last executing test programs:

11m21.038016754s ago: executing program 2 (id=1812):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0)

11m20.047386102s ago: executing program 2 (id=1815):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0)
pipe(0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
close(0x4)

11m18.242654648s ago: executing program 2 (id=1819):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="6220d5"], 0x9)

11m15.264194169s ago: executing program 2 (id=1821):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000580)={r3, 0xfc49, 0x20}, 0xc)

11m13.633659134s ago: executing program 2 (id=1823):
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffed6, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r2 = socket$inet(0x2, 0x3, 0x9)
sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}, 0x20048894)

11m8.951375504s ago: executing program 2 (id=1827):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0)
read(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004dc0)=ANY=[@ANYBLOB="640000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b"], 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

10m53.568318399s ago: executing program 32 (id=1827):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0)
read(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004dc0)=ANY=[@ANYBLOB="640000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b"], 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

1.095651191s ago: executing program 3 (id=15979):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2d, &(0x7f0000000040))

1.095380778s ago: executing program 3 (id=15980):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000)

1.037342407s ago: executing program 3 (id=15981):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c0003801400020062617461647630000000000000000000080001"], 0x50}}, 0x0)

1.037121433s ago: executing program 3 (id=15982):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)

967.426543ms ago: executing program 3 (id=15983):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000", 0x3}], 0x1}, 0x0)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)
recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0)

396.561955ms ago: executing program 1 (id=15993):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

336.801117ms ago: executing program 0 (id=15994):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x1)

336.566959ms ago: executing program 1 (id=15995):
unshare(0x2c020400)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x9)

336.47567ms ago: executing program 0 (id=15996):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x51}, 0x2a)

285.054075ms ago: executing program 1 (id=15997):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x1003, r0}, 0x38)

284.865567ms ago: executing program 0 (id=15998):
unshare(0x22020600)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)

227.278386ms ago: executing program 1 (id=15999):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0xd8, &(0x7f0000000300)=""/216}, 0x94)

227.087208ms ago: executing program 0 (id=16000):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x1, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

166.794218ms ago: executing program 1 (id=16001):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f0000000040)="04", 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)

157.176004ms ago: executing program 1 (id=16002):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0x24, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x6c}}, 0x4)

102.825173ms ago: executing program 3 (id=16003):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000480)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x2, @a={0x0, 0x1, 0x6, 0x0, 0x0, 0x1, 0x1, {0x5, 0x0, "", 0x0, 0x4}, 0xaa, 0xd, 0x2, 0x7}}, 0x13)
close(r0)

102.347314ms ago: executing program 0 (id=16004):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
unshare(0x28000600)
close(0x3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000018000000000000000d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000560800000200000085000000b4000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=16005):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100000000000000feffff7f3f007b001100000095"], &(0x7f00000003c0)='GPL\x00', 0x1}, 0x94)

kernel console output (not intermixed with test programs):

