1e)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, 0x0, 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r8, 0x0, 0x300080c1)
setsockopt$sock_attach_bpf(r8, 0x1, 0x9, &(0x7f0000000080), 0x4)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800)

490.535489ms ago: executing program 1 (id=3389):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000100", @ANYRES32=0x0, @ANYBLOB="000000002f1c060008001b000000"], 0x28}}, 0x0)
close(0x3)

490.282554ms ago: executing program 0 (id=3390):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0), &(0x7f0000000040)=0x8)

400.201216ms ago: executing program 0 (id=3391):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)

349.915337ms ago: executing program 0 (id=3392):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500050008"], 0x4a)

287.481621ms ago: executing program 1 (id=3393):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000280)={0x67, 0x1, 0x4, 0x2005, 0x7f})

279.48532ms ago: executing program 2 (id=3394):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
socket(0x10, 0x803, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="a4aec2e4", 0x4}], 0x1}}], 0x1, 0x400c011)

189.119032ms ago: executing program 1 (id=3395):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x458, 0x30, 0x4, 0x70bd29, 0x0, {}, [{0x444, 0x1, [@m_police={0x440, 0x1, 0x0, 0x0, {{0xb}, {0x414, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x4e17, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0xe4b2, 0x0, 0x0, 0x437e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x10001, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x458}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100200000003a"], 0x0, 0x5a}, 0x28)

188.893038ms ago: executing program 1 (id=3396):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@empty, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0xffff, 0x0, 0x2, 0x0, 0x1, 0x0, 0x59}, {0x3, 0x200000, 0x7}, {0x40000, 0x8, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

181.744686ms ago: executing program 0 (id=3397):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', 0x0})

110.291601ms ago: executing program 1 (id=3398):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, r1, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050)

109.966584ms ago: executing program 2 (id=3399):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c)

59.303746ms ago: executing program 0 (id=3400):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r1], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[0x0], 0x0, 0x0, 0xad, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000600), &(0x7f0000000680), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e002800", 0x24}, {&(0x7f00000000c0)="fda2127ae7", 0x5}], 0x2}, 0x64)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00100000000006000000000400000000000000617dc392e4ca3d6ad03db2be066f16bc12c84806ee7979a7cd7d975180553ee1b1380e3693b61d33b6069ff1d26153569cbc1bbca8ed1b8e586290e310d46ebf3ba008010000000c7740143de540e77e243d7e20fe4223e1b1f33900"/126, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000020000000300"/25], 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0)
write$rfkill(r7, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xefffffff, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sock=0x71bef1a7a588568b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f00000000c0)=r8, 0x4)
setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000)=r8, 0x4)

58.982373ms ago: executing program 2 (id=3401):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1, 0x1100}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x16, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

248.441µs ago: executing program 2 (id=3402):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendfile(r0, r1, &(0x7f0000000180)=0x7fffffff, 0x86)

