last executing test programs:

2.023128771s ago: executing program 2 (id=14498):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "dd"}]}], {0x14}}, 0x88}}, 0x0)

1.943527604s ago: executing program 2 (id=14499):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0xffffffff, @local, 0x1}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x0, @local, 0x1}}, 0x8, 0x2003, 0x7, 0x38, 0xa}, &(0x7f0000000040)=0x98)

1.073320166s ago: executing program 2 (id=14514):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a87d8d, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}]}, 0x50}}, 0x0)

1.072998432s ago: executing program 2 (id=14516):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x280}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)

913.553228ms ago: executing program 2 (id=14519):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "8c"}]}], {0x14}}, 0x88}}, 0x0)

851.800757ms ago: executing program 2 (id=14523):
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061186d000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x1f4, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x526}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x95}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x717d}]}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xebe}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfafa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x29b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20008810}, 0x48040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(0x0, r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c}, {0x6}]}, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$unix(0x1, 0x2, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r10, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
sendmsg$NL80211_CMD_SET_COALESCE(r4, 0x0, 0x80)
r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r12, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x98, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)

693.637594ms ago: executing program 0 (id=14528):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
connect$llc(r1, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)

693.466268ms ago: executing program 0 (id=14529):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300008000200000000000800070026093a0014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)

612.835527ms ago: executing program 0 (id=14530):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)={0x54, r1, 0x1, 0x21, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x20019}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2a, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @supported_rates={0x1, 0x5, [{0x4, 0x1}, {0x60}, {0x1}, {0x12, 0x1}, {0x36}]}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}]}, 0x54}}, 0x4014080)

553.563988ms ago: executing program 0 (id=14531):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x20000015})
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

485.177349ms ago: executing program 0 (id=14533):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$alg(0x26, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x80000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)

412.940865ms ago: executing program 0 (id=14535):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x11, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x39, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080)
pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x0, 0xba, 0xfffffffffffffff9, 0x7}, &(0x7f0000000300)={0x7, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})

142.696536ms ago: executing program 1 (id=14541):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, 0x26, 0xa01, 0xfffffffc, 0x0, {0xd}, [@typed={0x11, 0x5e, 0x0, 0x0, @binary="5a907b02448c79c7572371ae9b"}]}, 0x28}}, 0x0)

142.508969ms ago: executing program 1 (id=14542):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r3, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000130001002cbd7000fcdbdf250000fff0", @ANYRES32=r3, @ANYBLOB="141004001f4c050008000a00", @ANYRES32=r1], 0x28}}, 0x20040000)

53.251868ms ago: executing program 1 (id=14543):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000440)=0x8, 0x29)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11)

53.117174ms ago: executing program 1 (id=14544):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4)
r3 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

52.974141ms ago: executing program 1 (id=14545):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0)

0s ago: executing program 1 (id=14546):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0)
accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000280))
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x7)
write$nci(0xffffffffffffffff, 0x0, 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x20000000)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]})
ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})

kernel console output (not intermixed with test programs):