61252][T31079] team0: Port device bridge10 removed
[  700.574305][T31079] team0: Port device bridge15 removed
[  700.582433][T31079] team0: Port device bridge16 removed
[  700.590302][T31079] bond7: (slave erspan2): Releasing active interface
[  700.593646][T31079] erspan2: left promiscuous mode
[  700.606796][T31079] bond8: (slave bond9): Releasing backup interface
[  700.618166][T31079] batadv0: left allmulticast mode
[  700.621041][T31079] batadv0: left promiscuous mode
[  700.623357][T31079] bridge0: port 2(batadv0) entered disabled state
[  700.635345][T31079] bond13: (slave bridge21): Releasing backup interface
[  700.638503][T31079] bridge21: left promiscuous mode
[  700.663399][T31079] bond14: (slave bridge22): Releasing backup interface
[  700.667049][T31079] bridge22: left promiscuous mode
[  700.669326][T31079] bridge22: left allmulticast mode
[  700.675568][T31079] batman_adv: batadv0: Interface deactivated: gretap1
[  700.680376][T31079] batman_adv: batadv0: Removing interface: gretap1
[  700.686238][T31079] bond16: (slave veth31): Releasing active interface
[  700.688772][T31079] bond16: (slave veth31): the permanent HWaddr of slave - 0a:af:cc:bd:24:cb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  700.697124][T31079] batadv2: entered promiscuous mode
[  700.706249][T31079] bond16: (slave batadv2): Releasing active interface
[  700.709373][T31079] batadv2: left promiscuous mode
[  700.717181][T31079] bond16: (slave veth33): Releasing active interface
[  700.731875][T31079] bond17: (slave gretap2): Releasing active interface
[  700.739411][T31079] tipc: Resetting bearer <eth:syzkaller0>
[  700.749489][ T7558] lo speed is unknown, defaulting to 1000
[  700.758537][T31084] team0: Mode changed to "activebackup"
[  700.874942][T31106] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  700.879052][T31106] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  701.014841][T31114] batadv_slave_1: entered promiscuous mode
[  701.019297][T31114] __nla_validate_parse: 4 callbacks suppressed
[  701.019312][T31114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10801'.
[  701.052670][T31114] batadv_slave_1 (unregistering): left promiscuous mode
[  701.146476][T31119] netlink: 'syz.3.10804': attribute type 12 has an invalid length.
[  701.348539][T31127] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10807'.
[  701.540585][T31139] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  701.561463][T31141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10815'.
[  701.596854][T31143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10816'.
[  701.800778][T31154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10821'.
[  701.810415][T31154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10821'.
[  701.883083][T31162] netlink: 'syz.0.10823': attribute type 1 has an invalid length.
[  701.939092][T31164] netlink: 'syz.3.10826': attribute type 2 has an invalid length.
[  701.942843][T31164] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  702.066949][T31172] tipc: Resetting bearer <eth:syzkaller0>
[  702.076567][T31173] netlink: 'syz.3.10830': attribute type 1 has an invalid length.
[  702.079792][T31173] netlink: 'syz.3.10830': attribute type 8 has an invalid length.
[  702.123122][T31166] tipc: Resetting bearer <eth:syzkaller0>
[  702.946929][ T7846] tipc: Resetting bearer <eth:syzkaller0>
[  702.949087][T31191] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[  703.063951][T31201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10838'.
[  703.071637][T31201] netlink: 'syz.3.10838': attribute type 10 has an invalid length.
[  703.084991][T31201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10838'.
[  703.395853][T31227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10852'.
[  703.400769][T31227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10852'.
[  703.422667][T31227] bond16: Removing last arp target with arp_interval on
[  704.663342][T31326] syzkaller1: entered promiscuous mode
[  704.669239][T31326] syzkaller1: entered allmulticast mode
[  704.871502][T31333] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  705.563342][T31386] netlink: 'syz.0.10925': attribute type 11 has an invalid length.
[  705.596191][ T7149] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  705.599597][ T7149] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  705.602918][T31386] netlink: 'syz.0.10925': attribute type 11 has an invalid length.
[  705.611540][ T7149] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  705.620902][ T7149] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  705.985300][T31420] geneve4: entered promiscuous mode
[  706.084310][T31428] __nla_validate_parse: 18 callbacks suppressed
[  706.084330][T31428] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10943'.
[  706.090328][T31426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10944'.
[  706.262768][T31434] lo speed is unknown, defaulting to 1000
[  706.816196][T31481] tipc: Resetting bearer <eth:syzkaller0>
[  706.834563][T31480] tipc: Resetting bearer <eth:syzkaller0>
[  706.901055][T31487] tipc: New replicast peer: 255.255.255.255
[  706.904166][T31487] tipc: Enabled bearer <udp:syz2>, priority 5
[  706.930664][T31488] netlink: 'syz.1.10969': attribute type 41 has an invalid length.
[  707.075377][T31502] tipc: Resetting bearer <eth:syzkaller0>
[  707.098689][T31502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10977'.
[  707.102928][T31501] tipc: Resetting bearer <eth:syzkaller0>
[  707.160470][T31509] netlink: 'syz.0.10980': attribute type 2 has an invalid length.
[  707.160756][T31510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10981'.
[  707.163224][T31509] netlink: 'syz.0.10980': attribute type 2 has an invalid length.
[  707.220059][T10231] tipc: Resetting bearer <eth:syzkaller0>
[  707.435935][T31529] bond0: (slave ip6tnl0): refused to change device type
[  707.597548][T31529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10990'.
[  708.148353][T31561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11002'.
[  708.610987][T31581] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.11012'.
[  708.621188][T31583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11013'.
[  708.814959][T31590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11016'.
[  708.828838][T31594] syzkaller1: entered promiscuous mode
[  708.831223][T31594] syzkaller1: entered allmulticast mode
[  708.838429][T31594] gre0: left promiscuous mode