0s ago: executing program 1 (id=3403):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32404' (ED25519) to the list of known hosts.
syzkaller login: [   57.142782][ T5561] cgroup: Unknown subsys name 'net'
[   57.269732][ T5561] cgroup: Unknown subsys name 'cpuset'
[   57.274970][ T5561] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.145363][ T5561] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.647473][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.652484][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.656392][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.663749][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.667818][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.688009][ T4981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.692178][ T4981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.695186][ T4981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.698587][ T4981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.703428][ T4981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.727744][ T4981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.731315][ T4981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.734580][ T4981] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.740032][ T4981] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.743454][ T4981] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.361932][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.365821][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.370274][ T5595] bridge_slave_0: entered allmulticast mode
[   64.373040][ T5595] bridge_slave_0: entered promiscuous mode
[   64.386391][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.389340][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.392274][ T5603] bridge_slave_0: entered allmulticast mode
[   64.395661][ T5603] bridge_slave_0: entered promiscuous mode
[   64.399464][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.401924][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.404386][ T5603] bridge_slave_1: entered allmulticast mode
[   64.408120][ T5603] bridge_slave_1: entered promiscuous mode
[   64.411864][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.414856][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.418029][ T5595] bridge_slave_1: entered allmulticast mode
[   64.421894][ T5595] bridge_slave_1: entered promiscuous mode
[   64.478968][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.484550][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.489162][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.521385][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.544474][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.546916][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.549182][ T5599] bridge_slave_0: entered allmulticast mode
[   64.551848][ T5599] bridge_slave_0: entered promiscuous mode
[   64.568667][ T5603] team0: Port device team_slave_0 added
[   64.571329][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.574929][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.578429][ T5599] bridge_slave_1: entered allmulticast mode
[   64.582416][ T5599] bridge_slave_1: entered promiscuous mode
[   64.593464][ T5595] team0: Port device team_slave_0 added
[   64.606762][ T5603] team0: Port device team_slave_1 added
[   64.610401][ T5595] team0: Port device team_slave_1 added
[   64.621371][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.641495][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.656640][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.659607][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.670050][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.682495][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.685454][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.696270][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.702147][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.705079][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.715477][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.721626][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.724726][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.735189][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.768009][ T5599] team0: Port device team_slave_0 added
[   64.772545][ T5599] team0: Port device team_slave_1 added
[   64.834379][ T5603] hsr_slave_0: entered promiscuous mode
[   64.837875][ T5603] hsr_slave_1: entered promiscuous mode
[   64.852155][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.855731][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.866237][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.872624][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.875440][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.886262][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.895401][ T5595] hsr_slave_0: entered promiscuous mode
[   64.898749][ T5595] hsr_slave_1: entered promiscuous mode
[   64.901571][ T5595] debugfs: 'hsr0' already exists in 'hsr'
[   64.903865][ T5595] Cannot create hsr debugfs directory
[   65.004480][ T5599] hsr_slave_0: entered promiscuous mode
[   65.007784][ T5599] hsr_slave_1: entered promiscuous mode
[   65.010752][ T5599] debugfs: 'hsr0' already exists in 'hsr'
[   65.014712][ T5599] Cannot create hsr debugfs directory
[   65.317384][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.329642][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.337887][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.344931][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.359119][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.365608][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.369453][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.376866][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.429432][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.437406][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.445687][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.454435][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.458576][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.464584][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.468476][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.474417][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.558291][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.564361][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.568794][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.574074][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.585168][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.591145][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.599267][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.605118][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.702756][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.727402][ T4981] Bluetooth: hci1: command tx timeout
[   65.737833][ T4981] Bluetooth: hci0: command tx timeout
[   65.739237][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.749628][ T5603] 8021q: adding VLAN 0 to HW filter on device team0
[   65.762547][   T90] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.765853][   T90] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.792103][   T90] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.795095][   T90] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.806668][ T4981] Bluetooth: hci2: command tx timeout
[   65.809008][ T5595] 8021q: adding VLAN 0 to HW filter on device team0
[   65.817001][   T90] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.820036][   T90] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.831989][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.838179][   T90] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.841280][   T90] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.885020][ T5599] 8021q: adding VLAN 0 to HW filter on device team0
[   65.901656][   T90] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.904704][   T90] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.928440][   T90] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.931447][   T90] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.231728][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.260576][ T5595] veth0_vlan: entered promiscuous mode
[   66.271084][ T5595] veth1_vlan: entered promiscuous mode
[   66.308805][ T5595] veth0_macvtap: entered promiscuous mode
[   66.314545][ T5595] veth1_macvtap: entered promiscuous mode
[   66.325311][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.333046][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.343523][ T5649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.352486][ T5649] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.360206][ T5649] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.363817][ T5649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.383753][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.409714][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.457442][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.462912][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.503777][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.504574][ T5603] veth0_vlan: entered promiscuous mode
[   66.509546][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.531493][ T5603] veth1_vlan: entered promiscuous mode
[   66.540142][ T5599] veth0_vlan: entered promiscuous mode
[   66.553201][ T5599] veth1_vlan: entered promiscuous mode
[   66.588530][ T5595] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.601546][ T5603] veth0_macvtap: entered promiscuous mode
[   66.617706][ T5599] veth0_macvtap: entered promiscuous mode
[   66.621565][ T5603] veth1_macvtap: entered promiscuous mode
[   66.641247][ T5599] veth1_macvtap: entered promiscuous mode
[   66.654261][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.677764][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.692472][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.704425][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.713863][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.725080][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.749063][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.761821][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.774613][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.782614][ T5706] syzkaller1: entered promiscuous mode
[   66.784835][ T5706] syzkaller1: entered allmulticast mode
[   66.788719][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.792834][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.802042][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.910474][ T5708] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET)
[   66.912238][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.925073][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.949328][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.955787][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.976463][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.979469][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.000579][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.003989][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.168201][ T5672] IPVS: starting estimator thread 0...
[   67.182901][ T5714] IPVS: fo: FWM 3 0x00000003 - no destination available
[   67.268802][ T5715] IPVS: using max 50 ests per chain, 120000 per kthread
[   67.345180][ T5723] Unknown options in mask 6
[   67.353371][ T5727] syzkaller0: entered promiscuous mode
[   67.361142][ T5727] syzkaller0: entered allmulticast mode
[   67.361472][ T5723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'.
[   67.369544][ T5727] tipc: Started in network mode
[   67.372040][ T5727] tipc: Node identity c62f79b319d1, cluster identity 4711
[   67.375421][ T5727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.383891][ T5723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10'.
[   67.387907][ T5726] tipc: Resetting bearer <eth:syzkaller0>
[   67.407840][ T5726] tipc: Disabling bearer <eth:syzkaller0>
[   67.413424][ T5732] netlink: 'syz.2.10': attribute type 1 has an invalid length.
[   67.419310][ T5732] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10'.
[   67.806156][ T5597] Bluetooth: hci1: command tx timeout
[   67.808531][ T4981] Bluetooth: hci0: command tx timeout
[   67.886715][ T4981] Bluetooth: hci2: command tx timeout
[   68.396932][ T5785] netlink: 'syz.2.39': attribute type 1 has an invalid length.
[   68.411321][ T5785] netlink: 'syz.2.39': attribute type 3 has an invalid length.
[   68.421960][ T5785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39'.
[   69.054512][ T5841] syzkaller0: entered promiscuous mode
[   69.061487][ T5841] syzkaller0: entered allmulticast mode
[   69.205670][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'.
[   69.212258][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'.
[   69.268598][   T57] block nbd0: Receive control failed (result -107)
[   69.373086][ T5860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.70'.
[   69.761804][ T5879] "syz.0.78" (5879) uses obsolete ecb(arc4) skcipher
[   69.855383][ T5886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'.
[   69.886026][ T4981] Bluetooth: hci0: command tx timeout
[   69.886160][ T5597] Bluetooth: hci1: command tx timeout
[   69.966087][ T5597] Bluetooth: hci2: command tx timeout
[   70.099105][ T5894] Zero length message leads to an empty skb
[   70.103324][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.85'.
[   70.305840][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'.
[   70.611335][ T5932] netlink: 'syz.2.101': attribute type 11 has an invalid length.
[   70.822119][ T5950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.830013][ T5952] nftables ruleset with unbound set
[   70.878361][ T5956] openvswitch: netlink: Tunnel attr 157 out of range max 16
[   71.025106][ T5966] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[   71.413523][ T5987] netlink: 'syz.1.127': attribute type 1 has an invalid length.