gretap4
[  362.404021][T26284] validate_nla: 6 callbacks suppressed
[  362.404037][T26284] netlink: 'syz.1.9036': attribute type 21 has an invalid length.
[  362.411528][T26284] IPv6: NLM_F_CREATE should be specified when creating new route
[  362.690398][T26303] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  362.709458][T26305] __nla_validate_parse: 13 callbacks suppressed
[  362.709469][T26305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9044'.
[  362.845904][T26317] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  362.918376][T26326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9051'.
[  363.200577][T26352] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  363.217268][  T930] lo speed is unknown, defaulting to 1000
[  363.224890][T26352] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  363.834152][T26386] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9079'.
[  364.095612][T26402] netlink: 'syz.1.9087': attribute type 5 has an invalid length.
[  364.248106][T26409] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9091'.
[  364.321109][T26416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9094'.
[  364.588873][T26434] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  365.228932][T26454] veth13: entered promiscuous mode
[  365.258780][T26458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9114'.
[  365.629533][T26486] bond15: entered allmulticast mode
[  365.634200][T26486] netlink: 'syz.0.9128': attribute type 4 has an invalid length.
[  365.637149][T26486] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9128'.
[  365.649030][T26486] bridge11: entered promiscuous mode
[  365.658486][T26486] bridge11: entered allmulticast mode
[  365.662158][T26486] bond15: (slave bridge11): Enslaving as an active interface with an up link
[  365.957842][T26515] netlink: 'syz.1.9142': attribute type 1 has an invalid length.
[  365.960369][T26515] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9142'.
[  366.008815][T26518] netlink: set zone limit has 4 unknown bytes
[  366.015240][T26517] syzkaller1: entered promiscuous mode
[  366.052769][T26517] syzkaller1: entered allmulticast mode
[  366.224774][T26536] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9152'.
[  366.493292][T26554] netlink: 1323 bytes leftover after parsing attributes in process `syz.0.9161'.
[  367.131086][T26620] ipvlan0: entered promiscuous mode
[  367.134554][T26620] bridge0: port 1(ipvlan0) entered blocking state
[  367.143100][T26620] bridge0: port 1(ipvlan0) entered disabled state
[  367.145549][T26620] ipvlan0: entered allmulticast mode
[  367.147762][T26620] bridge0: entered allmulticast mode
[  367.153479][T26620] ipvlan0: left allmulticast mode
[  367.155207][T26620] bridge0: left allmulticast mode
[  367.390931][T26638] ipt_REJECT: TCP_RESET invalid for non-tcp
[  368.083264][T26702] IPv6: Can't replace route, no match found
[  368.123888][T26704] __nla_validate_parse: 3 callbacks suppressed
[  368.123903][T26704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9231'.
[  368.131307][T26704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9231'.
[  368.176708][T26708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9234'.
[  368.203177][T26710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9233'.
[  368.473522][T26726] syzkaller1: entered promiscuous mode
[  368.475381][T26726] syzkaller1: entered allmulticast mode
[  368.483265][T26726] netlink: 296 bytes leftover after parsing attributes in process `syz.2.9241'.
[  368.726202][T26749] syzkaller1: entered promiscuous mode
[  368.728703][T26749] syzkaller1: entered allmulticast mode
[  368.858588][T26755] syzkaller1: entered promiscuous mode
[  368.860804][T26755] syzkaller1: entered allmulticast mode
[  369.150896][T26775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9264'.
[  369.471307][T26746] Bluetooth: hci0: Opcode 0x080f failed: -4
[  369.488529][T26793] netlink: 7 bytes leftover after parsing attributes in process `syz.1.9273'.
[  369.560185][T26799] tipc: Enabled bearer <ib:team_slave_1>, priority 10
[  369.843716][T26829] syzkaller1: tun_chr_ioctl cmd 1074025677
[  369.846098][T26829] syzkaller1: Linktype set failed because interface is up
[  369.850642][T26831] netlink: 'syz.0.9292': attribute type 61 has an invalid length.
[  370.008022][T26847] netlink: 272 bytes leftover after parsing attributes in process `syz.2.9298'.
[  370.065010][T26850] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  370.071175][T26850] bond0: (slave sit0): Error -95 calling set_mac_address
[  370.108517][T26850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9301'.
[  370.112310][T26850] netlink: zone id is out of range
[  370.155080][T26862] xt_l2tp: invalid flags combination: 0
[  370.303259][T26853] bond14: option arp_interval: invalid value (18446744073709551615)
[  370.306136][T26853] bond14: option arp_interval: allowed values 0 - 2147483647
[  370.310250][T26853] bond14 (unregistering): Released all slaves
[  370.454106][T26886] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9311'.
[  370.521144][T26889] netlink: 'syz.1.9313': attribute type 11 has an invalid length.
[  370.772422][T26914] sctp: [Deprecated]: syz.1.9325 (pid 26914) Use of int in max_burst socket option deprecated.
[  370.772422][T26914] Use struct sctp_assoc_value instead
[  370.944656][T26929] lo speed is unknown, defaulting to 1000
[  371.189283][T26953] ip6tnl0: Caught tx_queue_len zero misconfig
[  371.488675][T26978] sch_tbf: burst 1 is lower than device syzkaller0 mtu (313) !
[  371.739631][T27004] syz.2.9365 (27004) used obsolete PPPIOCDETACH ioctl
[  372.234409][T27060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  372.827409][T27108] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  373.494154][T27175] __nla_validate_parse: 2 callbacks suppressed
[  373.494171][T27175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9439'.
[  373.548908][T27179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9442'.
[  373.560619][T27181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9441'.
[  373.708383][T27192] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  373.877268][T27209] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9455'.
[  373.987024][T27227] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.9463'.
[  374.012840][T27231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9461'.
[  374.408594][T27270] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9480'.
[  374.692412][T27297] netlink: 292 bytes leftover after parsing attributes in process `syz.2.9494'.
[  375.214254][T27358] lo speed is unknown, defaulting to 1000
[  375.492115][T27372] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.495674][T27372] tipc: Resetting bearer <eth:syzkaller0>
[  375.499533][T27372] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9527'.
[  375.503295][T27372] tipc: Resetting bearer <eth:syzkaller0>
[  375.754389][T27386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9532'.
[  376.021031][   T85] tipc: Resetting bearer <eth:syzkaller0>
[  376.294258][T27428] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  376.964177][T27418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  377.216418][T27448] netlink: 'syz.2.9558': attribute type 1 has an invalid length.
[  377.307114][T27456] netlink: 'syz.2.9561': attribute type 1 has an invalid length.
[  377.339242][T27456] 8021q: adding VLAN 0 to HW filter on device bond14
[  378.555082][T27543] __nla_validate_parse: 6 callbacks suppressed
[  378.555093][T27543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9600'.
[  378.739607][T27553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9605'.
[  378.898066][T27563] bond0: Caught tx_queue_len zero misconfig
[  379.283826][T27598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9627'.
[  380.181159][T27642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9645'.
[  380.184331][T27642] openvswitch: netlink: Missing key (keys=40, expected=80)
[  381.528913][T27735] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9687'.
[  381.619696][T27745] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.9692'.
[  381.708491][T27753] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  382.420757][T27802] netlink: 'syz.2.9719': attribute type 1 has an invalid length.
[  382.424175][T27802] netlink: 'syz.2.9719': attribute type 4 has an invalid length.
[  382.427615][T27802] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.9719'.
[  382.573117][T27816] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.623877][T27824] bond3: option mode: unable to set because the bond device has slaves
[  382.641312][T27826] tipc: Can't bind to reserved service type 1
[  382.644303][T27826] netlink: 'syz.0.9731': attribute type 39 has an invalid length.
[  382.695934][T27829] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9731'.
[  382.702411][T27829] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9731'.
[  382.706022][T27829] netlink: 'syz.0.9731': attribute type 5 has an invalid length.
[  382.709704][T27829] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9731'.
[  382.721336][T27829] vlan6: entered allmulticast mode
[  382.949202][T27844] netlink: 'syz.2.9738': attribute type 13 has an invalid length.
[  382.952690][T27844] netlink: 'syz.2.9738': attribute type 13 has an invalid length.
[  383.163702][T27858] netlink: 'syz.2.9745': attribute type 4 has an invalid length.
[  383.211505][T27858] lo speed is unknown, defaulting to 1000
[  383.686949][T27890] sctp: [Deprecated]: syz.2.9758 (pid 27890) Use of int in max_burst socket option.
[  383.686949][T27890] Use struct sctp_assoc_value instead
[  383.741105][T27894] syzkaller1: entered promiscuous mode
[  383.743718][T27894] syzkaller1: entered allmulticast mode
[  383.825389][T27903] __nla_validate_parse: 7 callbacks suppressed
[  383.825407][T27903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9764'.
[  383.837873][T27848] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  383.948096][T27916] netlink: 'syz.1.9770': attribute type 1 has an invalid length.
[  383.958686][T27915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.157488][T27934] netlink: 'syz.2.9779': attribute type 1 has an invalid length.
[  384.160103][T27934] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9779'.
[  384.944463][T28014] netlink: 'syz.0.9818': attribute type 13 has an invalid length.
[  385.038988][T28014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.136115][T28035] netlink: 7 bytes leftover after parsing attributes in process `syz.2.9824'.
[  385.385644][T28067] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9839'.
[  385.388854][T28067] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9839'.
[  385.574843][T28087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9848'.
[  385.591159][T28085] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  385.732395][T28100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9854'.
[  385.970429][T28117] GUP no longer grows the stack in syz.1.9862 (28117): 200000003000-20000000a000 (200000001000)
[  385.974342][T28117] CPU: 1 UID: 0 PID: 28117 Comm: syz.1.9862 Not tainted syzkaller #0 PREEMPT(full) 
[  385.974361][T28117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  385.974369][T28117] Call Trace:
[  385.974375][T28117]  <TASK>
[  385.974382][T28117]  dump_stack_lvl+0xe8/0x150
[  385.974406][T28117]  __get_user_pages+0x2453/0x29d0
[  385.974427][T28117]  ? __lock_acquire+0x6b5/0x2cf0
[  385.974456][T28117]  ? __gup_longterm_locked+0xc4e/0x1630
[  385.974473][T28117]  ? down_read_killable+0x1bb/0x340
[  385.974485][T28117]  __gup_longterm_locked+0xdcf/0x1630
[  385.974506][T28117]  gup_fast_fallback+0x1d82/0x22e0
[  385.974528][T28117]  ? __pfx_gup_fast_fallback+0x10/0x10
[  385.974537][T28117]  ? futex_unqueue+0x22/0x240
[  385.974546][T28117]  ? futex_unqueue+0x22/0x240
[  385.974554][T28117]  ? is_valid_gup_args+0x11f/0x200
[  385.974566][T28117]  ? get_user_pages_fast+0x4d/0xb0
[  385.974577][T28117]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  385.974592][T28117]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  385.974604][T28117]  iov_iter_get_pages2+0x5e/0xa0
[  385.974615][T28117]  __se_sys_vmsplice+0x7b3/0x1490
[  385.974633][T28117]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  385.974643][T28117]  ? __pfx_futex_wait+0x10/0x10
[  385.974657][T28117]  ? lockdep_hardirqs_on+0x7a/0x110
[  385.974689][T28117]  do_syscall_64+0x14d/0xf80
[  385.974704][T28117]  ? trace_irq_disable+0x3b/0x150
[  385.974718][T28117]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.974762][T28117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.974776][T28117] RIP: 0033:0x7fba4d19c799
[  385.974791][T28117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  385.974802][T28117] RSP: 002b:00007fba4e0a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  385.974816][T28117] RAX: ffffffffffffffda RBX: 00007fba4d415fa0 RCX: 00007fba4d19c799
[  385.974826][T28117] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[  385.974834][T28117] RBP: 00007fba4d232bd9 R08: 0000000000000000 R09: 0000000000000000
[  385.974842][T28117] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  385.974847][T28117] R13: 00007fba4d416038 R14: 00007fba4d415fa0 R15: 00007ffd9ed81888
[  385.974860][T28117]  </TASK>
[  386.319482][T28135] lo speed is unknown, defaulting to 1000
[  386.342929][T28142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9873'.
[  386.388151][T28143] lo speed is unknown, defaulting to 1000
[  386.693263][T28162] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9881'.
[  387.046789][T28198] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9900'.
[  387.772271][T28280] lo speed is unknown, defaulting to 1000
[  387.823287][T28282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  387.872396][T28282] pimreg3: entered allmulticast mode
[  388.367022][T28328] validate_nla: 2 callbacks suppressed
[  388.367034][T28328] netlink: 'syz.2.9959': attribute type 2 has an invalid length.
[  388.466296][T28334] netlink: 'syz.1.9962': attribute type 21 has an invalid length.
[  389.217434][T28401] Unsupported ieee802154 address type: 0
[  389.221192][T28403] netem: unknown loss type 0
[  389.222987][T28403] netem: change failed
[  389.373014][T28424] netlink: 'syz.0.10003': attribute type 1 has an invalid length.
[  389.863207][T28455] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  390.283969][T28479] __nla_validate_parse: 8 callbacks suppressed
[  390.283986][T28479] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10026'.
[  390.634756][T28514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10042'.
[  390.640093][T28514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10042'.
[  390.675386][T28520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10044'.
[  390.745318][T28514] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  390.749978][T28514] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  390.824634][T28514] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  390.837110][T28514] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  390.860182][T28534] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  390.892618][T28514] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  390.895845][T28514] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  390.955243][T28514] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  390.964707][T28514] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  391.040701][ T8139] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  391.044215][ T8139] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  391.058394][T28548] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  391.063216][ T8139] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  391.065903][ T8139] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  391.083978][T28550] : renamed from bond_slave_0
[  391.108904][ T5640] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  391.111578][ T5640] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  391.133218][ T5640] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  391.138392][ T5640] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  391.269455][T28560] netlink: 'syz.1.10062': attribute type 2 has an invalid length.
[  391.273134][T28562] netlink: 'syz.2.10064': attribute type 3 has an invalid length.
[  391.575506][T28596] lo speed is unknown, defaulting to 1000
[  391.595799][T28605] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.10084'.
[  391.661072][T28615] netlink: 'syz.0.10088': attribute type 7 has an invalid length.
[  391.663679][T28615] netlink: 'syz.0.10088': attribute type 7 has an invalid length.
[  391.860567][T28626] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  391.863225][T28626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.956539][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  394.781556][T28640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10094'.
[  394.818114][T28640] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check.
[  395.004070][T28651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.320724][T28681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10112'.
[  395.534354][T28701] lo speed is unknown, defaulting to 1000
[  396.013839][T28737] xt_hashlimit: size too large, truncated to 1048576
[  396.017155][T28737] xt_hashlimit: invalid interval
[  396.782865][T28781] xfrm3: entered allmulticast mode
[  396.986024][T28804] openvswitch: netlink: IPv4 tunnel dst address is zero
[  397.036274][T28810] netlink: 'syz.0.10170': attribute type 29 has an invalid length.
