last executing test programs:

3.712005159s ago: executing program 0 (id=24680):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x20040010)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x400000}, 0x8)
r1 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r2 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
socket(0x2, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r6, 0xfffffffe)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
r8 = accept(r6, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4800}, 0x11)
sendto$inet(r7, &(0x7f0000000180)="8b643e", 0xfffffffffffffdfd, 0x101, 0x0, 0x9c)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500004208000b4000000000340004803000018008000100636d7000240002801000038009000100d3060d2def000000080002400000000008000140000000160900010073797a30000000001400000011000100000000003a534f930000000a"], 0xd0}}, 0x0)

2.881014605s ago: executing program 0 (id=24686):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000}, 0x0)
unshare(0x400)
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000))
unshare(0xe060400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x7fe2, 0xffff}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, 0x0, 0xffffffff00000000}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x30000000)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030f00000000000000000700000030000280080002000000000004000400f6ff04001c000380080001000000000000000100000000000800010000000000"], 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0)
r5 = socket$inet(0x2, 0x800, 0x3)
ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000080))
r6 = socket(0x10, 0x80002, 0x3)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002000000000", @ANYRES32, @ANYRESOCT=r6, @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

1.892819911s ago: executing program 0 (id=24695):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
sendto$packet(r0, &(0x7f0000000680), 0x0, 0x40040, 0x0, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
close(0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
unshare(0x8040480)
listen(r3, 0x802)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x800)
recvmmsg(r4, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000010}, 0x4040004)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x4000010)

1.171685461s ago: executing program 0 (id=24697):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000400)='disconnect aa:aa:aa:aa:aa:10 1', 0x10) (async)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="a40000000001050500000000000000000a0000003c0002802c00018014000300ff0100000000000000000000fd26000114000400ff0200000000000000000000000000010c00028005000100000000004c00018014000180080001000000000008000200ac1414bb2c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000340000200000800074000000001"], 0xa4}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x48, 0x0, &(0x7f0000000280)) (async)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000000000)=0x6, 0x4)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000001ac0)={{<r6=>r4, &(0x7f00000001c0)='NLBL_MGMT\x00', 0x800041, &(0x7f0000000300)={@_ha_fsid={[0x4, 0xb]}, {0x3, 0x3, 0x2, 0x5}}, 0x4, &(0x7f0000000380), &(0x7f0000000580)=0x4}, 0x5, &(0x7f0000001a00)=[{0x2, 0x1, &(0x7f00000005c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', &(0x7f0000000600)="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", 0x1000, 0x20}, {0x1, 0x2, &(0x7f0000001600)='disconnect aa:aa:aa:aa:aa:10 1', &(0x7f0000001640)="1f9be143b42672bf5accba812cb123e841b8b538d22fbb46ae800e7304bdba8049678dd9daea506715003171ad8d11c2c7e35043bdb37a247d1c1b76f8cf4d9375d48eb04d1ee9b4cf09a14a83107aad9bc55dd1f637b250ee22ee5dad4c8702a09b466805c409ddf6d130bbe382c023b3a8703fa78373b9389b0efb802c41367c5645f3cdda13353c1c2b4ec37b79e40b758052a7a6a72f58fab342f313d6c9605eed7da57d58df69afb0ca717952e33225cdd074348e30cba873d36b30eef3a8f2fc62f3676e4ef063534b441325e2703f36496e7eede8cf4152d50cce", 0xde, 0x28}, {0x2, 0x90, &(0x7f0000001740)='disconnect aa:aa:aa:aa:aa:10 1', &(0x7f0000001780)="0224f61ee44cd5b888259eabd4f2c4c9287c613ca18d207d85c17109fc1ccd5c74cb106f59b7d609452a26a4dc", 0x2d, 0x12}, {0x2, 0x1ff, &(0x7f00000017c0)='\xff\xff', &(0x7f0000001800)="dc64843f4a4b31d021c6045fe9f4471a7bbdb7538cc34a224964d7b866c13e8fc57923ffbb2272e76f105053a68e3b9c1b3670fbf892bd1604103d6c5b91fa4cbd874250e7aaf4983f89f039904b4982e00990a039ec5f2af0b9a0f4c2fdb9b78b0077187082d6d80a7a35838e9d9600b05a243509076c7ea4e2ed98a308e32e8471b96fb0a59d862b1c902104f3d9ad3b6ed7d086662683112c4da6b5f7f41e4d33154d391d90256d27273c70471479d5de7b1190aa28a780066b7531508e82bdc06fc46602c943592c28490ee5b1c86c1256148f4fab1902a18124183b1f51fac43f", 0xe3, 0x2}, {0x3, 0x3, &(0x7f0000001900)='\xff\xff', &(0x7f0000001940)="6942fb8e254ea242f11da1bc062b29d8cc1a78a1f6c0aef9ae7d52cd87a464cc2a24d1e0ffe6a0412ca86d8c3b18840d0deffb4631a68f6d9e946e4a0c28a40e2e2630a2ef5ab7e07f6926ec824c712d6a404a27c6d820bc9f4eadc6e2055f6c5ea3c3e6d3fec4c74098676c95d99a41836f6fa59d55655293f4f16adcee9a06cd2f225f0c1bd0caf7a25b0a8d50f665c5eaef3fc7969509e3b067a13ea9557dac25c9c86298e666f8c1b4c171aaf3fcd529a2fdf537c326079f9bc57d8b0f", 0xbf}]}) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x54, r7, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1e}, @void, @val={0xc, 0x99, {0xfffffff5, 0x72}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_team\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x24000080) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r8)
sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fedbdf250400000008000c17010000000800020007"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)
sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x20000040) (async)
read$nci(r5, &(0x7f00000000c0)=""/171, 0xab) (async)
sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)

692.573086ms ago: executing program 2 (id=24705):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="02000000030000400100"/28], 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000580)=""/149, 0x95, <r2=>0x0, &(0x7f0000000640)=""/160, 0xa0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000}, 0x8, 0x10, &(0x7f0000000000), 0x10, r2}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r4, &(0x7f00000042c0)=[{{&(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000a80)=""/11, 0xb}, {&(0x7f00000025c0)=""/124, 0x7c}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/189, 0xbd}, {&(0x7f0000000c40)=""/151, 0x97}], 0x6}, 0xffffffff}, {{&(0x7f0000000d80)=@sco={0x1f, @none}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e00)=""/2, 0x2}], 0x1, &(0x7f0000000e80)=""/20, 0x14}, 0x1}, {{&(0x7f0000000ec0)=@ax25={{0x3, @netrom}, [@default, @rose, @bcast, @remote, @netrom, @rose, @bcast, @null]}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f40)=""/222, 0xde}, {&(0x7f0000001040)=""/75, 0x4b}, {&(0x7f00000010c0)=""/80, 0x50}, {&(0x7f0000001140)=""/27, 0x1b}], 0x4, &(0x7f00000011c0)=""/115, 0x73}, 0x7}, {{&(0x7f0000001240)=@ethernet={0x0, @local}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/87, 0x57}, {&(0x7f0000002340)=""/110, 0x6e}], 0x3, &(0x7f0000002400)=""/89, 0x59}, 0x2}, {{&(0x7f0000002480)=@ax25={{0x3, @default}, [@null, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/36, 0x24}, {&(0x7f0000002540)=""/81, 0x51}, {&(0x7f0000002680)=""/215, 0xd7}, {&(0x7f0000002780)=""/27, 0x1b}, {&(0x7f00000027c0)=""/11, 0xb}, {&(0x7f0000002800)=""/57, 0x39}, {&(0x7f0000002840)=""/251, 0xfb}], 0x7, &(0x7f00000029c0)=""/4, 0x4}, 0x10}, {{&(0x7f0000002a00)=@nl, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002a80)=""/217, 0xd9}, {&(0x7f0000002b80)=""/108, 0x6c}, {&(0x7f0000002c00)=""/169, 0xa9}, {&(0x7f0000002cc0)=""/113, 0x71}, {&(0x7f0000002d40)=""/4096, 0x1000}], 0x5, &(0x7f0000003dc0)=""/223, 0xdf}, 0x4}, {{&(0x7f0000003ec0)=@nl=@proc, 0x80, &(0x7f0000004280)=[{&(0x7f0000004000)=""/198, 0xc6}, {&(0x7f0000004100)=""/38, 0x26}, {&(0x7f0000004140)=""/66, 0x42}, {&(0x7f00000041c0)=""/154, 0x9a}], 0x4}, 0x3}], 0x7, 0x40010000, &(0x7f0000004480)={0x0, 0x3938700})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0xffffffffffffff84}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x8a44a756b367af1e}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800)
recvmsg$qrtr(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/34, 0x22}], 0x1, 0x0, 0x0, 0x40000040}, 0x38, 0x0)

632.109096ms ago: executing program 2 (id=24706):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x0, 0x4001000, 0x4a}, 0x2c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0)

570.707483ms ago: executing program 2 (id=24707):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x8}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000800)="e3bc03a46f04", 0x6}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="378d39000000dc0337cae8b37b6a"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @private=0xa010101, 0x4e24, 0x3, 'wlc\x00', 0x0, 0x760f537f, 0x73}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x47}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000440)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x20000000)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)}], 0x1, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x23)
sendmsg$kcm(r2, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
ioctl$FICLONE(r5, 0x40049409, r0)

492.182149ms ago: executing program 2 (id=24708):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c00400000000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

485.07948ms ago: executing program 2 (id=24709):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "e55971277418921583c74b99353b9d55d90908b6ea7cafd3188b931053629563", "d2e91e1188a3a6208b5e013818b75a932a2934e7cb5f9bcc53167b323a69eacb", "94d16db71df3a371c4f2294565f888dbc7a32ab04fa38b3c82a67f05ef87e88f", "3e19aa35f2f7b5d3a59b86ed9f130f0574c90f48b2a5c02c6465aebcda9a59f9", "55841bf439f886e44c5aa56197f103b446e00a88a651523af566b9830c4134d9", "6b29a0ff0d9f919c93b5a267", 0x10, 0x44, 0x7ffbffff, 0x5, 0x8}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00"/19, @ANYRES32=0x0, @ANYBLOB="80000200e180001a08001b"], 0x28}}, 0x800)
sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0xfffffcb2, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x80c0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0xfff2, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe85, 0x1, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="b800000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800032000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000008000000000010400000000877208db56382218281cb20000060000000000f6ff0900000000000000080000000000000000000000000000000100000000000000002000811000000000000009000000000000008307000000000000007bbde6bd150102005e67db7b00008b000000000000ff0300000000000001010003000000000000000000cf2eb990815883f1f125679842af42c17b628809dba9688033cea41592c3fcccf5ae73350b4eac58f058cf7f8ffefe8c9866d0be74381f710328d86add2a0cfb0231756967b751633bd74c5f3564490138a90dfae545fe824bb60f52f205b3"], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4080)
write$tun(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
recvmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x8, 0x0, 0x80000}}, @TCA_CT_MARK={0x8, 0x10, 0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x30004850)

262.958726ms ago: executing program 0 (id=24711):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd2c}, 0x14}}, 0x4040004)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd2c}, 0x14}}, 0x4040004) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) (async)

262.494567ms ago: executing program 1 (id=24712):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="02000000030000400100"/28], 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000580)=""/149, 0x95, <r2=>0x0, &(0x7f0000000640)=""/160, 0xa0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000}, 0x8, 0x10, &(0x7f0000000000), 0x10, r2}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r4, &(0x7f00000042c0)=[{{&(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000a80)=""/11, 0xb}, {&(0x7f00000025c0)=""/124, 0x7c}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/189, 0xbd}, {&(0x7f0000000c40)=""/151, 0x97}], 0x6}, 0xffffffff}, {{&(0x7f0000000d80)=@sco={0x1f, @none}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e00)=""/2, 0x2}], 0x1, &(0x7f0000000e80)=""/20, 0x14}, 0x1}, {{&(0x7f0000000ec0)=@ax25={{0x3, @netrom}, [@default, @rose, @bcast, @remote, @netrom, @rose, @bcast, @null]}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f40)=""/222, 0xde}, {&(0x7f0000001040)=""/75, 0x4b}, {&(0x7f00000010c0)=""/80, 0x50}, {&(0x7f0000001140)=""/27, 0x1b}], 0x4, &(0x7f00000011c0)=""/115, 0x73}, 0x7}, {{&(0x7f0000001240)=@ethernet={0x0, @local}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/87, 0x57}, {&(0x7f0000002340)=""/110, 0x6e}], 0x3, &(0x7f0000002400)=""/89, 0x59}, 0x2}, {{&(0x7f0000002480)=@ax25={{0x3, @default}, [@null, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002500)=""/36, 0x24}, {&(0x7f0000002540)=""/81, 0x51}, {&(0x7f0000002680)=""/215, 0xd7}, {&(0x7f0000002780)=""/27, 0x1b}, {&(0x7f00000027c0)=""/11, 0xb}, {&(0x7f0000002800)=""/57, 0x39}, {&(0x7f0000002840)=""/251, 0xfb}], 0x7, &(0x7f00000029c0)=""/4, 0x4}, 0x10}, {{&(0x7f0000002a00)=@nl, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002a80)=""/217, 0xd9}, {&(0x7f0000002b80)=""/108, 0x6c}, {&(0x7f0000002c00)=""/169, 0xa9}, {&(0x7f0000002cc0)=""/113, 0x71}, {&(0x7f0000002d40)=""/4096, 0x1000}], 0x5, &(0x7f0000003dc0)=""/223, 0xdf}, 0x4}, {{&(0x7f0000003ec0)=@nl=@proc, 0x80, &(0x7f0000004280)=[{&(0x7f0000004000)=""/198, 0xc6}, {&(0x7f0000004100)=""/38, 0x26}, {&(0x7f0000004140)=""/66, 0x42}, {&(0x7f00000041c0)=""/154, 0x9a}], 0x4}, 0x3}], 0x7, 0x40010000, &(0x7f0000004480)={0x0, 0x3938700})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0xffffffffffffff84}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x8a44a756b367af1e}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800)
recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/34, 0x22}], 0x1, 0x0, 0x0, 0x40000040}, 0x38, 0x0)

207.774353ms ago: executing program 0 (id=24713):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000050021a8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
write(r2, &(0x7f0000000000)="1c0000001a005f1114f9f4070009010000000000fe00000100000000", 0x1c)
bind$bt_hci(r1, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r1, 0x400448dc, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="ffffff8d8d00"})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r7, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffc}]}]}, 0x34}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

207.132737ms ago: executing program 1 (id=24714):
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000008000000fa0400004501000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffff"], 0x50)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x7, @private2}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x3ff, @mcast2}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x88)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x131)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4)
sendto$inet(r7, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r7, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
sendto$packet(r4, &(0x7f0000000000)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r5, 0x1, 0xeb, 0x6, @broadcast}, 0x14)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x2, 0x6}, &(0x7f0000000340)=0x8)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x400, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0xb9, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0)
socket$rds(0x15, 0x5, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xe25, 0x0, 0x3, "", [@typed={0x8, 0x77, 0x0, 0x0, @uid}, @nested={0xc, 0xea, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}]}, 0x24}], 0x1}, 0x0)

202.480876ms ago: executing program 2 (id=24715):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005a00010000000000fbdbdf250a000000085974f56cf139216c5c8ccd1300010044d1ee4d197a46ea4bc10780854dc9d3ad56e1b1d6ba8814e91df3ca5249b899ae27eafd729e4732f8f8181da9537c1e0750847c470cdfb9afde820021fa1dc9b76f8c14cdb6e175f9cd9bad580575458dd2baec41cb0bc0c53ace87b8912e8300e3f2398781cbdd42c0752b4fa82bfacc54f7fced1d59cfcecb9b7398156eb37546", @ANYRES32, @ANYBLOB], 0x1c}}, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4], 0x7c}}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000340))
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x4000000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000003a0096eef56015fc0701002000000000e6ffff0a00000008"], 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x10)

80.614561ms ago: executing program 1 (id=24716):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010028bd7000fcdbdf25022001c8", @ANYRES32, @ANYBLOB="06000900059d119140bf0e3f000000"], 0x20}}, 0x40000c0)

80.058429ms ago: executing program 1 (id=24717):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000050021a8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x1000000}, 0x0)

1.649392ms ago: executing program 1 (id=24718):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000000))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0xfffe)
socket$netlink(0x10, 0x3, 0x10)
ioctl$VHOST_GET_VRING_BASE(r1, 0x4008af60, &(0x7f0000000040))