[   71.434500][ T5984] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   71.440915][ T5984] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   71.465691][ T5987] bond1: entered promiscuous mode
[   71.468345][ T5987] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.498062][ T5987] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   71.504659][ T5987] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   71.509817][ T5987] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   71.649295][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[   71.966673][ T4981] Bluetooth: hci1: command tx timeout
[   71.969332][ T5597] Bluetooth: hci0: command tx timeout
[   72.046479][ T5597] Bluetooth: hci2: command tx timeout
[   72.315231][ T6034] xt_l2tp: missing protocol rule (udp|l2tpip)
[   73.498763][ T5920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   73.795213][ T6054] __nla_validate_parse: 4 callbacks suppressed
[   73.795228][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'.
[   73.941070][ T6063] tipc: Started in network mode
[   73.944004][ T6063] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[   73.951124][ T6063] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   73.994483][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'.
[   74.001036][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.010219][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.026395][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.041777][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.334426][ T6147] tipc: Failed to remove unknown binding: 66,0,0/0:627185730/627185731
[   75.339485][ T6147] tipc: Failed to remove unknown binding: 66,0,0/0:627185730/627185731
[   75.344972][ T6147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'.
[   76.121446][ T6198] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.133287][ T6197] tipc: Disabling bearer <eth:syzkaller0>
[   76.779192][ T6222] xt_hashlimit: size too large, truncated to 1048576
[   76.978998][ T6232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.234'.
[   77.183234][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.443594][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'.
[   77.568964][ T6270] netlink: 27 bytes leftover after parsing attributes in process `syz.1.245'.
[   77.573563][ T6271] netlink: 'syz.0.247': attribute type 1 has an invalid length.
[   77.630029][ T6271] bond1: entered promiscuous mode
[   77.639421][ T6271] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.693656][ T6271] macvtap1: entered allmulticast mode
[   77.713522][ T6271] macvtap2: entered allmulticast mode
[   77.747537][ T6271] bond1: (slave bridge1): making interface the new active one
[   77.750023][ T6271] bridge1: entered promiscuous mode
[   77.752891][ T6271] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   77.855766][ T6292] x_tables: duplicate entry at hook 4
[   78.140793][ T6316] netlink: 'syz.0.265': attribute type 3 has an invalid length.
[   78.613687][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'.
[   78.619105][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.622782][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.627668][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.630821][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.592433][ T6411] netlink: 68 bytes leftover after parsing attributes in process `syz.1.306'.
[   80.232510][ T6448] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.321'.
[   80.293930][ T6451] netlink: 'syz.1.321': attribute type 11 has an invalid length.
[   80.306788][ T6451] netlink: 140 bytes leftover after parsing attributes in process `syz.1.321'.
[   80.982325][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'.
[   81.259376][ T6483] batadv_slave_1: entered promiscuous mode
[   81.275177][ T6482] batadv_slave_1: left promiscuous mode
[   81.441445][ T6493] syzkaller0: entered promiscuous mode
[   81.446092][ T6493] syzkaller0: entered allmulticast mode
[   81.453161][ T6497] netlink: 'syz.2.341': attribute type 2 has an invalid length.
[   81.473449][ T6497] netlink: 220 bytes leftover after parsing attributes in process `syz.2.341'.
[   81.683842][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'.
[   81.807434][ T6511] netlink: 820 bytes leftover after parsing attributes in process `syz.2.348'.
[   81.817252][ T6513] netlink: 'syz.0.350': attribute type 178 has an invalid length.
[   81.822589][ T6511] netlink: 820 bytes leftover after parsing attributes in process `syz.2.348'.
[   81.905395][ T6517] geneve0: entered promiscuous mode
[   82.151737][ T6529] netlink: 68 bytes leftover after parsing attributes in process `syz.1.358'.
[   82.161003][ T6529] netlink: 'syz.1.358': attribute type 2 has an invalid length.
[   82.171171][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   82.679837][ T6559] openvswitch: netlink: IPv4 tunnel dst address is zero
[   83.095312][ T6585] bond0: invalid NS target ff00:0:0:f9:: specified for addition
[   83.099746][ T6585] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[   83.300852][ T6595] netlink: 'syz.1.387': attribute type 4 has an invalid length.
[   83.536907][ T6606] geneve2: entered promiscuous mode
[   83.709065][ T6573] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   84.684233][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.690229][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.722551][ T6655] syzkaller0: entered promiscuous mode
[   84.727106][ T6655] syzkaller0: entered allmulticast mode
[   84.733137][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.736401][ T6657] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.741346][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.744326][ T6657] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.753161][ T6657] bridge0: entered promiscuous mode
[   84.757485][ T6657] bridge0: entered allmulticast mode
[   84.771908][ T6655] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.780306][ T6655] tipc: Resetting bearer <eth:syzkaller0>
[   84.791139][ T6654] tipc: Resetting bearer <eth:syzkaller0>
[   84.814805][ T6654] tipc: Disabling bearer <eth:syzkaller0>
[   84.931012][ T5597] Bluetooth: hci0: command 0x0401 tx timeout
[   85.012984][ T6665] netlink: 'syz.0.420': attribute type 28 has an invalid length.
[   85.084093][ T6670] __nla_validate_parse: 5 callbacks suppressed
[   85.084113][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.422'.
[   85.309257][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'.
[   85.559384][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'.
[   85.739754][ T6704] Bluetooth: MGMT ver 1.23
[   85.989835][ T6722] Bluetooth: ISO socket layer initialized
[   86.455738][ T6751] netlink: 'syz.1.450': attribute type 2 has an invalid length.
[   86.511782][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'.
[   86.679732][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'.
[   86.899540][ T6782] netlink: 'syz.1.457': attribute type 2 has an invalid length.
[   87.179889][   T10] cfg80211: failed to load regulatory.db
[   87.253670][ T6821] openvswitch: netlink: IP tunnel TTL not specified.
[   87.455460][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'.
[   87.491624][ T6837] batadv_slave_1: entered promiscuous mode
[   87.499170][ T6837] batadv_slave_1: left promiscuous mode
[   87.567011][ T6843] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   87.580930][ T6843] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   87.716670][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'.
[   87.751761][ T6855] netlink: 'syz.0.477': attribute type 8 has an invalid length.
[   88.601724][ T6867] erspan0: entered promiscuous mode
[   88.606758][ T6867] erspan0: entered allmulticast mode
[   88.756499][ T6873] ip6gre1: entered promiscuous mode
[   88.758932][ T6873] ip6gre1: entered allmulticast mode
[   89.030671][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[   89.076305][ T6895] netlink: 'syz.1.497': attribute type 30 has an invalid length.
[   89.180200][ T6899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.292439][ T6899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.389106][ T6899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.464435][ T6899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.555822][ T5470] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.590004][ T5470] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.619339][ T5470] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.640312][ T5470] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.077609][ T6907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   90.621320][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'.
[   90.794364][ T6981] netlink: 'syz.2.533': attribute type 3 has an invalid length.
[   90.843388][ T6986] netlink: 276 bytes leftover after parsing attributes in process `syz.2.535'.
[   91.067680][ T7002] netlink: 56 bytes leftover after parsing attributes in process `syz.1.543'.
[   91.127646][ T7006] netlink: 7 bytes leftover after parsing attributes in process `syz.1.545'.
[   91.131367][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.545'.
[   91.135086][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.545'.
[   91.294028][ T7018] Driver unsupported XDP return value 0 on prog  (id 52) dev N/A, expect packet loss!
[   92.607917][ T7046] bond0: (slave ip6tnl0): refused to change device type
[   92.617529][ T7046] ip6erspan0: entered allmulticast mode
[   92.727247][ T7054] tipc: Can't bind to reserved service type 0
[   92.775328][ T7056] sock: sock_set_timeout: `syz.1.569' (pid 7056) tries to set negative timeout
[   92.838132][ T7062] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[   92.907740][ T7065] netlink: 'syz.0.572': attribute type 1 has an invalid length.
[   93.121861][ T7074] netlink: 236 bytes leftover after parsing attributes in process `syz.2.576'.
[   93.130635][ T7074] netlink: 236 bytes leftover after parsing attributes in process `syz.2.576'.
[   93.553261][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'.
[   93.634293][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'.
[   93.726418][ T7097] netlink: 'syz.1.586': attribute type 29 has an invalid length.
[   94.553724][ T7093] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   94.891754][ T7115] netlink: 'syz.2.594': attribute type 2 has an invalid length.
[   94.900813][ T7115] netlink: 'syz.2.594': attribute type 1 has an invalid length.
[   94.912606][ T7115] nbd: illegal input index 65544
[   95.998823][ T7173] __nla_validate_parse: 4 callbacks suppressed
[   95.998851][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'.
[   96.019125][ T7175] netlink: 'syz.2.622': attribute type 27 has an invalid length.
[   96.133009][ T7185] netlink: 'syz.1.627': attribute type 40 has an invalid length.
[   96.255202][ T7191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.871135][ T7238] netlink: 'syz.2.649': attribute type 2 has an invalid length.
[   98.359480][ T7282] netlink: 'syz.1.659': attribute type 3 has an invalid length.
[   98.768343][ T7302] syzkaller1: entered promiscuous mode
[   98.770997][ T7302] syzkaller1: entered allmulticast mode
[   99.291837][ T7314] netlink: 104 bytes leftover after parsing attributes in process `syz.0.674'.
[   99.520890][ T7330] sctp: [Deprecated]: syz.1.681 (pid 7330) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.520890][ T7330] Use struct sctp_sack_info instead
[   99.557698][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'.
[   99.591929][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'.
[   99.903471][ T7357] netlink: 'syz.2.693': attribute type 1 has an invalid length.
[   99.916359][ T7357] netlink: 'syz.2.693': attribute type 12 has an invalid length.
[   99.920702][ T7357] netlink: 'syz.2.693': attribute type 83 has an invalid length.
[  100.080669][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'.
[  100.407251][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'.
[  100.411568][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'.
[  100.827131][ T7423] warning: `syz.1.723' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.871158][ T7427] ieee802154 phy0 wpan0: encryption failed: -90
[  101.126964][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'.
[  101.281905][ T7445] netlink: 'syz.1.732': attribute type 3 has an invalid length.
[  101.292699][ T7445] netlink: 'syz.1.732': attribute type 4 has an invalid length.
[  101.306257][ T7445] netlink: 17 bytes leftover after parsing attributes in process `syz.1.732'.
[  101.371320][ T7445] xt_CT: No such helper "snmp_trap"
[  101.392094][ T7461] bond0: option arp_validate: invalid value (55553)
[  101.394007][ T5470] bond0: (slave bond_slave_0): interface is now down
[  101.401688][ T5470] bond0: (slave bond_slave_1): interface is now down
[  101.412488][ T5470] bond0: now running without any active interface!
[  101.494381][ T7467] openvswitch: netlink: Unknown nsh attribute 0
[  101.563206][   T34] audit: type=1800 audit(1786284854.305:2): pid=7472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.743" name=CB dev="tmpfs" ino=1265 res=0 errno=0
[  101.586898][ T7474] No such timeout policy "syz1"
[  101.608812][ T7475] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.745'.
[  102.357074][ T7502] netlink: 'syz.0.759': attribute type 9 has an invalid length.
[  102.360773][ T7502] netlink: 'syz.0.759': attribute type 6 has an invalid length.
[  102.364007][ T7502] netlink: 'syz.0.759': attribute type 7 has an invalid length.
[  102.368477][ T7502] netlink: 'syz.0.759': attribute type 8 has an invalid length.
[  103.527643][ T5650] IPVS: starting estimator thread 0...
[  103.543781][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.765'.
[  103.620804][ T7515] IPVS: using max 57 ests per chain, 136800 per kthread
[  103.714048][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'.
[  104.161889][ T7522] syz.2.768 (7522) used greatest stack depth: 19584 bytes left
[  104.346280][ T7565] netlink: Unknown conntrack attr (type=16383, max=9)
[  104.351331][ T7565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.450580][ T7568] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  104.491491][ T7568] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  104.527050][ T7574] syzkaller0: entered promiscuous mode