[  708.840386][T31594] gre0: left allmulticast mode
[  708.951062][T31594] bridge15: left promiscuous mode
[  708.952872][T31594] bridge15: left allmulticast mode
[  708.956716][T31594] bridge16: left promiscuous mode
[  708.958895][T31594] bridge16: left allmulticast mode
[  708.961629][T31594] bond7: left promiscuous mode
[  708.963648][T31594] bond7: left allmulticast mode
[  708.974116][T31594] erspan2: left allmulticast mode
[  708.989073][T31594] bond13: left promiscuous mode
[  708.993485][T31594] bond14: left promiscuous mode
[  708.998000][T31594] vlan0: left allmulticast mode
[  709.000077][T31594] bond14: left allmulticast mode
[  709.008276][T31594] bond15: left promiscuous mode
[  709.010134][T31594] bond15: left allmulticast mode
[  709.024310][T31594] tipc: Resetting bearer <eth:syzkaller0>
[  709.027657][T31594] syzkaller0: left promiscuous mode
[  709.029416][T31594] syzkaller0: left allmulticast mode
[  709.032204][T31594] geneve4: left promiscuous mode
[  709.037189][T31594] syzkaller1: left promiscuous mode
[  709.039018][T31594] syzkaller1: left allmulticast mode
[  709.052409][T31595] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  709.061336][ T7154] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  709.066530][ T7154] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.070303][ T7154] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 43567 - 0
[  709.101338][ T7154] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  709.106806][ T7154] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.110518][ T7154] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 43567 - 0
[  709.114481][ T7154] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  709.119527][ T7154] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.122880][ T7154] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 43567 - 0
[  709.126846][ T7154] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  709.130533][ T7154] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.134474][ T7154] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 43567 - 0
[  709.400660][T31609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11025'.
[  710.822333][T31654] bond21: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms
[  710.828628][T31654] bond21: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms
[  710.841792][T31654] bond21: entered allmulticast mode
[  710.844595][T31654] 8021q: adding VLAN 0 to HW filter on device bond21
[  711.281628][T31685] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  711.285419][T31685] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode
[  711.289748][T31685] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  711.430092][T31697] __nla_validate_parse: 2 callbacks suppressed
[  711.430116][T31697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11061'.
[  711.563757][T31709] netlink: 244 bytes leftover after parsing attributes in process `syz.1.11068'.
[  711.580552][T31713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11069'.
[  712.023806][T31742] netlink: 172 bytes leftover after parsing attributes in process `syz.0.11083'.
[  712.028554][T31742] netlink: 172 bytes leftover after parsing attributes in process `syz.0.11083'.
[  712.982246][T31767] netlink: 'syz.3.11095': attribute type 2 has an invalid length.
[  712.990727][T31767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11095'.
[  713.104479][T31775] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11099'.
[  713.108645][T31775] tc_dump_action: action bad kind
[  713.194426][T31784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11103'.
[  713.750348][T31803] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11112'.
[  713.753669][T31803] netlink: 192 bytes leftover after parsing attributes in process `syz.0.11112'.
[  713.790700][T31805] mac80211_hwsim hwsim5 syzkaller1: entered promiscuous mode
[  713.793509][T31805] mac80211_hwsim hwsim5 syzkaller1: entered allmulticast mode
[  714.001798][T31815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  714.103256][T31819] netlink: 'syz.1.11120': attribute type 3 has an invalid length.
[  714.478863][T31845] netlink: 'syz.1.11132': attribute type 5 has an invalid length.
[  714.720482][T31861] netlink: 'syz.3.11139': attribute type 9 has an invalid length.
[  714.726645][T31861] netlink: 'syz.3.11139': attribute type 6 has an invalid length.
[  714.729575][T31861] netlink: 'syz.3.11139': attribute type 7 has an invalid length.
[  714.732059][T31861] netlink: 'syz.3.11139': attribute type 8 has an invalid length.
[  715.822863][T31895] netlink: 'syz.1.11152': attribute type 3 has an invalid length.
[  715.827582][T31895] netlink: 'syz.1.11152': attribute type 16 has an invalid length.
[  716.631951][T31945] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode
[  716.644101][T31945] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode
[  717.551559][T31970] syzkaller0: entered promiscuous mode
[  717.555519][T31970] syzkaller0: entered allmulticast mode
[  717.559478][T31970] tipc: Resetting bearer <eth:syzkaller0>
[  718.321595][T31985] __nla_validate_parse: 10 callbacks suppressed
[  718.321617][T31985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11193'.
[  718.382308][T31985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11193'.
[  718.382389][T31987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11194'.
[  718.404350][T31987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11194'.
[  718.521506][T31994] pim6reg0: tun_chr_ioctl cmd 35111
[  718.667593][T32002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11200'.
[  718.918740][T32013] netlink: 'syz.3.11204': attribute type 1 has an invalid length.
[  718.949369][T32013] 8021q: adding VLAN 0 to HW filter on device bond17
[  718.988403][T32013] vlan1: entered promiscuous mode
[  718.991245][T32013] bond17: entered promiscuous mode
[  718.993933][T32013] vlan1: entered allmulticast mode
[  718.996991][T32013] bond17: entered allmulticast mode
[  719.002812][T32013] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11204'.
[  719.020164][T32013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  719.024301][T32013] bond17: (slave batadv0): making interface the new active one
[  719.027519][T32013] batadv0: entered promiscuous mode
[  719.029656][T32013] batadv0: entered allmulticast mode
[  719.032333][T32013] bond17: (slave batadv0): Enslaving as an active interface with an up link