0s ago: executing program 1 (id=24719):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r1, 0x100, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r2, &(0x7f0000007a80)={0x0, 0x0, 0x0}, 0x10000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001800800014000000003", @ANYRESOCT=r3], 0x140}}, 0x0)

kernel console output (not intermixed with test programs):

ftover after parsing attributes in process `syz.1.19438'.
[  845.978957][T18649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19438'.
[  845.985392][T18649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19438'.
[  846.843428][T18701] netlink: 'syz.1.19459': attribute type 7 has an invalid length.
[  847.137110][T18720] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  847.344718][T18740] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  847.347383][T18740] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  850.380390][T18743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  850.385964][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19484'.
[  850.392088][T18763] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19484'.
[  850.538014][T18774] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19488'.
[  850.702496][T18780] netlink: 80 bytes leftover after parsing attributes in process `syz.0.19493'.
[  850.733210][T18796] lo speed is unknown, defaulting to 1000
[  850.736117][T18796] lo speed is unknown, defaulting to 1000
[  851.492841][T18824] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.19510'.
[  851.496337][T18824] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  851.851234][T18842] ip6gretap2: entered promiscuous mode
[  851.853277][T18842] ip6gretap2: entered allmulticast mode
[  852.067668][T18858] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  852.078447][T18858] syzkaller0: entered promiscuous mode
[  852.085368][T18858] syzkaller0: entered allmulticast mode
[  852.315237][T18866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19529'.
[  852.365870][T18870] netlink: 'syz.1.19531': attribute type 11 has an invalid length.
[  852.429496][T18872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19532'.
[  853.568056][T18918] netlink: 'syz.1.19555': attribute type 30 has an invalid length.
[  853.592693][T18874] Set syz1 is full, maxelem 65536 reached
[  853.833570][T18947] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.19567'.
[  855.509263][T19039] openvswitch: netlink: Message has 496 unknown bytes.
[  855.512302][T19039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  855.567162][T12522] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  855.573592][T12522] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  855.580861][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19598'.
[  855.589384][T12522] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  855.595943][T12522] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  856.706040][T19061] tipc: Failed to remove unknown binding: 66,1,1/271154973:276461445/276461446
[  856.713936][T19061] tipc: Failed to remove unknown binding: 66,1,1/271154973:276461445/276461446
[  856.979291][T19091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19621'.
[  856.982743][T19091] netlink: 580 bytes leftover after parsing attributes in process `syz.2.19621'.
[  857.031763][T19095] x_tables: duplicate entry at hook 2
[  857.283873][T19113] netlink: zone id is out of range
[  857.287302][T19113] netlink: get zone limit has 4 unknown bytes
[  857.380022][T19119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  857.392281][T19119] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  857.579660][T19131] lo speed is unknown, defaulting to 1000
[  857.595346][T19131] lo speed is unknown, defaulting to 1000
[  857.608392][T19138] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  857.734178][T19143] netlink: 'syz.2.19643': attribute type 8 has an invalid length.
[  858.163491][T19179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19655'.
[  858.200885][T19181] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.19656'.
[  858.284579][T19187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19658'.
[  858.552150][T19206] netlink: 'syz.2.19668': attribute type 1 has an invalid length.
[  859.300600][T19216] openvswitch: : Dropping previously announced user features
[  859.685938][T19257] netlink: 'syz.1.19690': attribute type 1 has an invalid length.
[  859.688761][T19257] netlink: 92 bytes leftover after parsing attributes in process `syz.1.19690'.
[  859.692970][T19257] netlink: 'syz.1.19690': attribute type 1 has an invalid length.
[  859.695351][T19257] netlink: 634 bytes leftover after parsing attributes in process `syz.1.19690'.
[  859.741889][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19691'.
[  859.925217][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19697'.
[  860.134601][T19286] netlink: 'syz.0.19704': attribute type 10 has an invalid length.
[  860.418335][T19298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  860.436257][T19298] virt_wifi0: entered promiscuous mode
[  860.441286][T19298] 8021q: adding VLAN 0 to HW filter on device bond1
[  860.467869][T19298] 8021q: adding VLAN 0 to HW filter on device bond2
[  860.477810][T19298] 8021q: adding VLAN 0 to HW filter on device bond3
[  860.482864][T19298] 8021q: adding VLAN 0 to HW filter on device bond4
[  860.608282][T19298] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  860.640903][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  860.644401][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  860.649895][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  860.656970][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  860.672092][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  860.676621][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  860.685127][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  860.690268][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  861.188020][T19352] __nla_validate_parse: 9 callbacks suppressed
[  861.188101][T19352] netlink: 240 bytes leftover after parsing attributes in process `syz.1.19722'.
[  861.398092][T19376] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  861.565858][T19391] netlink: 'syz.2.19748': attribute type 10 has an invalid length.
[  861.632964][T19399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19750'.
[  861.763222][T19411] tunl0: Caught tx_queue_len zero misconfig
[  861.923631][T19426] veth0: entered promiscuous mode
[  861.925720][T19425] veth0: left promiscuous mode
[  862.054085][T19436] syzkaller0: entered promiscuous mode
[  862.061156][T19436] syzkaller0: entered allmulticast mode
[  862.074845][T19436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  862.083441][T19434] tipc: Resetting bearer <eth:syzkaller0>
[  862.148340][T19434] tipc: Disabling bearer <eth:syzkaller0>
[  862.553096][T19490] block nbd1: server does not support multiple connections per device.
[  862.556981][T19490] block nbd1: shutting down sockets
[  863.004700][T19527] lo speed is unknown, defaulting to 1000
[  863.008212][T19527] lo speed is unknown, defaulting to 1000
[  863.171941][T19537] netlink: 'syz.2.19811': attribute type 6 has an invalid length.
[  863.552467][T19557] netlink: 'syz.1.19820': attribute type 2 has an invalid length.
[  864.156056][T19583] netlink: 'syz.1.19832': attribute type 8 has an invalid length.
[  864.329614][T19588] lo speed is unknown, defaulting to 1000
[  864.353751][T19588] lo speed is unknown, defaulting to 1000
[  864.957737][T19603] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  865.075055][T19607] ip6tnl0: Caught tx_queue_len zero misconfig
[  865.077407][T19607] netlink: 844 bytes leftover after parsing attributes in process `syz.0.19840'.
[  865.123856][T19611] "syz.1.19843" (19611) uses obsolete ecb(arc4) skcipher
[  865.429172][T19623] ip6t_srh: unknown srh match flags  4000
[  865.441605][T19628] netlink: 'syz.0.19850': attribute type 7 has an invalid length.
[  865.683324][T19645] tipc: Resetting bearer <eth:xfrm0>
[  865.737304][T19645] tipc: Resetting bearer <eth:syzkaller0>
[  865.776947][ T7273] lo speed is unknown, defaulting to 1000
[  865.779589][ T7273] sqz0: Port: 1 Link DOWN
[  865.782594][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  865.790602][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  865.801816][ T7273] lo speed is unknown, defaulting to 1000
[  865.804449][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  865.809198][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  865.813415][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  865.816841][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  865.819965][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  865.823832][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  865.947444][T19660] bond12: left allmulticast mode
[  865.956456][T19660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19864'.
[  866.113180][T19674] netlink: 'syz.0.19871': attribute type 30 has an invalid length.
[  866.431011][T19712] netlink: 228 bytes leftover after parsing attributes in process `syz.2.19886'.
[  866.463167][T19714] netlink: 51 bytes leftover after parsing attributes in process `syz.0.19883'.
[  866.493065][T19718] veth1_to_hsr: entered allmulticast mode
[  866.501945][T19718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19887'.
[  866.692114][T19738] netlink: 'syz.2.19899': attribute type 1 has an invalid length.
[  866.695233][T19738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19899'.
[  866.708734][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19898'.
[  866.746970][T19740] bond34: entered promiscuous mode
[  866.749188][T19740] 8021q: adding VLAN 0 to HW filter on device bond34
[  866.770485][T19740] 8021q: adding VLAN 0 to HW filter on device bond34
[  866.776468][T19740] bond34: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  866.780731][T19740] bond34: (slave ip6gre3): Error -95 calling set_mac_address
[  867.101216][T19765] bridge0: Device is already in use.
[  867.265335][T19774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19913'.
[  867.598893][T19745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  868.020246][T19792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19921'.
[  868.023947][T19792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19921'.
[  868.221084][T19809] netlink: 292 bytes leftover after parsing attributes in process `syz.1.19927'.
[  868.881094][T19846] IPVS: Error connecting to the multicast addr
[  869.345196][T19879] bond35: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  869.356005][T19879] bond35 (unregistering): Released all slaves
[  869.447614][T19883] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  869.839429][T19902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19968'.
[  869.906817][T19904] xt_hashlimit: size too large, truncated to 1048576
[  870.172398][T19922] "syz.1.19977" (19922) uses obsolete ecb(arc4) skcipher
[  870.246065][T19930] tipc: Enabling of bearer <eth:gre0> rejected, max 3 bearers permitted
[  870.402986][   T12] tipc: Subscription rejected, illegal request
[  871.117078][T19938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  871.370394][T19968] IPVS: set_ctl: invalid protocol: 136 172.30.0.3:20005
[  871.596221][   T33] audit: type=1804 audit(1778410078.284:30): pid=19988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.20005" name="/newroot/6435/memory.events" dev="tmpfs" ino=32464 res=1 errno=0
[  871.605938][   T33] audit: type=1800 audit(1778410078.294:31): pid=19988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20005" name="memory.events" dev="tmpfs" ino=32464 res=0 errno=0
[  871.624538][   T33] audit: type=1804 audit(1778410078.294:32): pid=19988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.20005" name="/newroot/6435/memory.events" dev="tmpfs" ino=32464 res=1 errno=0
[  872.530594][T19993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  872.896979][T20027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  873.707573][T20039] sctp: [Deprecated]: syz.2.20023 (pid 20039) Use of struct sctp_assoc_value in delayed_ack socket option.
[  873.707573][T20039] Use struct sctp_sack_info instead
[  873.717417][T20039] sctp: [Deprecated]: syz.2.20023 (pid 20039) Use of struct sctp_assoc_value in delayed_ack socket option.
[  873.717417][T20039] Use struct sctp_sack_info instead
[  873.735364][T20039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  873.759922][T20039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  873.999080][T20058] tipc: Enabling of bearer <eth:batadv0> rejected, max 3 bearers permitted
[  874.085971][T20055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20031'.
[  874.718825][T20112] netlink: 'syz.2.20054': attribute type 62 has an invalid length.
[  874.833867][T20116] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.20056'.
[  877.065924][T20066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  877.069572][T20118] netlink: 'syz.2.20057': attribute type 2 has an invalid length.
[  878.338607][T20162] xt_CT: You must specify a L4 protocol and not use inversions on it
[  878.351270][T20162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20077'.
[  879.646112][T20221] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  880.252882][T20246] netlink: 'syz.2.20115': attribute type 11 has an invalid length.
[  880.256248][T20246] netlink: 'syz.2.20115': attribute type 23 has an invalid length.
[  880.266283][T20246] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20115'.
[  880.605167][T20284] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20131'.
[  880.692580][T20290] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  880.826840][T20305] netlink: 'syz.1.20142': attribute type 3 has an invalid length.
[  880.878738][T20309] pim6reg1: entered promiscuous mode
[  880.881167][T20309] pim6reg1: entered allmulticast mode
[  881.035814][T20326] xt_TPROXY: Can be used only with -p tcp or -p udp
[  883.078730][T20391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20168'.
[  883.114086][T20391] xt_policy: neither incoming nor outgoing policy selected
[  883.132463][T20391] netlink: 'syz.0.20168': attribute type 33 has an invalid length.
[  883.135057][T20391] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20168'.
[  884.736003][T20391] `: renamed from team0 (while UP)
[  885.132969][T20431] syzkaller1: entered promiscuous mode
[  885.134893][T20431] syzkaller1: entered allmulticast mode
[  885.233773][T20435] syzkaller0: entered promiscuous mode
[  885.236141][T20435] syzkaller0: entered allmulticast mode
[  885.898400][T20444] netlink: 76 bytes leftover after parsing attributes in process `syz.1.20188'.
[  888.279053][T20437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  888.827442][T20472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20200'.
[  888.948919][T20475] lo speed is unknown, defaulting to 1000
[  888.955615][T20475] lo speed is unknown, defaulting to 1000
[  889.372535][T20502] netlink: 'syz.0.20214': attribute type 6 has an invalid length.
[  889.383651][T20503] sctp: [Deprecated]: syz.2.20213 (pid 20503) Use of struct sctp_assoc_value in delayed_ack socket option.
[  889.383651][T20503] Use struct sctp_sack_info instead
[  889.397474][T20499] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[  889.402402][T20499] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[  889.558716][T20511] netlink: 204 bytes leftover after parsing attributes in process `syz.0.20218'.
[  889.563440][T20511] netlink: 84 bytes leftover after parsing attributes in process `syz.0.20218'.
[  890.029723][T20545] netlink: 'syz.2.20228': attribute type 10 has an invalid length.
[  890.194685][T20561] hmac(sha224: entered promiscuous mode
[  891.137544][T20576] netlink: 300 bytes leftover after parsing attributes in process `syz.0.20241'.
[  891.697390][T20605] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  891.699642][T20605] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  891.708428][T20605] tipc: Resetting bearer <eth:syzkaller0>
[  892.027691][T20638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20269'.
[  892.034162][T20639] sctp: [Deprecated]: syz.0.20271 (pid 20639) Use of int in maxseg socket option.
[  892.034162][T20639] Use struct sctp_assoc_value instead
[  892.048148][T20639] netlink: 'syz.0.20271': attribute type 2 has an invalid length.
[  892.217248][T20653] netlink: 140 bytes leftover after parsing attributes in process `syz.0.20277'.
[  892.221823][T20653] netlink: 56 bytes leftover after parsing attributes in process `syz.0.20277'.
[  892.245945][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20279'.
[  892.345146][T20666] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  892.348172][T20666] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  892.362286][T20666] sch_tbf: burst 185 is lower than device syzkaller0 mtu (313) !
[  892.973213][T20706] sctp: [Deprecated]: syz.2.20304 (pid 20706) Use of struct sctp_assoc_value in delayed_ack socket option.
[  892.973213][T20706] Use struct sctp_sack_info instead
[  893.367997][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20312'.
[  893.658193][T20745] netlink: 'syz.1.20323': attribute type 1 has an invalid length.
[  893.664807][T20745] netlink: 'syz.1.20323': attribute type 2 has an invalid length.
[  894.283435][T20781] lo speed is unknown, defaulting to 1000
[  894.289829][T20781] lo speed is unknown, defaulting to 1000
[  894.499696][T20805] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.20340'.
[  894.701350][T20818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20344'.
[  894.876737][T20835] xt_l2tp: missing protocol rule (udp|l2tpip)
[  895.100121][T20845] netlink: 76 bytes leftover after parsing attributes in process `syz.0.20355'.
[  895.156788][T20848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20357'.
[  895.254666][T20853] netlink: 'syz.1.20359': attribute type 1 has an invalid length.
[  895.311813][T20853] 8021q: adding VLAN 0 to HW filter on device bond36
[  895.324089][T20853] bond35: (slave bond36): making interface the new active one
[  895.327498][T20853] bond35: (slave bond36): Enslaving as an active interface with an up link
[  895.376915][T20864] netlink: 'syz.1.20364': attribute type 1 has an invalid length.
[  897.136327][T20960] veth1_to_hsr: left allmulticast mode
[  897.139341][T20960] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[  897.143013][T20960] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[  897.165506][T20962] __nla_validate_parse: 3 callbacks suppressed
[  897.165526][T20962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20406'.
[  897.229783][T20966] netlink: 'syz.1.20408': attribute type 1 has an invalid length.
[  897.238951][T20966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20408'.
[  897.672633][T20995] netlink: 'syz.0.20418': attribute type 1 has an invalid length.
[  897.736706][T21001] Set syz1 is full, maxelem 65536 reached
[  898.455963][T21038] lo speed is unknown, defaulting to 1000
[  898.459468][T21038] lo speed is unknown, defaulting to 1000