[  104.529581][ T7574] syzkaller0: entered allmulticast mode
[  104.540732][ T7574] tipc: Started in network mode
[  104.545220][ T7574] tipc: Node identity a23fd7044ce3, cluster identity 4711
[  104.550431][ T7574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.557711][ T7573] tipc: Resetting bearer <eth:syzkaller0>
[  104.579412][ T7573] tipc: Disabling bearer <eth:syzkaller0>
[  104.743153][ T7584] syzkaller0: entered promiscuous mode
[  104.745616][ T7584] syzkaller0: entered allmulticast mode
[  104.754091][ T7584] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.763835][ T7584] tipc: Resetting bearer <eth:syzkaller0>
[  104.768052][ T7583] tipc: Resetting bearer <eth:syzkaller0>
[  104.787073][ T7583] tipc: Disabling bearer <eth:syzkaller0>
[  104.860934][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'.
[  104.981981][   T57] block nbd1: Receive control failed (result -32)
[  104.982343][ T5855] block nbd1: Receive control failed (result -32)
[  105.285184][ T7603] netlink: 164 bytes leftover after parsing attributes in process `syz.1.803'.
[  105.290659][ T7603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'.
[  105.508299][ T7612] netlink: 'syz.2.809': attribute type 1 has an invalid length.
[  105.519843][ T7612] netlink: 228 bytes leftover after parsing attributes in process `syz.2.809'.
[  105.855122][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'.
[  106.801371][ T7647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.275811][   T10] IPVS: starting estimator thread 0...
[  107.285421][ T7679] IPVS: rr: UDP 127.0.0.1:10000 - no destination available
[  107.332564][ T7682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.841'.
[  107.386179][ T7680] IPVS: using max 49 ests per chain, 117600 per kthread
[  108.730156][ T7735] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  108.827662][ T7740] IPv4: Oversized IP packet from 127.202.26.0
[  108.937934][ T7749] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  108.944964][ T7748] netlink: 44 bytes leftover after parsing attributes in process `syz.1.867'.
[  109.217835][ T7771] syzkaller0: entered promiscuous mode
[  109.220338][ T7771] syzkaller0: entered allmulticast mode
[  109.247358][ T4981] Bluetooth: hci2: command 0x0405 tx timeout
[  109.398143][ T7777] netlink: 40 bytes leftover after parsing attributes in process `syz.1.882'.
[  109.403775][ T7777] netlink: 88 bytes leftover after parsing attributes in process `syz.1.882'.
[  109.931782][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'.
[  109.940084][ T7808] IPVS: Unknown mcast interface: vcan0
[  110.093691][ T7818] geneve0: entered promiscuous mode
[  110.096421][ T7818] macvlan3: entered promiscuous mode
[  110.149116][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'.
[  110.212997][ T7824] netlink: 27 bytes leftover after parsing attributes in process `syz.0.905'.
[  110.559377][ T7842] tc action pedit unable to extract header offset for header type (0x4)
[  110.564412][ T7842] tc action pedit unable to extract header offset for header type (0x4)
[  110.567925][ T7842] tc action pedit unable to extract header offset for header type (0x4)
[  110.571420][ T7842] tc action pedit unable to extract header offset for header type (0x4)
[  110.574783][ T7842] tc action pedit unable to extract header offset for header type (0x4)
[  110.578279][ T7842] tc action pedit unable to extract header offset for header type (0x4)
[  110.581625][ T7842] tc action pedit unable to extract header offset for header type (0x4)
[  110.584832][ T7842] tc action pedit unable to extract header offset for header type (0x4)
[  110.588113][ T7842] tc action pedit unable to extract header offset for header type (0x4)
[  110.591513][ T7842] tc action pedit unable to extract header offset for header type (0x4)
[  110.594897][ T7842] 0: reclassify loop, rule prio 0, protocol 800
[  110.883759][ T7860] netlink: 'syz.1.921': attribute type 16 has an invalid length.
[  111.096587][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'.
[  111.118530][ T7876] netlink: 'syz.0.928': attribute type 1 has an invalid length.
[  111.136851][ T7876] netlink: 224 bytes leftover after parsing attributes in process `syz.0.928'.
[  111.239296][ T7882] netlink: 'syz.1.932': attribute type 29 has an invalid length.
[  111.246098][ T7882] netlink: 'syz.1.932': attribute type 1 has an invalid length.
[  111.459716][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'.
[  111.545536][ T7906] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  111.686556][ T7913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.132016][ T7928] ip6gre1: entered promiscuous mode
[  112.134269][ T7928] ip6gre1: entered allmulticast mode
[  112.305290][ T7952] No such timeout policy "syz0"
[  112.306244][ T7950] 0: reclassify loop, rule prio 0, protocol 03
[  112.349049][ T7954] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96
[  112.447965][ T7957] bond2 (unregistering): Released all slaves
[  112.650687][ T7963] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  112.672786][ T7963] block nbd0: reconnected socket
[  112.677256][   T56] block nbd0: Receive control failed (result -32)
[  113.858580][ T8019] __nla_validate_parse: 1 callbacks suppressed
[  113.858594][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'.
[  114.189155][ T8039] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  114.291550][ T8042] netlink: 'syz.2.1002': attribute type 1 has an invalid length.
[  114.306673][ T8042] netlink: 'syz.2.1002': attribute type 1 has an invalid length.
[  114.512986][ T8050] IPv6: Can't replace route, no match found
[  114.517077][ T8050] IPv6: Can't replace route, no match found
[  115.172429][ T8093] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  115.422359][ T8102] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1029'.
[  115.890585][ T8112] xt_time: unknown flags 0x4
[  116.320782][ T8126] syzkaller0: entered promiscuous mode
[  116.326783][ T8126] syzkaller0: entered allmulticast mode
[  116.589341][ T5339] veth0_macvtap: left promiscuous mode
[  116.623881][ T8161] netlink: 'syz.0.1052': attribute type 1 has an invalid length.
[  116.627267][ T8161] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1052'.
[  116.630730][ T8161] netlink: 'syz.0.1052': attribute type 1 has an invalid length.
[  116.633844][ T8161] netlink: 29 bytes leftover after parsing attributes in process `syz.0.1052'.
[  117.312597][ T8189] x_tables: ip_tables: osf match: only valid for protocol 6
[  117.329529][ T8191] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1062'.
[  117.425638][ T8195] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1063'.
[  117.485282][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'.
[  117.545136][ T8197] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  117.705335][ T8207] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1068'.
[  118.633768][ T8217] sit0: entered promiscuous mode
[  118.649453][ T8217] netlink: 'syz.0.1072': attribute type 1 has an invalid length.
[  118.660501][ T8217] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1072'.
[  119.017753][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'.
[  119.137678][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'.
[  119.172177][ T8249] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1086'.
[  119.176111][ T8249] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1086'.
[  119.179951][ T8249] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1086'.
[  119.403482][ T8260] netlink: 'syz.0.1090': attribute type 15 has an invalid length.
[  119.419794][ T8258] syzkaller0: entered promiscuous mode
[  119.428409][ T8258] syzkaller0: entered allmulticast mode
[  119.848150][ T8282] ieee802154 phy0 wpan0: encryption failed: -22
[  119.871526][ T8284] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1102'.
[  119.874807][ T8284] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1102'.
[  119.916868][ T8286] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1103'.
[  120.101996][ T8294] virt_wifi0: entered promiscuous mode
[  120.274649][ T8309] ip6t_srh: unknown srh invflags BA61
[  120.469553][ T8317] netlink: 10184 bytes leftover after parsing attributes in process `syz.2.1117'.
[  120.473246][ T8317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1117'.
[  120.674002][ T8332] ieee802154 phy0 wpan0: encryption failed: -22
[  120.764292][ T8334] dvmrp8: entered allmulticast mode
[  121.319455][ T8374] bond2: option arp_interval: invalid value (18446744073709551615)
[  121.322737][ T8374] bond2: option arp_interval: allowed values 0 - 2147483647
[  121.327264][ T8374] bond2 (unregistering): Released all slaves
[  122.197925][ T8420] erspan0: left promiscuous mode
[  122.200256][ T8420] erspan0: left allmulticast mode
[  122.227942][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.231382][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.310409][ T8420] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.320472][ T8420] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.415201][ T8420] bond1: left promiscuous mode
[  122.422468][ T8420] ip6gre1: left promiscuous mode
[  122.424621][ T8420] ip6gre1: left allmulticast mode
[  122.439645][ T5470] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.444292][ T5470] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.455208][ T8429] syzkaller0: entered promiscuous mode
[  122.460784][ T8429] syzkaller0: entered allmulticast mode
[  122.479545][ T5470] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.491156][ T5470] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.923723][ T8463] tap0: tun_chr_ioctl cmd 1074025672
[  122.925855][ T8463] tap0: ignored: set checksum disabled
[  123.424920][ T8484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.739317][ T8531] netlink: 'syz.0.1202': attribute type 1 has an invalid length.
[  124.801859][ T8533] bridge0: port 3(batadv1) entered blocking state
[  124.811283][ T8533] bridge0: port 3(batadv1) entered disabled state
[  124.817539][ T8533] batadv1: entered allmulticast mode
[  124.823502][ T8533] batadv1: entered promiscuous mode
[  125.102067][ T8555] __nla_validate_parse: 5 callbacks suppressed
[  125.102083][ T8555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1215'.
[  125.109086][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'.
[  125.117397][ T8555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1215'.
[  125.121498][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1215'.
[  125.296807][ T5649] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  125.301003][ T5649] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  126.010406][ T8626] netlink: 'syz.0.1246': attribute type 3 has an invalid length.
[  126.016684][ T8626] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1246'.
[  127.102549][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'.
[  127.209359][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'.
[  127.276626][ T8680] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1266'.
[  127.799136][ T8731] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.1288'.
[  127.916455][ T8743] netlink: 'syz.0.1293': attribute type 1 has an invalid length.
[  128.141804][ T8759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.228480][ T8768] openvswitch: netlink: IP tunnel dst address not specified
[  128.231083][ T8768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.976327][ T8799] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  128.996944][ T8802] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  129.480739][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'.
[  130.030981][ T8866] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  130.205218][ T8880] __nla_validate_parse: 3 callbacks suppressed
[  130.205231][ T8880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1357'.
[  130.214545][ T8883] netlink: 'syz.1.1358': attribute type 1 has an invalid length.
[  130.220502][ T8883] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1358'.
[  130.224300][ T8883] netlink: 'syz.1.1358': attribute type 1 has an invalid length.
[  130.228037][ T8883] netlink: 2016 bytes leftover after parsing attributes in process `syz.1.1358'.
[  130.260944][ T8885] netlink: 'syz.2.1359': attribute type 4 has an invalid length.
[  130.264103][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1359'.
[  130.322778][ T8888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'.
[  130.336388][ T8888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.829099][ T8910] ip6gre1: entered promiscuous mode
[  130.831311][ T8910] ip6gre1: entered allmulticast mode
[  131.348712][ T8962] netlink: 'syz.2.1394': attribute type 1 has an invalid length.
[  131.352047][ T8962] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1394'.
[  131.358399][ T8955] netlink: 'syz.1.1391': attribute type 142 has an invalid length.
[  131.473788][ T8957] ip6gre2: entered promiscuous mode
[  131.482610][ T8957] ip6gre2: entered allmulticast mode
[  131.760216][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1405'.
[  131.764082][ T8994] netlink: 'syz.0.1405': attribute type 7 has an invalid length.
[  131.769106][ T8994] netlink: 'syz.0.1405': attribute type 8 has an invalid length.
[  131.773039][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'.
[  131.778866][ T8994] netlink: 'syz.0.1405': attribute type 1 has an invalid length.
[  131.782217][ T8994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1405'.
[  131.995131][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1409'.
[  133.087543][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  133.963603][ T9127] netlink: 'syz.2.1461': attribute type 2 has an invalid length.
[  136.028676][ T9076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  136.148590][ T9143] veth3: entered promiscuous mode
[  136.151186][ T9143] veth3: entered allmulticast mode
[  136.159044][ T9143] team0: Device veth3 is up. Set it down before adding it as a team port
[  137.808357][ T9267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.887997][ T9273] __nla_validate_parse: 8 callbacks suppressed