[  397.041766][T28810] netlink: 'syz.0.10170': attribute type 29 has an invalid length.
[  397.052438][T28810] netlink: 500 bytes leftover after parsing attributes in process `syz.0.10170'.
[  397.058878][T28810] unsupported nla_type 58
[  397.128185][T28825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10177'.
[  397.149511][T28825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10177'.
[  397.152773][T28825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10177'.
[  397.234866][T28835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10182'.
[  397.238129][T28835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10182'.
[  397.241339][T28835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10182'.
[  397.245037][T28835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10182'.
[  397.256685][T28835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10182'.
[  398.151672][T28923] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  398.201135][T28930] IPVS: Unknown mcast interface: netdevsim0
[  398.371996][T28950] sctp: [Deprecated]: syz.0.10236 (pid 28950) Use of int in max_burst socket option deprecated.
[  398.371996][T28950] Use struct sctp_assoc_value instead
[  398.504369][T28964] delete_channel: no stack
[  398.578638][T28971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.550318][T29033] lo speed is unknown, defaulting to 1000
[  400.128026][T29058] bond15 (unregistering): Released all slaves
[  400.210243][T29074] netlink: 'syz.2.10290': attribute type 20 has an invalid length.
[  400.212927][T29074] netlink: 'syz.2.10290': attribute type 20 has an invalid length.
[  400.535221][T29101] __nla_validate_parse: 20 callbacks suppressed
[  400.535231][T29101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10302'.
[  400.546942][T29101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10302'.
[  400.583368][T29103] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  400.650457][T29107] lo speed is unknown, defaulting to 1000
[  400.742931][T29120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10310'.
[  400.829311][T29125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10312'.
[  401.119415][T29144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10321'.
[  401.194290][T29150] netlink: 'syz.2.10324': attribute type 1 has an invalid length.
[  401.201878][T29150] netlink: 'syz.2.10324': attribute type 3 has an invalid length.
[  401.205113][T29150] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10324'.
[  401.349402][T29161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.446534][T29173] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10334'.
[  401.533718][T29173] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.545783][T29173] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  401.634720][T29173] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.643800][T29173] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  401.661575][T29187] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10340'.
[  401.676992][T29187] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10340'.
[  401.687461][T29187] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10340'.
[  401.693329][T29173] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.699176][T29173] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  401.793901][T29173] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  401.797997][T29173] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  401.911462][ T8139] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  401.917893][ T8139] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  401.932539][ T8139] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  401.935857][ T8139] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  401.976637][ T8139] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  401.986476][ T8139] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  401.989908][ T8139] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  402.001050][ T8139] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  402.220642][T29243] openvswitch: netlink: EtherType 50a is less than min 600
[  402.228991][T29244] netlink: 'syz.2.10366': attribute type 1 has an invalid length.
[  402.409947][T29257] lo speed is unknown, defaulting to 1000
[  402.656307][T29269] netlink: 'syz.1.10374': attribute type 1 has an invalid length.
[  402.686841][T29269] 8021q: adding VLAN 0 to HW filter on device bond15
[  403.941672][T29269] bond15: (slave veth15): Enslaving as an active interface with a down link
[  403.959180][T29273] 8021q: adding VLAN 0 to HW filter on device batadv3
[  403.962560][T29273] bond15: (slave batadv3): making interface the new active one
[  403.965661][T29273] batadv3: entered promiscuous mode
[  403.968087][T29273] bond15: (slave batadv3): Enslaving as an active interface with an up link
[  404.123832][T29293] netlink: 'syz.1.10385': attribute type 1 has an invalid length.
[  404.185920][T29303] nbd: must specify at least one socket
[  404.319924][T29315] syzkaller0: entered promiscuous mode
[  404.322320][T29315] syzkaller0: entered allmulticast mode
[  404.630825][T29341] netlink: 'syz.1.10409': attribute type 2 has an invalid length.
[  404.876287][T29365] sctp: [Deprecated]: syz.1.10421 (pid 29365) Use of int in maxseg socket option.
[  404.876287][T29365] Use struct sctp_assoc_value instead
[  404.933877][T29373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.994568][T29377] netlink: 'syz.1.10426': attribute type 10 has an invalid length.
[  404.999683][T29377] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  405.244640][T29395] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  405.257679][T29395] syzkaller0: entered promiscuous mode
[  405.259976][T29395] syzkaller0: entered allmulticast mode
[  405.453202][T29403] lo speed is unknown, defaulting to 1000
[  405.851121][T29432] __nla_validate_parse: 5 callbacks suppressed
[  405.851133][T29432] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10450'.
[  405.911501][T29438] bond16: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  405.917412][T29438] bond16 (unregistering): Released all slaves
[  405.953969][T29442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10452'.
[  405.957552][T29430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  405.960081][T29442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10452'.
[  406.012912][T29430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10449'.
[  406.363837][T29477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10469'.
[  407.578970][T29503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10481'.
[  407.613386][T29507] sch_fq: defrate 4294967293 ignored.
[  407.670282][T29515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10487'.
[  407.712561][T29521] xt_hashlimit: max too large, truncated to 1048576
[  408.135116][T29551] gretap5: entered promiscuous mode
[  408.137877][T29551] batman_adv: batadv0: Adding interface: gretap5
[  408.140266][T29551] batman_adv: batadv0: The MTU of interface gretap5 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  408.150160][T29551] batman_adv: batadv0: Not using interface gretap5 (retrying later): interface not active
[  408.359651][T29499] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  408.586245][T29572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10513'.
[  408.590451][T29572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10513'.
[  408.955333][T29603] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10527'.
[  409.129233][T29616] xt_CONNSECMARK: invalid mode: 0
[  409.310204][T29634] netlink: 'syz.1.10541': attribute type 3 has an invalid length.
[  409.324204][T29634] nbd: nbd1 already in use
[  409.326624][T29634] block nbd1: NBD_DISCONNECT
[  409.328491][T29636] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  409.328616][T29634] block nbd1: Send disconnect failed -32
[  409.335253][T29634] block nbd1: shutting down sockets
[  409.373664][T29639] netlink: 'syz.2.10543': attribute type 2 has an invalid length.
[  409.379592][T29634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  410.675307][T29728] bond16: entered promiscuous mode
[  410.679547][T29728] 8021q: adding VLAN 0 to HW filter on device bond16
[  410.764694][T29741] netlink: 'syz.1.10589': attribute type 12 has an invalid length.
[  411.134924][T29769] sock: sock_set_timeout: `syz.0.10602' (pid 29769) tries to set negative timeout
[  411.573981][T29799] __nla_validate_parse: 2 callbacks suppressed
[  411.574000][T29799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10617'.
[  411.602009][T29799] bridge13: entered promiscuous mode
[  411.604715][T29799] macsec4: entered promiscuous mode
[  411.696490][T29808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10622'.
[  411.719271][T29809] syzkaller1: entered promiscuous mode
[  411.721549][T29809] syzkaller1: entered allmulticast mode
[  411.808753][T29811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10623'.
[  411.939198][T29830] netlink: 17 bytes leftover after parsing attributes in process `syz.0.10630'.
[  411.969181][T29834] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10633'.
[  411.972077][T29834] netlink: 43 bytes leftover after parsing attributes in process `syz.0.10633'.
[  411.975019][T29834] netlink: 'syz.0.10633': attribute type 5 has an invalid length.
[  411.977986][T29834] netlink: 43 bytes leftover after parsing attributes in process `syz.0.10633'.
[  412.160207][T29847] netlink: 'syz.2.10639': attribute type 1 has an invalid length.
[  412.163068][T29847] netlink: 'syz.2.10639': attribute type 11 has an invalid length.
[  412.166201][T29847] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10639'.
[  412.238568][T29851] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4
[  412.284098][T29853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10642'.
[  412.328270][T29845] netlink: 'syz.1.10638': attribute type 3 has an invalid length.
[  412.347914][T29845] bond16: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  412.352770][T29845] bond16 (unregistering): Released all slaves
[  412.391822][T29862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10645'.
[  412.615540][T29885] xt_recent: Unsupported userspace flags (000000b1)
[  413.392271][T29963] netlink: 'syz.2.10691': attribute type 12 has an invalid length.
[  413.394827][T29963] netlink: 'syz.2.10691': attribute type 11 has an invalid length.
[  413.458772][T29972] netem: change failed
[  413.654494][T29994] team_slave_1: Caught tx_queue_len zero misconfig
[  413.956700][T30018] netlink: 'syz.0.10718': attribute type 13 has an invalid length.
[  413.989968][T30021] 8021q: adding VLAN 0 to HW filter on device bond16
[  414.000014][T30018] tipc: Resetting bearer <eth:syzkaller0>
[  414.021359][T30021] bond7: (slave dummy0): Releasing active interface
[  414.035539][T30021] bond16: (slave dummy0): making interface the new active one
[  414.041428][T30021] bond16: (slave dummy0): Enslaving as an active interface with an up link
[  414.045213][ T5844] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  414.049062][T30025] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  414.476582][T30071] xt_TCPMSS: Only works on TCP SYN packets
[  414.527882][T30074] validate_nla: 1 callbacks suppressed
[  414.527892][T30074] netlink: 'syz.2.10745': attribute type 1 has an invalid length.
[  414.839444][ T5844] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  415.166870][ T5640] batadv3: left promiscuous mode
[  415.796677][T30168] Cannot find set identified by id 0 to match
[  415.840937][T30170] Cannot find set identified by id 0 to match
[  416.578126][T30236] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  417.234681][T30261] bond17: option resend_igmp: invalid value (2878)
[  417.240321][T30261] bond17: option resend_igmp: allowed values 0 - 255
[  417.244889][T30261] bond17 (unregistering): Released all slaves
[  417.444544][T30271] delete_channel: no stack
[  417.969140][T30315] __nla_validate_parse: 12 callbacks suppressed
[  417.969151][T30315] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10846'.
[  418.040404][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  418.046202][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  418.055186][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  418.058986][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  418.251589][T30334] lo speed is unknown, defaulting to 1000
[  418.256865][T30334] lo speed is unknown, defaulting to 1000
[  418.259722][T30334] lo speed is unknown, defaulting to 1000
[  418.358069][ T9900] lo speed is unknown, defaulting to 1000
[  418.360426][T30334] infiniband sqz0: set active
[  418.362089][T30334] infiniband sqz0: added lo
[  418.380759][T30334] RDS/IB: sqz0: added
[  418.382852][T30334] smc: adding ib device sqz0 with port count 1
[  418.385066][T30334] smc:    ib device sqz0 port 1 has no pnetid
[  418.389681][ T9900] lo speed is unknown, defaulting to 1000
[  418.392871][T30334] lo speed is unknown, defaulting to 1000
[  418.484827][T30334] lo speed is unknown, defaulting to 1000
[  418.567402][T30334] lo speed is unknown, defaulting to 1000
[  418.798413][T30345] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10858'.
[  418.970540][T30368] ip6_vti0: Caught tx_queue_len zero misconfig
[  419.850144][T30412] netlink: 'syz.0.10887': attribute type 11 has an invalid length.
[  419.853589][T30412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10887'.
[  420.229055][T30440] netlink: 'syz.1.10901': attribute type 1 has an invalid length.
[  420.233516][T30440] netlink: 'syz.1.10901': attribute type 2 has an invalid length.
[  420.238693][T30440] netlink: 'syz.1.10901': attribute type 1 has an invalid length.
[  420.584852][T30478] netlink: 'syz.1.10916': attribute type 1 has an invalid length.
[  420.591574][T30478] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10916'.
[  420.622724][T30480] xt_l2tp: missing protocol rule (udp|l2tpip)
[  420.695170][T30494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10922'.
[  420.738963][T30496] netlink: 'syz.0.10923': attribute type 1 has an invalid length.
[  420.741521][T30496] netlink: 'syz.0.10923': attribute type 2 has an invalid length.
[  420.744588][T30498] macvtap0: entered promiscuous mode
[  420.747434][T30498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10924'.
[  420.788905][T30498] macvtap0 (unregistering): left promiscuous mode
[  421.128381][T30530] wg2: Caught tx_queue_len zero misconfig
[  421.319031][T30552] netlink: 'syz.2.10949': attribute type 21 has an invalid length.
[  421.321735][T30552] IPv6: NLM_F_CREATE should be specified when creating new route
[  421.327265][T30552] netem: change failed
[  421.400255][T30559] lo: Caught tx_queue_len zero misconfig
[  421.449885][T30561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10954'.
[  422.672429][T30643] xt_TPROXY: Can be used only with -p tcp or -p udp
[  422.758522][T30651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10997'.
[  422.775635][T30651] 8021q: adding VLAN 0 to HW filter on device bond17
[  422.787989][T30651] macvlan0: entered allmulticast mode
[  422.790483][T30651] veth0_to_bond: entered allmulticast mode
[  422.794862][T30651] bond17: (slave macvlan0): Enslaving as an active interface with an up link
[  423.025857][T30684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11011'.
[  423.263636][T30706] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11022'.
[  423.548414][T30725] Cannot find add_set index 1 as target
[  423.633902][T30729] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11029'.
[  423.646516][T30729] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11029'.
[  424.261094][T30735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11035'.
[  424.264859][T30735] netlink: 'syz.1.11035': attribute type 7 has an invalid length.
[  424.275367][T30735] netlink: 'syz.1.11035': attribute type 8 has an invalid length.
[  424.280329][T30735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11035'.
[  424.284423][T30726] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  424.332603][T30741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.420644][T30749] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.11042'.
[  424.745927][T30777] lo speed is unknown, defaulting to 1000
[  424.755300][T30777] lo speed is unknown, defaulting to 1000
[  425.293072][T30797] syz.0.11063 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  425.302363][T30797] CPU: 1 UID: 0 PID: 30797 Comm: syz.0.11063 Not tainted syzkaller #0 PREEMPT(full) 
[  425.302384][T30797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  425.302392][T30797] Call Trace:
[  425.302397][T30797]  <TASK>
[  425.302402][T30797]  dump_stack_lvl+0xe8/0x150
[  425.302425][T30797]  dump_header+0xd3/0x4c0
[  425.302443][T30797]  oom_kill_process+0x3ab/0x970
[  425.302460][T30797]  out_of_memory+0x106c/0x1410
[  425.302472][T30797]  ? percpu_ref_put+0x19/0x180
[  425.302488][T30797]  ? __pfx___mutex_lock+0x10/0x10
[  425.302511][T30797]  ? __pfx_out_of_memory+0x10/0x10
[  425.302521][T30797]  ? do_raw_spin_unlock+0x4d/0x210
[  425.302541][T30797]  try_charge_memcg+0xc53/0x1560
[  425.302556][T30797]  ? __lock_acquire+0x6b5/0x2cf0
[  425.302582][T30797]  ? __pfx_try_charge_memcg+0x10/0x10
[  425.302593][T30797]  ? xa_load+0x60/0x210
[  425.302618][T30797]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  425.302634][T30797]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  425.302650][T30797]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  425.302667][T30797]  __swap_cache_prepare_and_add+0x52a/0x700