[  899.129374][T21088] tipc: Resetting bearer <eth:xfrm0>
[  899.140411][T21088] tipc: Resetting bearer <eth:syzkaller0>
[  899.257881][T21095] netlink: 'syz.1.20461': attribute type 4 has an invalid length.
[  899.566846][T21120] IPv6: NLM_F_CREATE should be specified when creating new route
[  899.618434][T21126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20476'.
[  899.705094][T21130] lo speed is unknown, defaulting to 1000
[  899.709602][T21130] lo speed is unknown, defaulting to 1000
[  899.946937][T21149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  900.000971][T21149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20485'.
[  900.075368][T21158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20489'.
[  900.102837][T21158] bond44: entered promiscuous mode
[  900.105906][T21158] 8021q: adding VLAN 0 to HW filter on device bond44
[  900.114725][T21158] bond44 (unregistering): Released all slaves
[  900.254811][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20491'.
[  900.258578][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20491'.
[  900.309894][T21165] netlink: 'syz.0.20492': attribute type 11 has an invalid length.
[  900.721570][T21183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20500'.
[  901.188669][T21226] syzkaller1: entered promiscuous mode
[  901.192410][T21226] syzkaller1: entered allmulticast mode
[  901.369459][T21239] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[  901.381355][T21239] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[  902.243878][T21290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20545'.
[  902.250637][T21290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20545'.
[  902.274104][T21292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20546'.
[  902.301958][T21294] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  902.304963][T21294] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  902.377568][T21300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20550'.
[  902.550044][T21315] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20557'.
[  903.371953][T21357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20577'.
[  903.375016][T21357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20577'.
[  903.378025][T21357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20577'.
[  903.413796][T21359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  903.530262][T21368] netlink: 116 bytes leftover after parsing attributes in process `syz.0.20581'.
[  903.575012][T21371] IPVS: Unknown mcast interface: vcan0
[  903.631716][T21376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20584'.
[  904.080396][T21412] geneve8: entered promiscuous mode
[  904.084093][ T5653] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  904.088154][ T5653] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  904.094392][ T5653] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  904.098901][ T5653] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  904.186210][T21420] : Caught tx_queue_len zero misconfig
[  904.745273][T21463] ip6gre4: entered promiscuous mode
[  904.747493][T21463] ip6gre4: entered allmulticast mode
[  904.817810][T21465] netlink: 'syz.0.20626': attribute type 14 has an invalid length.
[  904.828198][T21465] bond0: option xmit_hash_policy: invalid value (191)
[  905.290402][T21505] ip6tnl11: entered allmulticast mode
[  905.973822][T21550] bridge0: port 1(erspan0) entered blocking state
[  906.016572][T21550] bridge0: port 1(erspan0) entered disabled state
[  906.019404][T21550] erspan0: entered allmulticast mode
[  906.041993][T21550] erspan0: left allmulticast mode
[  906.658854][T21603] syzkaller1: entered promiscuous mode
[  906.661569][T21603] syzkaller1: entered allmulticast mode
[  906.928228][T21627] netlink: 'syz.1.20701': attribute type 9 has an invalid length.
[  906.934532][T21627] netlink: 'syz.1.20701': attribute type 6 has an invalid length.
[  906.939932][T21627] netlink: 'syz.1.20701': attribute type 7 has an invalid length.
[  906.943068][T21627] netlink: 'syz.1.20701': attribute type 8 has an invalid length.
[  907.007798][T21633] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  907.510985][T21681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  908.172942][T21686] pim6reg1: entered promiscuous mode
[  908.175613][T21686] pim6reg1: entered allmulticast mode
[  908.524608][T21720] syzkaller0: entered promiscuous mode
[  908.526792][T21720] syzkaller0: entered allmulticast mode
[  908.684916][T21725] __nla_validate_parse: 12 callbacks suppressed
[  908.684934][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20747'.
[  908.694903][T21725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20747'.
[  909.405757][T21743] netlink: 64 bytes leftover after parsing attributes in process `syz.1.20753'.
[  909.420441][T21743] syzkaller1: entered promiscuous mode
[  909.422744][T21743] syzkaller1: entered allmulticast mode
[  909.523400][T21745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20754'.
[  909.526693][T21745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20754'.
[  909.562439][T21747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20755'.
[  909.854141][T21759] tipc: Resetting bearer <eth:syzkaller0>
[  909.958407][T21772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20761'.
[  909.964453][T21772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20761'.
[  909.968723][T21772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20761'.
[  911.768230][T21731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  912.218145][T21812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  912.242771][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20778'.
[  912.871925][T21871] netlink: 'syz.0.20803': attribute type 1 has an invalid length.
[  912.901043][T21873] nicvf0: tun_chr_ioctl cmd 1074812117
[  913.704691][T21947] netlink: 'syz.1.20838': attribute type 12 has an invalid length.
[  913.860575][T21965] __nla_validate_parse: 3 callbacks suppressed
[  913.860586][T21965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20846'.
[  913.867139][T21965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20846'.
[  913.904607][T21969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20850'.
[  913.908874][T21969] nbd: couldn't find a device at index 0
[  913.963193][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20853'.
[  913.978187][T21977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20853'.
[  914.020063][   T33] audit: type=1800 audit(1778410120.704:33): pid=21977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20853" name="memory.events" dev="tmpfs" ino=37084 res=0 errno=0
[  914.034700][T21983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20856'.
[  914.252035][T22005] netlink: 'syz.1.20866': attribute type 1 has an invalid length.
[  914.938621][T22039] netlink: 'syz.0.20879': attribute type 11 has an invalid length.
[  914.999297][T21995] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3240277717/3240277718
[  915.007206][T21995] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3240277717/3240277718
[  915.260067][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20885'.
[  915.483028][T22069] syzkaller1: entered promiscuous mode
[  915.485276][T22069] syzkaller1: entered allmulticast mode
[  915.510098][T22071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20893'.
[  915.658410][T22077] x_tables: unsorted entry at hook 2
[  915.676348][T22079] atomic_op ffff8881201ac198 conn xmit_atomic 0000000000000000
[  915.813790][T22098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20906'.
[  915.913796][T22107] sctp: [Deprecated]: syz.2.20911 (pid 22107) Use of int in max_burst socket option deprecated.
[  915.913796][T22107] Use struct sctp_assoc_value instead
[  916.228349][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20925'.
[  916.637357][T22155] netlink: 'syz.1.20930': attribute type 8 has an invalid length.
[  918.058323][T22228] netlink: 'syz.0.20953': attribute type 11 has an invalid length.
[  919.235994][T22258] bond44: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  919.240846][T22258] bond44: entered promiscuous mode
[  919.244684][T22258] 8021q: adding VLAN 0 to HW filter on device bond44
[  919.794585][T22290] __nla_validate_parse: 1 callbacks suppressed
[  919.794602][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20978'.
[  920.075835][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20990'.
[  920.250029][T22337] netlink: 312 bytes leftover after parsing attributes in process `syz.1.20999'.
[  920.256932][T22337] netlink: 'syz.1.20999': attribute type 1 has an invalid length.
[  921.035449][T22407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21030'.
[  921.614831][T22449] netlink: 96 bytes leftover after parsing attributes in process `syz.2.21048'.
[  921.620056][T22449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21048'.
[  921.637831][T22449] vlan3: entered allmulticast mode
[  921.643096][T22449] gretap0: entered allmulticast mode
[  921.792332][T22467] netlink: 224 bytes leftover after parsing attributes in process `syz.2.21056'.
[  921.795626][T22467] netlink: 2 bytes leftover after parsing attributes in process `syz.2.21056'.
[  921.900698][T22478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21062'.
[  922.066962][T22495] netlink: 'syz.1.21068': attribute type 1 has an invalid length.
[  922.794232][T22504] bond25 (unregistering): Released all slaves
[  923.719473][T22567] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  923.727110][T22567] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  923.850156][T22582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21105'.
[  924.338642][T22599] lo speed is unknown, defaulting to 1000
[  924.352247][T22599] lo speed is unknown, defaulting to 1000
[  924.504240][T22606] lo speed is unknown, defaulting to 1000
[  924.575705][T22606] lo speed is unknown, defaulting to 1000
[  925.104068][ T7762] block nbd1: Receive control failed (result -32)
[  925.384101][T22640] __nla_validate_parse: 4 callbacks suppressed
[  925.384114][T22640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21130'.
[  925.484230][T22655] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  925.592797][T22664] netlink: 52 bytes leftover after parsing attributes in process `syz.2.21141'.
[  925.666633][T22670] syzkaller0: entered promiscuous mode
[  925.668910][T22670] syzkaller0: entered allmulticast mode
[  925.678259][T22670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  925.683346][T22669] tipc: Resetting bearer <eth:syzkaller0>
[  925.722420][T22669] tipc: Disabling bearer <eth:syzkaller0>
[  926.336220][T22724] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4062493000/4062493001
[  927.393875][T22780] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  927.397231][T22780] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  928.543198][   T33] audit: type=1800 audit(1778410135.234:34): pid=22831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21207" name="r" dev="tmpfs" ino=34652 res=0 errno=0
[  929.630086][T22921] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  929.826894][T22946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21254'.
[  929.869447][T22951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21256'.
[  929.874060][T22951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21256'.
[  930.005103][T22965] netlink: 'syz.0.21262': attribute type 1 has an invalid length.
[  930.007701][T22965] netlink: 1 bytes leftover after parsing attributes in process `syz.0.21262'.
[  930.652019][T22994] pim6reg0: tun_chr_ioctl cmd 1074812118
[  931.114748][T23010] netlink: 1100 bytes leftover after parsing attributes in process `syz.2.21280'.
[  931.248032][T23020] syzkaller1: tun_chr_ioctl cmd 1074025677
[  931.250357][T23020] syzkaller1: linktype set to 769
[  931.485954][T23049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21299'.
[  931.525427][T23054] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[  931.587427][T23063] sctp: [Deprecated]: syz.0.21305 (pid 23063) Use of struct sctp_assoc_value in delayed_ack socket option.
[  931.587427][T23063] Use struct sctp_sack_info instead
[  931.754217][T23083] openvswitch: netlink: IP tunnel dst address not specified
[  932.927951][T23119] lo speed is unknown, defaulting to 1000
[  932.945062][T23119] lo speed is unknown, defaulting to 1000
[  933.426230][T23158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21346'.
[  933.479913][T23163] netlink: 'syz.0.21349': attribute type 2 has an invalid length.
[  934.008582][T23189] bond45: invalid ARP target 0.0.0.0 specified for addition
[  934.015090][T23189] bond45: option arp_ip_target: invalid value (0)
[  934.019490][T23189] bond45 (unregistering): Released all slaves
[  934.687007][T23233] netlink: 168 bytes leftover after parsing attributes in process `syz.2.21381'.
[  934.695019][T23232] rdma_rxe: rxe_newlink: failed to add lo
[  934.890345][T23249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21389'.
[  935.930644][T23328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21422'.
[  936.063791][T23342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21428'.
[  936.288315][T23357] netlink: 'syz.0.21435': attribute type 1 has an invalid length.
[  936.292471][T23357] netlink: 224 bytes leftover after parsing attributes in process `syz.0.21435'.
[  936.394292][T23368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21439'.
[  936.744600][T23386] syzkaller1: entered promiscuous mode
[  936.746721][T23386] syzkaller1: entered allmulticast mode
[  936.998465][T23390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21449'.
[  937.270003][T23405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21454'.
[  937.459698][T23415] netlink: 'syz.2.21460': attribute type 1 has an invalid length.
[  938.636817][T23485] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  938.639889][T23485] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  939.933892][T23539] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21517'.
[  942.686480][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21592'.
[  942.776586][T23724] netlink: 34 bytes leftover after parsing attributes in process `syz.0.21594'.
[  943.577162][T23790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21617'.
[  943.659141][T23795] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  943.765837][T23805] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  943.825213][T23805] syzkaller0: entered promiscuous mode
[  943.828403][T23805] syzkaller0: entered allmulticast mode
[  944.118002][T23835] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  944.423607][T23853] bond25 (unregistering): Released all slaves
[  944.465359][T23860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21647'.
[  944.732684][T23886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21662'.
[  944.735944][T23886] netlink: 'syz.2.21662': attribute type 1 has an invalid length.
[  944.738452][T23886] netlink: 'syz.2.21662': attribute type 2 has an invalid length.
[  945.232980][T23937] macvlan1: Caught tx_queue_len zero misconfig
[  945.317195][T23945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21690'.
[  945.329938][T23945] xt_TCPMSS: Only works on TCP SYN packets
[  947.060022][T24096] bond30: entered allmulticast mode
[  947.066913][T24096] ip6gre3: entered allmulticast mode
[  947.073877][T24094] bond30: left allmulticast mode
[  947.078473][T24094] ip6gre3: left allmulticast mode
[  947.140312][T24106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21766'.
[  947.143505][T24106] nbd: couldn't find a device at index 0
[  947.145952][   T33] audit: type=1804 audit(1778410153.834:35): pid=24103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.21764" name="/newroot/7024/memory.events" dev="tmpfs" ino=35423 res=1 errno=0
[  947.161611][   T33] audit: type=1800 audit(1778410153.844:36): pid=24103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.21764" name="memory.events" dev="tmpfs" ino=35423 res=0 errno=0
[  947.207331][T24103] bond37: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  947.214802][T24103] bond37 (unregistering): Released all slaves
[  947.616090][T24138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21777'.
[  947.620944][T24138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21777'.
[  947.626583][T24138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21777'.
[  947.718500][T24144] __nla_validate_parse: 1 callbacks suppressed
[  947.718513][T24144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21779'.
[  947.739524][T24144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21779'.
[  947.748021][T24144] netlink: 58 bytes leftover after parsing attributes in process `syz.2.21779'.
[  947.980416][T24158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21786'.
[  949.543287][T24253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21827'.
[  949.954820][T24264] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  950.389507][T24305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21851'.
[  951.674169][T24350] xt_CT: You must specify a L4 protocol and not use inversions on it
[  951.848168][T24360] netlink: 'syz.1.21875': attribute type 298 has an invalid length.
[  952.183364][T24383] lo speed is unknown, defaulting to 1000
[  952.196718][T24376] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22)
[  952.205769][T24383] lo speed is unknown, defaulting to 1000
[  952.496864][T24395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21890'.
[  952.503145][T24395] netlink: 'syz.0.21890': attribute type 1 has an invalid length.
[  952.509269][T24395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21890'.
[  952.757454][T24400] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  953.076692][T24412] lo speed is unknown, defaulting to 1000
[  953.080893][T24412] lo speed is unknown, defaulting to 1000
[  953.103339][T24420] netlink: 'syz.0.21897': attribute type 29 has an invalid length.
[  953.109575][T24420] netlink: 'syz.0.21897': attribute type 29 has an invalid length.
[  953.115587][T24419] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21900'.
[  953.353588][T24441] netlink: 14 bytes leftover after parsing attributes in process `syz.2.21909'.
[  953.500076][T24450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21913'.
[  954.532481][T24499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21935'.
[  954.763416][T24516] netlink: 'syz.2.21942': attribute type 3 has an invalid length.
[  954.935169][T24527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21947'.
[  954.968448][T24527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21947'.
[  956.861474][T24603] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21980'.
[  958.337800][T24670] netlink: 774 bytes leftover after parsing attributes in process `syz.0.22004'.
[  958.342630][T24670] netlink: 52 bytes leftover after parsing attributes in process `syz.0.22004'.
[  958.602085][T24685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22011'.
[  958.656306][T24685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22011'.