[  137.888008][ T9273] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1493'.
[  137.894470][ T9273] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1493'.
[  137.932951][ T9275] netlink: 'syz.0.1494': attribute type 2 has an invalid length.
[  137.943075][ T9275] : entered promiscuous mode
[  138.674492][ T9310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1510'.
[  138.728356][ T9313] netlink: 'syz.2.1510': attribute type 3 has an invalid length.
[  138.734196][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'.
[  138.772871][ T9315] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  138.772871][ T9315] Please contact the netfilter-devel mailing list or update your nftables rules.
[  139.002919][ T9329] netlink: 'syz.1.1518': attribute type 21 has an invalid length.
[  139.016084][ T9329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1518'.
[  139.219801][ T9343] vxcan0: tx address claim with different name
[  139.314040][ T9349] veth0_to_bridge: entered promiscuous mode
[  139.322160][ T9349] macsec0: entered allmulticast mode
[  139.325431][ T9349] veth0_to_bridge: entered allmulticast mode
[  139.330932][ T9349] veth0_to_bridge: left allmulticast mode
[  139.334522][ T9349] veth0_to_bridge: left promiscuous mode
[  139.423777][ T9356] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  140.111020][ T9410] syzkaller0: entered promiscuous mode
[  140.115077][ T9410] syzkaller0: entered allmulticast mode
[  140.118056][ T9412] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1556'.
[  140.293842][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1561'.
[  140.373269][ T9423] 8021q: adding VLAN 0 to HW filter on device bond3
[  140.378239][ T9423] bond2: (slave bond3): Enslaving as an active interface with an up link
[  140.383550][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1561'.
[  140.389200][ T9423] 8021q: adding VLAN 0 to HW filter on device bond2
[  140.658431][ T9434] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  140.662495][ T9434] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  141.195197][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'.
[  141.862143][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'.
[  142.226190][ T9525] block nbd2: server does not support multiple connections per device.
[  142.230537][ T9525] block nbd2: shutting down sockets
[  142.399714][ T9539] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  142.838646][ T9568] netlink: 'syz.0.1624': attribute type 1 has an invalid length.
[  142.858660][ T9568] 8021q: adding VLAN 0 to HW filter on device bond4
[  142.885731][ T9568] bond4: (slave veth3): Enslaving as an active interface with a down link
[  142.902074][ T9568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.905662][ T9568] bond4: (slave batadv0): making interface the new active one
[  142.909408][ T9568] batadv0: entered promiscuous mode
[  142.911674][ T9568] bond4: (slave batadv0): Enslaving as an active interface with an up link
[  143.011555][ T9577] __nla_validate_parse: 2 callbacks suppressed
[  143.011571][ T9577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1629'.
[  143.018701][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'.
[  143.022358][ T9577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1629'.
[  143.025252][ T9577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1629'.
[  143.219873][ T9596] bridge0: port 3(batadv1) entered blocking state
[  143.226227][ T9596] bridge0: port 3(batadv1) entered disabled state
[  143.229299][ T9596] batadv1: entered allmulticast mode
[  143.245194][ T9596] batadv1: entered promiscuous mode
[  143.620375][ T9624] netlink: 'syz.2.1651': attribute type 1 has an invalid length.
[  143.727739][ T5649] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  143.732922][ T5649] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  144.130942][ T9678] xt_hashlimit: size too large, truncated to 1048576
[  144.136460][ T9678] xt_hashlimit: max too large, truncated to 1048576
[  144.243857][ T9688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1681'.
[  144.580197][ T9716] netlink: 'syz.1.1694': attribute type 3 has an invalid length.
[  144.583343][ T9716] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1694'.
[  144.707662][ T9724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.721209][ T9724] syzkaller0: entered promiscuous mode
[  144.729372][ T9724] syzkaller0: entered allmulticast mode
[  144.733331][ T9724] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  144.756992][ T9724] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1700'.
[  144.781964][ T9724] tipc: Resetting bearer <eth:syzkaller0>
[  144.789284][ T9723] tipc: Resetting bearer <eth:syzkaller0>
[  144.807089][ T9723] tipc: Disabling bearer <eth:syzkaller0>
[  144.823070][ T9733] netlink: 'syz.0.1704': attribute type 5 has an invalid length.
[  144.826304][ T9733] netlink: 'syz.0.1704': attribute type 9 has an invalid length.
[  144.829042][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'.
[  144.950970][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1710'.
[  145.041207][ T9755] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1713'.
[  146.686948][ T5672] page_pool_release_retry() stalled pool shutdown: id 16, 1 inflight 60 sec
[  147.557223][ T9870] netlink: 'syz.1.1767': attribute type 1 has an invalid length.
[  148.370582][ T9924] netlink: 'syz.1.1794': attribute type 4 has an invalid length.
[  148.373967][ T9924] __nla_validate_parse: 6 callbacks suppressed
[  148.373977][ T9924] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1794'.
[  148.454732][ T9929] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1796'.
[  148.464346][ T9929] gretap0: entered promiscuous mode
[  148.471519][ T9929] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1796'.
[  148.478167][ T9929] 0{X: renamed from gretap0
[  148.485797][ T9929] 0{X: left promiscuous mode
[  148.488483][ T9929] 0{X: entered allmulticast mode
[  148.491781][ T9929] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  148.748073][ T9949] vlan2: entered promiscuous mode
[  148.749839][ T9949] syz_tun: entered promiscuous mode
[  149.264619][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'.
[  149.283876][ T5470] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  149.283960][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'.
[  149.291777][ T5470] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.302549][ T5470] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.307541][ T5470] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.976619][ T9996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.983694][ T9996] syzkaller0: entered promiscuous mode
[  149.993043][ T9996] syzkaller0: entered allmulticast mode
[  150.005565][ T9996] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  150.044750][ T9996] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1824'.
[  150.070286][ T9996] tipc: Resetting bearer <eth:syzkaller0>
[  150.084021][ T9995] tipc: Resetting bearer <eth:syzkaller0>
[  150.156684][ T9995] tipc: Disabling bearer <eth:syzkaller0>
[  150.758324][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'.
[  150.765834][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'.
[  150.770402][T10044] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  150.811756][T10044] bond3 (unregistering): Released all slaves
[  151.077017][T10059] xt_CT: You must specify a L4 protocol and not use inversions on it
[  151.158506][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1853'.
[  151.169724][T10064] ipvlan2: entered allmulticast mode
[  151.172508][T10064] syz_tun: entered allmulticast mode
[  151.268614][T10073] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1856'.
[  151.364053][T10083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.370632][T10085] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  151.989501][T10128] 8021q: adding VLAN 0 to HW filter on device bond4
[  151.993925][T10128] bond3: (slave bond4): Enslaving as an active interface with an up link
[  152.036864][T10128] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  152.064097][T10141] netlink: 'syz.0.1883': attribute type 32 has an invalid length.
[  152.085702][T10146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.088890][T10141] bond5: Setting coupled_control to off (0)
[  152.509391][T10173] tipc: New replicast peer: 172.20.20.170
[  152.511571][T10173] tipc: Enabled bearer <udp:syz2>, priority 10
[  152.514101][T10173] tipc: New replicast peer: 0.0.0.0
[  152.755585][T10179] 0{X: left allmulticast mode
[  152.789915][T10179] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.827386][T10179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.832017][T10179] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.869425][T10179] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  152.890215][T10179] ip6gre1: left promiscuous mode
[  152.891924][T10179] ip6gre1: left allmulticast mode
[  152.895124][ T5470] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.900386][ T5470] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.908663][ T5470] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.914165][ T5470] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.920941][ T5470] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.926426][ T5470] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.937627][ T5470] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.942274][ T5470] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.439995][T10195] tcf_pedit_act: 7 callbacks suppressed
[  153.440004][T10195] tc action pedit unable to extract header offset for header type (0x4)
[  153.445401][T10195] tc action pedit unable to extract header offset for header type (0x4)
[  153.448381][T10195] tc action pedit unable to extract header offset for header type (0x4)
[  153.451400][T10195] tc action pedit unable to extract header offset for header type (0x4)
[  153.454398][T10195] tc action pedit unable to extract header offset for header type (0x4)
[  153.457310][T10195] tc action pedit unable to extract header offset for header type (0x4)
[  153.459857][T10195] tc action pedit unable to extract header offset for header type (0x4)
[  153.462408][T10195] tc action pedit unable to extract header offset for header type (0x4)
[  153.464965][T10195] tc action pedit unable to extract header offset for header type (0x4)
[  153.467598][T10195] tc action pedit unable to extract header offset for header type (0x4)
[  153.470174][T10195] 0: reclassify loop, rule prio 0, protocol 800
[  153.589971][T10197] __nla_validate_parse: 3 callbacks suppressed
[  153.589980][T10197] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1907'.
[  153.596887][T10197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1907'.
[  153.600659][T10197] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1907'.
[  153.640333][ T5237] tipc: Node number set to 3757996467
[  153.874348][T10207] 8021q: adding VLAN 0 to HW filter on device bond1
[  153.878106][T10207] bridge0: port 4(bond1) entered blocking state
[  153.880940][T10207] bridge0: port 4(bond1) entered disabled state
[  153.883679][T10207] bond1: entered allmulticast mode
[  153.888635][T10207] bond1: entered promiscuous mode
[  154.080745][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1922'.
[  154.084935][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1922'.
[  154.116169][ T5470] batadv0: left promiscuous mode
[  154.214562][T10241] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1927'.
[  154.258760][T10243] xt_hashlimit: size too large, truncated to 1048576
[  154.280747][T10245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1929'.
[  154.467492][T10260] netlink: 'syz.0.1935': attribute type 3 has an invalid length.
[  154.471013][T10260] netlink: 'syz.0.1935': attribute type 3 has an invalid length.
[  154.686604][T10276] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1943'.
[  154.735216][T10280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1945'.
[  154.779111][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1948'.
[  155.212335][T10318] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.274244][T10322] netlink: 'syz.2.1963': attribute type 4 has an invalid length.
[  155.305736][T10324] netlink: 'syz.0.1964': attribute type 1 has an invalid length.
[  155.479890][T10335] Cannot find add_set index 0 as target
[  155.498751][T10337] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  155.575555][T10341] syzkaller0: entered promiscuous mode
[  155.578019][T10341] syzkaller0: entered allmulticast mode
[  155.997453][T10357] mac80211_hwsim hwsim4 z1: renamed from wlan0 (while UP)
[  156.526341][T10387] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  156.667070][T10395] netlink: 'syz.2.1996': attribute type 2 has an invalid length.
[  156.699360][T10395] : entered promiscuous mode
[  160.296262][T10441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  161.032622][T10503] __nla_validate_parse: 6 callbacks suppressed
[  161.032636][T10503] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2045'.
[  161.077874][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'.
[  161.081786][T10508] bond0: Unable to set down delay as MII monitoring is disabled
[  161.489685][T10532] netlink: 'syz.1.2056': attribute type 1 has an invalid length.
[  161.554759][T10532] 8021q: adding VLAN 0 to HW filter on device bond5
[  161.587437][T10536] bond5: (slave veth3): Enslaving as an active interface with a down link
[  161.622031][T10532] 8021q: adding VLAN 0 to HW filter on device batadv2
[  161.627940][T10532] bond5: (slave batadv2): making interface the new active one
[  161.632023][T10532] batadv2: entered promiscuous mode
[  161.634661][T10532] bond5: (slave batadv2): Enslaving as an active interface with an up link
[  161.699723][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'.
[  161.898968][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2061'.
[  161.914707][T10555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2063'.
[  161.988799][T10561] xt_TPROXY: Can be used only with -p tcp or -p udp