[  719.141494][T32025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11210'.
[  719.146459][T32025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11210'.
[  719.150402][T32025] netlink: 'syz.1.11210': attribute type 18 has an invalid length.
[  720.209813][T32086] netlink: 'syz.0.11236': attribute type 1 has an invalid length.
[  720.212600][T32086] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.11236'.
[  720.601695][T32118] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11251'.
[  720.772882][T32132] syzkaller1: entered promiscuous mode
[  720.778329][T32132] syzkaller1: entered allmulticast mode
[  720.927912][T32143] lo speed is unknown, defaulting to 1000
[  721.416044][T32172] syzkaller1: entered promiscuous mode
[  721.418601][T32172] syzkaller1: entered allmulticast mode
[  721.718253][T32184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  722.345772][T32227] lo speed is unknown, defaulting to 1000
[  723.005480][T32278] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  723.008856][T32278] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  723.426664][T32299] netlink: 'syz.1.11332': attribute type 20 has an invalid length.
[  723.429564][T32299] __nla_validate_parse: 6 callbacks suppressed
[  723.429575][T32299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11332'.
[  723.444233][ T7149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  723.448432][ T7149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  723.454612][ T7149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  723.458749][ T7149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  723.461866][T32299] netlink: 'syz.1.11332': attribute type 20 has an invalid length.
[  723.465784][T32299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11332'.
[  723.540546][T32305] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11335'.
[  724.173857][T32346] mac80211_hwsim hwsim5 syzkaller1: left promiscuous mode
[  724.193198][T32346] mac80211_hwsim hwsim5 syzkaller1: left allmulticast mode
[  724.218799][T32332] nbd: nbd3 already in use
[  724.231069][T32350] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11354'.
[  724.245697][T32350] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11354'.
[  724.385764][T32360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11359'.
[  724.487024][ T8824] block nbd7: Receive control failed (result -32)
[  724.547416][T32368] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11362'.
[  724.743093][T32379] 8021q: adding VLAN 0 to HW filter on device team0
[  724.768501][T32379] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  724.773723][T32379] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  724.779278][T32379] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  724.780949][T32381] netlink: 67 bytes leftover after parsing attributes in process `syz.1.11367'.
[  724.790621][T32379] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  724.793782][T32379] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  724.833315][ T7156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  724.838732][ T7156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  724.863330][T32381] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  724.879392][ T7156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  724.883706][ T7156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  725.128853][T32389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11371'.
[  725.316050][T32396] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  725.625106][T32408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11380'.
[  726.430840][T32442] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  726.538904][T32445] lo speed is unknown, defaulting to 1000
[  727.442345][T32500] netlink: 'syz.3.11419': attribute type 1 has an invalid length.
[  727.448416][T32500] netlink: 'syz.3.11419': attribute type 1 has an invalid length.
[  727.451682][T32500] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode
[  727.454413][T32500] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode
[  728.194579][T32532] netlink: 'syz.3.11431': attribute type 1 has an invalid length.
[  728.708065][T32559] tipc: Resetting bearer <eth:syzkaller0>
[  728.721084][T32559] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) !
[  728.765864][T32557] tipc: Resetting bearer <eth:syzkaller0>
[  729.329355][T10243] tipc: Resetting bearer <eth:syzkaller0>
[  729.361437][T32598] __nla_validate_parse: 3 callbacks suppressed
[  729.361451][T32598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11462'.
[  729.393024][T32600] IPVS: length: 15 != 8
[  729.439915][T32598] bond19: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  729.478984][T32598] bond19 (unregistering): Released all slaves
[  729.650790][T32611] netlink: 320 bytes leftover after parsing attributes in process `syz.1.11467'.
[  729.656341][T32611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11467'.
[  729.659904][T32611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11467'.
[  729.664234][T32611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11467'.
[  730.152004][T32636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  731.140828][T32675] netlink: 'syz.3.11499': attribute type 4 has an invalid length.
[  731.158882][T32675] netlink: 'syz.3.11499': attribute type 4 has an invalid length.
[  731.510829][T32695] lo speed is unknown, defaulting to 1000
[  732.033698][T32717] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  732.114179][ T9959] bond17: (slave batadv0): link status definitely down, disabling slave
[  732.119279][ T9959] batadv0: left allmulticast mode
[  732.130087][ T9959] bond17: now running without any active interface!
[  732.139693][T32719] tipc: Resetting bearer <eth:syzkaller0>
[  732.182853][T32718] tipc: Resetting bearer <eth:syzkaller0>
[  732.668437][T10231] tipc: Resetting bearer <eth:syzkaller0>
[  732.751211][T32748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11530'.
[  732.837697][T32754] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11533'.
[  732.874386][T32757] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  733.297358][  T314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11546'.
[  733.412867][  T323] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11550'.
[  733.520328][  T332] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11555'.
[  733.524280][  T332] netlink: 'syz.3.11555': attribute type 2 has an invalid length.