[  425.302697][T30797]  swap_cache_alloc_folio+0xf1/0x240
[  425.302717][T30797]  swap_cluster_readahead+0x369/0x690
[  425.302740][T30797]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  425.302767][T30797]  ? get_vma_policy+0x27b/0x3c0
[  425.302784][T30797]  swapin_readahead+0x196/0xc50
[  425.302810][T30797]  ? __pfx_swapin_readahead+0x10/0x10
[  425.302829][T30797]  ? swap_table_get+0x1e/0x260
[  425.302844][T30797]  ? swap_table_get+0x1e/0x260
[  425.302858][T30797]  ? swap_table_get+0x1e/0x260
[  425.302874][T30797]  ? swap_table_get+0x216/0x260
[  425.302892][T30797]  ? swap_cache_get_folio+0x513/0x520
[  425.302913][T30797]  do_swap_page+0x54f/0x58d0
[  425.302929][T30797]  ? __lock_acquire+0x6b5/0x2cf0
[  425.302959][T30797]  ? do_swap_page+0x12c/0x58d0
[  425.302974][T30797]  ? __pfx_do_swap_page+0x10/0x10
[  425.302988][T30797]  ? __pte_offset_map+0x1ae/0x240
[  425.303008][T30797]  ? pte_offset_map_rw_nolock+0xea/0x160
[  425.303028][T30797]  handle_mm_fault+0x12d2/0x3310
[  425.303056][T30797]  ? handle_mm_fault+0xee/0x3310
[  425.303079][T30797]  ? __pfx_handle_mm_fault+0x10/0x10
[  425.303094][T30797]  ? lock_vma_under_rcu+0x45a/0x500
[  425.303152][T30797]  do_user_addr_fault+0xa73/0x1340
[  425.303176][T30797]  ? rcu_is_watching+0x15/0xb0
[  425.303193][T30797]  ? trace_page_fault_user+0x84/0x210
[  425.303211][T30797]  exc_page_fault+0x6a/0xc0
[  425.303229][T30797]  asm_exc_page_fault+0x26/0x30
[  425.303242][T30797] RIP: 0033:0x7f30fee6a110
[  425.303254][T30797] Code: c4 4c 0f 42 e0 83 3d ba dc 3a 00 00 0f 8e d9 fd ff ff e8 33 83 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 7e b5 ed 00 e8 03 00 00 48 8d 1d 7f be 3a 00 e8 8a 31 13 00
[  425.303265][T30797] RSP: 002b:00007fff704c3440 EFLAGS: 00010202
[  425.303277][T30797] RAX: 0000000000067cab RBX: 00007f30ff217da0 RCX: 0000000000067c28
[  425.303286][T30797] RDX: 0000000000000083 RSI: 00007fff704c3420 RDI: 0000000007d0f12b
[  425.303314][T30797] RBP: 00007f30ff217da0 R08: 7fffffffffffffff R09: 3fffffffffffffff
[  425.303323][T30797] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000067eee
[  425.303337][T30797] R13: 00007f30ff215fac R14: 0000000000067be0 R15: 00007fff704c3540
[  425.303359][T30797]  </TASK>
[  425.304214][T30797] memory: usage 307200kB, limit 307200kB, failcnt 727
[  425.438473][T30797] memory+swap: usage 307336kB, limit 9007199254740988kB, failcnt 0
[  425.441898][T30797] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  425.446800][T30797] Memory cgroup stats for /syz0:
[  425.446891][T30797] cache 0
[  425.450156][T30797] rss 0
[  425.451909][T30797] rss_huge 0
[  425.453560][T30797] shmem 0
[  425.454673][T30797] mapped_file 0
[  425.456093][T30797] dirty 0
[  425.457417][T30797] writeback 0
[  425.458803][T30797] workingset_refault_anon 21
[  425.460929][T30797] workingset_refault_file 97
[  425.463069][T30797] swap 139264
[  425.464893][T30797] swapcached 266240
[  425.466865][T30797] pgpgin 283722
[  425.468210][T30797] pgpgout 283718
[  425.469857][T30797] pgfault 605774
[  425.471516][T30797] pgmajfault 25
[  425.473235][T30797] inactive_anon 0
[  425.474745][T30797] active_anon 16384
[  425.476211][T30797] inactive_file 0
[  425.481302][T30797] active_file 0
[  425.482780][T30797] unevictable 0
[  425.484226][T30797] hierarchical_memory_limit 314572800
[  425.486515][T30797] hierarchical_memsw_limit 9223372036854771712
[  425.488938][T30797] total_cache 0
[  425.490357][T30797] total_rss 0
[  425.491792][T30797] total_rss_huge 0
[  425.493423][T30797] total_shmem 0
[  425.495432][T30797] total_mapped_file 0
[  425.499027][T30797] total_dirty 0
[  425.500517][T30797] total_writeback 0
[  425.502159][T30797] total_workingset_refault_anon 21
[  425.504306][T30797] total_workingset_refault_file 97
[  425.528643][T30797] total_swap 139264
[  425.530308][T30797] total_swapcached 266240
[  425.532162][T30797] total_pgpgin 283722
[  425.533839][T30797] total_pgpgout 283718
[  425.548480][T30797] total_pgfault 605791
[  425.568523][T30797] total_pgmajfault 25
[  425.570208][T30797] total_inactive_anon 0
[  425.571916][T30797] total_active_anon 16384
[  425.573737][T30797] total_inactive_file 0
[  425.575477][T30797] total_active_file 0
[  425.593692][T30797] total_unevictable 0
[  425.595434][T30797] anon_cost 0
[  425.608885][T30797] file_cost 0
[  425.610488][T30797] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11063,pid=30797,uid=0
[  425.634836][T30797] Memory cgroup out of memory: Killed process 30797 (syz.0.11063) total-vm:102152kB, anon-rss:1232kB, file-rss:21900kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  425.868347][T30816] tipc: Resetting bearer <eth:gre0>
[  426.068099][T30816] tipc: Resetting bearer <eth:syzkaller0>
[  426.076943][T30816] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  426.079251][T30816] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  426.085551][T30816] sit5: left promiscuous mode
[  426.157379][T30816] bond11: left allmulticast mode
[  426.159490][T30816] dummy0: left allmulticast mode
[  426.191587][T30816] bond12: left promiscuous mode
[  426.193362][T30816] bond12: left allmulticast mode
[  426.231184][T30829] ipt_ECN: cannot use operation on non-tcp rule
[  426.284171][T30816] bond16: left promiscuous mode
[  426.321647][T30823] macsec5: entered allmulticast mode
[  426.323786][T30823] bridge0: entered allmulticast mode
[  426.338531][T30823] bridge0: port 1(macsec5) entered blocking state
[  426.341220][T30823] bridge0: port 1(macsec5) entered disabled state
[  426.447400][T30823] bridge0: left allmulticast mode
[  426.472728][ T5640] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  426.475393][ T5640] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  426.483996][ T5640] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  426.487209][ T5640] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  426.639956][T30845] netlink: 'syz.0.11087': attribute type 4 has an invalid length.
[  426.735135][T30855] netlink: 'syz.1.11090': attribute type 1 has an invalid length.
[  426.761944][T30855] bond18: entered promiscuous mode
[  426.764311][T30855] 8021q: adding VLAN 0 to HW filter on device bond18
[  426.773718][T30855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11090'.
[  426.779241][T30855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11090'.
[  426.781447][T30858] netlink: 'syz.2.11092': attribute type 3 has an invalid length.
[  426.814429][T30855] bond18: (slave bridge7): making interface the new active one
[  426.822584][T30855] bridge7: entered promiscuous mode
[  426.826241][T30855] bond18: (slave bridge7): Enslaving as an active interface with an up link
[  427.150660][T30886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11103'.
[  427.412546][T30910] netlink: 'syz.1.11116': attribute type 8 has an invalid length.
[  428.409881][T30930] syzkaller1: entered promiscuous mode
[  428.411820][T30930] syzkaller1: entered allmulticast mode
[  428.440911][T30932] netlink: 'syz.1.11126': attribute type 11 has an invalid length.
[  428.507030][T30938] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11130'.
[  428.510827][T30938] netlink: 51 bytes leftover after parsing attributes in process `syz.2.11130'.
[  428.517624][T30938] netlink: 'syz.2.11130': attribute type 4 has an invalid length.
[  428.606007][T30951] netlink: 'syz.1.11135': attribute type 29 has an invalid length.
[  428.609497][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11135'.
[  428.626278][T30951] netlink: 'syz.1.11135': attribute type 29 has an invalid length.
[  428.630043][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11135'.
[  428.634402][T30951] netlink: 'syz.1.11135': attribute type 29 has an invalid length.
[  428.644321][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11135'.
[  428.648631][T30951] netlink: 'syz.1.11135': attribute type 29 has an invalid length.
[  428.652716][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11135'.
[  428.655942][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11135'.
[  428.660966][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11135'.
[  428.664926][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11135'.
[  428.669599][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11135'.
[  429.951303][T31059] tipc: Resetting bearer <eth:syzkaller0>
[  430.016604][T31066] openvswitch: netlink: Unknown key attributes 2
[  430.457299][T31095] sctp: [Deprecated]: syz.1.11202 (pid 31095) Use of struct sctp_assoc_value in delayed_ack socket option.
[  430.457299][T31095] Use struct sctp_sack_info instead
[  430.533267][T31099] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  431.535219][T31160] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  431.540635][T31160] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  431.543658][T31160] tipc: Resetting bearer <eth:syzkaller0>
[  431.941194][T31200] validate_nla: 40 callbacks suppressed
[  431.941211][T31200] netlink: 'syz.2.11249': attribute type 1 has an invalid length.
[  431.947461][T31200] NCSI netlink: No device for ifindex 0
[  432.011488][T31200] lo speed is unknown, defaulting to 1000
[  432.015705][T31200] lo speed is unknown, defaulting to 1000
[  432.644949][T31231] netlink: 'syz.0.11264': attribute type 4 has an invalid length.
[  432.784337][T31251] bond0: Caught tx_queue_len zero misconfig
[  432.841927][T31259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  432.848307][T27422] lo speed is unknown, defaulting to 1000
[  432.985875][T31279] netlink: 'syz.1.11285': attribute type 21 has an invalid length.
[  432.990215][T31279] netlink: 'syz.1.11285': attribute type 6 has an invalid length.
[  433.194673][T31300] netlink: 'syz.2.11294': attribute type 1 has an invalid length.
[  434.025605][T31353] geneve4: entered promiscuous mode
[  434.028773][T31353] geneve4: entered allmulticast mode
[  434.032308][ T8139] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  434.036158][ T8139] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  434.040169][ T8139] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  434.043665][ T8139] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  434.174413][T31361] netem: change failed
[  434.266959][T31369] ip6tnl0: Caught tx_queue_len zero misconfig
[  434.513346][T31391] lo speed is unknown, defaulting to 1000
[  434.519585][T31391] lo speed is unknown, defaulting to 1000
[  434.594124][T31405] __nla_validate_parse: 51 callbacks suppressed
[  434.594142][T31405] netlink: 64691 bytes leftover after parsing attributes in process `syz.2.11340'.
[  434.615902][T31408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  434.772819][T31420] netlink: 136 bytes leftover after parsing attributes in process `syz.0.11347'.
[  435.031681][T31435] xt_bpf: check failed: parse error
[  435.552312][T31464] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11368'.
[  435.555196][T31464] 0{X: renamed from gretap0
[  435.559891][T31464] 0{X: entered allmulticast mode
[  435.562626][T31464] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  435.759427][T31478] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11375'.
[  435.874924][T31487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11379'.
[  436.161511][T31499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11385'.
[  436.310698][T31505] tipc: Resetting bearer <eth:syzkaller0>
[  436.495135][T31513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11392'.
[  436.502711][T31513] gtp2: entered promiscuous mode
[  436.504749][T31513] gtp2: entered allmulticast mode
[  436.590581][T31400] Set syz1 is full, maxelem 65536 reached
[  436.683318][T31528] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.11399'.
[  436.838302][T31540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11403'.
[  436.859525][T31544] syzkaller1: left promiscuous mode
[  436.861752][T31544] syzkaller1: left allmulticast mode
[  437.209608][T31565] syz.1.11416 uses old SIOCAX25GETINFO
[  437.438322][T31584] block nbd1: Unsupported socket: should be TCP or UNIX.
[  437.629191][T31603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11434'.
[  438.490722][T31670] netlink: 'syz.2.11465': attribute type 16 has an invalid length.
[  438.715608][T31697] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  439.578490][T31749] lo speed is unknown, defaulting to 1000
[  439.584192][T31749] lo speed is unknown, defaulting to 1000
[  440.083305][T31768] netlink: 'syz.2.11506': attribute type 2 has an invalid length.
[  440.395234][T31805] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  440.823917][T31830] lo speed is unknown, defaulting to 1000
[  440.827418][T31830] lo speed is unknown, defaulting to 1000
[  441.071790][T31836] lo speed is unknown, defaulting to 1000
[  441.074821][T31836] lo speed is unknown, defaulting to 1000
[  441.325446][T31845] __nla_validate_parse: 3 callbacks suppressed
[  441.325456][T31845] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11536'.
[  441.483756][T31850] xt_socket: unknown flags 0x50
[  441.490836][T31848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  441.503216][T31848] syzkaller0: entered promiscuous mode
[  441.505558][T31848] syzkaller0: entered allmulticast mode
[  441.534035][T31852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11539'.
[  441.537535][T31848] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11537'.
[  441.541665][T31852] netlink: 'syz.0.11539': attribute type 30 has an invalid length.
[  441.548699][T31848] tipc: Resetting bearer <eth:syzkaller0>
[  441.574631][T31847] tipc: Resetting bearer <eth:syzkaller0>
[  441.594117][T31847] tipc: Disabling bearer <eth:syzkaller0>
[  441.599759][T31852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11539'.
[  441.602812][T31852] netlink: 'syz.0.11539': attribute type 30 has an invalid length.
[  441.689090][T31858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  441.821717][T31866] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  441.886137][T31871] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11548'.
[  441.916599][T31873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11549'.
[  442.086802][T31894] syzkaller1: entered promiscuous mode
[  442.088558][T31894] syzkaller1: entered allmulticast mode
[  442.288962][T31914] veth18: entered allmulticast mode
[  442.411774][T31926] netlink: 'syz.2.11563': attribute type 3 has an invalid length.
[  442.414406][T31926] netlink: 'syz.2.11563': attribute type 3 has an invalid length.
[  442.428496][T31929] pim6reg: entered allmulticast mode
[  442.607463][T31953] ipt_REJECT: ECHOREPLY no longer supported.
[  442.760524][T31965] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  443.163260][T31986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11592'.
[  443.302688][T32000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11599'.
[  443.307470][T32000] tipc: Resetting bearer <eth:syzkaller0>
[  443.309763][T32000] tipc: Resetting bearer <eth:syzkaller0>
[  443.462577][T32007] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11602'.
[  443.561949][T32013] netlink: 'syz.1.11605': attribute type 1 has an invalid length.
[  443.564388][T32013] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11605'.
[  444.068512][T32035] lo speed is unknown, defaulting to 1000
[  444.071132][T32035] lo speed is unknown, defaulting to 1000
[  444.400155][T32058] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.661449][T32078] netlink: 'syz.1.11634': attribute type 1 has an invalid length.
[  444.714194][T32078] bond19: entered promiscuous mode
[  444.717413][T32078] 8021q: adding VLAN 0 to HW filter on device bond19
[  444.731941][T32082] 8021q: adding VLAN 0 to HW filter on device bond20
[  444.735131][T32082] bond19: (slave bond20): making interface the new active one
[  444.738669][T32082] bond20: entered promiscuous mode
[  444.740764][T32082] bond19: (slave bond20): Enslaving as an active interface with an up link
[  445.202383][T32131] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  445.341904][T32145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.496290][T32164] netlink: 'syz.1.11672': attribute type 29 has an invalid length.
[  445.500043][T32164] netlink: 'syz.1.11672': attribute type 29 has an invalid length.
[  445.662996][T32183] bond0: (slave rose0): Error: Device can not be enslaved while up
[  446.085743][T32234] lo: entered allmulticast mode
[  446.094917][T32234] lo: left allmulticast mode
[  446.458154][T32262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.247563][T32366] xt_ecn: cannot match TCP bits for non-tcp packets
[  447.275181][T32368] __nla_validate_parse: 12 callbacks suppressed
[  447.275199][T32368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11762'.
[  447.287214][T32368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11762'.
[  447.310599][T32370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.314449][T32370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.365283][T32370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.369853][T32370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.432731][T32370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.437125][T32370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.510274][T32370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  447.516811][T32370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.601632][ T5858] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  447.608451][ T5858] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.624074][ T5858] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  447.629142][ T5858] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.645336][ T5858] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  447.649644][ T5858] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.665287][ T5858] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  447.672999][ T5858] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.815758][T32397] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11776'.