[  162.107995][T10567] netlink: 'syz.1.2071': attribute type 4 has an invalid length.
[  162.539996][T10581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.071801][T10603] ip6gre3: entered promiscuous mode
[  163.073884][T10603] ip6gre3: entered allmulticast mode
[  163.077600][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'.
[  163.080489][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'.
[  163.210927][T10603] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.232232][T10603] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.315590][T10603] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.320194][T10603] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.388189][T10603] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.392552][T10603] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.492927][T10603] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.497347][T10603] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.579409][ T5470] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.583599][ T5470] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.595194][ T5649] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.598384][ T5649] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.611222][ T5649] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.614356][ T5649] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.626815][ T5649] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.630190][ T5649] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.105434][T10631] netlink: 'syz.0.2100': attribute type 13 has an invalid length.
[  164.240466][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'.
[  164.246891][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'.
[  164.336067][T10639] netlink: 'syz.2.2103': attribute type 3 has an invalid length.
[  164.554711][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2113'.
[  165.246083][ T4981] Bluetooth: hci2: command 0x0405 tx timeout
[  167.552132][T10668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  167.558390][T10675] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2116'.
[  167.685020][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'.
[  167.694726][T10682] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2119'.
[  167.710921][T10691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2125'.
[  168.025183][T10707] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  168.215408][T10722] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  168.245139][T10729] netlink: 'syz.0.2138': attribute type 1 has an invalid length.
[  168.269726][T10729] 8021q: adding VLAN 0 to HW filter on device bond7
[  168.293517][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2140'.
[  168.315076][T10729] bond7: (slave syz_tun): unknown ethtool speed (1024) for port 1 (set it to 0)
[  168.324460][T10729] bond7: (slave syz_tun): speed changed to 0 on port 1
[  168.330024][T10729] bond7: (slave syz_tun): Enslaving as a backup interface with an up link
[  168.650616][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2154'.
[  168.700393][T10765] 8021q: adding VLAN 0 to HW filter on device bond6
[  168.711861][T10765] bond6: option ad_select: unable to set because the bond device is up
[  168.902459][T10784] netlink: 'syz.0.2161': attribute type 33 has an invalid length.
[  169.000154][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'.
[  169.017091][T10788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2157'.
[  169.241565][T10800] syzkaller0: entered promiscuous mode
[  169.244607][T10800] syzkaller0: entered allmulticast mode
[  169.248720][ T5470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.254242][T10800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.441078][T10814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.654791][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2182'.
[  169.659593][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2182'.
[  169.701931][T10842] netlink: 'syz.0.2185': attribute type 23 has an invalid length.
[  169.929228][T10861] pim6reg1: entered promiscuous mode
[  169.934309][T10861] pim6reg1: entered allmulticast mode
[  169.939970][T10866] team_slave_1: Caught tx_queue_len zero misconfig
[  170.023451][T10874] tunl0: Caught tx_queue_len zero misconfig
[  170.401479][T10901] tcf_pedit_act: 7 callbacks suppressed
[  170.401488][T10901] tc action pedit unable to extract header offset for header type (0x4)
[  170.406596][T10901] tc action pedit unable to extract header offset for header type (0x4)
[  170.409248][T10901] tc action pedit unable to extract header offset for header type (0x4)
[  170.411838][T10901] tc action pedit unable to extract header offset for header type (0x4)
[  170.414410][T10901] tc action pedit unable to extract header offset for header type (0x4)
[  170.417286][T10901] tc action pedit unable to extract header offset for header type (0x4)
[  170.420011][T10901] tc action pedit unable to extract header offset for header type (0x4)
[  170.422535][T10901] tc action pedit unable to extract header offset for header type (0x4)
[  170.425080][T10901] tc action pedit unable to extract header offset for header type (0x4)
[  170.428337][T10901] tc action pedit unable to extract header offset for header type (0x4)
[  170.431625][T10901] 0: reclassify loop, rule prio 0, protocol 800
[  170.880841][T10938] netlink: 'syz.0.2227': attribute type 23 has an invalid length.
[  170.883388][T10938] netlink: 'syz.0.2227': attribute type 21 has an invalid length.
[  170.885835][T10938] IPv6: NLM_F_CREATE should be specified when creating new route
[  171.185103][T10961] xt_hashlimit: size too large, truncated to 1048576
[  171.428243][T10985] netlink: 'syz.1.2248': attribute type 4 has an invalid length.
[  171.435061][T10987] netlink: 'syz.2.2249': attribute type 1 has an invalid length.
[  171.453518][T10990] mac80211_hwsim hwsim2 z1: renamed from wlan0
[  171.801171][T11013] syzkaller0: entered promiscuous mode
[  171.803216][T11013] syzkaller0: entered allmulticast mode
[  172.363548][T11059] syz_tun: Device is already in use.
[  172.396502][T11061] syzkaller0: entered promiscuous mode
[  172.398519][T11061] syzkaller0: entered allmulticast mode
[  172.482536][T11070] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  173.446128][ T5649] batadv2: left promiscuous mode
[  173.876483][T11106] __nla_validate_parse: 7 callbacks suppressed
[  173.876496][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'.
[  173.893024][T11106] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.2301'.
[  174.311357][T11126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2311'.
[  174.315449][T11126] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2311'.
[  174.424724][T11133] netlink: 'syz.2.2315': attribute type 1 has an invalid length.
[  174.503710][T11139] Cannot find set identified by id 0 to match
[  174.570728][T11145] netlink: 'syz.1.2319': attribute type 1 has an invalid length.
[  174.576383][T11145] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2319'.
[  174.631925][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2325'.
[  174.723530][T11163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2329'.
[  174.726906][T11163] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2329'.
[  174.730339][T11163] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2329'.
[  174.878658][T11171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.887998][T11171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.894122][T11171] bond0 (unregistering): Released all slaves
[  175.567042][T11165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  175.613381][T11178] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.616756][T11178] 8021q: adding VLAN 0 to HW filter on device team0
[  175.621017][T11178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.691144][T11178] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.702768][T11178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  175.707917][T11178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.714004][T11178] veth1_vlan: left promiscuous mode
[  175.718495][T11178] veth0_vlan: left promiscuous mode
[  175.720825][T11178] veth0_vlan: entered promiscuous mode
[  175.723517][T11178] veth1_vlan: entered promiscuous mode
[  175.733598][T11178] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  175.737445][T11178] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  175.742636][T11178] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  175.750765][T11178] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  175.764877][T11178] bridge0: port 3(batadv1) entered blocking state
[  175.767111][T11178] bridge0: port 3(batadv1) entered forwarding state
[  175.769529][T11178] 8021q: adding VLAN 0 to HW filter on device batadv1
[  175.780417][T11178] erspan0: entered promiscuous mode
[  175.784107][T11178] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.791866][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.794141][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.801687][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.803954][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.824776][ T5470] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.830660][ T5470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.834168][ T5470] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.837137][ T5470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.851017][ T5470] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.861624][ T5470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.871933][ T5470] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.879015][ T5470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.902866][ T5649] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.915041][ T5649] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.926863][ T5237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.984818][T11207] syzkaller0: entered promiscuous mode
[  175.989796][T11211] netlink: 'syz.1.2346': attribute type 1 has an invalid length.
[  175.993194][T11207] syzkaller0: entered allmulticast mode
[  176.000236][T11207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.010130][T11207] tipc: Resetting bearer <eth:syzkaller0>
[  176.013870][T11207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.017729][T11207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.020324][T11207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.022771][T11207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.033522][T11206] tipc: Resetting bearer <eth:syzkaller0>
[  176.052444][T11206] tipc: Disabling bearer <eth:syzkaller0>
[  176.191471][T11233] xt_hl: Unknown Hop Limit match mode: 206
[  176.263771][T11241] netlink: 'syz.0.2361': attribute type 7 has an invalid length.
[  176.266605][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'.
[  176.371383][ T5237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.475192][T11259] netlink: 'syz.2.2368': attribute type 2 has an invalid length.
[  176.536276][ T5237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.860002][T11280] bond7: option primary_reselect: invalid value (6)
[  176.863174][T11280] bond7 (unregistering): Released all slaves
[  176.992879][ T5597] Bluetooth: hci2: link tx timeout
[  176.998764][ T5597] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  177.003365][ T5597] Bluetooth: hci2: link tx timeout
[  177.005010][ T5597] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.952192][T11371] batadv0: entered promiscuous mode
[  178.009074][T11375] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  178.052544][ T5649] bond4: (slave batadv0): link status definitely down, disabling slave
[  178.073439][ T5649] bond4: now running without any active interface!
[  178.247216][T11393] syzkaller1: entered promiscuous mode
[  178.249412][T11393] syzkaller1: entered allmulticast mode
[  178.293346][T11395] tipc: New replicast peer: 255.255.255.255
[  178.295803][T11395] tipc: Enabled bearer <udp:syz2>, priority 10
[  178.441305][T11411] netlink: 'syz.1.2439': attribute type 4 has an invalid length.
[  179.029997][T11445] syzkaller0: entered promiscuous mode
[  179.033562][T11445] syzkaller0: entered allmulticast mode
[  179.086388][ T5597] Bluetooth: hci2: command 0x0405 tx timeout
[  179.134657][T11449] xt_hashlimit: overflow, try lower: 18446744073709551614/255
[  179.384675][T11468] __nla_validate_parse: 9 callbacks suppressed
[  179.384689][T11468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2466'.
[  179.406406][ T5658] tipc: Node number set to 4278190081
[  179.421659][T11463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2464'.
[  179.469360][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2468'.
[  179.475639][T11475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2468'.
[  179.646102][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  179.950564][T11521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2487'.
[  179.954566][T11521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2487'.
[  179.960789][T11521] netlink: 'syz.2.2487': attribute type 32 has an invalid length.
[  179.966626][T11521] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2487'.
[  180.310080][T11551] geneve2: entered promiscuous mode
[  180.312719][ T5470] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.359626][T11551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2499'.
[  180.365047][T11551] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2499'.
[  180.371107][T11551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2499'.
[  180.382398][ T5470] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.391168][ T5470] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.400548][ T5470] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.475205][T11564] netlink: 'syz.0.2504': attribute type 1 has an invalid length.
[  180.509147][T11566] netlink: 'syz.2.2507': attribute type 1 has an invalid length.
[  180.650377][T11574] ipvlan2: entered promiscuous mode
[  180.654283][T11574] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  180.660420][T11574] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  180.665347][T11574] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  180.745750][T11586] unsupported nla_type 216