[  733.693357][  T345] netlink: 'syz.1.11559': attribute type 2 has an invalid length.
[  733.717718][  T345] : entered promiscuous mode
[  733.816438][  T351] tipc: Resetting bearer <eth:syzkaller0>
[  733.826175][  T351] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  734.310616][  T374] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:20001
[  734.372548][  T377] netlink: 'syz.1.11576': attribute type 4 has an invalid length.
[  734.386673][ T5755] lo speed is unknown, defaulting to 1000
[  735.569296][  T437] openvswitch: netlink: Unknown key attributes 20
[  735.762212][  T444] openvswitch: netlink: Message has 12 unknown bytes.
[  735.766345][  T444] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  735.777267][  T444] __nla_validate_parse: 2 callbacks suppressed
[  735.777281][  T444] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11605'.
[  735.894265][  T466] geneve4: entered promiscuous mode
[  735.900626][ T9959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  735.905759][ T9959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  735.909852][ T9959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  735.919534][ T9959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  735.930843][  T471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11614'.
[  735.935199][  T471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11614'.
[  735.941364][  T471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11614'.
[  735.965600][  T466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11614'.
[  735.969588][  T466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11614'.
[  736.879155][  T521] netlink: 'syz.1.11639': attribute type 5 has an invalid length.
[  736.882992][  T523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11641'.
[  737.203706][  T536] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  737.382472][  T545] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  737.513357][  T551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11654'.
[  737.518510][  T551] smc: net device wg2 applied user defined pnetid SYZ0
[  738.363042][  T612] netlink: 'syz.3.11676': attribute type 10 has an invalid length.
[  738.918333][  T642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  739.346035][  T658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11696'.
[  739.750669][  T693] tipc: Resetting bearer <eth:syzkaller0>
[  739.777477][  T692] tipc: Resetting bearer <eth:syzkaller0>
[  740.026622][  T710] netlink: 'syz.1.11720': attribute type 23 has an invalid length.
[  740.030550][  T710] netlink: 'syz.1.11720': attribute type 21 has an invalid length.
[  740.109362][  T717] tipc: Resetting bearer <eth:syzkaller0>
[  740.152703][  T717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11723'.
[  740.208574][  T717] tipc: Resetting bearer <eth:syzkaller0>
[  740.219095][ T7846] tipc: Resetting bearer <eth:syzkaller0>
[  740.261786][  T722] tipc: Resetting bearer <eth:syzkaller0>
[  740.360548][  T726] pim6reg1: entered promiscuous mode
[  740.362954][  T726] pim6reg1: entered allmulticast mode
[  740.864071][  T752] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  741.124428][  T773] tipc: Resetting bearer <eth:syzkaller0>
[  741.139719][  T770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11746'.
[  741.167602][  T772] tipc: Resetting bearer <eth:syzkaller0>
[  741.239732][T10231] tipc: Resetting bearer <eth:syzkaller0>
[  741.246179][  T780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11749'.
[  741.311245][  T785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11752'.
[  741.347683][  T783] siw: device registration error -23
[  741.400307][  T791] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11755'.
[  741.403912][  T791] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11755'.
[  741.411074][  T791] netlink: 31 bytes leftover after parsing attributes in process `syz.0.11755'.
[  741.443905][  T798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11757'.
[  741.594479][  T812] vti1: entered promiscuous mode
[  741.963441][  T836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11772'.
[  742.069061][  T842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11775'.
[  742.621658][  T880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11793'.
[  742.806618][  T887] xt_time: unknown flags 0xf4
[  743.590967][  T946] tipc: Resetting bearer <eth:syzkaller0>
[  743.641510][  T945] tipc: Resetting bearer <eth:syzkaller0>
[  743.930061][  T970] tipc: Resetting bearer <eth:syzkaller0>
[  743.967642][  T969] tipc: Resetting bearer <eth:syzkaller0>
[  744.331569][ T7873] tipc: Resetting bearer <eth:syzkaller0>
[  744.339822][  T987] netlink: 'syz.0.11836': attribute type 21 has an invalid length.
[  744.869310][ T1019] tap0: tun_chr_ioctl cmd 1074025677
[  744.871454][ T1019] tap0: linktype set to 804
[  744.876045][ T1019] tap0: tun_chr_ioctl cmd 2148553947
[  745.052956][ T1033] netlink: 'syz.1.11859': attribute type 39 has an invalid length.
[  746.216033][   T34] audit: type=1804 audit(1783411212.139:14): pid=1146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11892" name="/newroot/3959/cgroup.controllers" dev="tmpfs" ino=19970 res=1 errno=0
[  746.228901][   T34] audit: type=1800 audit(1783411212.139:15): pid=1146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11892" name="cgroup.controllers" dev="tmpfs" ino=19970 res=0 errno=0
[  746.358345][ T1162] netlink: 'syz.0.11901': attribute type 1 has an invalid length.
[  746.361232][ T1162] __nla_validate_parse: 7 callbacks suppressed
[  746.361241][ T1162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11901'.
[  746.367909][ T1162] netlink: 'syz.0.11901': attribute type 1 has an invalid length.
[  746.375684][ T1162] mac80211_hwsim hwsim5 syzkaller1: entered promiscuous mode
[  746.378562][ T1162] mac80211_hwsim hwsim5 syzkaller1: entered allmulticast mode
[  747.126801][ T1196] x_tables: unsorted underflow at hook 2
[  747.168815][ T1201] tipc: Enabling of bearer <ib:vxcan1> rejected, failed to enable media
[  747.437804][ T1223] netlink: 'syz.1.11929': attribute type 1 has an invalid length.
[  747.475652][ T1223] bond19: entered promiscuous mode
[  747.484383][ T1223] 8021q: adding VLAN 0 to HW filter on device bond19
[  747.713816][ T1229] 8021q: adding VLAN 0 to HW filter on device bond19
[  747.720767][ T1229] bond19: (slave xfrm2): The slave device specified does not support setting the MAC address