[  958.740131][T24690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22013'.
[  959.353938][T24715] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 3, id = 0
[  960.065542][T24746] netlink: 'syz.0.22036': attribute type 3 has an invalid length.
[  961.558707][T24787] nbd: must specify a size in bytes for the device
[  961.743720][T24798] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  961.747752][T24799] netlink: 'syz.0.22058': attribute type 1 has an invalid length.
[  961.956782][T24814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22064'.
[  962.275828][T24833] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  962.390632][T24839] sctp: [Deprecated]: syz.0.22074 (pid 24839) Use of struct sctp_assoc_value in delayed_ack socket option.
[  962.390632][T24839] Use struct sctp_sack_info instead
[  962.480557][T24844] nbd: must specify a size in bytes for the device
[  962.558579][T24849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22078'.
[  962.825942][T24864] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  963.638575][T24896] veth1_macvtap: left promiscuous mode
[  963.648410][T24896] veth0_macvtap: left promiscuous mode
[  963.667279][T24896] veth0_macvtap: entered promiscuous mode
[  963.693430][T24896] veth1_macvtap: entered promiscuous mode
[  963.700870][T24896] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  963.709300][ T7278] lo speed is unknown, defaulting to 1000
[  963.712453][ T7278] sqz0: Port: 1 Link ACTIVE
[  963.842900][T24911] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  963.856539][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  963.864870][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  963.870617][ T7278] lo speed is unknown, defaulting to 1000
[  963.900986][T24919] netlink: 27 bytes leftover after parsing attributes in process `syz.0.22104'.
[  963.959120][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  963.962811][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  964.278334][T24935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22110'.
[  964.933676][T24957] sock: sock_timestamping_bind_phc: sock not bind to device
[  965.264698][T24974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22127'.
[  966.250314][T25014] netlink: 'syz.2.22144': attribute type 6 has an invalid length.
[  966.323561][T25020] netlink: 'syz.2.22148': attribute type 32 has an invalid length.
[  966.328440][T25020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22148'.
[  966.377356][T25020] bond26: option coupled_control: invalid value (12)
[  966.520309][T25020] bond26 (unregistering): Released all slaves
[  967.864565][T25094] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.22180'.
[  968.244428][T25121] netlink: 44 bytes leftover after parsing attributes in process `syz.1.22193'.
[  968.250260][T25121] netlink: 'syz.1.22193': attribute type 1 has an invalid length.
[  968.381710][T25126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22195'.
[  968.850106][T25140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22201'.
[  969.180916][T25151] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  969.750640][T25171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22214'.
[  970.013449][T25186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22217'.
[  970.313872][T25200] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  970.326146][T25200] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  970.330279][T25200] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  970.879932][T25220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22234'.
[  971.545634][T25257] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  971.910674][T25267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22257'.
[  971.969430][T25269] sch_tbf: burst 0 is lower than device tunl0 mtu (1280) !
[  972.778367][T25318] netlink: 48 bytes leftover after parsing attributes in process `syz.0.22279'.
[  974.675517][T25376] : renamed from veth0_to_bond (while UP)
[  975.174570][T25411] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.223993][T25411] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.299249][T25422] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  975.303512][T25422] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  975.309117][T25422] bridge0: port 1(wlan1) entered disabled state
[  975.420684][T25411] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.485983][T25411] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.640714][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  975.693571][ T9116] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  975.735633][ T9116] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  975.774423][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  975.779029][T25440] lo speed is unknown, defaulting to 1000
[  975.791072][T25440] lo speed is unknown, defaulting to 1000
[  975.822519][T25446] lo speed is unknown, defaulting to 1000
[  975.916723][T25449] netlink: 'syz.1.22332': attribute type 16 has an invalid length.
[  975.933342][T25449] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.22332'.
[  976.078424][T25446] lo speed is unknown, defaulting to 1000
[  977.100749][T25488] lo speed is unknown, defaulting to 1000
[  977.126497][T25488] lo speed is unknown, defaulting to 1000
[  977.413987][T25491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22348'.
[  978.596259][T25565] netlink: zone id is out of range
[  978.598446][T25565] netlink: zone id is out of range
[  978.600440][T25565] netlink: zone id is out of range
[  978.602696][T25565] netlink: zone id is out of range
[  978.604873][T25565] netlink: zone id is out of range
[  978.607018][T25565] netlink: zone id is out of range
[  978.609062][T25565] netlink: zone id is out of range
[  978.611049][T25565] netlink: zone id is out of range
[  978.615310][T25565] netlink: zone id is out of range
[  978.617890][T25565] netlink: zone id is out of range
[  978.680268][T25567] bond37: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  978.689303][T25572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22384'.
[  978.696636][T25572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22384'.
[  978.704362][T25567] bond37 (unregistering): Released all slaves
[  979.030512][T25582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22390'.
[  979.069112][T25586] netlink: 'syz.1.22392': attribute type 10 has an invalid length.
[  979.163943][T25593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22394'.
[  979.548903][T25611] lo speed is unknown, defaulting to 1000
[  979.574252][T25611] lo speed is unknown, defaulting to 1000
[  980.116030][T25640] netlink: 'syz.1.22413': attribute type 21 has an invalid length.
[  980.134293][T25640] netlink: 128 bytes leftover after parsing attributes in process `syz.1.22413'.
[  980.151910][T25640] netlink: 'syz.1.22413': attribute type 5 has an invalid length.
[  980.154903][T25640] netlink: 3 bytes leftover after parsing attributes in process `syz.1.22413'.
[  980.630550][T25652] netlink: 'syz.2.22417': attribute type 13 has an invalid length.
[  980.671802][T25652] netlink: 'syz.2.22417': attribute type 17 has an invalid length.
[  980.815288][T25661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22417'.
[  980.852885][T25659] netlink: 64 bytes leftover after parsing attributes in process `syz.0.22419'.
[  981.917125][T25714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22442'.
[  981.926470][T25714] netlink: 'syz.2.22442': attribute type 20 has an invalid length.
[  981.944958][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  981.953955][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  981.958291][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  981.963868][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  983.191788][T25757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22462'.
[  983.196585][T25757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22462'.
[  983.268963][T25759] netlink: 220 bytes leftover after parsing attributes in process `syz.0.22463'.
[  983.274303][T25759] netlink: 220 bytes leftover after parsing attributes in process `syz.0.22463'.
[  983.279845][T25759] netlink: 56 bytes leftover after parsing attributes in process `syz.0.22463'.
[  983.938859][T25794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22479'.
[  983.973068][T25798] netlink: 'syz.2.22480': attribute type 32 has an invalid length.
[  984.323989][T25820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22490'.
[  984.325706][T25821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22489'.
[  984.436762][T25828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22493'.
[  984.517029][T25828] team0: entered promiscuous mode
[  984.523923][T25828] team0: entered allmulticast mode
[  984.535171][T25828] 8021q: adding VLAN 0 to HW filter on device team0
[  984.562671][T25832] team1: entered promiscuous mode
[  984.564265][T25832] team1: entered allmulticast mode
[  984.566114][T25832] 8021q: adding VLAN 0 to HW filter on device team1
[  985.045948][T25860] 8021q: adding VLAN 0 to HW filter on device bond45
[  985.270382][T25869] xt_hashlimit: size too large, truncated to 1048576
[  985.993130][T25902] tipc: Resetting bearer <eth:xfrm0>
[  986.008438][T25902] tipc: Resetting bearer <eth:syzkaller0>
[  986.213519][   T33] audit: type=1804 audit(1778410192.904:37): pid=25918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.22532" name="/newroot/7908/memory.events" dev="tmpfs" ino=39854 res=1 errno=0
[  986.985243][T25963] __nla_validate_parse: 4 callbacks suppressed
[  986.985260][T25963] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22553'.
[  987.004952][T25963] netlink: 64 bytes leftover after parsing attributes in process `syz.2.22553'.
[  987.085805][T25969] netlink: 332 bytes leftover after parsing attributes in process `syz.2.22556'.
[  987.092540][T25969] netlink: 'syz.2.22556': attribute type 9 has an invalid length.
[  987.096185][T25969] netlink: 108 bytes leftover after parsing attributes in process `syz.2.22556'.
[  987.099525][T25969] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22556'.
[  987.197741][T25974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22558'.
[  987.598476][T25984] netlink: 'syz.0.22562': attribute type 1 has an invalid length.
[  987.607075][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22562'.
[  988.066213][T26021] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.22579'.
[  988.069803][T26021] : default FDB implementation only supports local addresses
[  988.136779][T26026] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) !
[  988.405956][T26036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22586'.
[  988.809674][T26060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22595'.
[  989.022042][T26071] net_ratelimit: 392 callbacks suppressed
[  989.022121][T26071] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  989.044895][T26071] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  989.199791][T26082] xt_hashlimit: max too large, truncated to 1048576
[  989.202440][T26082] xt_hashlimit: overflow, try lower: 2/0
[  989.597588][T26100] netlink: zone id is out of range
[  989.606815][T26100] netlink: zone id is out of range
[  989.614103][T26100] netlink: zone id is out of range
[  989.620025][T26100] netlink: zone id is out of range
[  989.623164][T26100] netlink: zone id is out of range
[  989.625251][T26100] netlink: zone id is out of range
[  989.632863][T26100] netlink: zone id is out of range
[  989.635293][T26100] netlink: zone id is out of range
[  992.418262][T26237] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[  992.439810][T26237] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[  992.464467][T26237] geneve8: left promiscuous mode
[  992.480385][T26237] ip6gre4: left promiscuous mode
[  992.491172][T26237] ip6gre4: left allmulticast mode
[  992.497012][T26237] ip6tnl11: left allmulticast mode
[  992.527474][ T5769] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.535429][ T5769] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.541024][ T5769] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.547833][ T5769] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  992.629437][T26242] lo speed is unknown, defaulting to 1000
[  992.636676][T26242] lo speed is unknown, defaulting to 1000
[  993.254052][T26268] __nla_validate_parse: 6 callbacks suppressed
[  993.254063][T26268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22678'.
[  994.041305][T26308] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  994.433810][T26335] netlink: 'syz.1.22707': attribute type 3 has an invalid length.
[  994.466100][T26338] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  994.495181][T26338] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.570790][T26338] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  994.578197][T26338] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.670132][T26338] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  994.679844][T26338] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.767412][T26338] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  994.778476][T26338] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.969361][ T9116] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  994.978956][ T9116] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  995.037395][ T9116] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  995.049510][ T9116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  995.109048][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  995.117999][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  995.163552][ T5769] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  995.167165][ T5769] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  995.302090][T26373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22722'.
[  995.800258][T26411] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  995.858547][T26416] netlink: 'syz.0.22741': attribute type 9 has an invalid length.
[  995.901569][T26416] bridge38: entered allmulticast mode
[  996.004348][T26422] net_ratelimit: 337 callbacks suppressed
[  996.004365][T26422] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  996.105118][T26426] nbd: socks must be embedded in a SOCK_ITEM attr
[  996.116139][T26426] block nbd7: shutting down sockets
[  996.353686][T26446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22755'.
[  996.357508][T26446] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22755'.
[  996.360446][T26446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22755'.
[  996.710552][T26458] x_tables: duplicate entry at hook 2
[  996.903698][T26462] xt_TCPMSS: Only works on TCP SYN packets
[  997.071966][T26466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22765'.
[  997.076309][T26466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22765'.
[  997.094406][T26466] vlan8: entered promiscuous mode
[  997.098417][T26466] vlan8: entered allmulticast mode
[  997.103123][T26466] gretap0: entered allmulticast mode
[  997.621172][T26485] syzkaller0: entered promiscuous mode
[  997.623209][T26485] syzkaller0: entered allmulticast mode
[  998.363075][T26520] lo speed is unknown, defaulting to 1000
[  998.393610][T26520] lo speed is unknown, defaulting to 1000
[  999.273246][T26551] netlink: 'syz.0.22801': attribute type 1 has an invalid length.
[  999.281162][T26551] netlink: 264 bytes leftover after parsing attributes in process `syz.0.22801'.
[  999.288843][T26551] netlink: 'syz.0.22801': attribute type 1 has an invalid length.
[  999.298406][T26551] netlink: 264 bytes leftover after parsing attributes in process `syz.0.22801'.
[ 1000.121861][T26608] netlink: 'syz.2.22827': attribute type 4 has an invalid length.
[ 1000.127902][T26609] netlink: 'syz.1.22826': attribute type 1 has an invalid length.
[ 1000.146910][T26609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22826'.
[ 1000.150792][T26608] netlink: 'syz.2.22827': attribute type 4 has an invalid length.
[ 1000.156942][T25423] lo speed is unknown, defaulting to 1000
[ 1000.169998][T25423] lo speed is unknown, defaulting to 1000
[ 1000.180755][ T7278] lo speed is unknown, defaulting to 1000
[ 1000.597303][T26622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22833'.
[ 1002.259037][T26666] x_tables: duplicate underflow at hook 4
[ 1002.550689][T26680] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1002.567210][T26680] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[ 1002.578151][T26680] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[ 1002.960286][T26697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22865'.
[ 1003.127489][T26706] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1280) !
[ 1003.573321][T26718] lo speed is unknown, defaulting to 1000
[ 1003.580578][T26718] lo speed is unknown, defaulting to 1000
[ 1004.100463][T26739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22883'.
[ 1004.395670][T26745] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[ 1004.398225][T26745] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[ 1005.646191][T26799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22906'.
[ 1005.755657][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22907'.
[ 1006.015833][T26816] lo speed is unknown, defaulting to 1000
[ 1006.034763][T26816] lo speed is unknown, defaulting to 1000
[ 1007.012544][T26868] netlink: 'syz.2.22933': attribute type 4 has an invalid length.
[ 1007.064569][T26871] netlink: 'syz.2.22933': attribute type 4 has an invalid length.
[ 1007.111639][ T7273] lo speed is unknown, defaulting to 1000
[ 1007.119737][ T7273] lo speed is unknown, defaulting to 1000
[ 1007.937767][ T7274] lo speed is unknown, defaulting to 1000
[ 1007.944164][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1007.951683][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1007.959404][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1007.967637][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1007.979326][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1007.992132][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.003027][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1008.008371][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1008.080061][T26893] syzkaller1: entered promiscuous mode
[ 1008.084209][T26893] syzkaller1: entered allmulticast mode
[ 1008.323458][T26917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22955'.
[ 1008.555199][T26935] bond37: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms
[ 1008.558916][T26935] bond37: entered promiscuous mode
[ 1008.705468][T26950] bond37: left promiscuous mode
[ 1008.737194][T26947] lo speed is unknown, defaulting to 1000
[ 1008.740971][T26947] lo speed is unknown, defaulting to 1000
[ 1008.778695][T26955] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma?
[ 1008.960259][T26959] block nbd2: reconnected socket
[ 1008.965595][ T7762] block nbd2: Receive control failed (result -32)
[ 1009.786744][T27014] netlink: 292 bytes leftover after parsing attributes in process `syz.2.22995'.
[ 1009.833645][T27016] IPVS: Unknown mcast interface: ipvlan0