[  448.028154][T32410] delete_channel: no stack
[  448.191923][T32431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11793'.
[  448.271280][T32437] lo speed is unknown, defaulting to 1000
[  448.273937][T32437] lo speed is unknown, defaulting to 1000
[  448.577555][T32453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11800'.
[  448.834009][T32459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11803'.
[  448.889648][T32462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11804'.
[  449.086183][T32439] syz.0.11797 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  449.096705][T32439] CPU: 0 UID: 0 PID: 32439 Comm: syz.0.11797 Not tainted syzkaller #0 PREEMPT(full) 
[  449.096720][T32439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  449.096725][T32439] Call Trace:
[  449.096729][T32439]  <TASK>
[  449.096732][T32439]  dump_stack_lvl+0xe8/0x150
[  449.096747][T32439]  dump_header+0xd3/0x4c0
[  449.096758][T32439]  oom_kill_process+0x3ab/0x970
[  449.096800][T32439]  out_of_memory+0x106c/0x1410
[  449.096807][T32439]  ? percpu_ref_put+0x19/0x180
[  449.096826][T32439]  ? __pfx___mutex_lock+0x10/0x10
[  449.096840][T32439]  ? __pfx_out_of_memory+0x10/0x10
[  449.096846][T32439]  ? do_raw_spin_unlock+0x4d/0x210
[  449.096857][T32439]  try_charge_memcg+0xc53/0x1560
[  449.096866][T32439]  ? __lock_acquire+0x6b5/0x2cf0
[  449.096880][T32439]  ? __pfx_try_charge_memcg+0x10/0x10
[  449.096887][T32439]  ? xa_load+0x60/0x210
[  449.096902][T32439]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  449.096911][T32439]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  449.096921][T32439]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  449.096930][T32439]  __swap_cache_prepare_and_add+0x52a/0x700
[  449.096947][T32439]  swap_cache_alloc_folio+0xf1/0x240
[  449.096959][T32439]  swap_cluster_readahead+0x369/0x690
[  449.096971][T32439]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  449.096986][T32439]  ? get_vma_policy+0x27b/0x3c0
[  449.096996][T32439]  swapin_readahead+0x196/0xc50
[  449.097010][T32439]  ? __pfx_swapin_readahead+0x10/0x10
[  449.097021][T32439]  ? swap_table_get+0x1e/0x260
[  449.097033][T32439]  ? swap_table_get+0x1e/0x260
[  449.097045][T32439]  ? swap_table_get+0x1e/0x260
[  449.097059][T32439]  ? swap_table_get+0x216/0x260
[  449.097072][T32439]  ? swap_cache_get_folio+0x513/0x520
[  449.097084][T32439]  do_swap_page+0x54f/0x58d0
[  449.097093][T32439]  ? __lock_acquire+0x6b5/0x2cf0
[  449.097108][T32439]  ? do_swap_page+0x12c/0x58d0
[  449.097117][T32439]  ? __pfx_do_swap_page+0x10/0x10
[  449.097125][T32439]  ? __pte_offset_map+0x1ae/0x240
[  449.097144][T32439]  ? pte_offset_map_rw_nolock+0xea/0x160
[  449.097162][T32439]  handle_mm_fault+0x12d2/0x3310
[  449.097179][T32439]  ? handle_mm_fault+0xee/0x3310
[  449.097191][T32439]  ? __pfx_handle_mm_fault+0x10/0x10
[  449.097200][T32439]  ? lock_vma_under_rcu+0x45a/0x500
[  449.097220][T32439]  do_user_addr_fault+0xa73/0x1340
[  449.097242][T32439]  ? rcu_is_watching+0x15/0xb0
[  449.097257][T32439]  ? trace_page_fault_user+0x84/0x210
[  449.097269][T32439]  exc_page_fault+0x6a/0xc0
[  449.097279][T32439]  asm_exc_page_fault+0x26/0x30
[  449.097287][T32439] RIP: 0033:0x7f30fef5cfce
[  449.097296][T32439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  449.097305][T32439] RSP: 002b:00007fff704c33b8 EFLAGS: 00010246
[  449.097317][T32439] RAX: 0000000000000000 RBX: 0000555590455500 RCX: 00007f30fef5cfce
[  449.097325][T32439] RDX: 00007fff704c3410 RSI: 0000000000000000 RDI: 0000000000000000
[  449.097332][T32439] RBP: 00007f30ff217da0 R08: 0000000000000000 R09: 0000000000000000
[  449.097339][T32439] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000006d9cc
[  449.097346][T32439] R13: 00007f30ff21645c R14: 000000000006d83a R15: 00007fff704c3540
[  449.097368][T32439]  </TASK>
[  449.097372][T32439] memory: usage 307200kB, limit 307200kB, failcnt 2392
[  449.161467][T32474] syzkaller0: entered promiscuous mode
[  449.163134][T32439] memory+swap: usage 313884kB, limit 9007199254740988kB, failcnt 0
[  449.178689][T32474] syzkaller0: entered allmulticast mode
[  449.179705][T32439] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  449.219490][T32439] Memory cgroup stats for /syz0:
[  449.219986][T32439] cache 0
[  449.222906][T32439] rss 8192
[  449.224072][T32439] rss_huge 0
[  449.225254][T32439] shmem 0
[  449.226474][T32439] mapped_file 0
[  449.227668][T32439] dirty 0
[  449.228726][T32439] writeback 0
[  449.229937][T32439] workingset_refault_anon 33
[  449.231909][T32439] workingset_refault_file 97
[  449.233430][T32439] swap 6844416
[  449.234551][T32439] swapcached 7053312
[  449.235864][T32439] pgpgin 308241
[  449.237831][T32439] pgpgout 308236
[  449.239436][T32439] pgfault 650767
[  449.240906][T32439] pgmajfault 45
[  449.242106][T32439] inactive_anon 16384
[  449.243451][T32439] active_anon 4096
[  449.244926][T32439] inactive_file 0
[  449.246657][T32439] active_file 0
[  449.248097][T32439] unevictable 0
[  449.249629][T32439] hierarchical_memory_limit 314572800
[  449.251787][T32439] hierarchical_memsw_limit 9223372036854771712
[  449.253755][T32439] total_cache 0
[  449.255180][T32439] total_rss 8192
[  449.256852][T32439] total_rss_huge 0
[  449.258663][T32439] total_shmem 0
[  449.260236][T32439] total_mapped_file 0
[  449.261736][T32439] total_dirty 0
[  449.263075][T32439] total_writeback 0
[  449.264643][T32439] total_workingset_refault_anon 33
[  449.267323][T32439] total_workingset_refault_file 97
[  449.268978][T32439] total_swap 6844416
[  449.270832][T32439] total_swapcached 7053312
[  449.272361][T32439] total_pgpgin 308241
[  449.273890][T32439] total_pgpgout 308236
[  449.275368][T32439] total_pgfault 650784
[  449.287072][T32439] total_pgmajfault 45
[  449.289998][T32439] total_inactive_anon 16384
[  449.291461][T32439] total_active_anon 4096
[  449.292810][T32439] total_inactive_file 0
[  449.294119][T32439] total_active_file 0
[  449.295399][T32439] total_unevictable 0
[  449.303615][T32439] anon_cost 0
[  449.304731][T32439] file_cost 0
[  449.305825][T32439] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11797,pid=32439,uid=0
[  449.311433][T32439] Memory cgroup out of memory: Killed process 32439 (syz.0.11797) total-vm:115124kB, anon-rss:1232kB, file-rss:35104kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000
[  449.379510][T32442] syz.0.11797 (32442) used greatest stack depth: 19296 bytes left
[  449.519428][T32476] m1Ie5n: entered promiscuous mode
[  449.555315][T32478] openvswitch: netlink: IP tunnel TTL not specified.
[  449.666638][T32488] netlink: 34 bytes leftover after parsing attributes in process `syz.0.11816'.
[  449.669629][T32488] netlink: 34 bytes leftover after parsing attributes in process `syz.0.11816'.
[  449.686703][T32489] netlink: 'syz.1.11813': attribute type 1 has an invalid length.
[  449.689285][T32489] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11813'.
[  450.264274][T32517] Cannot find add_set index 3 as target
[  450.417446][T32525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.635323][T32525] bridge9: port 1(bond0) entered disabled state
[  450.646779][T32525] tipc: Resetting bearer <eth:syzkaller0>
[  450.756027][T32525] veth1: left allmulticast mode
[  450.977140][ T9900] lo speed is unknown, defaulting to 1000
[  450.979613][ T5640] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.982876][ T5640] netdevsim netdevsim0 eth0: unset [0, 1] type 1 family 0 port 2816 - 0
[  450.987052][ T9900] syz2: Port: 1 Link DOWN
[  450.989162][ T5640] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.992720][ T5640] netdevsim netdevsim0 eth1: unset [0, 1] type 1 family 0 port 2816 - 0
[  450.999096][ T5640] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  451.002146][ T5640] netdevsim netdevsim0 eth2: unset [0, 1] type 1 family 0 port 2816 - 0
[  451.005287][ T5640] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  451.009358][ T5640] netdevsim netdevsim0 eth3: unset [0, 1] type 1 family 0 port 2816 - 0
[  451.184896][T32551] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  451.190124][T32551] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  451.533887][T32591] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  451.545252][T32591] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  451.807229][T32608] lo speed is unknown, defaulting to 1000
[  451.809831][T32608] lo speed is unknown, defaulting to 1000
[  452.025812][T32617] netlink: 'syz.1.11869': attribute type 1 has an invalid length.
[  452.037689][T32617] netlink: 'syz.1.11869': attribute type 3 has an invalid length.
[  452.040348][T32617] netlink: 'syz.1.11869': attribute type 1 has an invalid length.
[  452.556792][T32651] __nla_validate_parse: 9 callbacks suppressed
[  452.556802][T32651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11885'.
[  452.796108][T32665] xt_l2tp: invalid flags combination: 8
[  453.116843][T32687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11904'.
[  453.120553][T32687] openvswitch: netlink: Flow actions attr not present in new flow.
[  453.202081][T32696] netlink: 'syz.0.11907': attribute type 1 has an invalid length.
[  453.260866][T32700] xt_TCPMSS: Only works on TCP SYN packets
[  453.395047][T32713] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  453.406529][T32713] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  453.409645][T32713] tipc: Resetting bearer <eth:syzkaller0>
[  453.768497][T32759] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  454.604842][  T343] syzkaller1: left promiscuous mode
[  454.607833][  T343] syzkaller1: left allmulticast mode
[  454.768788][  T353] lo speed is unknown, defaulting to 1000
[  454.772888][  T353] lo speed is unknown, defaulting to 1000
[  454.802262][  T360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11966'.
[  454.862986][  T360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11966'.
[  455.156108][  T376] nftables ruleset with unbound chain
[  455.561389][  T384] bond0: left allmulticast mode
[  455.569474][  T384] bond0: left promiscuous mode
[  455.575141][  T384] bridge9: port 1(bond0) entered disabled state
[  455.597520][  T384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  455.623879][  T388] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  455.874021][  T403] mac80211_hwsim hwsim3 ;: renamed from wlan0
[  455.997217][  T417] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.11993'.
[  456.165179][  T436] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  456.231096][  T441] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  456.234816][  T441] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  456.239351][  T441] tipc: Resetting bearer <eth:syzkaller0>
[  456.281617][  T446] netlink: 'syz.0.12005': attribute type 1 has an invalid length.
[  456.340476][  T456] netlink: 'syz.2.12010': attribute type 1 has an invalid length.
[  456.342971][  T456] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12010'.
[  456.346258][  T456] netlink: 1 bytes leftover after parsing attributes in process `syz.2.12010'.
[  456.359872][  T456] netlink: 'syz.2.12010': attribute type 1 has an invalid length.
[  456.362377][  T456] netlink: 'syz.2.12010': attribute type 8 has an invalid length.
[  456.365006][  T456] netlink: 606 bytes leftover after parsing attributes in process `syz.2.12010'.
[  456.434080][  T464] netlink: 'syz.0.12014': attribute type 21 has an invalid length.
[  456.437906][  T464] IPv6: NLM_F_CREATE should be specified when creating new route
[  456.441180][  T464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  456.443733][  T464] IPv6: NLM_F_CREATE should be set when creating new route
[  456.446261][  T464] IPv6: NLM_F_CREATE should be set when creating new route
[  456.449082][  T464] IPv6: NLM_F_CREATE should be set when creating new route
[  456.449548][  T466] openvswitch: netlink: IP tunnel dst address not specified
[  456.455761][  T464] netlink: 'syz.0.12014': attribute type 21 has an invalid length.
[  456.460341][  T464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  456.771161][  T502] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  456.805230][  T508] tipc: Resetting bearer <eth:syzkaller0>
[  456.843430][  T513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12037'.
[  456.887773][  T516] tipc: Resetting bearer <eth:syzkaller0>
[  456.904166][  T520] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32)
[  456.920239][  T522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12041'.
[  457.332026][  T575] geneve7: entered promiscuous mode
[  457.333810][  T575] geneve7: entered allmulticast mode
[  457.470071][  T593] netlink: 'syz.2.12074': attribute type 83 has an invalid length.
[  457.576546][  T603] __nla_validate_parse: 2 callbacks suppressed
[  457.576558][  T603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12079'.
[  457.622411][  T611] netlink: 'syz.1.12083': attribute type 1 has an invalid length.
[  457.641453][  T611] bond22: entered promiscuous mode
[  457.643538][  T611] 8021q: adding VLAN 0 to HW filter on device bond22
[  457.679417][  T611] bond22: (slave veth19): making interface the new active one
[  457.682071][  T611] veth19: entered promiscuous mode
[  457.685346][  T611] bond22: (slave veth19): Enslaving as an active interface with an up link
[  457.790977][  T634] netlink: 92 bytes leftover after parsing attributes in process `syz.0.12090'.
[  457.888761][  T644] xt_CT: No such helper "snmp_trap"
[  457.950298][  T655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12099'.
[  457.954051][  T655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12099'.
[  458.003440][  T663] netlink: 'syz.2.12103': attribute type 32 has an invalid length.
[  459.145180][  T701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12119'.
[  459.201125][  T712] syzkaller0: entered promiscuous mode
[  459.202952][  T712] syzkaller0: entered allmulticast mode
[  459.861996][  T761] wg1: Master is either lo or non-ether device
[  459.933677][  T768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12147'.
[  459.942412][  T768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12147'.
[  459.999443][  T776] netlink: 348 bytes leftover after parsing attributes in process `syz.2.12150'.
[  460.074856][  T785] lo speed is unknown, defaulting to 1000
[  460.077663][  T785] lo speed is unknown, defaulting to 1000
[  460.080126][  T785] lo speed is unknown, defaulting to 1000
[  460.208429][  T785] infiniband syz0: set down
[  460.210499][T27422] lo speed is unknown, defaulting to 1000
[  460.213904][  T785] infiniband syz0: added lo
[  460.242785][  T785] RDS/IB: syz0: added
[  460.244297][  T785] smc: adding ib device syz0 with port count 1
[  460.246861][  T785] smc:    ib device syz0 port 1 has no pnetid
[  460.249069][T27422] lo speed is unknown, defaulting to 1000
[  460.255649][  T785] lo speed is unknown, defaulting to 1000
[  460.358103][  T785] lo speed is unknown, defaulting to 1000
[  460.448840][  T785] lo speed is unknown, defaulting to 1000
[  460.684576][  T814] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12166'.
[  461.094324][  T826] bond18: option miimon: invalid value (18446744073709551607)
[  461.098111][  T826] bond18: option miimon: allowed values 0 - 2147483647
[  461.102442][  T826] bond18 (unregistering): Released all slaves
[  461.307879][  T837] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12175'.
[  462.061345][  T922] IPVS: Unknown mcast interface: bridge_slave_0
[  462.244972][  T955] syzkaller1: entered promiscuous mode
[  462.247301][  T955] syzkaller1: entered allmulticast mode
[  462.263663][  T957] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) !
[  462.321952][  T964] netlink: 'syz.1.12228': attribute type 3 has an invalid length.
[  462.325404][  T965] xt_hashlimit: overflow, rate too high: 0
[  462.709286][ T1000] __nla_validate_parse: 5 callbacks suppressed
[  462.709298][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12244'.
[  462.715405][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12244'.
[  462.720796][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12244'.
[  462.723945][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12244'.
[  462.732508][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12244'.
[  462.741459][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12244'.
[  462.745603][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12244'.
[  463.113329][ T1045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12262'.
[  463.422080][ T1060] syzkaller0: entered promiscuous mode
[  463.424058][ T1060] syzkaller0: entered allmulticast mode
[  463.451932][ T1064] xt_bpf: check failed: parse error
[  463.459132][ T1064] siw: device registration error -23
[  463.517152][ T1066] netlink: 'syz.2.12270': attribute type 10 has an invalid length.
[  463.824523][ T1034] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  464.147642][ T1091] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12277'.
[  464.964010][ T1090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12277'.