[  180.792252][T11589] bond0: Error: Cannot enslave bond to itself.
[  181.169274][ T4981] Bluetooth: hci2: command 0x0405 tx timeout
[  181.595421][T11662] tc action pedit offset must be on 32 bit boundaries
[  181.598719][T11662] tc action pedit offset must be on 32 bit boundaries
[  181.601454][T11662] tc action pedit offset must be on 32 bit boundaries
[  181.603833][T11662] tc action pedit offset must be on 32 bit boundaries
[  181.606127][T11662] tc action pedit offset must be on 32 bit boundaries
[  181.608219][T11662] tc action pedit offset must be on 32 bit boundaries
[  181.610361][T11662] tc action pedit offset must be on 32 bit boundaries
[  181.612604][T11662] tc action pedit offset must be on 32 bit boundaries
[  181.615033][T11662] tc action pedit offset must be on 32 bit boundaries
[  181.617802][T11662] tc action pedit offset must be on 32 bit boundaries
[  181.620511][T11662] TC_ACT_REPEAT abuse ?
[  182.187190][T11701] netlink: 'syz.0.2570': attribute type 1 has an invalid length.
[  183.037597][T11772] openvswitch: netlink: Duplicate or invalid key (type 0).
[  183.295275][T11784] sch_tbf: burst 0 is lower than device lo mtu (32783) !
[  183.720447][T11808] netlink: zone id is out of range
[  183.724239][T11808] netlink: zone id is out of range
[  183.727184][T11808] netlink: zone id is out of range
[  183.729427][T11808] netlink: zone id is out of range
[  183.731638][T11808] netlink: zone id is out of range
[  183.733731][T11808] netlink: zone id is out of range
[  183.739131][T11808] netlink: zone id is out of range
[  184.213230][T11841] syzkaller0: tun_chr_ioctl cmd 1074025677
[  184.216574][T11841] syzkaller0: linktype set to 6
[  184.381700][T11851] 8021q: adding VLAN 0 to HW filter on device batadv3
[  184.456827][T11857] __nla_validate_parse: 19 callbacks suppressed
[  184.456837][T11857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2637'.
[  184.551894][T11867] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  185.527880][T11953] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2685'.
[  185.675541][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'.
[  185.926976][T11978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'.
[  186.206147][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  186.371769][ T4981] Bluetooth: hci1: command 0x0406 tx timeout
[  186.435051][T11997] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2705'.
[  186.644276][T12009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2709'.
[  186.856047][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  186.923785][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'.
[  187.154335][T12036] 8021q: adding VLAN 0 to HW filter on device bond7
[  187.162497][T12036] bridge0: port 4(bond7) entered blocking state
[  187.166550][T12036] bridge0: port 4(bond7) entered disabled state
[  187.175610][T12036] bond7: entered allmulticast mode
[  187.183143][T12036] bond7: entered promiscuous mode
[  187.312688][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2727'.
[  187.355161][T12055] 8021q: adding VLAN 0 to HW filter on device bond8
[  187.604719][T12064] xt_hashlimit: invalid rate
[  187.809207][T12082] syzkaller0: entered promiscuous mode
[  187.811309][T12082] syzkaller0: entered allmulticast mode
[  188.177939][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2748'.
[  188.181572][T12108] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2750'.
[  188.287752][T12113] syzkaller0: entered promiscuous mode
[  188.290712][T12113] syzkaller0: entered allmulticast mode
[  188.354642][T12125] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  188.552731][T12144] netlink: Failed to add GPL helper -22
[  188.555038][T12147] xt_connbytes: Forcing CT accounting to be enabled
[  188.558967][T12144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.082425][T12261] openvswitch: netlink: IP tunnel dst address not specified
[  190.259851][T12274] gretap0: entered promiscuous mode
[  190.271081][T12275] __nla_validate_parse: 4 callbacks suppressed
[  190.271097][T12275] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2804'.
[  190.354347][T12277] syzkaller0: entered promiscuous mode
[  190.361424][T12277] syzkaller0: entered allmulticast mode
[  190.762377][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2822'.
[  190.990398][T12334] bridge4: the hash_elasticity option has been deprecated and is always 16
[  190.993434][T12334] bridge4: entered allmulticast mode
[  192.351565][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2850'.
[  192.355379][T12380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2850'.
[  192.365628][T12380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2850'.
[  192.473926][T12388] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2854'.
[  193.750464][T12467] IPVS: stopping master sync thread 9539 ...
[  193.759299][T12469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2892'.
[  194.072014][T12486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2902'.
[  194.084935][T12486] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.353529][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2909'.
[  194.527828][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  194.573637][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2916'.
[  195.016962][T12550] netlink: 'syz.1.2931': attribute type 3 has an invalid length.
[  195.088346][T12557] ipip1: entered promiscuous mode
[  195.838780][T12599] netlink: 'syz.2.2954': attribute type 1 has an invalid length.
[  195.842007][T12599] __nla_validate_parse: 1 callbacks suppressed
[  195.842016][T12599] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2954'.
[  196.020081][T12603] netlink: 'syz.0.2956': attribute type 1 has an invalid length.
[  196.024233][T12603] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2956'.
[  196.338193][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'.
[  196.348449][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'.
[  196.567891][T12627] bridge5: entered promiscuous mode
[  196.576024][T12627] bridge5: entered allmulticast mode
[  196.610795][T12654] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  196.614828][T12654] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  196.814423][T12666] netlink: 'syz.0.2983': attribute type 5 has an invalid length.
[  196.969519][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'.
[  196.973372][T12678] IPv6: NLM_F_CREATE should be specified when creating new route
[  196.979892][T12678] IPv6: Can't replace route, no match found
[  197.238594][T12698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.593838][T12719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3007'.
[  197.605954][T12719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3007'.
[  197.707490][T12727] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  197.826392][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'.
[  198.154881][T12762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3027'.
[  198.160173][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3027'.
[  198.312550][T12776] ip6tnl0: Caught tx_queue_len zero misconfig
[  198.478865][T12790] netlink: 'syz.2.3042': attribute type 2 has an invalid length.
[  198.766160][ T4981] Bluetooth: hci2: command 0x0405 tx timeout
[  198.874102][T12831] C: renamed from veth1_to_team (while UP)
[  198.881518][T12831] netlink: 'syz.2.3057': attribute type 2 has an invalid length.
[  198.888245][T12831] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  199.164004][T12859] openvswitch: netlink: Duplicate or invalid key (type 0).
[  199.367113][T12868] nbd2: detected capacity change from 0 to 127
[  199.377903][T12871] netlink: 'syz.2.3073': attribute type 4 has an invalid length.
[  199.519025][T12879] syzkaller1: entered promiscuous mode
[  199.521327][T12879] syzkaller1: entered allmulticast mode
[  199.922527][   T34] audit: type=1804 audit(1786284952.665:3): pid=12900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3085" name="/newroot/993/memory.events" dev="tmpfs" ino=5018 res=1 errno=0
[  200.021789][   T56] block nbd2: Receive control failed (result -104)
[  200.183012][T12931] bond9: Removing last arp target with arp_interval on
[  200.404662][T12952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.474543][T12961] syzkaller1: entered promiscuous mode
[  200.482378][T12961] syzkaller1: entered allmulticast mode
[  201.221298][T13013] netlink: 'syz.0.3139': attribute type 1 has an invalid length.
[  201.241539][T13015] __nla_validate_parse: 12 callbacks suppressed
[  201.241553][T13015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3140'.
[  201.286805][T13019] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  201.320154][T13021] netlink: 'syz.1.3143': attribute type 10 has an invalid length.
[  201.322754][T13021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3143'.
[  201.327368][T13021] dummy0: entered promiscuous mode
[  201.331264][T13021] bridge0: port 5(dummy0) entered blocking state
[  201.334071][T13021] bridge0: port 5(dummy0) entered disabled state
[  201.337303][T13021] dummy0: entered allmulticast mode
[  201.378729][T13023] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3144'.
[  201.464105][T13031] netlink: zone id is out of range
[  201.470641][T13031] netlink: zone id is out of range
[  201.476014][T13031] netlink: zone id is out of range
[  201.480005][T13031] netlink: zone id is out of range
[  201.483419][T13031] netlink: zone id is out of range
[  201.485574][T13031] netlink: zone id is out of range
[  201.784775][T13057] netlink: 'syz.0.3160': attribute type 3 has an invalid length.
[  201.805414][T13057] netlink: 'syz.0.3160': attribute type 1 has an invalid length.
[  201.817048][T13057] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3160'.
[  201.821513][T13057] NCSI netlink: No device for ifindex 0
[  201.861190][T13061] Cannot find del_set index 4 as target
[  201.888267][T13063] xt_ipcomp: unknown flags 1D
[  202.206111][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  202.688667][   T25] block nbd2: Connection timed out, retrying (0/1 alive)
[  202.693759][   T25] block nbd2: Connection timed out, retrying (0/1 alive)
[  202.696644][   T25] block nbd2: Dead connection, failed to find a fallback
[  202.701633][   T25] block nbd2: shutting down sockets
[  202.704492][   T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  202.708638][   T25] Buffer I/O error on dev nbd2, logical block 1, async page read
[  202.712117][   T25] Buffer I/O error on dev nbd2, logical block 2, async page read
[  202.714693][   T25] Buffer I/O error on dev nbd2, logical block 3, async page read
[  202.719011][   T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.722194][   T25] Buffer I/O error on dev nbd2, logical block 0, async page read
[  202.730636][  T137] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.735559][  T137] Buffer I/O error on dev nbd2, logical block 0, async page read
[  202.739286][  T137] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  202.743121][  T137] Buffer I/O error on dev nbd2, logical block 1, async page read
[  202.749862][  T137] Buffer I/O error on dev nbd2, logical block 2, async page read
[  202.753079][  T137] Buffer I/O error on dev nbd2, logical block 3, async page read
[  202.757080][   T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.760117][   T25] Buffer I/O error on dev nbd2, logical block 0, async page read
[  202.762620][   T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  202.766430][   T25] Buffer I/O error on dev nbd2, logical block 1, async page read
[  202.770533][   T25] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  202.778997][   T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  202.783345][   T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  202.786727][   T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  202.789880][ T5596] ldm_validate_partition_table(): Disk read failed.
[  202.798502][ T5596] Dev nbd2: unable to read RDB block 0
[  202.803228][ T5596]  nbd2: unable to read partition table
[  202.813569][ T5596] ldm_validate_partition_table(): Disk read failed.
[  202.817876][ T5596] Dev nbd2: unable to read RDB block 0
[  202.822708][ T5596]  nbd2: unable to read partition table
[  202.856692][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3179'.
[  203.200624][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3190'.
[  203.386512][T13144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3195'.
[  203.402052][T13144] unsupported nlmsg_type 40
[  203.593878][T13162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3204'.
[  203.597502][T13162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3204'.
[  203.631812][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3206'.
[  203.691895][T13169] net_ratelimit: 500 callbacks suppressed
[  203.691908][T13169] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  204.261874][T13212] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.560496][T13234] tipc: Enabling of bearer <h:gr> rejected, media not registered
[  205.274137][T13299] netlink: 'syz.0.3266': attribute type 22 has an invalid length.
[  205.422864][T13311] batadv0: entered promiscuous mode
[  205.427458][T13311] macsec1: entered promiscuous mode
[  205.429881][T13311] macsec1: entered allmulticast mode
[  205.432078][T13311] batadv0: entered allmulticast mode
[  205.435343][T13311] 8021q: adding VLAN 0 to HW filter on device macsec1
[  205.440111][T13311] batadv0: left allmulticast mode
[  205.442403][T13311] batadv0: left promiscuous mode
[  205.469915][T13312] syzkaller0: entered promiscuous mode
[  205.471948][T13312] syzkaller0: entered allmulticast mode
[  205.675467][T13330] netlink: 'syz.0.3281': attribute type 2 has an invalid length.
[  205.921036][T13354] nbd: must specify at least one socket
[  206.082806][T13360] netlink: 'syz.2.3293': attribute type 11 has an invalid length.
[  206.728050][T13352] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  207.032039][T13390] tap0: tun_chr_ioctl cmd 1074025677