[ 1009.882168][T27022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22998'.
[ 1009.890325][T27021] lo speed is unknown, defaulting to 1000
[ 1009.895563][T27021] lo speed is unknown, defaulting to 1000
[ 1009.973722][T27026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23000'.
[ 1010.389841][T27039] netlink: 128 bytes leftover after parsing attributes in process `syz.0.23005'.
[ 1010.393641][T27039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23005'.
[ 1010.807329][T27060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23016'.
[ 1011.224977][T27078] bond46: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1011.234650][T27078] bond46 (unregistering): Released all slaves
[ 1011.554882][T27108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23035'.
[ 1011.692524][T27116] "syz.0.23039" (27116) uses obsolete ecb(arc4) skcipher
[ 1011.807075][T27122] netlink: 64 bytes leftover after parsing attributes in process `syz.0.23042'.
[ 1011.810811][T27122] netlink: 64 bytes leftover after parsing attributes in process `syz.0.23042'.
[ 1012.578416][T27143] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[ 1012.638486][T27147] netlink: 'syz.1.23051': attribute type 62 has an invalid length.
[ 1012.859574][   T33] audit: type=1804 audit(1778410219.544:38): pid=27159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.23057" name="/newroot/8096/memory.events" dev="tmpfs" ino=40800 res=1 errno=0
[ 1012.880533][   T33] audit: type=1800 audit(1778410219.554:39): pid=27159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.23057" name="memory.events" dev="tmpfs" ino=40800 res=0 errno=0
[ 1012.901081][   T33] audit: type=1804 audit(1778410219.554:40): pid=27159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.23057" name="/newroot/8096/memory.events" dev="tmpfs" ino=40800 res=1 errno=0
[ 1013.803426][T27224] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1013.848528][T27227] netlink: 'syz.2.23086': attribute type 1 has an invalid length.
[ 1013.985577][T27233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23089'.
[ 1014.001940][T27233] bond0: entered promiscuous mode
[ 1014.006270][T27233] bridge38: port 1(bond0) entered blocking state
[ 1014.009307][T27233] bridge38: port 1(bond0) entered disabled state
[ 1014.012593][T27233] bond0: entered allmulticast mode
[ 1014.469064][T27255] geneve6: entered promiscuous mode
[ 1015.038768][T27280] netlink: 14 bytes leftover after parsing attributes in process `syz.2.23110'.
[ 1015.226123][T27296] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.23116'.
[ 1015.230821][T27297] netlink: 'syz.2.23117': attribute type 11 has an invalid length.
[ 1015.343130][T27305] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1015.358597][T27305] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[ 1015.368663][T27305] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[ 1015.397672][T27308] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23122'.
[ 1015.634514][T27325] netlink: 'syz.2.23128': attribute type 1 has an invalid length.
[ 1015.667277][T27325] 8021q: adding VLAN 0 to HW filter on device bond26
[ 1015.700415][T27325] bond26: (slave gretap3): making interface the new active one
[ 1015.703840][T27325] bond26: (slave gretap3): Enslaving as an active interface with an up link
[ 1015.861014][T27343] netlink: 'syz.2.23135': attribute type 1 has an invalid length.
[ 1016.333164][T27393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1016.379918][T27397] netlink: 'syz.1.23155': attribute type 12 has an invalid length.
[ 1016.648038][T27414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23159'.
[ 1016.870762][T27428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23163'.
[ 1017.503338][T27476] netlink: 104 bytes leftover after parsing attributes in process `syz.1.23182'.
[ 1017.789903][T27502] netlink: 'syz.0.23194': attribute type 58 has an invalid length.
[ 1017.863271][T27508] netlink: 'syz.1.23197': attribute type 3 has an invalid length.
[ 1018.578781][T27551] netlink: 'syz.1.23217': attribute type 1 has an invalid length.
[ 1018.696084][T27563] netlink: 104 bytes leftover after parsing attributes in process `syz.0.23223'.
[ 1019.180026][T27592] netlink: 'syz.1.23237': attribute type 2 has an invalid length.
[ 1019.183893][T27592] netlink: 'syz.1.23237': attribute type 2 has an invalid length.
[ 1019.199711][T27592] macsec0: entered promiscuous mode
[ 1020.409394][T27664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23259'.
[ 1020.702138][T27689] bond27: option ad_select: invalid value (34)
[ 1020.712474][T27689] bond27 (unregistering): Released all slaves
[ 1020.834570][T27705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1021.342126][T27745] netlink: 76 bytes leftover after parsing attributes in process `syz.1.23292'.
[ 1021.997077][T27775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23304'.
[ 1022.000898][T27775] xt_policy: neither incoming nor outgoing policy selected
[ 1022.004560][T27775] netlink: 'syz.2.23304': attribute type 33 has an invalid length.
[ 1022.008150][T27775] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23304'.
[ 1022.189918][T27789] netlink: 'syz.2.23310': attribute type 10 has an invalid length.
[ 1022.192853][T27789] netlink: 228 bytes leftover after parsing attributes in process `syz.2.23310'.
[ 1022.340492][T27799] syzkaller1: entered promiscuous mode
[ 1022.342492][T27799] syzkaller1: entered allmulticast mode
[ 1022.503017][T27810] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23319'.
[ 1022.631127][T27821] netlink: 48 bytes leftover after parsing attributes in process `syz.0.23323'.
[ 1023.418609][T27882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23349'.
[ 1023.766866][T27903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23354'.
[ 1023.770769][T27903] netem: incorrect ge model size
[ 1023.775110][T27903] netem: change failed
[ 1023.825939][T27895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23354'.
[ 1023.950567][T27917] netlink: 144 bytes leftover after parsing attributes in process `syz.0.23362'.
[ 1024.459098][T27944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23373'.
[ 1025.564237][T27991] netlink: 'syz.2.23395': attribute type 6 has an invalid length.
[ 1026.599876][T27999] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1026.606115][ T7274] lo speed is unknown, defaulting to 1000
[ 1026.614457][ T7274] syz2: Port: 1 Link ACTIVE
[ 1027.115733][T28048] netlink: 'syz.0.23418': attribute type 1 has an invalid length.
[ 1027.177113][T28048] bond46: (slave geneve9): making interface the new active one
[ 1027.181973][T28048] bond46: (slave geneve9): Enslaving as an active interface with an up link
[ 1027.185404][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[ 1027.194716][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[ 1027.204368][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[ 1027.213353][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[ 1027.353895][T28063] sch_tbf: burst 185 is lower than device syzkaller0 mtu (313) !
[ 1027.419900][T28073] __nla_validate_parse: 6 callbacks suppressed
[ 1027.419912][T28073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23430'.
[ 1027.538794][T28089] netlink: 'syz.1.23437': attribute type 21 has an invalid length.
[ 1027.540448][T28087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23436'.
[ 1027.541300][T28089] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1027.547518][T28089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1027.549767][T28089] IPv6: NLM_F_CREATE should be set when creating new route
[ 1027.552350][T28089] IPv6: NLM_F_CREATE should be set when creating new route
[ 1027.554681][T28089] IPv6: NLM_F_CREATE should be set when creating new route
[ 1027.684368][T28105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23444'.
[ 1027.737868][T28105] bond38: entered promiscuous mode
[ 1027.740744][T28105] bond38: entered allmulticast mode
[ 1027.873679][T28129] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 1027.933649][T28129] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 1027.994997][T28129] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 1028.067781][T28129] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 1028.128514][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[ 1028.142532][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[ 1028.159027][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[ 1028.173675][ T5769] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[ 1028.480485][T28162] netlink: 188 bytes leftover after parsing attributes in process `syz.2.23472'.
[ 1028.962369][T28204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23489'.
[ 1029.064836][T28213] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1029.799653][T28252] netlink: 'syz.2.23510': attribute type 1 has an invalid length.
[ 1029.964433][T28267] sch_tbf: burst 1023 is lower than device lo mtu (1294) !
[ 1030.338682][T28288] netlink: 'syz.2.23527': attribute type 3 has an invalid length.
[ 1030.499828][T28296] SET target dimension over the limit!
[ 1030.574798][T28298] netlink: 'syz.0.23532': attribute type 12 has an invalid length.
[ 1030.892691][T28308] pim6reg: entered allmulticast mode
[ 1030.897073][T28308] pim6reg: left allmulticast mode
[ 1030.973104][T28312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23539'.
[ 1030.981085][T28312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23539'.
[ 1031.223291][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23548'.
[ 1031.527850][T28351] netlink: 'syz.0.23555': attribute type 27 has an invalid length.
[ 1031.564973][T28356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23556'.
[ 1032.064023][T28408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23582'.
[ 1032.174736][T28406] infiniband syz0: set down
[ 1032.176600][T28406] infiniband syz0: added bridge_slave_1
[ 1032.186484][T28406] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1032.191072][T28406] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1032.196889][T28406] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1032.213983][T28406] RDS/IB: syz0: added
[ 1032.215463][T28406] smc: adding ib device syz0 with port count 1
[ 1032.217630][T28406] smc:    ib device syz0 port 1 has no pnetid
[ 1033.240650][T28454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23601'.
[ 1033.245186][T28454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23601'.
[ 1033.349531][T28458] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1033.421921][T28463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23605'.
[ 1033.457880][T28463] bond39: entered promiscuous mode
[ 1033.469917][T28463] 8021q: adding VLAN 0 to HW filter on device bond39
[ 1033.481856][T28463] bond39 (unregistering): Released all slaves
[ 1033.668335][T28480] netlink: 180 bytes leftover after parsing attributes in process `syz.2.23609'.
[ 1033.768092][T28488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23615'.
[ 1033.796403][T28488] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1033.816649][T28488] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1033.873311][T28492] netlink: 'syz.1.23617': attribute type 29 has an invalid length.
[ 1033.877730][T28492] netlink: 'syz.1.23617': attribute type 29 has an invalid length.
[ 1033.883350][T28492] netlink: 'syz.1.23617': attribute type 32 has an invalid length.
[ 1033.980032][T28498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23620'.
[ 1034.265808][T28504] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1034.280421][T28504] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1034.366931][T28505] tipc: Resetting bearer <eth:syzkaller0>
[ 1034.383391][T28505] tipc: Resetting bearer <eth:macvlan1>
[ 1034.400551][ T9483] lo speed is unknown, defaulting to 1000
[ 1036.178071][T28611] ipip3: entered promiscuous mode
[ 1036.183028][T28612] IPv6: Can't replace route, no match found
[ 1036.322882][T28625] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23676'.
[ 1036.398410][T28633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23680'.
[ 1036.719803][T28654] netlink: 'syz.2.23690': attribute type 2 has an invalid length.
[ 1036.722414][T28654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23690'.
[ 1036.757228][T28657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23691'.
[ 1036.787820][T28659] SET target dimension over the limit!
[ 1036.848948][T28663] geneve7: entered promiscuous mode
[ 1038.964417][T28763] bond30: entered allmulticast mode
[ 1038.966415][T28763] ip6gre3: entered allmulticast mode
[ 1039.128475][T28771] __nla_validate_parse: 2 callbacks suppressed
[ 1039.128488][T28771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23740'.
[ 1040.590925][T28884] xt_hashlimit: size too large, truncated to 1048576
[ 1040.788821][T28895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1040.812601][T28897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23797'.
[ 1040.828755][ T5769] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[ 1040.831990][ T5769] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[ 1040.837553][ T5769] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[ 1040.840499][ T5769] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[ 1041.308790][T28922] bond47: entered promiscuous mode
[ 1041.311171][T28922] 8021q: adding VLAN 0 to HW filter on device bond47
[ 1041.344937][T28927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23810'.
[ 1041.373832][T28927] 8021q: adding VLAN 0 to HW filter on device bond27
[ 1041.387114][T28927] netlink: 'syz.2.23810': attribute type 8 has an invalid length.
[ 1041.392121][T28925] netlink: 64 bytes leftover after parsing attributes in process `syz.1.23809'.
[ 1041.416320][T28927] bond27 (unregistering): Released all slaves
[ 1041.448549][T28925] syzkaller1: entered promiscuous mode
[ 1041.452739][T28925] syzkaller1: entered allmulticast mode
[ 1041.656618][T28944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23817'.
[ 1041.676666][ T5769] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1041.680006][T28944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23817'.
[ 1041.684143][ T5769] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1041.691127][ T5769] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1041.712581][ T5769] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1042.229151][T28962] syzkaller1: entered promiscuous mode
[ 1042.232273][T28962] syzkaller1: entered allmulticast mode
[ 1042.240437][T28962] netlink: 'syz.0.23824': attribute type 298 has an invalid length.
[ 1042.683514][T28992] netlink: 'syz.2.23836': attribute type 2 has an invalid length.
[ 1042.848261][T29006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23843'.
[ 1042.907077][   T55] block nbd7: Receive control failed (result -1)
[ 1044.482910][T29081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23870'.
[ 1044.641658][T29095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23877'.
[ 1045.013358][T29130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23891'.
[ 1045.016660][T29130] nbd: couldn't find a device at index 0
[ 1045.116697][T29134] netlink: 'syz.0.23893': attribute type 1 has an invalid length.
[ 1045.136479][T29136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23894'.
[ 1045.627410][T29171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23910'.
[ 1045.647872][T29173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23911'.
[ 1045.824033][T29185] netlink: 136 bytes leftover after parsing attributes in process `syz.2.23917'.
[ 1046.058830][T29198] lo speed is unknown, defaulting to 1000
[ 1046.064426][T29198] lo speed is unknown, defaulting to 1000
[ 1046.582311][T29223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23932'.
[ 1046.619803][T29223] veth1_to_team: entered promiscuous mode
[ 1046.624551][T29223] veth1_to_team: left promiscuous mode
[ 1046.797008][T29225] atomic_op ffff888111fd5998 conn xmit_atomic 0000000000000000
[ 1046.910075][T29231] netlink: 76 bytes leftover after parsing attributes in process `syz.1.23936'.
[ 1046.925383][T29231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23936'.
[ 1046.967595][T29231] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1046.989185][T29231] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1048.160351][T29309] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 1049.137932][T29339] IPv6: Can't replace route, no match found
[ 1049.141177][T29339] sctp: [Deprecated]: syz.1.23980 (pid 29339) Use of int in maxseg socket option.
[ 1049.141177][T29339] Use struct sctp_assoc_value instead
[ 1049.152670][T29341] veth0_macvtap: left promiscuous mode
[ 1049.285883][T29341] veth0_macvtap: entered promiscuous mode
[ 1049.549817][T29361] __nla_validate_parse: 7 callbacks suppressed
[ 1049.549831][T29361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23983'.
[ 1049.755374][T29371] lo speed is unknown, defaulting to 1000
[ 1049.758469][T29371] lo speed is unknown, defaulting to 1000
[ 1050.156950][T29383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1050.341110][T29398] netlink: 'syz.0.23988': attribute type 10 has an invalid length.
[ 1050.366166][T29398] `: Port device dummy0 added
[ 1050.389932][T29396] nbd: nbd1 already in use
[ 1050.395429][T29398] netlink: 'syz.0.23988': attribute type 10 has an invalid length.
[ 1050.399311][T29396] nbd: couldn't find device at index 0
[ 1050.435846][T29398] `: Port device dummy0 removed
[ 1050.457764][T29405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23991'.
[ 1050.468219][T29405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23991'.
[ 1050.472966][T29405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23991'.
[ 1050.476974][T29405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23991'.
[ 1050.484530][T29405] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.23991'.
[ 1050.641988][T29415] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23994'.
[ 1050.658857][T29415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23994'.
[ 1051.095633][T29428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23996'.
[ 1051.099742][T29428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23996'.
[ 1051.515315][T29438] netlink: 'syz.1.24000': attribute type 1 has an invalid length.
[ 1051.543703][T29438] 8021q: adding VLAN 0 to HW filter on device bond39
[ 1051.995123][T29447] ip6tnl13: entered allmulticast mode
[ 1052.078163][T29449] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig
[ 1052.084226][T29449] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[ 1052.218494][T29456] bond48: entered promiscuous mode
[ 1052.220355][T29456] 8021q: adding VLAN 0 to HW filter on device bond48
[ 1052.236424][T29456] 8021q: adding VLAN 0 to HW filter on device bond48
[ 1052.238980][T29456] bond48: (slave sit5): The slave device specified does not support setting the MAC address
[ 1052.243087][T29456] bond48: (slave sit5): Error -95 calling set_mac_address
[ 1052.660656][T29485] sctp: [Deprecated]: syz.0.24014 (pid 29485) Use of int in max_burst socket option deprecated.
[ 1052.660656][T29485] Use struct sctp_assoc_value instead