[  747.726053][ T1229] bond19: (slave xfrm2): Setting fail_over_mac to active for active-backup mode
[  747.741781][ T1229] bond19: (slave xfrm2): making interface the new active one
[  747.746028][ T1229] xfrm2: entered promiscuous mode
[  747.753443][ T1229] xfrm2: left promiscuous mode
[  748.043251][ T1249] netlink: 'syz.1.11941': attribute type 9 has an invalid length.
[  748.084019][ T1250] tipc: Resetting bearer <eth:syzkaller0>
[  748.087581][ T1250] tipc: Resetting bearer <eth:syzkaller0>
[  748.298581][ T1250] syzkaller0: left promiscuous mode
[  748.306752][ T1250] syzkaller0: left allmulticast mode
[  748.309469][ T1250] tipc: Resetting bearer <eth:syzkaller0>
[  748.312405][ T1250] mac80211_hwsim hwsim5 syzkaller1: left promiscuous mode
[  748.318528][ T1250] mac80211_hwsim hwsim5 syzkaller1: left allmulticast mode
[  748.326950][ T1250] bond21: left allmulticast mode
[  748.544098][ T1286] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  748.807274][ T1306] netlink: 'syz.3.11965': attribute type 1 has an invalid length.
[  748.853804][ T1306] 8021q: adding VLAN 0 to HW filter on device bond18
[  748.856856][ T1310] tipc: Resetting bearer <eth:syzkaller0>
[  749.307844][ T1309] tipc: Resetting bearer <eth:syzkaller0>
[  749.578564][ T7869] tipc: Resetting bearer <eth:syzkaller0>
[  750.020702][ T1366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11990'.
[  751.069400][ T1412] xt_CT: You must specify a L4 protocol and not use inversions on it
[  751.406215][ T1423] tipc: Enabled bearer <eth:vlan0>, priority 30
[  751.539203][ T1430] tipc: Failed to remove unknown binding: 66,0,0/4278190080:1572282411/1572282413
[  751.543388][ T1430] tipc: Failed to remove unknown binding: 66,0,0/4278190080:1572282411/1572282412
[  751.551126][ T1430] tipc: Failed to remove unknown binding: 66,0,0/4278190080:1572282411/1572282413
[  751.578530][ T1430] tipc: Failed to remove unknown binding: 66,0,0/4278190080:1572282411/1572282412
[  751.601206][ T1434] Cannot find del_set index 3 as target
[  751.884893][ T1443] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  752.537767][ T1470] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12029'.
[  752.546737][ T1470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12029'.
[  752.691283][ T1476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  752.986356][ T1480] IPVS: stopping backup sync thread 10003 ...
[  753.698617][ T1519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12046'.
[  753.855637][ T1532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12052'.
[  753.860557][ T1533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12053'.
[  753.866150][ T1533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12053'.
[  754.258803][ T1562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12067'.
[  754.418610][ T1569] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  754.426026][ T1569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12065'.
[  754.783000][ T1587] netlink: 'syz.0.12075': attribute type 1 has an invalid length.
[  754.896177][ T1587] 8021q: adding VLAN 0 to HW filter on device bond22
[  755.642019][ T1590] bond22: (slave veth24): Enslaving as an active interface with a down link
[  755.827638][ T1591] batadv_slave_0: left allmulticast mode
[  755.956502][ T1591] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  755.965090][ T1591] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  755.969903][ T1591] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode
[  755.978676][ T1591] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode
[  755.985291][ T1591] bond0: left promiscuous mode
[  755.988778][ T1591] bridge9: left promiscuous mode
[  755.990707][ T1591] bridge10: left promiscuous mode
[  755.993306][ T1591] geneve3: left promiscuous mode
[  755.995586][ T1591] geneve3: left allmulticast mode
[  755.998014][ T1591] bridge13: left promiscuous mode
[  756.000648][ T1591] bridge13: left allmulticast mode
[  756.003259][ T1591] bond11: left promiscuous mode
[  756.005239][ T1591] bond11: left allmulticast mode
[  756.007351][ T1591] veth19: left allmulticast mode
[  756.009550][ T1591] ip6gre2: left promiscuous mode
[  756.011357][ T1591] ip6gre2: left allmulticast mode
[  756.013761][ T1591] team0: left promiscuous mode
[  756.017293][ T1591] team0: left allmulticast mode
[  756.019519][ T1591] team1: left promiscuous mode
[  756.021359][ T1591] team1: left allmulticast mode
[  756.023161][ T1591] gtp5: left allmulticast mode
[  756.028201][ T1591] gretap3: left allmulticast mode
[  756.030448][ T1591] macsec4: left promiscuous mode
[  756.032388][ T1591] vlan0: left allmulticast mode
[  756.034228][ T1591] bond0: left allmulticast mode
[  756.036739][ T1591] bridge9: left allmulticast mode
[  756.038649][ T1591] bridge10: left allmulticast mode
[  756.040700][ T1591] ip6tnl3: left allmulticast mode
[  756.042528][ T1591] bond14: left promiscuous mode
[  756.055100][ T1591] vlan1: left promiscuous mode
[  756.057152][ T1591] bond17: left promiscuous mode
[  756.059544][ T1591] vlan1: left allmulticast mode
[  756.061882][ T1591] bond17: left allmulticast mode
[  756.070263][ T1591] batadv0: left promiscuous mode
[  756.076453][ T1591] geneve4: left promiscuous mode
[  756.088244][ T1591] vti1: left promiscuous mode
[  756.143923][ T1596] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  756.213740][ T1587] bond22: (slave veth26): Enslaving as an active interface with a down link
[  756.231769][ T1590] bond22: entered allmulticast mode
[  756.303006][ T7149] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  756.313294][ T7149] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  756.342497][ T7149] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  756.346283][ T7149] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  757.056200][ T1632] xfrm0 speed is unknown, defaulting to 1000
[  757.059889][ T1632] xfrm0 speed is unknown, defaulting to 1000
[  757.067928][ T1632] xfrm0 speed is unknown, defaulting to 1000
[  757.073001][ T1632] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  757.082644][ T1632] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  757.091195][ T1632] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  757.115710][ T1632] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  757.160759][ T1632] xfrm0 speed is unknown, defaulting to 1000
[  757.184347][ T1632] xfrm0 speed is unknown, defaulting to 1000