[  207.034195][T13390] tap0: linktype set to 780
[  207.343500][T13423] __nla_validate_parse: 6 callbacks suppressed
[  207.343510][T13423] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3320'.
[  208.071096][T13492] netlink: 'syz.2.3349': attribute type 5 has an invalid length.
[  209.313181][T13564] netlink: 'syz.1.3372': attribute type 1 has an invalid length.
[  209.322084][T13564] netlink: 'syz.1.3372': attribute type 2 has an invalid length.
[  209.324839][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'.
[  209.424848][T13576] syzkaller0: entered promiscuous mode
[  209.428402][T13576] syzkaller0: entered allmulticast mode
[  209.614086][T13588] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  209.699219][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'.
[  209.775374][T13597] veth0_to_team: entered promiscuous mode
[  209.791411][T13597] 8021q: adding VLAN 0 to HW filter on device bond2
[  209.797432][ T5650] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  209.836765][ T6807] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.839888][ T6807] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.905632][T13601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3388'.
[  209.918743][ T5470] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.925605][ T5470] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.940823][ T5470] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.953326][ T5470] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.096661][ T5650] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  210.243712][T13626] 
[  210.244773][T13626] ======================================================
[  210.247809][T13626] WARNING: possible circular locking dependency detected
[  210.250807][T13626] syzkaller #0 Not tainted
[  210.252681][T13626] ------------------------------------------------------
[  210.255390][T13626] syz.0.3400/13626 is trying to acquire lock:
[  210.257934][T13626] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610
[  210.261966][T13626] 
[  210.261966][T13626] but task is already holding lock:
[  210.262317][T13629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  210.264929][T13626] ffffffff903cfb80 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  210.264967][T13626] 
[  210.264967][T13626] which lock already depends on the new lock.
[  210.264967][T13626] 
[  210.264974][T13626] 
[  210.264974][T13626] the existing dependency chain (in reverse order) is:
[  210.264978][T13626] 
[  210.264978][T13626] -> #8 (uevent_sock_mutex){+.+.}-{4:4}:
[  210.286428][T13626]        __mutex_lock+0x19d/0x1550
[  210.288545][T13626]        kobject_uevent_net_broadcast+0x27e/0x560
[  210.291045][T13626]        kobject_uevent_env+0x566/0x9e0
[  210.293212][T13626]        device_add+0x544/0xb80
[  210.295136][T13626]        device_create+0x269/0x300
[  210.297141][T13626]        msr_device_create+0x33/0x50
[  210.299241][T13626]        cpuhp_invoke_callback+0x434/0x810
[  210.301622][T13626]        cpuhp_thread_fun+0x362/0x780
[  210.303864][T13626]        smpboot_thread_fn+0x57c/0xa80
[  210.306129][T13626]        kthread+0x388/0x470
[  210.308084][T13626]        ret_from_fork+0x514/0xb70
[  210.310223][T13626]        ret_from_fork_asm+0x1a/0x30
[  210.312418][T13626] 
[  210.312418][T13626] -> #7 (cpuhp_state-up){+.+.}-{0:0}:
[  210.315440][T13626]        cpuhp_thread_fun+0x127/0x780
[  210.317707][T13626]        smpboot_thread_fn+0x57c/0xa80
[  210.319996][T13626]        kthread+0x388/0x470
[  210.321934][T13626]        ret_from_fork+0x514/0xb70
[  210.324025][T13626]        ret_from_fork_asm+0x1a/0x30
[  210.326160][T13626] 
[  210.326160][T13626] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  210.329338][T13626]        cpus_read_lock+0x42/0x160
[  210.331446][T13626]        static_key_slow_inc+0x12/0x30
[  210.333725][T13626]        nbd_genl_reconfigure+0x1301/0x1e80
[  210.336177][T13626]        genl_family_rcv_msg_doit+0x233/0x340
[  210.338680][T13626]        genl_rcv_msg+0x614/0x7a0
[  210.340708][T13626]        netlink_rcv_skb+0x226/0x4a0
[  210.342888][T13626]        genl_rcv+0x28/0x40
[  210.344785][T13626]        netlink_unicast+0x7bb/0x940
[  210.346992][T13626]        netlink_sendmsg+0x813/0xb40
[  210.349170][T13626]        sock_sendmsg_nosec+0x13a/0x180
[  210.351451][T13626]        ____sys_sendmsg+0x54e/0x850
[  210.353665][T13626]        ___sys_sendmsg+0x2a5/0x360
[  210.355784][T13626]        __x64_sys_sendmsg+0x1b1/0x290
[  210.357981][T13626]        do_syscall_64+0x174/0x580
[  210.360119][T13626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.362776][T13626] 
[  210.362776][T13626] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  210.365928][T13626]        __mutex_lock+0x19d/0x1550
[  210.368044][T13626]        nbd_queue_rq+0x373/0x1150
[  210.370169][T13626]        blk_mq_dispatch_rq_list+0x499/0x1990
[  210.372723][T13626]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  210.375563][T13626]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  210.378261][T13626]        blk_mq_run_work_fn+0x16c/0x300
[  210.380514][T13626]        process_scheduled_works+0xa8e/0x14e0
[  210.383020][T13626]        worker_thread+0xa47/0xfb0
[  210.385145][T13626]        kthread+0x388/0x470
[  210.387090][T13626]        ret_from_fork+0x514/0xb70
[  210.389215][T13626]        ret_from_fork_asm+0x1a/0x30
[  210.391451][T13626] 
[  210.391451][T13626] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  210.394389][T13626]        __mutex_lock+0x19d/0x1550
[  210.396415][T13626]        nbd_queue_rq+0xc1/0x1150
[  210.398494][T13626]        blk_mq_dispatch_rq_list+0x499/0x1990
[  210.401029][T13626]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  210.403857][T13626]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  210.406483][T13626]        blk_mq_run_work_fn+0x16c/0x300
[  210.408730][T13626]        process_scheduled_works+0xa8e/0x14e0
[  210.411185][T13626]        worker_thread+0xa47/0xfb0
[  210.413287][T13626]        kthread+0x388/0x470
[  210.415148][T13626]        ret_from_fork+0x514/0xb70
[  210.417216][T13626]        ret_from_fork_asm+0x1a/0x30
[  210.419426][T13626] 
[  210.419426][T13626] -> #3 (set->srcu){.+.+}-{0:0}:
[  210.422244][T13626]        __synchronize_srcu+0xc9/0x2f0
[  210.424489][T13626]        elevator_switch+0x1e8/0x7b0
[  210.426673][T13626]        elevator_change+0x2fa/0x480
[  210.428869][T13626]        elevator_set_default+0x375/0x440
[  210.431224][T13626]        blk_register_queue+0x3f3/0x4e0
[  210.433565][T13626]        __add_disk+0x6cb/0xe30
[  210.435603][T13626]        add_disk_fwnode+0x100/0x3a0
[  210.437812][T13626]        nbd_dev_add+0x733/0xb60
[  210.439895][T13626]        nbd_init+0x15f/0x1e0
[  210.441846][T13626]        do_one_initcall+0x250/0x870
[  210.444019][T13626]        do_initcall_level+0x10a/0x1a0
[  210.446272][T13626]        do_initcalls+0x59/0xa0
[  210.448309][T13626]        kernel_init_freeable+0x29d/0x3e0
[  210.450698][T13626]        kernel_init+0x1d/0x1d0
[  210.452736][T13626]        ret_from_fork+0x514/0xb70
[  210.454865][T13626]        ret_from_fork_asm+0x1a/0x30
[  210.457067][T13626] 
[  210.457067][T13626] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  210.460279][T13626]        __mutex_lock+0x19d/0x1550
[  210.462390][T13626]        elevator_change+0x1af/0x480
[  210.464596][T13626]        elevator_set_none+0xb5/0x140
[  210.466830][T13626]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  210.469439][T13626]        nbd_start_device+0x189/0xb30
[  210.471689][T13626]        nbd_genl_connect+0x1597/0x1c10
[  210.474009][T13626]        genl_family_rcv_msg_doit+0x233/0x340
[  210.476580][T13626]        genl_rcv_msg+0x614/0x7a0
[  210.478670][T13626]        netlink_rcv_skb+0x226/0x4a0
[  210.480795][T13626]        genl_rcv+0x28/0x40
[  210.482690][T13626]        netlink_unicast+0x7bb/0x940
[  210.484902][T13626]        netlink_sendmsg+0x813/0xb40
[  210.487070][T13626]        sock_sendmsg_nosec+0x13a/0x180
[  210.489348][T13626]        ____sys_sendmsg+0x54e/0x850
[  210.491570][T13626]        ___sys_sendmsg+0x2a5/0x360
[  210.493763][T13626]        __x64_sys_sendmsg+0x1b1/0x290
[  210.495952][T13626]        do_syscall_64+0x174/0x580
[  210.498022][T13626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.500659][T13626] 
[  210.500659][T13626] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  210.504106][T13626]        blk_alloc_queue+0x544/0x690
[  210.506298][T13626]        __blk_mq_alloc_disk+0x194/0x390
[  210.508542][T13626]        nbd_dev_add+0x494/0xb60
[  210.510576][T13626]        nbd_init+0x15f/0x1e0
[  210.512505][T13626]        do_one_initcall+0x250/0x870
[  210.514579][T13626]        do_initcall_level+0x10a/0x1a0
[  210.516767][T13626]        do_initcalls+0x59/0xa0
[  210.518729][T13626]        kernel_init_freeable+0x29d/0x3e0
[  210.521056][T13626]        kernel_init+0x1d/0x1d0
[  210.523013][T13626]        ret_from_fork+0x514/0xb70
[  210.525122][T13626]        ret_from_fork_asm+0x1a/0x30
[  210.527319][T13626] 
[  210.527319][T13626] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  210.530285][T13626]        __lock_acquire+0x1520/0x2cf0
[  210.532434][T13626]        lock_acquire+0x106/0x350
[  210.534573][T13626]        fs_reclaim_acquire+0x71/0x100
[  210.536812][T13626]        kmem_cache_alloc_node_noprof+0x6a/0x610
[  210.539377][T13626]        __alloc_skb+0x276/0x7a0
[  210.541419][T13626]        alloc_uevent_skb+0x7d/0x230
[  210.543486][T13626]        kobject_uevent_net_broadcast+0x2fa/0x560
[  210.546119][T13626]        kobject_uevent_env+0x566/0x9e0
[  210.548316][T13626]        rfkill_set_block+0x356/0x4d0
[  210.550573][T13626]        rfkill_fop_write+0x43b/0x560
[  210.552754][T13626]        vfs_write+0x296/0xba0
[  210.554739][T13626]        ksys_write+0x150/0x270
[  210.556788][T13626]        do_syscall_64+0x174/0x580
[  210.558900][T13626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.561540][T13626] 
[  210.561540][T13626] other info that might help us debug this:
[  210.561540][T13626] 
[  210.565541][T13626] Chain exists of:
[  210.565541][T13626]   fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex
[  210.565541][T13626] 
[  210.570604][T13626]  Possible unsafe locking scenario:
[  210.570604][T13626] 
[  210.573488][T13626]        CPU0                    CPU1
[  210.575707][T13626]        ----                    ----
[  210.577945][T13626]   lock(uevent_sock_mutex);
[  210.579847][T13626]                                lock(cpuhp_state-up);
[  210.582626][T13626]                                lock(uevent_sock_mutex);
[  210.585509][T13626]   lock(fs_reclaim);
[  210.587200][T13626] 
[  210.587200][T13626]  *** DEADLOCK ***
[  210.587200][T13626] 
[  210.590527][T13626] 2 locks held by syz.0.3400/13626:
[  210.592695][T13626]  #0: ffffffff903385e0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x196/0x560
[  210.596842][T13626]  #1: ffffffff903cfb80 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  210.601253][T13626] 
[  210.601253][T13626] stack backtrace:
[  210.603690][T13626] CPU: 1 UID: 0 PID: 13626 Comm: syz.0.3400 Not tainted syzkaller #0 PREEMPT(full) 
[  210.603705][T13626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.603713][T13626] Call Trace:
[  210.603719][T13626]  <TASK>
[  210.603728][T13626]  dump_stack_lvl+0xe8/0x150
[  210.603747][T13626]  print_circular_bug+0x2e1/0x300
[  210.603768][T13626]  check_noncircular+0x12e/0x150
[  210.603789][T13626]  __lock_acquire+0x1520/0x2cf0
[  210.603806][T13626]  ? rfkill_set_block+0x356/0x4d0
[  210.603825][T13626]  ? vfs_write+0x296/0xba0
[  210.603841][T13626]  ? do_syscall_64+0x174/0x580
[  210.603858][T13626]  ? kmem_cache_alloc_node_noprof+0x6a/0x610
[  210.603871][T13626]  lock_acquire+0x106/0x350
[  210.603886][T13626]  ? kmem_cache_alloc_node_noprof+0x6a/0x610
[  210.603903][T13626]  fs_reclaim_acquire+0x71/0x100
[  210.603918][T13626]  ? kmem_cache_alloc_node_noprof+0x6a/0x610
[  210.603932][T13626]  kmem_cache_alloc_node_noprof+0x6a/0x610
[  210.603945][T13626]  ? __alloc_skb+0x189/0x7a0
[  210.603962][T13626]  ? __alloc_skb+0x276/0x7a0
[  210.603976][T13626]  ? __alloc_skb+0x276/0x7a0
[  210.603991][T13626]  ? __alloc_skb+0x189/0x7a0
[  210.604007][T13626]  __alloc_skb+0x276/0x7a0
[  210.604022][T13626]  alloc_uevent_skb+0x7d/0x230
[  210.604039][T13626]  kobject_uevent_net_broadcast+0x2fa/0x560
[  210.604057][T13626]  kobject_uevent_env+0x566/0x9e0
[  210.604075][T13626]  rfkill_set_block+0x356/0x4d0
[  210.604093][T13626]  rfkill_fop_write+0x43b/0x560
[  210.604106][T13626]  ? apparmor_file_permission+0x1f4/0x300
[  210.604122][T13626]  ? __pfx_rfkill_fop_write+0x10/0x10
[  210.604134][T13626]  ? security_file_permission+0x10/0x260
[  210.604148][T13626]  ? rw_verify_area+0x203/0x4c0
[  210.604165][T13626]  ? __pfx_rfkill_fop_write+0x10/0x10
[  210.604176][T13626]  vfs_write+0x296/0xba0
[  210.604195][T13626]  ? __pfx_vfs_write+0x10/0x10
[  210.604213][T13626]  ? __fget_files+0x2a/0x420
[  210.604228][T13626]  ? __fget_files+0x2a/0x420
[  210.604243][T13626]  ? __fget_files+0x3a2/0x420
[  210.604257][T13626]  ? __fget_files+0x2a/0x420
[  210.604274][T13626]  ksys_write+0x150/0x270
[  210.604291][T13626]  ? __pfx_ksys_write+0x10/0x10
[  210.604309][T13626]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.604323][T13626]  do_syscall_64+0x174/0x580
[  210.604335][T13626]  ? trace_irq_disable+0x3b/0x140
[  210.604350][T13626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.604362][T13626] RIP: 0033:0x7f2e3279e0d9
[  210.604376][T13626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  210.604386][T13626] RSP: 002b:00007f2e33604028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  210.604398][T13626] RAX: ffffffffffffffda RBX: 00007f2e32a25fa0 RCX: 00007f2e3279e0d9
[  210.604409][T13626] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b
[  210.604415][T13626] RBP: 00007f2e32835024 R08: 0000000000000000 R09: 0000000000000000
[  210.604422][T13626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.604431][T13626] R13: 00007f2e32a26038 R14: 00007f2e32a25fa0 R15: 00007ffd007ee708
[  210.604444][T13626]  </TASK>
[  215.006094][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