[ 1052.667259][T29485] netlink: 'syz.0.24014': attribute type 30 has an invalid length.
[ 1052.682606][T29485] bond49: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[ 1052.687698][T29485] bond49 (unregistering): Released all slaves
[ 1052.834349][T29502] netlink: 'syz.0.24018': attribute type 1 has an invalid length.
[ 1052.926686][T29507] netlink: 'syz.2.24019': attribute type 3 has an invalid length.
[ 1053.138417][T29513] xt_CONNSECMARK: invalid mode: 0
[ 1053.417309][T29526] netlink: 'syz.1.24023': attribute type 1 has an invalid length.
[ 1053.435626][T29529] netlink: 'syz.2.24024': attribute type 3 has an invalid length.
[ 1053.480748][T29526] bond40: (slave vxcan2): The slave device specified does not support setting the MAC address
[ 1053.485845][T29526] bond40: (slave vxcan2): Error -95 calling set_mac_address
[ 1053.536967][T29530] macvlan0: entered promiscuous mode
[ 1053.538990][T29530] macvlan0: entered allmulticast mode
[ 1053.543337][T29530] bond40: entered promiscuous mode
[ 1053.547278][T29530] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1053.560660][T29530] bond40: left promiscuous mode
[ 1053.603274][T29532] netlink: 'syz.2.24025': attribute type 1 has an invalid length.
[ 1053.872029][T29545] bond27: entered promiscuous mode
[ 1053.874917][T29545] 8021q: adding VLAN 0 to HW filter on device bond27
[ 1054.055443][T29566] netlink: 'syz.2.24034': attribute type 1 has an invalid length.
[ 1054.328263][T29548] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[ 1054.333158][T29548] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[ 1054.345688][T29548] bond38: left promiscuous mode
[ 1054.348803][T29548] bond38: left allmulticast mode
[ 1054.407273][ T9234] lo speed is unknown, defaulting to 1000
[ 1054.410330][ T9234] syz2: Port: 1 Link DOWN
[ 1054.433646][T29566] bond28: entered promiscuous mode
[ 1054.436076][T29566] 8021q: adding VLAN 0 to HW filter on device bond28
[ 1054.459083][T29569] 8021q: adding VLAN 0 to HW filter on device bond28
[ 1054.466159][T29569] bond28: (slave ip6gre7): The slave device specified does not support setting the MAC address
[ 1054.470472][T29569] bond28: (slave ip6gre7): Setting fail_over_mac to active for active-backup mode
[ 1054.481542][T29569] bond28: (slave ip6gre7): making interface the new active one
[ 1054.484357][T29569] ip6gre7: entered promiscuous mode
[ 1054.488350][T29569] bond28: (slave ip6gre7): Enslaving as an active interface with an up link
[ 1054.494390][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1054.499354][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1054.546519][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1054.557970][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1054.602697][T29577] __nla_validate_parse: 29 callbacks suppressed
[ 1054.602714][T29577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24036'.
[ 1054.693964][T29585] netlink: 41 bytes leftover after parsing attributes in process `syz.2.24039'.
[ 1054.697406][T29585] netlink: 140 bytes leftover after parsing attributes in process `syz.2.24039'.
[ 1054.701143][T29585] netlink: 41 bytes leftover after parsing attributes in process `syz.2.24039'.
[ 1054.709310][T29587] netlink: 68 bytes leftover after parsing attributes in process `syz.2.24039'.
[ 1054.823169][T29591] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[ 1054.910840][T29593] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.24041'.
[ 1055.140516][T29607] smc: adding net device wlan0 with user defined pnetid SYZ0
[ 1055.170517][T29609] syzkaller0: entered promiscuous mode
[ 1055.174053][T29609] syzkaller0: entered allmulticast mode
[ 1055.224991][T29609] 0: reclassify loop, rule prio 0, protocol 800
[ 1055.239377][T29614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24047'.
[ 1055.596459][T29614] tipc: Resetting bearer <eth:xfrm0>
[ 1055.792921][ T9234] lo speed is unknown, defaulting to 1000
[ 1055.795222][ T9234] sqz0: Port: 1 Link DOWN
[ 1055.854152][T29617] veth1_macvtap: left promiscuous mode
[ 1055.857884][T29617] veth1_macvtap: entered promiscuous mode
[ 1055.863653][T29617] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1055.927415][ T5653] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1055.933908][ T5653] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1055.940498][ T7278] lo speed is unknown, defaulting to 1000
[ 1055.943914][ T7278] sqz0: Port: 1 Link ACTIVE
[ 1055.965904][ T5653] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1055.969340][ T5653] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1055.977461][ T9234] lo speed is unknown, defaulting to 1000
[ 1055.983587][T29631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24050'.
[ 1056.077346][T29650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24055'.
[ 1056.096753][T29650] bond29: entered promiscuous mode
[ 1056.099031][T29650] 8021q: adding VLAN 0 to HW filter on device bond29
[ 1056.108948][T29650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24055'.
[ 1056.117443][T29653] validate_nla: 2 callbacks suppressed
[ 1056.117455][T29653] netlink: 'syz.1.24056': attribute type 13 has an invalid length.
[ 1056.129236][T29653] netlink: 'syz.1.24056': attribute type 17 has an invalid length.
[ 1056.214971][T29653] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1056.218160][T29653] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1056.226141][T29653] veth1_macvtap: left promiscuous mode
[ 1056.228859][T29653] veth0_macvtap: left promiscuous mode
[ 1056.246235][T29653] veth0_macvtap: entered promiscuous mode
[ 1056.254709][T29653] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1056.259828][T29568] lo speed is unknown, defaulting to 1000
[ 1056.264658][T29568] syz2: Port: 1 Link ACTIVE
[ 1056.286919][ T5653] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.376231][ T5653] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.380729][ T5653] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.384694][ T5653] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.388724][T29666] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1056.554002][T29669] netlink: 'syz.0.24060': attribute type 2 has an invalid length.
[ 1056.557130][T29669] netlink: 'syz.0.24060': attribute type 2 has an invalid length.
[ 1056.973948][T29677] netlink: 'syz.1.24062': attribute type 12 has an invalid length.
[ 1057.046669][T29677] netlink: 'syz.1.24062': attribute type 39 has an invalid length.
[ 1072.937907][T29727] __nla_validate_parse: 3 callbacks suppressed
[ 1072.937916][T29727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24073'.
[ 1072.949242][T29727] vxcan0: entered allmulticast mode
[ 1073.001168][T29738] netlink: 'syz.2.24076': attribute type 10 has an invalid length.
[ 1073.015612][T29738] netlink: 'syz.2.24076': attribute type 10 has an invalid length.
[ 1073.067825][T29743] lo speed is unknown, defaulting to 1000
[ 1073.077263][T29743] lo speed is unknown, defaulting to 1000
[ 1073.230893][T29756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.24079'.
[ 1073.299358][T29761] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[ 1073.311576][T29761] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[ 1073.957540][T29772] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1073.978289][T29772] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1074.066387][T29775] netlink: 'syz.2.24084': attribute type 1 has an invalid length.
[ 1074.095024][T29775] 8021q: adding VLAN 0 to HW filter on device bond30
[ 1074.118306][T29775] vlan3: entered allmulticast mode
[ 1074.120700][T29775] bond30: entered allmulticast mode
[ 1074.248186][T29782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24085'.
[ 1074.274451][T29784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24086'.
[ 1074.325059][T29786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.24087'.
[ 1074.420280][T29798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24090'.
[ 1074.424838][T29798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24090'.
[ 1074.465733][T29800] bridge41: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1074.574324][T29802] syzkaller1: entered allmulticast mode
[ 1074.813464][T29814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24095'.
[ 1074.824344][T29814] macvlan5: entered allmulticast mode
[ 1074.826138][T29814] ip6gretap0: entered allmulticast mode
[ 1074.872803][T29818] netlink: 3 bytes leftover after parsing attributes in process `syz.0.24097'.
[ 1074.877291][T29818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24097'.
[ 1074.890272][T29821] netlink: 'syz.1.24098': attribute type 14 has an invalid length.
[ 1074.894444][T29821] netlink: 'syz.1.24098': attribute type 13 has an invalid length.
[ 1075.027513][T29826] netlink: 'syz.1.24098': attribute type 1 has an invalid length.
[ 1075.155741][T29840] team0: left promiscuous mode
[ 1075.167808][T29840] team0: left allmulticast mode
[ 1075.516982][T29864] geneve9: entered promiscuous mode
[ 1075.519609][T29864] geneve9: entered allmulticast mode
[ 1075.872385][T29886] lo speed is unknown, defaulting to 1000
[ 1075.875369][T29886] lo speed is unknown, defaulting to 1000
[ 1075.919146][T29896] bond31: option xmit_hash_policy: invalid value (10)
[ 1075.925168][T29896] bond31 (unregistering): Released all slaves
[ 1076.039951][T29904] netlink: 'syz.2.24110': attribute type 1 has an invalid length.
[ 1076.066388][T29904] 8021q: adding VLAN 0 to HW filter on device bond31
[ 1076.102043][T29904] bond31: (slave veth33): Enslaving as an active interface with a down link
[ 1076.115533][T29904] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1076.120470][T29904] bond31: (slave batadv0): making interface the new active one
[ 1076.124247][T29904] batadv0: entered promiscuous mode
[ 1076.126121][T29904] bond31: (slave batadv0): Enslaving as an active interface with an up link
[ 1076.154298][T29904] bond31 (unregistering): (slave veth33): Releasing active interface
[ 1076.162770][T29904] bond31 (unregistering): (slave batadv0): Releasing active interface
[ 1076.169454][T29904] bond31 (unregistering): Released all slaves
[ 1076.200428][T29907] syzkaller1: entered promiscuous mode
[ 1076.206719][T29907] syzkaller1: entered allmulticast mode
[ 1076.800249][T29940] netlink: 'syz.0.24121': attribute type 12 has an invalid length.
[ 1076.823863][T29940] netlink: 'syz.0.24121': attribute type 12 has an invalid length.
[ 1076.875212][T29944] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[ 1076.882545][T29944] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[ 1077.108870][T29957] lo speed is unknown, defaulting to 1000
[ 1077.114206][T29961] netlink: 'syz.0.24128': attribute type 1 has an invalid length.
[ 1077.120133][T29957] lo speed is unknown, defaulting to 1000
[ 1077.172215][T29961] bond50: entered promiscuous mode
[ 1077.178846][T29961] 8021q: adding VLAN 0 to HW filter on device bond50
[ 1077.205778][T29965] bond50: (slave bridge39): making interface the new active one
[ 1077.209764][T29965] bridge39: entered promiscuous mode
[ 1077.214459][T29965] bond50: (slave bridge39): Enslaving as an active interface with an up link
[ 1078.074775][T29988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1078.078433][T29987] __nla_validate_parse: 24 callbacks suppressed
[ 1078.078449][T29987] netlink: 100 bytes leftover after parsing attributes in process `syz.1.24133'.
[ 1078.241775][T29996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24136'.
[ 1078.359250][T29998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24137'.
[ 1078.443146][T30013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24141'.
[ 1078.523427][T30015] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.24142'.
[ 1078.607243][T30020] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[ 1078.616459][T30018] netlink: 104 bytes leftover after parsing attributes in process `syz.2.24143'.
[ 1078.918044][T30034] netlink: 72 bytes leftover after parsing attributes in process `syz.1.24148'.
[ 1078.921808][T30034] netlink: 72 bytes leftover after parsing attributes in process `syz.1.24148'.
[ 1078.928612][T30034] validate_nla: 1 callbacks suppressed
[ 1078.928624][T30034] netlink: 'syz.1.24148': attribute type 4 has an invalid length.
[ 1078.992515][T30036] team_slave_1: Caught tx_queue_len zero misconfig
[ 1079.046116][T30036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24150'.
[ 1079.046778][T30042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24152'.
[ 1079.067564][T30042] sch_tbf: burst 1023 is lower than device lo mtu (11337746) !
[ 1079.099713][T30042] netlink: 'syz.2.24152': attribute type 3 has an invalid length.
[ 1079.104555][T30042] netlink: 'syz.2.24152': attribute type 3 has an invalid length.
[ 1079.167568][T30048] bond0: Caught tx_queue_len zero misconfig
[ 1079.186792][T30050] bond42 (unregistering): Released all slaves
[ 1079.414740][T30077] bond51: Unable to set up delay as MII monitoring is disabled
[ 1079.419976][T30077] bond51 (unregistering): Released all slaves
[ 1079.532646][T30086] netlink: 'syz.2.24160': attribute type 1 has an invalid length.
[ 1079.565279][T30087] 8021q: adding VLAN 0 to HW filter on device bond31
[ 1079.751133][T30090] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.800807][T30090] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.847228][T30090] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.879733][T30090] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.938734][ T5653] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1079.955937][ T5653] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1079.966028][ T5653] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1079.975776][ T5653] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.208310][T30113] netlink: 'syz.1.24168': attribute type 13 has an invalid length.
[ 1080.210068][T30114] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[ 1080.580441][T30136] netlink: 'syz.2.24173': attribute type 5 has an invalid length.
[ 1080.624308][T30133] lo speed is unknown, defaulting to 1000
[ 1080.633075][T30133] lo speed is unknown, defaulting to 1000
[ 1080.654518][T30137] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1080.893844][T30149] lo speed is unknown, defaulting to 1000
[ 1080.896738][T30149] lo speed is unknown, defaulting to 1000
[ 1081.077524][T30154] netlink: 'syz.0.24178': attribute type 4 has an invalid length.
[ 1081.445800][T30163] dvmrp1: entered allmulticast mode
[ 1081.621747][T30171] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[ 1081.624697][T30171] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[ 1081.870161][T30175] bond32: entered promiscuous mode
[ 1082.038213][T30179] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[ 1082.405484][T30191] netlink: 'syz.1.24190': attribute type 1 has an invalid length.
[ 1083.202318][T30238] __nla_validate_parse: 23 callbacks suppressed
[ 1083.202341][T30238] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.24203'.
[ 1083.209764][T30237] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1083.276731][T30239] netlink: 144 bytes leftover after parsing attributes in process `syz.0.24202'.
[ 1084.231299][T30285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24216'.
[ 1084.482715][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.483612][T26243] lo speed is unknown, defaulting to 1000
[ 1084.487157][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.488647][T26243] syz2: Port: 1 Link DOWN
[ 1084.494420][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.502154][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.534343][T30290] netlink: 'syz.0.24217': attribute type 1 has an invalid length.
[ 1084.582770][T30294] netlink: 'syz.0.24219': attribute type 1 has an invalid length.
[ 1084.630322][T30300] geneve10: entered promiscuous mode
[ 1084.633904][ T5653] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.639835][ T5653] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.646859][ T5653] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.661731][ T5653] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.669854][T30304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24219'.
[ 1084.682373][T30304] ip6tnl0: Master is either lo or non-ether device
[ 1084.686906][T30294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24219'.
[ 1084.906820][T30320] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[ 1084.914791][T30320] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[ 1084.939432][T30326] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1085.099548][T30348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24236'.
[ 1085.228994][T30358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24240'.
[ 1085.279345][T30358] veth35: entered allmulticast mode
[ 1085.292462][T30358] bond33: (slave veth35): Enslaving as an active interface with an up link
[ 1085.316539][T30358] bond33 (unregistering): (slave veth35): Releasing backup interface
[ 1085.331836][T30358] bond33 (unregistering): Released all slaves
[ 1085.475030][T30377] lo speed is unknown, defaulting to 1000
[ 1085.479275][T30377] lo speed is unknown, defaulting to 1000
[ 1085.516141][T30375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24245'.
[ 1085.607975][T30386] netlink: 68 bytes leftover after parsing attributes in process `syz.0.24247'.
[ 1086.447555][T30407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24252'.
[ 1086.547660][T30414] pim6reg1: entered promiscuous mode
[ 1086.552124][T30414] pim6reg1: entered allmulticast mode
[ 1086.630792][T30425] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 1087.135420][T30461] netlink: 'syz.0.24269': attribute type 10 has an invalid length.
[ 1087.191114][T30467] netlink: 'syz.1.24272': attribute type 13 has an invalid length.
[ 1087.232987][T30467] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1087.251711][T30467] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1087.576601][T30491] netlink: 'syz.1.24278': attribute type 29 has an invalid length.
[ 1087.828763][T30511] netlink: 'syz.0.24282': attribute type 5 has an invalid length.
[ 1087.936536][T30520] netlink: 'syz.2.24286': attribute type 2 has an invalid length.
[ 1088.229672][T30543] __nla_validate_parse: 39 callbacks suppressed
[ 1088.229731][T30543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24295'.
[ 1088.279976][T30546] netlink: 76 bytes leftover after parsing attributes in process `syz.2.24296'.
[ 1088.357122][T30549] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[ 1088.360633][T30549] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[ 1088.428858][T30554] netlink: 52 bytes leftover after parsing attributes in process `syz.2.24299'.
[ 1088.434070][T30556] macsec0: entered promiscuous mode
[ 1088.468335][T30560] macsec0: left promiscuous mode
[ 1088.470481][T30560] macsec0: entered allmulticast mode
[ 1088.476318][T30560] virt_wifi0: entered allmulticast mode
[ 1088.483262][T30560] macsec0: left allmulticast mode
[ 1088.485407][T30560] virt_wifi0: left allmulticast mode
[ 1088.598448][T30567] netlink: 'syz.0.24303': attribute type 39 has an invalid length.
[ 1088.655481][T30579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24306'.
[ 1088.657289][T30580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24307'.