[  757.189077][ T1632] xfrm0 speed is unknown, defaulting to 1000
[  757.630601][ T1661] syzkaller0: entered promiscuous mode
[  757.633580][ T1661] syzkaller0: entered allmulticast mode
[  757.638117][ T1661] tipc: Resetting bearer <eth:syzkaller0>
[  757.873101][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  758.082012][ T1690] openvswitch: netlink: Key type 31 is not supported
[  758.603846][ T1680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  758.985777][ T1731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12134'.
[  758.989889][ T1731] openvswitch: netlink: Missing key (keys=40, expected=80)
[  759.435184][ T1735] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  759.465236][ T1737] sch_tbf: burst 255 is lower than device syzkaller0 mtu (299) !
[  760.170695][ T1758] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12144'.
[  764.000433][ T1765] mac80211_hwsim hwsim5 syzkaller1: entered promiscuous mode
[  764.003848][ T1765] mac80211_hwsim hwsim5 syzkaller1: entered allmulticast mode
[  764.347048][ T1778] netlink: 'syz.0.12151': attribute type 1 has an invalid length.
[  764.350627][ T1778] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12151'.
[  764.354572][ T1778] netlink: 'syz.0.12151': attribute type 1 has an invalid length.
[  764.447594][ T1782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12153'.
[  764.559802][ T1791] netlink: 'syz.3.12158': attribute type 1 has an invalid length.
[  764.671548][ T1799] netlink: 'syz.0.12161': attribute type 4 has an invalid length.
[  766.054524][ T1845] sock: sock_set_timeout: `syz.3.12176' (pid 1845) tries to set negative timeout
[  766.129757][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12177'.
[  766.133901][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12177'.
[  766.161776][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12177'.
[  766.172237][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12177'.
[  766.250231][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12177'.
[  766.255691][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12177'.
[  766.882075][ T1888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12190'.
[  767.590347][ T1932] syzkaller1: entered promiscuous mode
[  767.593188][ T1932] syzkaller1: entered allmulticast mode
[  767.805922][ T1942] netlink: 'syz.3.12215': attribute type 9 has an invalid length.
[  767.808753][ T1942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12215'.
[  767.818211][ T1942] macvlan1: entered promiscuous mode
[  767.820856][ T1942] macvlan1: entered allmulticast mode
[  767.911167][ T1948] xt_time: invalid argument - start or stop time greater than 23:59:59
[  768.094449][ T1966] netlink: 'syz.0.12225': attribute type 15 has an invalid length.
[  768.330813][ T1979] tipc: Enabled bearer <udp:syz2>, priority 5
[  768.389975][ T1981] nbd: couldn't find a device at index 0
[  768.829520][ T2009] netlink: 'syz.3.12246': attribute type 1 has an invalid length.
[  768.903326][ T2009] 8021q: adding VLAN 0 to HW filter on device bond20
[  768.916953][ T2009] bond19: (slave bond20): making interface the new active one
[  768.922826][ T2009] bond19: (slave bond20): Enslaving as an active interface with an up link
[  768.973279][ T2020] netlink: 'syz.3.12249': attribute type 1 has an invalid length.
[  769.091862][ T2030] xt_CONNSECMARK: invalid mode: 254
[  769.365674][ T2048] block nbd8: Unsupported socket: should be TCP or UNIX.
[  769.876312][ T2070] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  770.876898][ T2106] netlink: 'syz.1.12288': attribute type 2 has an invalid length.
[  771.308152][ T2082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  771.749870][ T2157] __nla_validate_parse: 2 callbacks suppressed
[  771.749894][ T2157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12311'.
[  771.762043][ T2157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12311'.
[  772.045931][ T2167] block nbd8: server does not support multiple connections per device.
[  772.051031][ T2167] block nbd8: shutting down sockets
[  772.119791][ T2173] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12318'.
[  772.124765][ T2173] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12318'.
[  772.445511][ T2195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12329'.
[  772.475760][ T2195] bond23: (slave bridge15): Enslaving as an active interface with an up link
[  772.487839][ T2195] macvlan6: entered promiscuous mode
[  772.489575][ T2195] macvlan6: entered allmulticast mode
[  772.491867][ T2195] bond23: (slave macvlan6): Error -98 calling set_mac_address
[  772.580792][ T2204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12333'.
[  772.594943][ T2204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12333'.
[  773.373218][ T2232] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12344'.
[  773.470900][ T2236] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.12346'.
[  773.938713][ T2264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12360'.
[  773.944050][ T2268] xt_hashlimit: size too large, truncated to 1048576
[  774.142476][ T2284] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  774.188665][ T2289] openvswitch: netlink: IP tunnel TTL not specified.
[  774.444597][ T2309] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  774.450158][ T2309] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  775.087457][ T2336] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  775.581698][ T2366] netlink: 'syz.0.12402': attribute type 21 has an invalid length.
[  775.587710][ T2366] netlink: 'syz.0.12402': attribute type 22 has an invalid length.
[  775.591012][ T2366] netlink: 'syz.0.12402': attribute type 23 has an invalid length.
[  775.609401][ T2366] netlink: 'syz.0.12402': attribute type 25 has an invalid length.
[  775.615339][ T2366] netlink: 'syz.0.12402': attribute type 26 has an invalid length.
[  776.631638][ T2457] lo speed is unknown, defaulting to 1000
[  776.634570][ T2457] xfrm0 speed is unknown, defaulting to 1000
[  777.202872][ T2483] bridge16: entered promiscuous mode
[  777.205920][ T2483] bridge16: entered allmulticast mode
[  777.490802][ T2498] netlink: 'syz.3.12458': attribute type 2 has an invalid length.
[  777.502661][ T2498] netlink: 'syz.3.12458': attribute type 1 has an invalid length.
[  777.507093][ T2498] __nla_validate_parse: 10 callbacks suppressed
[  777.507104][ T2498] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12458'.