[  465.104721][ T1114] bpq0: entered promiscuous mode
[  465.110489][ T1114] netlink: 'syz.0.12285': attribute type 11 has an invalid length.
[  465.116722][ T1114] netlink: 'syz.0.12285': attribute type 23 has an invalid length.
[  465.318854][ T1139] netlink: 'syz.2.12296': attribute type 1 has an invalid length.
[  465.345073][ T1139] bond18: entered promiscuous mode
[  465.347647][ T1139] 8021q: adding VLAN 0 to HW filter on device bond18
[  465.367359][ T1139] bond18: (slave bridge11): making interface the new active one
[  465.370031][ T1139] bridge11: entered promiscuous mode
[  465.372659][ T1139] bond18: (slave bridge11): Enslaving as an active interface with an up link
[  466.207827][ T1208] bridge0: entered allmulticast mode
[  466.209961][ T1208] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  466.796731][ T5640] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6
[  466.860987][ T1295] xt_NFQUEUE: number of total queues is 0
[  467.270412][ T1333] macsec0: entered promiscuous mode
[  467.273514][ T1333] macsec0: left promiscuous mode
[  467.760833][ T1368] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  468.181095][   T33] audit: type=1800 audit(1772811763.174:8): pid=1405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12407" name="memory.events" dev="tmpfs" ino=21038 res=0 errno=0
[  468.189446][   T33] audit: type=1804 audit(1772811763.184:9): pid=1405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.12407" name="/newroot/4173/memory.events" dev="tmpfs" ino=21038 res=1 errno=0
[  468.454724][ T1415] netlink: 'syz.1.12412': attribute type 10 has an invalid length.
[  468.458346][ T1415] __nla_validate_parse: 5 callbacks suppressed
[  468.458361][ T1415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12412'.
[  468.477820][ T1415] dummy0: entered promiscuous mode
[  468.480281][ T1415] bond16: (slave dummy0): Releasing active interface
[  468.485509][ T1415] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  468.585366][ T1434] macvlan0: entered allmulticast mode
[  468.782910][ T1447] lo speed is unknown, defaulting to 1000
[  468.897884][ T1447] lo speed is unknown, defaulting to 1000
[  468.992690][ T1457] "syz.0.12425" (1457) uses obsolete ecb(arc4) skcipher
[  469.769751][ T1514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12450'.
[  469.773548][ T1514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12450'.
[  469.784367][ T1514] syz_tun: entered promiscuous mode
[  469.790683][ T1514] syz_tun: left promiscuous mode
[  470.873507][ T1580] netlink: 'syz.1.12477': attribute type 11 has an invalid length.
[  470.876106][ T1580] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.12477'.
[  470.913754][ T1585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12480'.
[  470.945144][ T1588] netlink: 'syz.0.12479': attribute type 8 has an invalid length.
[  470.978712][ T1591] netlink: 71 bytes leftover after parsing attributes in process `syz.1.12482'.
[  472.207941][ T1644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.361445][ T1660] netlink: 'syz.1.12514': attribute type 3 has an invalid length.
[  472.430977][ T1666] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  472.539998][ T1675] batman_adv: batadv0: Removing interface: batadv_slave_1
[  472.544884][ T1675] bond2: (slave geneve2): Releasing active interface
[  472.570090][ T1675] bond3: (slave bridge1): Releasing backup interface
[  472.579514][ T1675] bond5: (slave geneve4): Releasing active interface
[  472.585501][ T1675] batman_adv: batadv0: Removing interface: ipvlan3
[  472.590869][ T1675] bond10: (slave gretap2): Releasing active interface
[  472.594472][ T1675] gretap2: left allmulticast mode
[  472.605623][ T1675] bond11: (slave batadv2): Releasing active interface
[  472.609430][ T1675] batadv2: left promiscuous mode
[  472.611714][ T1675] batadv2: left allmulticast mode
[  472.619565][ T1675] bond14: (slave bridge5): Releasing backup interface
[  472.622490][ T1675] bridge5: left promiscuous mode
[  472.636025][ T1675] bond15: (slave veth15): Releasing active interface
[  472.639588][ T1675] bond15: (slave veth15): the permanent HWaddr of slave - a6:23:3a:0a:4e:66 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  472.647636][ T1675] batadv3: entered promiscuous mode
[  472.656676][ T1675] bond15: (slave batadv3): Releasing active interface
[  472.659145][ T1675] batadv3: left promiscuous mode
[  472.664970][ T1675] batman_adv: batadv0: Removing interface: gretap5
[  472.669390][ T1675] bond17: (slave macvlan0): Releasing backup interface
[  472.672437][ T1675] veth0_to_bond: left allmulticast mode
[  472.680985][ T1675] bond18: (slave bridge7): Releasing backup interface
[  472.683159][ T1675] bridge7: left promiscuous mode
[  472.691952][ T1675] bond19: (slave bond20): Releasing backup interface
[  472.694084][ T1675] bond20: left promiscuous mode
[  472.701351][ T1675] bond22: (slave veth19): Releasing backup interface
[  472.703515][ T1675] veth19: left promiscuous mode
[  472.839285][ T1699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12530'.
[  472.842452][ T1699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12530'.
[  472.849787][ T1699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12530'.
[  473.544787][ T1747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12551'.
[  474.913939][ T1812] gre3: entered allmulticast mode
[  475.365421][ T1849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12591'.
[  475.648321][ T1866] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12597'.
[  476.052575][ T1903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12611'.
[  476.070501][ T1903] 8021q: adding VLAN 0 to HW filter on device bond16
[  476.075227][ T1903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12611'.
[  476.078971][ T1903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12611'.
[  476.082797][ T1903] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.086065][ T1903] bond16: (slave bond0): Enslaving as an active interface with a down link
[  476.161422][ T1916] netlink: 165 bytes leftover after parsing attributes in process `syz.0.12616'.
[  476.363676][ T1939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12628'.
[  476.368784][ T1939] tc_dump_action: action bad kind
[  476.656883][ T1975] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  476.703435][ T1977] lo speed is unknown, defaulting to 1000
[  476.899038][ T1998] netlink: 'syz.0.12649': attribute type 313 has an invalid length.
[  476.951207][ T1977] lo speed is unknown, defaulting to 1000
[  478.538397][ T2046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12662'.
[  479.208707][ T2118] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  479.305161][ T2128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12695'.
[  479.308812][ T2128] bond0: option lp_interval: invalid value (0)
[  479.311246][ T2128] bond0: option lp_interval: allowed values 1 - 2147483647
[  479.454439][ T2143] lo speed is unknown, defaulting to 1000
[  479.494231][ T2149] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  479.548653][ T2143] lo speed is unknown, defaulting to 1000
[  480.432468][ T2182] tipc: Resetting bearer <eth:syzkaller0>
[  480.434499][ T2182] tipc: Resetting bearer <eth:syzkaller0>
[  480.748558][ T2204] netlink: 'syz.2.12725': attribute type 1 has an invalid length.
[  480.751141][ T2204] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12725'.
[  480.842341][ T2210] pimreg: tun_chr_ioctl cmd 21731
[  480.935995][ T2216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12730'.
[  481.531203][ T2254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  482.616217][ T2306] netlink: 'syz.1.12771': attribute type 96 has an invalid length.
[  482.689175][ T2314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12775'.
[  483.454787][ T2318] ipvlan0: entered promiscuous mode
[  483.603054][ T2332] lo speed is unknown, defaulting to 1000
[  483.671968][ T2339] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.12784'.
[  483.779222][ T2332] lo speed is unknown, defaulting to 1000
[  483.804217][ T2345] lo speed is unknown, defaulting to 1000
[  483.859195][ T2352] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  484.025330][ T2345] lo speed is unknown, defaulting to 1000
[  484.440891][ T2369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.445100][ T2369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.468926][ T2370] erspan0: left promiscuous mode
[  484.476888][ T2369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.488706][ T2369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.501779][ T2369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.524059][ T2369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.542872][ T2369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.559893][ T2370] 8021q: adding VLAN 0 to HW filter on device team0
[  484.562961][ T2369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.577555][ T2369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.856112][ T2376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12795'.
[  485.096172][ T2377] netlink: 'syz.0.12795': attribute type 4 has an invalid length.
[  485.115278][ T2377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12795'.
[  485.584770][ T2420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12814'.
[  485.651004][ T2426] netlink: 'syz.0.12817': attribute type 1 has an invalid length.
[  485.673658][ T2426] 8021q: adding VLAN 0 to HW filter on device bond17
[  485.682573][ T2426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12817'.
[  485.685642][ T2426] bond17: entered allmulticast mode
[  485.979997][ T2445] sit0: entered promiscuous mode
[  486.016429][ T2445] netlink: 'syz.0.12825': attribute type 1 has an invalid length.
[  486.026955][ T2445] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12825'.
[  486.660108][ T2471] netlink: 'syz.0.12833': attribute type 29 has an invalid length.
[  486.664299][ T2471] netlink: 'syz.0.12833': attribute type 29 has an invalid length.
[  486.668342][ T2471] netlink: 500 bytes leftover after parsing attributes in process `syz.0.12833'.
[  487.097279][ T2510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12848'.
[  487.382452][ T2407] syz.2.12809 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  487.385926][ T2407] CPU: 1 UID: 0 PID: 2407 Comm: syz.2.12809 Not tainted syzkaller #0 PREEMPT(full) 
[  487.385938][ T2407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  487.385943][ T2407] Call Trace:
[  487.385947][ T2407]  <TASK>
[  487.385951][ T2407]  dump_stack_lvl+0xe8/0x150
[  487.385966][ T2407]  dump_header+0xd3/0x4c0
[  487.385976][ T2407]  oom_kill_process+0x3ab/0x970
[  487.385986][ T2407]  out_of_memory+0x106c/0x1410
[  487.385993][ T2407]  ? percpu_ref_put+0x19/0x180
[  487.386003][ T2407]  ? __pfx___mutex_lock+0x10/0x10
[  487.386016][ T2407]  ? __pfx_out_of_memory+0x10/0x10
[  487.386022][ T2407]  ? do_raw_spin_unlock+0x4d/0x210
[  487.386034][ T2407]  try_charge_memcg+0xc53/0x1560
[  487.386043][ T2407]  ? __lock_acquire+0x6b5/0x2cf0
[  487.386056][ T2407]  ? __pfx_try_charge_memcg+0x10/0x10
[  487.386063][ T2407]  ? xa_load+0x60/0x210
[  487.386077][ T2407]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  487.386087][ T2407]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  487.386095][ T2407]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  487.386104][ T2407]  __swap_cache_prepare_and_add+0x52a/0x700
[  487.386121][ T2407]  swap_cache_alloc_folio+0xf1/0x240
[  487.386133][ T2407]  swap_cluster_readahead+0x369/0x690
[  487.386145][ T2407]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  487.386160][ T2407]  ? get_vma_policy+0x27b/0x3c0
[  487.386170][ T2407]  swapin_readahead+0x196/0xc50
[  487.386206][ T2407]  ? __pfx_swapin_readahead+0x10/0x10
[  487.386216][ T2407]  ? swap_table_get+0x1e/0x260
[  487.386225][ T2407]  ? swap_table_get+0x1e/0x260
[  487.386238][ T2407]  ? swap_table_get+0x1e/0x260
[  487.386247][ T2407]  ? swap_table_get+0x216/0x260
[  487.386257][ T2407]  ? swap_cache_get_folio+0x513/0x520
[  487.386272][ T2407]  do_swap_page+0x54f/0x58d0
[  487.386287][ T2407]  ? __lock_acquire+0x6b5/0x2cf0
[  487.386329][ T2407]  ? do_swap_page+0x12c/0x58d0
[  487.386340][ T2407]  ? __pfx_do_swap_page+0x10/0x10
[  487.386349][ T2407]  ? __pte_offset_map+0x1ae/0x240
[  487.386360][ T2407]  ? pte_offset_map_rw_nolock+0xea/0x160
[  487.386372][ T2407]  handle_mm_fault+0x12d2/0x3310
[  487.386397][ T2407]  ? handle_mm_fault+0xee/0x3310
[  487.386418][ T2407]  ? __pfx_handle_mm_fault+0x10/0x10
[  487.386427][ T2407]  ? lock_vma_under_rcu+0x45a/0x500
[  487.386444][ T2407]  do_user_addr_fault+0xa73/0x1340
[  487.386456][ T2407]  ? rcu_is_watching+0x15/0xb0
[  487.386468][ T2407]  ? trace_page_fault_user+0x84/0x210
[  487.386484][ T2407]  exc_page_fault+0x6a/0xc0
[  487.386503][ T2407]  asm_exc_page_fault+0x26/0x30
[  487.386513][ T2407] RIP: 0033:0x7f1f15864ede
[  487.386522][ T2407] Code: e9 27 6a 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 1b d1 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00
[  487.386529][ T2407] RSP: 002b:00007ffdd41a31f0 EFLAGS: 00010206
[  487.386537][ T2407] RAX: 00007f1f15c15fa0 RBX: 00007f1f15c15fa0 RCX: 0000000000000026
[  487.386542][ T2407] RDX: 0000000000000001 RSI: 00007f1f15c16038 RDI: 0000000000000005
[  487.386547][ T2407] RBP: 00007f1f15c17da0 R08: 0000000000000000 R09: 0000000000000001
[  487.386551][ T2407] R10: 0000000000000026 R11: 0000000000000246 R12: 0000000000076afb
[  487.386558][ T2407] R13: 00007f1f15c1609c R14: 0000000000076838 R15: 00007f1f15c16090
[  487.386579][ T2407]  </TASK>
[  487.592242][ T2548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12860'.
[  487.612935][ T2407] memory: usage 299920kB, limit 307200kB, failcnt 475
[  487.617452][ T2407] memory+swap: usage 300628kB, limit 9007199254740988kB, failcnt 0
[  487.625947][ T2407] kmem: usage 284464kB, limit 9007199254740988kB, failcnt 0
[  487.632614][ T2407] Memory cgroup stats for /syz2:
[  487.632716][ T2407] cache 0
[  487.637617][ T2407] rss 4096
[  487.639042][ T2407] rss_huge 0
[  487.640631][ T2407] shmem 0
[  487.642035][ T2407] mapped_file 0
[  487.643583][ T2407] dirty 0
[  487.644909][ T2407] writeback 0
[  487.647447][ T2407] workingset_refault_anon 0
[  487.649424][ T2407] workingset_refault_file 0
[  487.651460][ T2407] swap 724992
[  487.652975][ T2407] swapcached 729088
[  487.654754][ T2407] pgpgin 343478
[  487.656541][ T2407] pgpgout 339672
[  487.658502][ T2407] pgfault 728046
[  487.660142][ T2407] pgmajfault 5
[  487.662038][ T2407] inactive_anon 10936320
[  487.663829][ T2407] active_anon 4390912
[  487.665548][ T2407] inactive_file 0
[  487.674158][ T2407] active_file 0
[  487.675738][ T2407] unevictable 0
[  487.677766][ T2407] hierarchical_memory_limit 314572800
[  487.680002][ T2407] hierarchical_memsw_limit 9223372036854771712
[  487.682702][ T2407] total_cache 0
[  487.684387][ T2407] total_rss 4096
[  487.685954][ T2407] total_rss_huge 0
[  487.688197][ T2407] total_shmem 0
[  487.689805][ T2407] total_mapped_file 0
[  487.691606][ T2407] total_dirty 0
[  487.693141][ T2407] total_writeback 0
[  487.694747][ T2407] total_workingset_refault_anon 0
[  487.697069][ T2407] total_workingset_refault_file 0
[  487.698806][ T2407] total_swap 724992
[  487.700635][ T2407] total_swapcached 729088
[  487.702648][ T2407] total_pgpgin 343479
[  487.704381][ T2407] total_pgpgout 339673
[  487.706815][ T2407] total_pgfault 728048
[  487.708967][ T2407] total_pgmajfault 5
[  487.710942][ T2407] total_inactive_anon 10936320
[  487.713304][ T2407] total_active_anon 4390912
[  487.715531][ T2407] total_inactive_file 0
[  487.719303][ T2407] total_active_file 0
[  487.721283][ T2407] total_unevictable 0
[  487.723098][ T2407] anon_cost 0
[  487.724740][ T2407] file_cost 0
[  487.727092][ T2407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.12809,pid=2407,uid=0
[  487.733556][ T2407] Memory cgroup out of memory: Killed process 2407 (syz.2.12809) total-vm:102356kB, anon-rss:1232kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  488.019443][ T2567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12868'.
[  488.873277][ T2638] lo speed is unknown, defaulting to 1000
[  488.976257][ T2638] lo speed is unknown, defaulting to 1000
[  489.179420][ T2651] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.12896'.
[  489.815711][ T2695] macvtap1: entered promiscuous mode
[  489.818468][ T2695] veth1_to_hsr: entered promiscuous mode
[  489.820554][ T2695] macvtap1: entered allmulticast mode
[  489.822560][ T2695] veth1_to_hsr: entered allmulticast mode
[  490.197211][ T5844] lo speed is unknown, defaulting to 1000
[  490.201440][ T5844] sqz0: Port: 1 Link DOWN
[  490.210045][T32532] lo speed is unknown, defaulting to 1000
[  490.504287][ T2730] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  491.384531][ T2795] net_ratelimit: 290 callbacks suppressed
[  491.384546][ T2795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.534557][ T2808] __nla_validate_parse: 1 callbacks suppressed
[  491.534573][ T2808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12952'.
[  491.543737][ T2810] netlink: 6856 bytes leftover after parsing attributes in process `syz.2.12954'.
[  491.549310][ T2810] netlink: 6856 bytes leftover after parsing attributes in process `syz.2.12954'.
[  491.570233][ T2808] bridge9: port 1(veth25) entered blocking state
[  491.573662][ T2808] bridge9: port 1(veth25) entered disabled state
[  491.580103][ T2808] veth25: entered allmulticast mode
[  491.585058][ T2808] veth25: entered promiscuous mode