[ 1088.723386][T30579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24306'.
[ 1088.753860][T30579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.24306'.
[ 1088.825365][T30584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24309'.
[ 1088.919656][T30598] mac80211_hwsim hwsim33 syzkaller0: Caught tx_queue_len zero misconfig
[ 1088.957669][T30598] netlink: 100 bytes leftover after parsing attributes in process `syz.1.24313'.
[ 1088.994610][T30602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24315'.
[ 1089.376827][T30623] syzkaller1: entered promiscuous mode
[ 1089.378602][T30623] syzkaller1: entered allmulticast mode
[ 1089.520030][T30625] netlink: 'syz.1.24322': attribute type 7 has an invalid length.
[ 1089.525524][T30625] netlink: 'syz.1.24322': attribute type 7 has an invalid length.
[ 1089.724433][T30642] netlink: 'syz.2.24328': attribute type 1 has an invalid length.
[ 1089.747520][T30642] 8021q: adding VLAN 0 to HW filter on device bond33
[ 1089.754716][T30644] netlink: 'syz.1.24329': attribute type 7 has an invalid length.
[ 1089.761054][T30642] vlan4: entered allmulticast mode
[ 1089.763132][T30642] bond33: entered allmulticast mode
[ 1089.765394][T30644] netlink: 'syz.1.24329': attribute type 7 has an invalid length.
[ 1089.938843][T30660] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[ 1089.948580][T30660] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[ 1090.344915][T30683] netlink: 'syz.1.24341': attribute type 1 has an invalid length.
[ 1090.372673][T30683] 8021q: adding VLAN 0 to HW filter on device bond42
[ 1090.583394][T30697] veth0_to_bond: left allmulticast mode
[ 1090.586088][T30697] veth0_to_bond: left promiscuous mode
[ 1090.588654][T30697] bridge13: port 2(veth0_to_bond) entered disabled state
[ 1090.596445][T30697] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1091.166796][T30723] netlink: 'syz.1.24350': attribute type 12 has an invalid length.
[ 1091.188546][T30725] netlink: 'syz.2.24352': attribute type 13 has an invalid length.
[ 1091.191821][T30725] netlink: 'syz.2.24352': attribute type 17 has an invalid length.
[ 1091.201250][T30725] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1091.570547][T30747] netlink: 'syz.1.24358': attribute type 15 has an invalid length.
[ 1091.585703][T30747] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[ 1091.589107][T30747] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[ 1091.797663][T30762] netlink: 'syz.2.24363': attribute type 1 has an invalid length.
[ 1092.000760][T30772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1092.086001][T30777] veth0: Caught tx_queue_len zero misconfig
[ 1092.149035][T30782] netlink: 'syz.0.24366': attribute type 18 has an invalid length.
[ 1092.237844][T30787] IPVS: length: 15 != 8
[ 1092.849669][T30816] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1092.973396][T30822] bond34: (slave bridge43): making interface the new active one
[ 1092.977152][T30822] bond34: (slave bridge43): Enslaving as an active interface with an up link
[ 1093.021321][T30822] bond34: (slave gretap4): Enslaving as an active interface with an up link
[ 1093.044338][T30822] macvlan0: entered promiscuous mode
[ 1093.051470][T30822] macvlan0: entered allmulticast mode
[ 1093.077402][T30830] gre0: Master is either lo or non-ether device
[ 1093.088281][T30830] gre0: Master is either lo or non-ether device
[ 1093.267553][T30852] __nla_validate_parse: 19 callbacks suppressed
[ 1093.267571][T30852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24388'.
[ 1093.334206][T30848] syzkaller0: entered promiscuous mode
[ 1093.338804][T30848] syzkaller0: entered allmulticast mode
[ 1093.344034][T30848] netlink: 64 bytes leftover after parsing attributes in process `syz.0.24387'.
[ 1093.347765][T30859] --map-set only usable from mangle table
[ 1093.493184][T30868] lo: Caught tx_queue_len zero misconfig
[ 1093.723332][T30881] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[ 1093.777877][T30881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24399'.
[ 1093.959077][T30891] x_tables: duplicate underflow at hook 1
[ 1094.107120][T30905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24403'.
[ 1094.113745][T30905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24403'.
[ 1094.313345][T30916] veth36: entered allmulticast mode
[ 1094.389635][T30871] tipc: Failed to remove unknown binding: 66,1,1/271154973:613528940/613528941
[ 1094.394843][T30871] tipc: Failed to remove unknown binding: 66,1,1/271154973:613528940/613528941
[ 1094.480976][T30923] netlink: 48 bytes leftover after parsing attributes in process `syz.2.24408'.
[ 1094.485312][T30923] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.24408'.
[ 1094.557057][T30927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.24410'.
[ 1094.745750][T30936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24413'.
[ 1094.937927][T30942] netlink: 17 bytes leftover after parsing attributes in process `syz.1.24416'.
[ 1094.944818][T30942] tunl0: Caught tx_queue_len zero misconfig
[ 1095.130962][T30957] lo speed is unknown, defaulting to 1000
[ 1095.135370][T30957] lo speed is unknown, defaulting to 1000
[ 1095.162318][T30961] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1095.353836][T30974] lo speed is unknown, defaulting to 1000
[ 1095.414239][T30974] lo speed is unknown, defaulting to 1000
[ 1095.718455][T30980] validate_nla: 7 callbacks suppressed
[ 1095.718573][T30980] netlink: 'syz.0.24425': attribute type 7 has an invalid length.
[ 1095.729629][T30980] netlink: 'syz.0.24425': attribute type 27 has an invalid length.
[ 1096.084602][T30992] smc: net device wlan0 erased user defined pnetid SYZ0
[ 1096.171733][T30994] netlink: 'syz.1.24429': attribute type 20 has an invalid length.
[ 1096.185399][T30994] netlink: 'syz.1.24429': attribute type 20 has an invalid length.
[ 1096.664315][T31016] 8021q: adding VLAN 0 to HW filter on device bond36
[ 1096.728535][T31016] bond36 (unregistering): Released all slaves
[ 1097.286552][T31060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1097.364623][T31065] syzkaller0: entered promiscuous mode
[ 1097.366555][T31065] syzkaller0: entered allmulticast mode
[ 1097.578434][T31082] veth0_macvtap: entered allmulticast mode
[ 1097.581185][T31082] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[ 1097.610054][T31079] veth39: entered allmulticast mode
[ 1097.626816][T31079] bond52: (slave veth39): Enslaving as an active interface with an up link
[ 1097.639088][T31079] bond52 (unregistering): (slave veth39): Releasing backup interface
[ 1097.647853][T31079] bond52 (unregistering): Released all slaves
[ 1097.800010][ T5653] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1097.803494][ T5653] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1097.806539][ T5653] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1097.810307][ T5653] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1097.903493][T31099] dvmrp31: entered allmulticast mode
[ 1097.936065][T31103] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1097.982378][T31090] dvmrp0: entered allmulticast mode
[ 1098.472180][T31117] __nla_validate_parse: 15 callbacks suppressed
[ 1098.472191][T31117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24465'.
[ 1098.481350][T31117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24465'.
[ 1098.492933][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1098.493988][T31117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24465'.
[ 1098.498678][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1098.514385][T31117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24465'.
[ 1098.514480][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1098.533574][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1098.547018][T31119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24466'.
[ 1098.551091][T31119] netlink: 'syz.1.24466': attribute type 9 has an invalid length.
[ 1098.617957][T31125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24469'.
[ 1098.621011][T31125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24469'.
[ 1098.624703][T31125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24469'.
[ 1098.627926][T31125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24469'.
[ 1098.640160][T31127] netlink: 492 bytes leftover after parsing attributes in process `syz.2.24470'.
[ 1098.774316][T31137] netlink: 'syz.1.24474': attribute type 66 has an invalid length.
[ 1098.938754][T31154] netlink: 'syz.0.24481': attribute type 89 has an invalid length.
[ 1099.118677][T31162] openvswitch: netlink: IP tunnel dst address not specified
[ 1099.122645][T31162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1099.298113][T31183] lo speed is unknown, defaulting to 1000
[ 1099.303204][T31183] lo speed is unknown, defaulting to 1000
[ 1099.992236][T31212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1099.996559][T31212] bond0 (unregistering): Released all slaves
[ 1100.136518][T31223] netlink: 'syz.2.24497': attribute type 13 has an invalid length.
[ 1100.203393][T31230] IPVS: length: 15 != 8
[ 1100.556477][T31238] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig
[ 1100.559483][T31236] ksmbd: Unknown IPC event: 1, ignore.
[ 1100.617232][T31238] netlink: 'syz.2.24501': attribute type 7 has an invalid length.
[ 1100.620468][T31238] netlink: 'syz.2.24501': attribute type 7 has an invalid length.
[ 1100.734437][T31244] macsec2: entered promiscuous mode
[ 1100.736660][T31244] macsec2: entered allmulticast mode
[ 1101.090610][T31277] netlink: 'syz.2.24513': attribute type 7 has an invalid length.
[ 1101.098155][T31277] netlink: 'syz.2.24513': attribute type 7 has an invalid length.
[ 1101.249145][T31294] IPVS: length: 15 != 8
[ 1101.360209][T31299] netlink: 'syz.0.24521': attribute type 7 has an invalid length.
[ 1101.364354][T31299] netlink: 'syz.0.24521': attribute type 7 has an invalid length.
[ 1101.501351][T31309] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1101.527995][T31311] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1101.600492][T31311] ip6gre6: entered allmulticast mode
[ 1101.710805][T31321] netlink: 'syz.0.24530': attribute type 7 has an invalid length.
[ 1101.713858][T31321] netlink: 'syz.0.24530': attribute type 8 has an invalid length.
[ 1101.770501][T31324] netlink: 'syz.2.24532': attribute type 1 has an invalid length.
[ 1101.834211][T31328] netlink: 'syz.0.24533': attribute type 7 has an invalid length.
[ 1101.837014][T31328] netlink: 'syz.0.24533': attribute type 7 has an invalid length.
[ 1102.029016][T31344] netlink: 'syz.0.24537': attribute type 5 has an invalid length.
[ 1102.094494][T31353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1102.553972][T31369] sch_tbf: burst 1023 is lower than device lo mtu (11337746) !
[ 1102.830439][T31372] lo speed is unknown, defaulting to 1000
[ 1102.835003][T31372] lo speed is unknown, defaulting to 1000
[ 1103.125560][T31377] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1103.543631][T31388] __nla_validate_parse: 28 callbacks suppressed
[ 1103.543648][T31388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24548'.
[ 1103.548515][T31389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24548'.
[ 1103.809083][T31392] netlink: 41 bytes leftover after parsing attributes in process `syz.1.24549'.
[ 1103.812742][T31392] netlink: 140 bytes leftover after parsing attributes in process `syz.1.24549'.
[ 1103.969281][T31408] netlink: 36 bytes leftover after parsing attributes in process `syz.2.24554'.
[ 1103.975534][T31405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24553'.
[ 1104.073706][T31417] netlink: 72 bytes leftover after parsing attributes in process `syz.0.24557'.
[ 1104.083183][T31417] netlink: 64 bytes leftover after parsing attributes in process `syz.0.24557'.
[ 1104.096669][T31417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24557'.
[ 1104.293980][T31423] netlink: 17 bytes leftover after parsing attributes in process `syz.0.24559'.
[ 1104.623765][T31454] ipt_ECN: cannot use operation on non-tcp rule
[ 1104.678630][T31457] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1105.176182][T31496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1105.180837][T31496] bond0 (unregistering): Released all slaves
[ 1105.579654][T31521] : Caught tx_queue_len zero misconfig
[ 1105.602246][T31523] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1105.605279][T31523] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1106.370971][T31542] nbd: nbd2 already in use
[ 1106.373087][T31542] nbd: couldn't find device at index 0
[ 1106.387210][T31542] dvmrp0: left allmulticast mode
[ 1106.388998][T31542] dvmrp1: left allmulticast mode
[ 1106.390918][T31542] dvmrp31: left allmulticast mode
[ 1106.403611][T31544] validate_nla: 2 callbacks suppressed
[ 1106.403622][T31544] netlink: 'syz.0.24598': attribute type 9 has an invalid length.
[ 1106.518848][T31552] vlan5: entered allmulticast mode
[ 1106.613282][T31563] netlink: 'syz.0.24603': attribute type 2 has an invalid length.
[ 1106.628444][T31565] bond36: Removing last arp target with arp_interval on
[ 1106.668808][T31569] openvswitch: netlink: Message has 16 unknown bytes.
[ 1106.900360][T31585] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[ 1106.945903][T31587] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1106.962251][T31589] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[ 1107.004862][T31587] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1107.049234][T31587] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1107.093295][T31587] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1107.173190][ T5769] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1107.205922][ T9116] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1107.223470][ T9116] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1107.228469][T31595] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) !
[ 1107.245395][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1107.843219][T31606] netlink: 'syz.0.24620': attribute type 1 has an invalid length.
[ 1107.865994][T31606] 8021q: adding VLAN 0 to HW filter on device bond53
[ 1107.933485][T31609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1107.937698][T31609] syzkaller0: entered promiscuous mode
[ 1107.940587][T31609] syzkaller0: entered allmulticast mode
[ 1107.968045][T31609] tipc: Resetting bearer <eth:syzkaller0>
[ 1107.974030][T31608] tipc: Resetting bearer <eth:syzkaller0>
[ 1107.993370][T31608] tipc: Disabling bearer <eth:syzkaller0>
[ 1108.146312][T31613] netlink: 'syz.0.24623': attribute type 9 has an invalid length.
[ 1108.198242][T31618] openvswitch: netlink: IP tunnel dst address not specified
[ 1108.202365][T31618] netlink: 'syz.0.24625': attribute type 11 has an invalid length.
[ 1108.668013][T31648] __nla_validate_parse: 23 callbacks suppressed
[ 1108.668032][T31648] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.24631'.
[ 1109.154403][T31667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24635'.
[ 1109.220584][T31667] netlink: 72 bytes leftover after parsing attributes in process `syz.1.24635'.
[ 1109.327537][T31670] netlink: 'syz.1.24636': attribute type 1 has an invalid length.
[ 1109.355946][T31671] bond0: (slave vxcan2): The slave device specified does not support setting the MAC address
[ 1109.359644][T31671] bond0: (slave vxcan2): Error -95 calling set_mac_address
[ 1109.375802][T31670] bond0: (slave vxcan2): The slave device specified does not support setting the MAC address
[ 1109.379901][T31670] bond0: (slave vxcan2): Error -95 calling set_mac_address
[ 1109.638432][T31680] macvtap1: entered promiscuous mode
[ 1109.640279][T31680] ip6gretap0: entered promiscuous mode
[ 1109.645898][T31680] macvtap1: entered allmulticast mode
[ 1109.648642][T31682] IPVS: length: 15 != 8
[ 1109.657387][T31680] macvtap2: entered promiscuous mode
[ 1109.659778][T31680] macvtap2: entered allmulticast mode
[ 1109.925551][T31701] netlink: 'syz.1.24645': attribute type 9 has an invalid length.
[ 1109.959857][T31703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24646'.
[ 1109.980074][T31703] 8021q: adding VLAN 0 to HW filter on device bond43
[ 1109.985854][T31703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24646'.
[ 1109.988576][T31703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24646'.
[ 1109.992349][T31703] netlink: 'syz.1.24646': attribute type 10 has an invalid length.
[ 1110.135802][T31713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24649'.
[ 1110.150390][T31713] veth61: entered promiscuous mode
[ 1110.257120][T31720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24651'.
[ 1110.260961][T31720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24651'.
[ 1110.755696][T31742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.24656'.
[ 1110.977055][T31758] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 1111.021132][T31764] openvswitch: netlink: IP tunnel dst address not specified
[ 1111.089901][T31767] netlink: 'syz.2.24662': attribute type 7 has an invalid length.
[ 1111.103726][T31767] netlink: 'syz.2.24662': attribute type 7 has an invalid length.
[ 1111.150004][T31772] IPVS: length: 15 != 8
[ 1111.420256][T31781] 8021q: adding VLAN 0 to HW filter on device bond44
[ 1111.819445][T31811] validate_nla: 3 callbacks suppressed
[ 1111.819454][T31811] netlink: 'syz.2.24677': attribute type 7 has an invalid length.
[ 1111.826064][T31811] netlink: 'syz.2.24677': attribute type 7 has an invalid length.
[ 1112.218862][T31813] tipc: Resetting bearer <eth:xfrm0>
[ 1112.333375][T25425] lo speed is unknown, defaulting to 1000
[ 1112.335244][T31820] workqueue: Failed to create a rescuer kthread for wq "bond54": -EINTR
[ 1112.336029][T25425] sqz0: Port: 1 Link DOWN
[ 1112.363978][ T5653] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.367128][ T5653] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.382224][T25425] lo speed is unknown, defaulting to 1000
[ 1112.426682][ T5653] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.436844][ T5653] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1112.747537][T31856] netlink: 'syz.1.24684': attribute type 7 has an invalid length.
[ 1112.750343][T31856] netlink: 'syz.1.24684': attribute type 7 has an invalid length.
[ 1112.849826][T31863] netlink: 'syz.1.24685': attribute type 13 has an invalid length.
[ 1112.862904][T31863] mac80211_hwsim hwsim33 syzkaller0: Caught tx_queue_len zero misconfig
[ 1114.046658][T31885] lo: Caught tx_queue_len zero misconfig
[ 1114.096718][T31889] netlink: 'syz.1.24692': attribute type 64 has an invalid length.
[ 1114.114560][T31887] netlink: 'syz.2.24691': attribute type 7 has an invalid length.
[ 1114.124257][T31887] netlink: 'syz.2.24691': attribute type 7 has an invalid length.
[ 1114.869914][T31894] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 1115.072998][T31914] netlink: 'syz.2.24701': attribute type 7 has an invalid length.
[ 1115.077017][T31914] netlink: 'syz.2.24701': attribute type 7 has an invalid length.
[ 1115.125672][T31916] vlan6: entered promiscuous mode
[ 1115.127493][T31916] bridge0: entered promiscuous mode
[ 1115.478482][ T7278] lo speed is unknown, defaulting to 1000