[  491.592899][ T2808] bridge9: port 2(veth0_to_bond) entered blocking state
[  491.600217][ T2808] bridge9: port 2(veth0_to_bond) entered disabled state
[  491.604549][ T2808] veth0_to_bond: entered allmulticast mode
[  491.607801][ T2808] veth0_to_bond: left allmulticast mode
[  491.620380][ T2808] bridge9: port 2(veth27) entered blocking state
[  491.623249][ T2808] bridge9: port 2(veth27) entered disabled state
[  491.625502][ T2808] veth27: entered allmulticast mode
[  491.630036][ T2808] veth27: entered promiscuous mode
[  491.878197][   T57] block nbd1: Receive control failed (result -32)
[  492.074909][ T2870] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12976'.
[  492.161639][ T2884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12982'.
[  492.165059][ T2884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12982'.
[  493.240121][ T2942] net veth1_virt_wifi : renamed from virt_wifi0
[  493.317193][ T2944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13002'.
[  495.006486][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.475304][ T2959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  495.661195][ T2980] netlink: 'syz.1.13017': attribute type 1 has an invalid length.
[  495.664351][ T2980] netlink: 'syz.1.13017': attribute type 2 has an invalid length.
[  495.676716][ T2980] netlink: 'syz.1.13017': attribute type 1 has an invalid length.
[  495.679985][ T2980] netlink: 'syz.1.13017': attribute type 3 has an invalid length.
[  495.990642][ T3013] netlink: 7 bytes leftover after parsing attributes in process `syz.1.13032'.
[  496.521077][ T3076] lo speed is unknown, defaulting to 1000
[  496.523675][ T3076] lo speed is unknown, defaulting to 1000
[  496.529630][ T3076] lo speed is unknown, defaulting to 1000
[  496.541683][ T3076] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  496.557786][ T3076] lo speed is unknown, defaulting to 1000
[  496.560578][ T3076] lo speed is unknown, defaulting to 1000
[  496.563234][ T3076] lo speed is unknown, defaulting to 1000
[  496.937209][ T3105] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.13073'.
[  497.556482][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.107355][ T3138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13091'.
[  498.111834][ T3138] vlan0: entered promiscuous mode
[  498.113861][ T3138] gretap0: entered promiscuous mode
[  498.122776][ T3141] netlink: 'syz.2.13090': attribute type 10 has an invalid length.
[  498.130461][ T3141] bond11: (slave dummy0): Releasing active interface
[  498.142292][ T3141] team0: Port device dummy0 added
[  498.146155][ T3141] netlink: 'syz.2.13090': attribute type 10 has an invalid length.
[  498.165721][ T3141] team0: Port device dummy0 removed
[  498.177369][ T3141] dummy0: entered promiscuous mode
[  498.733068][ T3207] bond19: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  498.739854][ T3207] bond19 (unregistering): Released all slaves
[  501.309781][ T3160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  501.600851][ T3237] lo speed is unknown, defaulting to 1000
[  501.738477][ T3237] lo speed is unknown, defaulting to 1000
[  501.868352][ T3237] lo speed is unknown, defaulting to 1000
[  504.415284][ T3222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  505.435638][ T3290] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  505.442560][ T3290] openvswitch: netlink: Message has 16 unknown bytes.
[  505.479715][ T3295] syzkaller1: left promiscuous mode
[  505.481855][ T3295] syzkaller1: left allmulticast mode
[  505.547096][ T3300] netlink: 'syz.2.13154': attribute type 3 has an invalid length.
[  506.657005][ T3384] netlink: 'syz.0.13180': attribute type 1 has an invalid length.
[  506.700234][ T3384] 8021q: adding VLAN 0 to HW filter on device bond19
[  506.729645][ T3384] macvlan4: entered promiscuous mode
[  506.731818][ T3384] macvlan4: entered allmulticast mode
[  506.734241][ T3384] bond19: entered promiscuous mode
[  506.737117][ T3384] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  506.744038][ T3384] bond19: left promiscuous mode
[  506.786724][ T3390] bond19: (slave ip6gretap4): making interface the new active one
[  506.795701][ T3390] bond19: (slave ip6gretap4): Enslaving as an active interface with an up link
[  506.870765][ T3407] SET target dimension over the limit!
[  506.939585][ T3414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.146019][ T3429] syzkaller1: entered promiscuous mode
[  507.149643][ T3429] syzkaller1: entered allmulticast mode
[  507.230346][ T3431] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  507.259950][ T3433] syzkaller1: entered promiscuous mode
[  507.264244][ T3433] syzkaller1: entered allmulticast mode
[  507.386436][ T3435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.391173][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.483659][ T3443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13205'.
[  507.541578][ T3445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.671538][ T3462] netlink: 'syz.0.13211': attribute type 1 has an invalid length.
[  507.677828][ T3462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13211'.
[  508.116049][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13232'.
[  508.124762][ T3505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13232'.
[  508.132422][ T3505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13232'.
[  508.137117][ T3505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13232'.
[  508.242029][ T3518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13238'.
[  508.246114][ T3518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13238'.
[  508.326585][ T3528] tunl0: Caught tx_queue_len zero misconfig
[  508.350628][ T3530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13244'.
[  508.491624][ T3544] netlink: 296 bytes leftover after parsing attributes in process `syz.2.13250'.
[  508.697798][ T3564] syzkaller1: entered promiscuous mode
[  508.699866][ T3564] syzkaller1: entered allmulticast mode
[  509.649598][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.652899][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.673688][ T3678] netlink: zone id is out of range
[  509.675872][ T3678] netlink: zone id is out of range
[  509.679294][ T3678] netlink: zone id is out of range
[  509.681620][ T3678] netlink: zone id is out of range
[  509.743995][ T3684] netlink: 'syz.1.13316': attribute type 1 has an invalid length.
[  510.503757][ T3719] sit0: left promiscuous mode
[  510.511915][ T3719] net_ratelimit: 50 callbacks suppressed
[  510.511920][ T3719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  510.521528][T32532] lo speed is unknown, defaulting to 1000
[  510.533207][ T3719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.536896][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.070611][ T3746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  511.188992][ T3752] netlink: 'syz.2.13346': attribute type 1 has an invalid length.
[  511.733255][ T3791] tipc: Enabling of bearer <eth:xfrm0> rejected, failed to enable media
[  511.868358][ T3797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  512.220170][ T3819] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  512.560058][ T3850] __nla_validate_parse: 3 callbacks suppressed
[  512.560074][ T3850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13390'.
[  512.596563][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.638429][ T3860] syzkaller1: entered promiscuous mode
[  512.640314][ T3860] syzkaller1: entered allmulticast mode
[  515.363535][ T3840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  515.500303][ T3902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13409'.
[  515.508678][ T3902] bond8: (slave vcan0): Releasing backup interface
[  515.510821][ T3902] vcan0 (unregistering): left promiscuous mode
[  515.523454][ T3902] bond8: Destroying bond
[  515.532554][ T3902] bond8 (unregistering): Released all slaves
[  515.662275][ T3918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13416'.
[  515.665609][ T3918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13416'.
[  515.669494][ T3918] netlink: 'syz.1.13416': attribute type 13 has an invalid length.
[  515.672089][ T3918] netlink: 'syz.1.13416': attribute type 11 has an invalid length.
[  515.706188][ T3923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13419'.
[  515.709629][ T3924] netlink: 'syz.2.13418': attribute type 1 has an invalid length.
[  515.712876][ T3924] netlink: 'syz.2.13418': attribute type 1 has an invalid length.
[  515.781584][ T3930] lo speed is unknown, defaulting to 1000
[  515.843173][ T3931] netlink: 'syz.0.13421': attribute type 4 has an invalid length.
[  515.854193][T32532] lo speed is unknown, defaulting to 1000
[  515.856237][T32532] syz2: Port: 1 Link DOWN
[  515.883773][ T3934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13422'.
[  515.918897][ T3930] lo speed is unknown, defaulting to 1000
[  516.066616][ T3930] lo speed is unknown, defaulting to 1000
[  516.311915][ T3961] 8021q: adding VLAN 0 to HW filter on device bond19
[  516.317415][ T3961] team0: Port device bond19 added
[  516.440520][ T3980] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13443'.
[  516.482795][ T3980] bond0 (unregistering): Released all slaves
[  516.817290][   T33] audit: type=1800 audit(1772811811.814:10): pid=4020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13460" name="memory.events" dev="tmpfs" ino=22303 res=0 errno=0
[  516.833508][ T4028] rdma_op ffff88819ecfe1f0 conn xmit_rdma 0000000000000000
[  516.857372][ T4028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13461'.
[  517.031188][ T4043] lo speed is unknown, defaulting to 1000
[  517.179424][ T4043] lo speed is unknown, defaulting to 1000
[  517.332399][ T4043] lo speed is unknown, defaulting to 1000
[  518.135928][ T4088] syzkaller0: entered promiscuous mode
[  518.144624][ T4088] syzkaller0: entered allmulticast mode
[  518.159931][ T4088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  518.185267][ T4087] tipc: Resetting bearer <eth:syzkaller0>
[  518.228194][ T4087] tipc: Disabling bearer <eth:syzkaller0>
[  518.490786][ T4118] syzkaller1: entered promiscuous mode
[  518.497974][ T4118] syzkaller1: entered allmulticast mode
[  518.688340][ T4132] lo speed is unknown, defaulting to 1000
[  518.789267][ T4132] lo speed is unknown, defaulting to 1000
[  518.871554][ T4132] lo speed is unknown, defaulting to 1000
[  518.983123][ T4155] netlink: 'syz.1.13517': attribute type 3 has an invalid length.
[  519.038750][ T4161] syzkaller1: left promiscuous mode
[  519.040535][ T4161] syzkaller1: left allmulticast mode
[  519.047518][ T4160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13518'.
[  519.771445][ T4225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13548'.
[  519.901267][ T4235] netlink: 'syz.0.13553': attribute type 10 has an invalid length.
[  519.904025][ T4237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13554'.
[  519.910553][ T4235] netlink: 'syz.0.13553': attribute type 10 has an invalid length.
[  520.255602][ T4258] netlink: 'syz.1.13562': attribute type 12 has an invalid length.
[  520.420936][ T4265] lo speed is unknown, defaulting to 1000
[  520.474798][ T4268] Set syz1 is full, maxelem 65536 reached
[  520.491612][ T4270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13566'.
[  520.501336][ T4270] netlink: 39 bytes leftover after parsing attributes in process `syz.0.13566'.
[  520.670026][ T4265] lo speed is unknown, defaulting to 1000
[  520.824542][ T4265] lo speed is unknown, defaulting to 1000
[  521.304972][ T4311] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  521.329919][ T4313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13586'.
[  521.341010][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13587'.
[  521.365242][ T4315] 8021q: adding VLAN 0 to HW filter on device bond23
[  521.373187][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13587'.
[  521.376290][ T4315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13587'.
[  521.383692][ T4315] netlink: 'syz.1.13587': attribute type 4 has an invalid length.
[  521.386734][ T4315] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13587'.
[  521.572806][ T4335] raw_sendmsg: syz.0.13595 forgot to set AF_INET. Fix it!
[  521.715617][ T4348] sctp: [Deprecated]: syz.0.13598 (pid 4348) Use of struct sctp_assoc_value in delayed_ack socket option.
[  521.715617][ T4348] Use struct sctp_sack_info instead
[  522.632418][ T4425] netlink: 'syz.2.13636': attribute type 2 has an invalid length.
[  522.643196][ T4425] l24): entered promiscuous mode
[  522.734354][ T4436] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  522.753290][ T4436] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  522.807572][ T4440] tipc: Resetting bearer <eth:syzkaller0>
[  522.810179][ T4440] tipc: Resetting bearer <eth:syzkaller0>
[  522.873549][T32532] lo speed is unknown, defaulting to 1000
[  523.021429][ T4450] xt_TPROXY: Can be used only with -p tcp or -p udp
[  523.411763][ T4474] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  523.481040][ T4476] lo speed is unknown, defaulting to 1000
[  523.530059][ T4478] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  523.617514][ T4476] lo speed is unknown, defaulting to 1000
[  523.684112][ T4487] lo speed is unknown, defaulting to 1000
[  523.738667][ T4489] geneve5: entered promiscuous mode
[  523.750568][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  523.754099][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  523.758596][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  523.761460][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  523.808036][ T4476] lo speed is unknown, defaulting to 1000
[  523.938650][ T4487] lo speed is unknown, defaulting to 1000
[  524.081189][ T4487] lo speed is unknown, defaulting to 1000
[  524.443564][ T4523] netlink: 'syz.0.13677': attribute type 10 has an invalid length.
[  524.451379][ T4523] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  524.455370][ T4523] team0: Port device wlan1 added
[  524.649596][ T4542] macsec0: entered allmulticast mode
[  524.652180][ T4542] veth1_macvtap: entered allmulticast mode
[  524.654240][ T4542] macsec0: left allmulticast mode
[  524.656047][ T4542] veth1_macvtap: left allmulticast mode
[  524.667628][ T4542] __nla_validate_parse: 9 callbacks suppressed
[  524.667646][ T4542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13686'.
[  524.716020][ T4543] team0 (unregistering): Failed to send options change via netlink (err -105)
[  524.719883][ T4543] team0 (unregistering): Failed to send port change of device bond19 via netlink (err -105)
[  524.726098][ T4543] team0 (unregistering): Port device bond19 removed
[  524.742098][ T4543] team0 (unregistering): Failed to send options change via netlink (err -105)
[  524.913691][ T4543] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  525.024911][ T4543] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  525.101714][ T4543] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  525.143471][ T4543] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  525.203639][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  525.216697][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  525.224779][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  525.242963][ T8139] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  525.782654][ T4584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13701'.
[  525.831294][ T4590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13703'.
[  526.032266][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13716'.
[  526.081693][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13720'.
[  526.272517][ T4639] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13725'.
[  526.328410][ T4641] atomic_op ffff88801ac3e198 conn xmit_atomic 0000000000000000
[  526.377980][ T4646] team0: No ports can be present during mode change
[  526.442018][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13731'.
[  526.585147][ T4668] netlink: 'syz.1.13738': attribute type 1 has an invalid length.
[  526.601225][ T4668] netlink: 2096 bytes leftover after parsing attributes in process `syz.1.13738'.
[  526.689540][ T4679] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13745'.
[  526.922362][ T4692] veth25: left allmulticast mode
[  526.924675][ T4692] veth25: left promiscuous mode
[  526.926440][ T4692] bridge9: port 1(veth25) entered disabled state
[  526.930269][ T4692] veth27: left allmulticast mode
[  526.931970][ T4692] veth27: left promiscuous mode
[  526.933636][ T4692] bridge9: port 2(veth27) entered disabled state
[  527.320516][ T4720] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  527.372324][ T4720] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  527.423112][ T4720] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  527.479370][ T4720] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  527.546586][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  527.553491][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  527.578654][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  527.593944][ T8139] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  527.597138][ T4740] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.13771'.
[  528.034964][ T4781] syzkaller1: entered promiscuous mode
[  528.039925][ T4781] syzkaller1: entered allmulticast mode
[  528.123701][ T4787] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  528.465466][ T4822] xt_CT: You must specify a L4 protocol and not use inversions on it
[  529.436462][ T4893] netlink: 'syz.0.13836': attribute type 4 has an invalid length.
[  529.439202][ T4893] netlink: 'syz.0.13836': attribute type 1 has an invalid length.
[  529.513425][ T4891] infiniband syz1: set down
[  529.515162][ T4891] infiniband syz1: added veth0_to_batadv
[  529.552353][ T4891] RDS/IB: syz1: added
[  529.558105][ T4891] smc: adding ib device syz1 with port count 1
[  529.560878][ T4891] smc:    ib device syz1 port 1 has no pnetid
[  530.083692][ T4924] __nla_validate_parse: 10 callbacks suppressed
[  530.083709][ T4924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13847'.
[  530.096933][ T4924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13847'.
[  530.129044][ T4928] netlink: 240 bytes leftover after parsing attributes in process `syz.1.13849'.
[  530.132798][ T4928] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13849'.
[  530.619586][ T4986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13876'.
[  530.739847][ T4998] IPv6: NLM_F_CREATE should be specified when creating new route
[  530.772050][ T5000] "syz.1.13884" (5000) uses obsolete ecb(arc4) skcipher
[  530.815423][ T5005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  532.718280][ T5090] netlink: 'syz.0.13924': attribute type 1 has an invalid length.
[  533.004321][ T5128] netlink: 'syz.2.13942': attribute type 9 has an invalid length.
[  533.010990][ T5128] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.13942'.
[  533.132877][ T5134] lo speed is unknown, defaulting to 1000
[  533.246156][ T5134] lo speed is unknown, defaulting to 1000
[  533.421585][ T5134] lo speed is unknown, defaulting to 1000
[  533.571693][ T5172] netlink: 'syz.2.13959': attribute type 3 has an invalid length.
[  533.574183][ T5172] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13959'.
[  533.715875][ T5184] netlink: 192 bytes leftover after parsing attributes in process `syz.0.13965'.
[  533.821641][ T5184] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  533.836444][ T5184] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  533.999916][ T5213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13975'.
[  534.454300][ T5246] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  534.457733][ T5246] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  534.461144][ T5246] tipc: Resetting bearer <eth:syzkaller0>
[  534.492052][ T5248] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13989'.
[  534.856195][ T5282] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  534.879415][ T5282] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  534.899134][ T5286] lo speed is unknown, defaulting to 1000
[  535.062519][ T5286] lo speed is unknown, defaulting to 1000
[  535.192169][ T5286] lo speed is unknown, defaulting to 1000
[  535.210283][ T5309] __nla_validate_parse: 5 callbacks suppressed
[  535.210294][ T5309] netlink: 7 bytes leftover after parsing attributes in process `syz.1.14016'.
[  535.255299][ T5314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.723952][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14038'.
[  536.081899][ T5376] netlink: 'syz.1.14046': attribute type 15 has an invalid length.
[  536.084876][ T5376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14046'.
[  536.113331][ T5378] netlink: 'syz.1.14047': attribute type 3 has an invalid length.
[  536.395346][ T5396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14056'.
[  537.983046][ T5501] syzkaller0: entered promiscuous mode
[  537.985532][ T5501] syzkaller0: entered allmulticast mode
[  538.100104][ T5505] bond8: invalid ARP target 0.0.0.0 specified for addition
[  538.102858][ T5505] bond8: option arp_ip_target: invalid value (0)
[  538.106111][ T5505] bond8 (unregistering): Released all slaves
[  538.414387][ T5541] netlink: 'syz.0.14121': attribute type 2 has an invalid length.
[  538.420731][ T5541] : entered promiscuous mode
[  538.470222][ T5556] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14126'.
[  538.531698][ T5562] netlink: 'syz.2.14129': attribute type 10 has an invalid length.
[  538.630178][ T5576] netlink: 'syz.2.14136': attribute type 1 has an invalid length.
[  538.840826][ T5594] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  538.880710][ T5600] netlink: 'syz.0.14148': attribute type 1 has an invalid length.
[  538.883314][ T5600] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14148'.
[  538.886273][ T5600] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14148'.
[  538.893610][ T5600] netlink: 'syz.0.14148': attribute type 1 has an invalid length.
[  538.991059][ T5608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14152'.
[  539.000957][ T5608] bond0: entered promiscuous mode
[  539.003272][ T5608] bond0: left promiscuous mode
[  539.087282][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14155'.
[  539.112990][ T5614] 8021q: adding VLAN 0 to HW filter on device bond24
[  539.183106][ T5626] ipvlan0: entered promiscuous mode
[  539.186540][ T5626] ipvlan0: entered allmulticast mode
[  539.188830][ T5626] bond24: entered allmulticast mode
[  539.300945][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14162'.
[  539.860125][ T5692] syzkaller1: entered promiscuous mode
[  539.862040][ T5692] syzkaller1: entered allmulticast mode
[  539.993203][ T5703] bond0: (slave wireguard3): The slave device specified does not support setting the MAC address
[  540.000532][ T5703] bond0: (slave wireguard3): Error -95 calling set_mac_address
[  540.151935][ T5711] openvswitch: netlink: Flow key attr not present in new flow.
[  540.233268][ T5721] __nla_validate_parse: 5 callbacks suppressed
[  540.233279][ T5721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14198'.
[  540.331915][ T5733] sch_tbf: burst 0 is lower than device veth0_to_team mtu (9223) !
[  540.385513][ T5740] syzkaller1: entered promiscuous mode
[  540.388194][ T5740] syzkaller1: entered allmulticast mode
[  540.444738][ T5747] syzkaller1: left promiscuous mode
[  540.447844][ T5747] syzkaller1: left allmulticast mode
[  540.451537][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14208'.
[  540.570972][ T5758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14212'.
[  540.619247][ T5766] xt_TCPMSS: Only works on TCP SYN packets
[  543.413851][ T5916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14265'.
[  543.491015][ T5922] xt_CT: You must specify a L4 protocol and not use inversions on it
[  544.967553][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14314'.
[  545.011206][ T6030] lo speed is unknown, defaulting to 1000
[  545.126114][ T6030] lo speed is unknown, defaulting to 1000
[  545.225378][ T6030] lo speed is unknown, defaulting to 1000
[  545.464398][ T6065] netlink: 'syz.0.14333': attribute type 6 has an invalid length.
[  545.470344][ T6065] netlink: 'syz.0.14333': attribute type 7 has an invalid length.
[  545.473632][ T6065] netlink: 'syz.0.14333': attribute type 8 has an invalid length.
[  546.047880][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14347'.
[  546.052138][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14347'.
[  546.070495][ T6101] netlink: 'syz.2.14348': attribute type 2 has an invalid length.
[  546.073362][ T6101] netlink: 'syz.2.14348': attribute type 2 has an invalid length.
[  546.125022][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14351'.
[  546.130828][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14351'.
[  546.470809][ T6141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14366'.
[  546.583033][ T6157] netlink: 'syz.1.14372': attribute type 2 has an invalid length.
[  546.588764][ T6157] netlink: 'syz.1.14372': attribute type 1 has an invalid length.
[  546.592022][ T6157] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14372'.
[  546.766044][ T6176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14378'.
[  547.231047][ T6194] lo speed is unknown, defaulting to 1000
[  547.371964][ T6194] lo speed is unknown, defaulting to 1000
[  547.470844][ T6194] lo speed is unknown, defaulting to 1000
[  547.719941][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14389'.
[  547.759569][ T6210] xt_hashlimit: max too large, truncated to 1048576
[  547.893895][ T6208] gretap0: entered promiscuous mode
[  548.078693][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14396'.
[  548.083557][ T6222] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  548.100756][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14396'.
[  548.107347][ T6222] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  548.313948][ T6245] Cannot find set identified by id 0 to match
[  548.419410][ T6256] netlink: 'syz.0.14413': attribute type 83 has an invalid length.
[  548.704118][ T6288] : entered promiscuous mode
[  550.017152][ T6341] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  550.021824][ T6341] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  550.024448][ T6341] tipc: Resetting bearer <eth:syzkaller0>
[  550.029039][ T6341] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  550.633888][ T6381] syzkaller1: entered promiscuous mode
[  550.652370][ T6381] syzkaller1: entered allmulticast mode
[  552.127239][ T6452] gretap6: entered promiscuous mode
[  552.288925][ T6460] netlink: 'syz.0.14505': attribute type 1 has an invalid length.
[  552.300940][ T6460] bond8: entered promiscuous mode
[  552.302911][ T6460] 8021q: adding VLAN 0 to HW filter on device bond8
[  552.317419][ T6460] bond8: (slave veth33): making interface the new active one
[  552.320642][ T6460] veth33: entered promiscuous mode
[  552.323446][ T6460] bond8: (slave veth33): Enslaving as an active interface with an up link
[  552.432588][ T6468] block nbd0: Unsupported socket: should be TCP or UNIX.
[  552.521012][ T6474] __nla_validate_parse: 5 callbacks suppressed
[  552.521024][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14511'.
[  552.980453][ T6499] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  552.985148][ T6499] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  553.029272][ T6507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  553.034285][T27422] lo speed is unknown, defaulting to 1000
[  553.036159][T27422] syz2: Port: 1 Link ACTIVE
[  553.134125][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14529'.
[  553.168126][ T6516] tipc: Resetting bearer <eth:syzkaller0>
[  553.193833][ T6516] tipc: Resetting bearer <eth:syzkaller0>
[  553.392837][ T6535] lo speed is unknown, defaulting to 1000
[  553.469681][ T6541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14535'.
[  553.581206][ T6535] lo speed is unknown, defaulting to 1000
[  553.638822][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14541'.
[  553.720624][ T6535] lo speed is unknown, defaulting to 1000
[  553.809798][ T6563] bpq0: left promiscuous mode
[  553.815037][ T6563] 
[  553.816087][ T6563] ======================================================
[  553.818411][ T6563] WARNING: possible circular locking dependency detected
[  553.820661][ T6563] syzkaller #0 Not tainted
[  553.822460][ T6563] ------------------------------------------------------
[  553.824708][ T6563] syz.1.14546/6563 is trying to acquire lock:
[  553.827096][ T6563] ffffffff8fd48cf8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860
[  553.830926][ T6563] 
[  553.830926][ T6563] but task is already holding lock:
[  553.833654][ T6563] ffffffff8fd48c98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860
[  553.836947][ T6563] 
[  553.836947][ T6563] which lock already depends on the new lock.
[  553.836947][ T6563] 
[  553.840770][ T6563] 
[  553.840770][ T6563] the existing dependency chain (in reverse order) is:
[  553.843619][ T6563] 
[  553.843619][ T6563] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  553.846548][ T6563]        _raw_spin_lock_bh+0x36/0x50
[  553.848634][ T6563]        nr_rt_ioctl+0x40c/0xf90
[  553.850367][ T6563]        sock_do_ioctl+0x101/0x320
[  553.852010][ T6563]        sock_ioctl+0x5c6/0x7f0
[  553.853792][ T6563]        __se_sys_ioctl+0xfc/0x170
[  553.855496][ T6563]        do_syscall_64+0x14d/0xf80
[  553.857146][ T6563]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.859515][ T6563] 
[  553.859515][ T6563] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  553.862668][ T6563]        _raw_spin_lock_bh+0x36/0x50
[  553.864777][ T6563]        nr_rt_ioctl+0x215/0xf90
[  553.866759][ T6563]        sock_do_ioctl+0x101/0x320
[  553.868794][ T6563]        sock_ioctl+0x5c6/0x7f0
[  553.870515][ T6563]        __se_sys_ioctl+0xfc/0x170
[  553.872092][ T6563]        do_syscall_64+0x14d/0xf80
[  553.873682][ T6563]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.875923][ T6563] 
[  553.875923][ T6563] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  553.879012][ T6563]        __lock_acquire+0x15a5/0x2cf0
[  553.881138][ T6563]        lock_acquire+0xf0/0x2e0
[  553.883124][ T6563]        _raw_spin_lock_bh+0x36/0x50
[  553.885232][ T6563]        nr_rt_device_down+0xbe/0x860
[  553.887259][ T6563]        nr_device_event+0x137/0x150
[  553.889273][ T6563]        notifier_call_chain+0x1be/0x400
[  553.891603][ T6563]        __dev_notify_flags+0x16d/0x310
[  553.893886][ T6563]        netif_change_flags+0xe8/0x1a0
[  553.896188][ T6563]        dev_change_flags+0x130/0x260
[  553.898392][ T6563]        dev_ioctl+0x7b4/0x1150
[  553.900419][ T6563]        sock_do_ioctl+0x23e/0x320
[  553.902053][ T6563]        sock_ioctl+0x5c6/0x7f0
[  553.903644][ T6563]        __se_sys_ioctl+0xfc/0x170
[  553.905758][ T6563]        do_syscall_64+0x14d/0xf80
[  553.907828][ T6563]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.909982][ T6563] 
[  553.909982][ T6563] other info that might help us debug this:
[  553.909982][ T6563] 
[  553.913396][ T6563] Chain exists of:
[  553.913396][ T6563]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  553.913396][ T6563] 
[  553.917866][ T6563]  Possible unsafe locking scenario:
[  553.917866][ T6563] 
[  553.920274][ T6563]        CPU0                    CPU1
[  553.922451][ T6563]        ----                    ----
[  553.924675][ T6563]   lock(nr_neigh_list_lock);
[  553.926656][ T6563]                                lock(&nr_node->node_lock);
[  553.929610][ T6563]                                lock(nr_neigh_list_lock);
[  553.932586][ T6563]   lock(nr_node_list_lock);
[  553.934527][ T6563] 
[  553.934527][ T6563]  *** DEADLOCK ***
[  553.934527][ T6563] 
[  553.937787][ T6563] 2 locks held by syz.1.14546/6563:
[  553.939775][ T6563]  #0: ffffffff8fbcc908 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  553.942748][ T6563]  #1: ffffffff8fd48c98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860
[  553.946585][ T6563] 
[  553.946585][ T6563] stack backtrace:
[  553.948934][ T6563] CPU: 1 UID: 0 PID: 6563 Comm: syz.1.14546 Not tainted syzkaller #0 PREEMPT(full) 
[  553.948950][ T6563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  553.948958][ T6563] Call Trace:
[  553.948964][ T6563]  <TASK>
[  553.948972][ T6563]  dump_stack_lvl+0xe8/0x150
[  553.948991][ T6563]  print_circular_bug+0x2e1/0x300
[  553.949005][ T6563]  check_noncircular+0x12e/0x150
[  553.949018][ T6563]  __lock_acquire+0x15a5/0x2cf0
[  553.949030][ T6563]  ? __lock_acquire+0x6b5/0x2cf0
[  553.949041][ T6563]  lock_acquire+0xf0/0x2e0
[  553.949049][ T6563]  ? nr_rt_device_down+0xbe/0x860
[  553.949061][ T6563]  ? nr_rt_device_down+0xbe/0x860
[  553.949071][ T6563]  _raw_spin_lock_bh+0x36/0x50
[  553.949081][ T6563]  ? nr_rt_device_down+0xbe/0x860
[  553.949090][ T6563]  nr_rt_device_down+0xbe/0x860
[  553.949100][ T6563]  ? nr_device_event+0x12f/0x150
[  553.949110][ T6563]  nr_device_event+0x137/0x150
[  553.949119][ T6563]  notifier_call_chain+0x1be/0x400
[  553.949131][ T6563]  __dev_notify_flags+0x16d/0x310
[  553.949141][ T6563]  ? __pfx___dev_notify_flags+0x10/0x10
[  553.949150][ T6563]  ? __dev_change_flags+0x4c6/0x690
[  553.949194][ T6563]  ? __pfx___dev_change_flags+0x10/0x10
[  553.949211][ T6563]  ? full_name_hash+0x92/0xe0
[  553.949228][ T6563]  netif_change_flags+0xe8/0x1a0
[  553.949241][ T6563]  dev_change_flags+0x130/0x260
[  553.949253][ T6563]  dev_ioctl+0x7b4/0x1150
[  553.949262][ T6563]  sock_do_ioctl+0x23e/0x320
[  553.949269][ T6563]  ? __pfx_sock_do_ioctl+0x10/0x10
[  553.949276][ T6563]  ? do_futex+0x395/0x420
[  553.949289][ T6563]  sock_ioctl+0x5c6/0x7f0
[  553.949296][ T6563]  ? __pfx_sock_ioctl+0x10/0x10
[  553.949303][ T6563]  ? __fget_files+0x2a/0x420
[  553.949314][ T6563]  ? __fget_files+0x3a0/0x420
[  553.949322][ T6563]  ? __fget_files+0x2a/0x420
[  553.949332][ T6563]  ? bpf_lsm_file_ioctl+0x9/0x20
[  553.949342][ T6563]  ? __pfx_sock_ioctl+0x10/0x10
[  553.949348][ T6563]  __se_sys_ioctl+0xfc/0x170
[  553.949358][ T6563]  do_syscall_64+0x14d/0xf80
[  553.949368][ T6563]  ? trace_irq_disable+0x3b/0x150
[  553.949378][ T6563]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.949386][ T6563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.949394][ T6563] RIP: 0033:0x7fba4d19c799
[  553.949402][ T6563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  553.949409][ T6563] RSP: 002b:00007fba4e0a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  553.949418][ T6563] RAX: ffffffffffffffda RBX: 00007fba4d415fa0 RCX: 00007fba4d19c799
[  553.949423][ T6563] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006
[  553.949428][ T6563] RBP: 00007fba4d232bd9 R08: 0000000000000000 R09: 0000000000000000
[  553.949433][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  553.949437][ T6563] R13: 00007fba4d416038 R14: 00007fba4d415fa0 R15: 00007ffd9ed81888
[  553.949445][ T6563]  </TASK>