[ 1115.480807][ T7278] sqz0: Port: 1 Link ACTIVE
[ 1115.483403][ T7278] lo speed is unknown, defaulting to 1000
[ 1115.487595][T31929] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[ 1115.548602][T31931] __nla_validate_parse: 16 callbacks suppressed
[ 1115.548614][T31931] netlink: 14 bytes leftover after parsing attributes in process `syz.2.24707'.
[ 1115.714313][T31935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24709'.
[ 1115.721267][T31935] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[ 1115.753519][T31935] syzkaller1: entered promiscuous mode
[ 1115.757904][T31935] syzkaller1: entered allmulticast mode
[ 1115.948226][T31952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24715'.
[ 1115.963254][T31949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24714'.
[ 1116.130860][T31952] 
[ 1116.131872][T31952] ======================================================
[ 1116.134583][T31952] WARNING: possible circular locking dependency detected
[ 1116.137472][T31952] syzkaller #0 Not tainted
[ 1116.139529][T31952] ------------------------------------------------------
[ 1116.142640][T31952] syz.2.24715/31952 is trying to acquire lock:
[ 1116.145044][T31952] ffff888105fbe2a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[ 1116.148918][T31952] 
[ 1116.148918][T31952] but task is already holding lock:
[ 1116.151791][T31952] ffff888105fbdd80 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: elevator_change+0x198/0x450
[ 1116.155145][T31952] 
[ 1116.155145][T31952] which lock already depends on the new lock.
[ 1116.155145][T31952] 
[ 1116.158862][T31952] 
[ 1116.158862][T31952] the existing dependency chain (in reverse order) is:
[ 1116.162210][T31952] 
[ 1116.162210][T31952] -> #6 (&q->q_usage_counter(io)#57){++++}-{0:0}:
[ 1116.164935][T31952]        blk_alloc_queue+0x546/0x680
[ 1116.166624][T31952]        __blk_mq_alloc_disk+0x197/0x390
[ 1116.168308][T31952]        nbd_dev_add+0x499/0xb50
[ 1116.170146][T31952]        nbd_init+0x168/0x1f0
[ 1116.172051][T31952]        do_one_initcall+0x250/0x870
[ 1116.174074][T31952]        do_initcall_level+0x104/0x190
[ 1116.176143][T31952]        do_initcalls+0x59/0xa0
[ 1116.177992][T31952]        kernel_init_freeable+0x2a6/0x3e0
[ 1116.180212][T31952]        kernel_init+0x1d/0x1d0
[ 1116.183211][T31952]        ret_from_fork+0x514/0xb70
[ 1116.185220][T31952]        ret_from_fork_asm+0x1a/0x30
[ 1116.187258][T31952] 
[ 1116.187258][T31952] -> #5 (fs_reclaim){+.+.}-{0:0}:
[ 1116.190004][T31952]        fs_reclaim_acquire+0x71/0x100
[ 1116.192318][T31952]        kmem_cache_alloc_node_noprof+0x4a/0x690
[ 1116.194862][T31952]        __alloc_skb+0x1d0/0x7d0
[ 1116.196878][T31952]        __ip6_append_data+0x2d3c/0x3f60
[ 1116.199439][T31952]        ip6_append_data+0x10f/0x280
[ 1116.201569][T31952]        rawv6_sendmsg+0x12d3/0x18e0
[ 1116.203565][T31952]        ____sys_sendmsg+0x80a/0x9f0
[ 1116.205913][T31952]        ___sys_sendmsg+0x2a5/0x360
[ 1116.207977][T31952]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1116.210102][T31952]        do_syscall_64+0x15f/0xf80
[ 1116.212098][T31952]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.214595][T31952] 
[ 1116.214595][T31952] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1116.217568][T31952]        lock_sock_nested+0x41/0x100
[ 1116.218597][T31967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24719'.
[ 1116.219843][T31952]        inet_shutdown+0x6a/0x390
[ 1116.219868][T31952]        nbd_mark_nsock_dead+0x2e9/0x560
[ 1116.219886][T31952]        sock_shutdown+0x15e/0x260
[ 1116.228273][T31952]        nbd_clear_sock+0x24/0x170
[ 1116.229892][T31952]        nbd_config_put+0x2dd/0x580
[ 1116.231493][T31952]        nbd_genl_connect+0x19d5/0x1cf0
[ 1116.233286][T31952]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1116.235235][T31952]        genl_rcv_msg+0x61c/0x7a0
[ 1116.237232][T31952]        netlink_rcv_skb+0x232/0x4b0
[ 1116.238969][T31952]        genl_rcv+0x28/0x40
[ 1116.240955][T31952]        netlink_unicast+0x75c/0x8e0
[ 1116.242710][T31952]        netlink_sendmsg+0x813/0xb40
[ 1116.244349][T31952]        ____sys_sendmsg+0x972/0x9f0
[ 1116.245972][T31952]        ___sys_sendmsg+0x2a5/0x360
[ 1116.247534][T31952]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1116.249143][T31952]        do_syscall_64+0x15f/0xf80
[ 1116.250627][T31952]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.252573][T31952] 
[ 1116.252573][T31952] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1116.254895][T31952]        __mutex_lock+0x1a3/0x1550
[ 1116.256442][T31952]        nbd_queue_rq+0x37b/0x1100
[ 1116.258401][T31952]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1116.260390][T31952]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1116.262467][T31952]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1116.264495][T31952]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1116.266226][T31952]        blk_mq_dispatch_list+0xd16/0xe10
[ 1116.267882][T31952]        blk_mq_flush_plug_list+0x48d/0x570
[ 1116.269590][T31952]        __blk_flush_plug+0x3ed/0x4d0
[ 1116.271262][T31952]        __submit_bio+0x28d/0x580
[ 1116.272814][T31952]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1116.275287][T31952]        block_read_full_folio+0x599/0x830
[ 1116.277180][T31952]        filemap_read_folio+0x137/0x3b0
[ 1116.279231][T31952]        do_read_cache_folio+0x358/0x590
[ 1116.281129][T31952]        read_part_sector+0xb6/0x2b0
[ 1116.283037][T31952]        adfspart_check_ICS+0xb1/0x960
[ 1116.285202][T31952]        bdev_disk_changed+0x817/0x1770
[ 1116.287353][T31952]        blkdev_get_whole+0x380/0x510
[ 1116.289159][T31952]        bdev_open+0x31e/0xd30
[ 1116.290624][T31952]        blkdev_open+0x470/0x610
[ 1116.292099][T31952]        do_dentry_open+0x785/0x14e0
[ 1116.293650][T31952]        vfs_open+0x3b/0x340
[ 1116.295200][T31952]        path_openat+0x2e08/0x3860
[ 1116.296917][T31952]        do_file_open+0x23e/0x4a0
[ 1116.298535][T31952]        do_sys_openat2+0x113/0x200
[ 1116.300176][T31952]        __x64_sys_openat+0x138/0x170
[ 1116.301780][T31952]        do_syscall_64+0x15f/0xf80
[ 1116.303321][T31952]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.305671][T31952] 
[ 1116.305671][T31952] -> #2 (&cmd->lock){+.+.}-{4:4}:
[ 1116.307860][T31952]        __mutex_lock+0x1a3/0x1550
[ 1116.309521][T31952]        nbd_queue_rq+0xc6/0x1100
[ 1116.311030][T31952]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1116.312827][T31952]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1116.314822][T31952]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1116.317254][T31952]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1116.319083][T31952]        blk_mq_dispatch_list+0xd16/0xe10
[ 1116.320914][T31952]        blk_mq_flush_plug_list+0x48d/0x570
[ 1116.322937][T31952]        __blk_flush_plug+0x3ed/0x4d0
[ 1116.325020][T31952]        __submit_bio+0x28d/0x580
[ 1116.327159][T31952]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1116.329559][T31952]        block_read_full_folio+0x599/0x830
[ 1116.331851][T31952]        filemap_read_folio+0x137/0x3b0
[ 1116.333989][T31952]        do_read_cache_folio+0x358/0x590
[ 1116.336205][T31952]        read_part_sector+0xb6/0x2b0
[ 1116.338356][T31952]        adfspart_check_ICS+0xb1/0x960
[ 1116.340095][T31952]        bdev_disk_changed+0x817/0x1770
[ 1116.342198][T31952]        blkdev_get_whole+0x380/0x510
[ 1116.343811][T31952]        bdev_open+0x31e/0xd30
[ 1116.345406][T31952]        blkdev_open+0x470/0x610
[ 1116.347156][T31952]        do_dentry_open+0x785/0x14e0
[ 1116.349197][T31952]        vfs_open+0x3b/0x340
[ 1116.351027][T31952]        path_openat+0x2e08/0x3860
[ 1116.353160][T31952]        do_file_open+0x23e/0x4a0
[ 1116.355299][T31952]        do_sys_openat2+0x113/0x200
[ 1116.357371][T31952]        __x64_sys_openat+0x138/0x170
[ 1116.359466][T31952]        do_syscall_64+0x15f/0xf80
[ 1116.361445][T31952]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.363933][T31952] 
[ 1116.363933][T31952] -> #1 (set->srcu){.+.+}-{0:0}:
[ 1116.366528][T31952]        __synchronize_srcu+0xca/0x300
[ 1116.368927][T31952]        elevator_switch+0x1e8/0x7a0
[ 1116.371022][T31952]        elevator_change+0x2cc/0x450
[ 1116.373128][T31952]        elevator_set_default+0x36c/0x430
[ 1116.375324][T31952]        blk_register_queue+0x3e9/0x4e0
[ 1116.377554][T31952]        __add_disk+0x677/0xd50
[ 1116.379155][T31952]        add_disk_fwnode+0xfb/0x480
[ 1116.380804][T31952]        nbd_dev_add+0x72c/0xb50
[ 1116.382562][T31952]        nbd_init+0x168/0x1f0
[ 1116.384083][T31952]        do_one_initcall+0x250/0x870
[ 1116.385684][T31952]        do_initcall_level+0x104/0x190
[ 1116.387366][T31952]        do_initcalls+0x59/0xa0
[ 1116.388858][T31952]        kernel_init_freeable+0x2a6/0x3e0
[ 1116.390585][T31952]        kernel_init+0x1d/0x1d0
[ 1116.392124][T31952]        ret_from_fork+0x514/0xb70
[ 1116.393868][T31952]        ret_from_fork_asm+0x1a/0x30
[ 1116.395417][T31952] 
[ 1116.395417][T31952] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[ 1116.397811][T31952]        __lock_acquire+0x15a5/0x2cf0
[ 1116.399390][T31952]        lock_acquire+0x106/0x350
[ 1116.400855][T31952]        __mutex_lock+0x1a3/0x1550
[ 1116.402385][T31952]        elevator_change+0x1b3/0x450
[ 1116.404185][T31952]        elevator_set_none+0xb5/0x140
[ 1116.405804][T31952]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 1116.407823][T31952]        nbd_start_device+0x17f/0xb10
[ 1116.409561][T31952]        nbd_genl_connect+0x165b/0x1cf0
[ 1116.411402][T31952]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1116.413736][T31952]        genl_rcv_msg+0x61c/0x7a0
[ 1116.415687][T31952]        netlink_rcv_skb+0x232/0x4b0
[ 1116.417777][T31952]        genl_rcv+0x28/0x40
[ 1116.419572][T31952]        netlink_unicast+0x75c/0x8e0
[ 1116.421800][T31952]        netlink_sendmsg+0x813/0xb40
[ 1116.423511][T31952]        ____sys_sendmsg+0x972/0x9f0
[ 1116.425182][T31952]        ___sys_sendmsg+0x2a5/0x360
[ 1116.426974][T31952]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1116.428835][T31952]        do_syscall_64+0x15f/0xf80
[ 1116.430521][T31952]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.432570][T31952] 
[ 1116.432570][T31952] other info that might help us debug this:
[ 1116.432570][T31952] 
[ 1116.435832][T31952] Chain exists of:
[ 1116.435832][T31952]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#57
[ 1116.435832][T31952] 
[ 1116.441038][T31952]  Possible unsafe locking scenario:
[ 1116.441038][T31952] 
[ 1116.443404][T31952]        CPU0                    CPU1
[ 1116.444978][T31952]        ----                    ----
[ 1116.446692][T31952]   lock(&q->q_usage_counter(io)#57);
[ 1116.448400][T31952]                                lock(fs_reclaim);
[ 1116.450409][T31952]                                lock(&q->q_usage_counter(io)#57);
[ 1116.452837][T31952]   lock(&q->elevator_lock);
[ 1116.454352][T31952] 
[ 1116.454352][T31952]  *** DEADLOCK ***
[ 1116.454352][T31952] 
[ 1116.456947][T31952] 6 locks held by syz.2.24715/31952:
[ 1116.458608][T31952]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1116.461200][T31952]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1116.463978][T31952]  #2: ffff888105bac9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60
[ 1116.467412][T31952]  #3: ffff888105bac8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60
[ 1116.470528][T31952]  #4: ffff888105fbdd80 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: elevator_change+0x198/0x450
[ 1116.473661][T31952]  #5: ffff888105fbddb8 (&q->q_usage_counter(queue)#41){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[ 1116.477131][T31952] 
[ 1116.477131][T31952] stack backtrace:
[ 1116.479037][T31952] CPU: 0 UID: 0 PID: 31952 Comm: syz.2.24715 Not tainted syzkaller #0 PREEMPT(full) 
[ 1116.479052][T31952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1116.479065][T31952] Call Trace:
[ 1116.479073][T31952]  <TASK>
[ 1116.479116][T31952]  dump_stack_lvl+0xe8/0x150
[ 1116.479142][T31952]  print_circular_bug+0x2e1/0x300
[ 1116.479162][T31952]  check_noncircular+0x12e/0x150
[ 1116.479176][T31952]  __lock_acquire+0x15a5/0x2cf0
[ 1116.479193][T31952]  ? elevator_change+0x1b3/0x450
[ 1116.479205][T31952]  lock_acquire+0x106/0x350
[ 1116.479214][T31952]  ? elevator_change+0x1b3/0x450
[ 1116.479228][T31952]  __mutex_lock+0x1a3/0x1550
[ 1116.479242][T31952]  ? elevator_change+0x1b3/0x450
[ 1116.479264][T31952]  ? rcu_is_watching+0x15/0xb0
[ 1116.479283][T31952]  ? work_grab_pending+0x3d1/0x990
[ 1116.479299][T31952]  ? elevator_change+0x1b3/0x450
[ 1116.479321][T31952]  ? __pfx___mutex_lock+0x10/0x10
[ 1116.479334][T31952]  ? enable_work+0x17f/0x230
[ 1116.479350][T31952]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1116.479374][T31952]  ? __cancel_work_sync+0xf7/0x110
[ 1116.479391][T31952]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[ 1116.479407][T31952]  elevator_change+0x1b3/0x450
[ 1116.479423][T31952]  elevator_set_none+0xb5/0x140
[ 1116.479435][T31952]  ? __pfx_elevator_set_none+0x10/0x10
[ 1116.479448][T31952]  ? xa_load+0x1db/0x210
[ 1116.479460][T31952]  blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 1116.479473][T31952]  ? kernfs_add_one+0x477/0x5c0
[ 1116.479486][T31952]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[ 1116.479498][T31952]  ? sysfs_add_file_mode_ns+0x259/0x300
[ 1116.479510][T31952]  nbd_start_device+0x17f/0xb10
[ 1116.479521][T31952]  ? device_create_file+0xf4/0x1b0
[ 1116.479532][T31952]  nbd_genl_connect+0x165b/0x1cf0
[ 1116.479542][T31952]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1116.479560][T31952]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1116.479571][T31952]  ? rcu_is_watching+0x15/0xb0
[ 1116.479581][T31952]  ? trace_kmalloc+0x2a/0xf0
[ 1116.479595][T31952]  ? __nla_parse+0x40/0x60
[ 1116.479607][T31952]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1116.479617][T31952]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1116.479628][T31952]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1116.479639][T31952]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1116.479650][T31952]  ? __lock_acquire+0x6b5/0x2cf0
[ 1116.479661][T31952]  genl_rcv_msg+0x61c/0x7a0
[ 1116.479672][T31952]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1116.479681][T31952]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1116.479693][T31952]  netlink_rcv_skb+0x232/0x4b0
[ 1116.479708][T31952]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1116.479717][T31952]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1116.479731][T31952]  ? down_read+0x270/0x2e0
[ 1116.479739][T31952]  ? genl_rcv+0xd/0x40
[ 1116.479747][T31952]  genl_rcv+0x28/0x40
[ 1116.479755][T31952]  netlink_unicast+0x75c/0x8e0
[ 1116.479769][T31952]  netlink_sendmsg+0x813/0xb40
[ 1116.479784][T31952]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1116.479796][T31952]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1116.479821][T31952]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1116.479835][T31952]  ____sys_sendmsg+0x972/0x9f0
[ 1116.479849][T31952]  ? __might_fault+0xaf/0x130
[ 1116.479862][T31952]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1116.479876][T31952]  ? import_iovec+0x73/0xa0
[ 1116.479890][T31952]  ___sys_sendmsg+0x2a5/0x360
[ 1116.479901][T31952]  ? __lock_acquire+0x6b5/0x2cf0
[ 1116.479910][T31952]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1116.479923][T31952]  ? futex_wake+0x4ac/0x580
[ 1116.479941][T31952]  ? __fget_files+0x2a/0x420
[ 1116.479951][T31952]  ? __fget_files+0x3a0/0x420
[ 1116.479962][T31952]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1116.479975][T31952]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1116.479988][T31952]  ? rcu_is_watching+0x15/0xb0
[ 1116.480000][T31952]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.480009][T31952]  do_syscall_64+0x15f/0xf80
[ 1116.480018][T31952]  ? trace_irq_disable+0x3b/0x140
[ 1116.480032][T31952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.480041][T31952] RIP: 0033:0x7fb157f9cdd9
[ 1116.480053][T31952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1116.480063][T31952] RSP: 002b:00007fb158ecc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1116.480074][T31952] RAX: ffffffffffffffda RBX: 00007fb158215fa0 RCX: 00007fb157f9cdd9
[ 1116.480081][T31952] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005
[ 1116.480125][T31952] RBP: 00007fb158032d69 R08: 0000000000000000 R09: 0000000000000000
[ 1116.480131][T31952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1116.480136][T31952] R13: 00007fb158216038 R14: 00007fb158215fa0 R15: 00007ffee757c7e8
[ 1116.480147][T31952]  </TASK>
[ 1116.711857][T31952] nbd8: detected capacity change from 0 to 63
[ 1116.718390][ T7762] block nbd8: Receive control failed (result -32)
[ 1116.720529][   T54] block nbd8: Receive control failed (result -32)
[ 1116.724464][T31830] block nbd8: Dead connection, failed to find a fallback
[ 1116.735848][T31830] block nbd8: shutting down sockets
[ 1116.752255][T31830] blk_print_req_error: 138 callbacks suppressed
[ 1116.752273][T31830] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1116.768516][T31830] buffer_io_error: 138 callbacks suppressed
[ 1116.768533][T31830] Buffer I/O error on dev nbd8, logical block 0, async page read
[ 1116.777032][T31830] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1116.780832][T31830] Buffer I/O error on dev nbd8, logical block 1, async page read
[ 1116.787903][T31830] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1116.792232][T31830] Buffer I/O error on dev nbd8, logical block 2, async page read
[ 1116.796195][T31830] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1116.799951][T31830] Buffer I/O error on dev nbd8, logical block 3, async page read
[ 1116.803969][T31830] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1116.807725][T31830] Buffer I/O error on dev nbd8, logical block 0, async page read
[ 1116.810876][T31830] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1116.814737][T31830] Buffer I/O error on dev nbd8, logical block 1, async page read
[ 1116.817151][T31830] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1116.820315][T31830] Buffer I/O error on dev nbd8, logical block 2, async page read
[ 1116.823196][T31830] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1116.826237][T31830] Buffer I/O error on dev nbd8, logical block 3, async page read
[ 1116.828841][T31830] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1116.831811][T31830] Buffer I/O error on dev nbd8, logical block 0, async page read
[ 1116.834435][T31830] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1116.837277][T31830] Buffer I/O error on dev nbd8, logical block 1, async page read
[ 1116.840898][T31830] ldm_validate_partition_table(): Disk read failed.
[ 1116.844782][T31830] Dev nbd8: unable to read RDB block 0
[ 1116.847592][T31830]  nbd8: unable to read partition table
[ 1116.852036][T31830] ldm_validate_partition_table(): Disk read failed.
[ 1116.854744][T31830] Dev nbd8: unable to read RDB block 0
[ 1116.857395][T31830]  nbd8: unable to read partition table