[  777.582993][ T2506] openvswitch: netlink: Tunnel attr 324 out of range max 16
[  777.917075][ T2533] openvswitch: netlink: Message has 4 unknown bytes.
[  777.962719][ T2529] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  777.969342][T21984] xfrm0 speed is unknown, defaulting to 1000
[  778.940483][ T2565] mac80211_hwsim hwsim5 syzkaller1: left promiscuous mode
[  778.943844][ T2565] mac80211_hwsim hwsim5 syzkaller1: left allmulticast mode
[  779.157349][ T2580] netlink: 'syz.3.12489': attribute type 16 has an invalid length.
[  779.162505][ T2580] netlink: 'syz.3.12489': attribute type 17 has an invalid length.
[  779.481998][ T2612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12494'.
[  779.488556][ T2612] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  780.181222][ T2666] netlink: 'syz.1.12507': attribute type 1 has an invalid length.
[  780.228294][ T2666] 8021q: adding VLAN 0 to HW filter on device bond21
[  780.361239][ T2666] bond21: (slave veth39): Enslaving as an active interface with a down link
[  780.393486][ T2675] 8021q: adding VLAN 0 to HW filter on device batadv3
[  780.405537][ T2675] bond21: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  781.169634][ T2742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  781.926806][ T2815] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI %
[  783.103237][ T2854] netlink: 'syz.1.12564': attribute type 10 has an invalid length.
[  783.116101][ T2854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12564'.
[  783.122682][ T2854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12564'.
[  783.128630][ T2854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12564'.
[  783.190391][ T2858] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  783.320540][ T2873] netlink: 'syz.3.12573': attribute type 2 has an invalid length.
[  783.344214][ T2877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12571'.
[  783.709311][ T2927] sctp: [Deprecated]: syz.0.12586 (pid 2927) Use of int in max_burst socket option.
[  783.709311][ T2927] Use struct sctp_assoc_value instead
[  783.807715][ T2935] bond22 (unregistering): Released all slaves
[  783.866369][ T2946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12592'.
[  783.869572][ T2946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12592'.
[  784.342977][ T2980] sctp: [Deprecated]: syz.0.12610 (pid 2980) Use of int in max_burst socket option.
[  784.342977][ T2980] Use struct sctp_assoc_value instead
[  784.401220][ T2985] bond22: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  784.426823][ T2985] bond22 (unregistering): Released all slaves
[  784.432648][ T2992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12612'.
[  784.438479][ T2992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12612'.
[  784.479167][ T2996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12616'.
[  784.589307][ T3003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12617'.
[  785.187241][ T3054] tipc: Resetting bearer <eth:syzkaller0>
[  785.214414][ T3054] netlink: 'syz.1.12640': attribute type 1 has an invalid length.
[  785.233815][ T3053] tipc: Resetting bearer <eth:syzkaller0>
[  785.548274][ T3085] lo speed is unknown, defaulting to 1000
[  785.551328][ T3085] xfrm0 speed is unknown, defaulting to 1000
[  785.852302][ T3104] 8021q: adding VLAN 0 to HW filter on device bond22
[  785.859287][   T52] tipc: Resetting bearer <eth:syzkaller0>
[  787.473600][ T3199] 8021q: adding VLAN 0 to HW filter on device team0
[  787.553829][ T3196] netlink: 'syz.1.12700': attribute type 1 has an invalid length.
[  788.035740][ T3241] netlink: 'syz.0.12723': attribute type 1 has an invalid length.
[  788.122946][ T3251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  788.713480][ T3252] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  788.763731][ T3257] lo speed is unknown, defaulting to 1000
[  788.767534][ T3257] xfrm0 speed is unknown, defaulting to 1000
[  788.881251][ T3278] netlink: 'syz.3.12730': attribute type 1 has an invalid length.
[  788.905577][ T3278] bond21: entered promiscuous mode
[  788.908130][ T3278] bond21: entered allmulticast mode
[  788.910947][ T3278] 8021q: adding VLAN 0 to HW filter on device bond21
[  790.999591][ T3241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  791.237301][ T3304] __nla_validate_parse: 14 callbacks suppressed
[  791.237316][ T3304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12741'.
[  791.466831][ T3319] rdma_rxe: rxe_newlink: failed to add xfrm0
[  791.628285][ T3336] sctp: [Deprecated]: syz.3.12756 (pid 3336) Use of struct sctp_assoc_value in delayed_ack socket option.
[  791.628285][ T3336] Use struct sctp_sack_info instead
[  791.761493][   T34] audit: type=1804 audit(1783411257.679:16): pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.12763" name="/newroot/3770/cgroup.controllers" dev="tmpfs" ino=19005 res=1 errno=0
[  791.778382][   T34] audit: type=1800 audit(1783411257.679:17): pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12763" name="cgroup.controllers" dev="tmpfs" ino=19005 res=0 errno=0
[  791.963548][ T3372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12772'.
[  792.202715][ T3383] netlink: 'syz.3.12777': attribute type 1 has an invalid length.
[  792.206010][ T3383] netlink: 'syz.3.12777': attribute type 2 has an invalid length.
[  792.378795][ T3414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12788'.
[  792.437062][ T3422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12792'.
[  792.667520][ T3448] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12807'.
[  792.742541][ T3458] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  792.748095][ T3458] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode
[  792.751329][ T3458] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode
[  792.783153][ T3458] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12811'.
[  792.852963][ T3466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12815'.
[  792.882747][ T3468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12816'.
[  793.443674][ T3503] bridge0: entered allmulticast mode
[  793.752232][ T3508] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  793.861281][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12837'.
[  793.996835][ T3518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12838'.
[  794.336355][ T3541] netlink: 'syz.3.12849': attribute type 1 has an invalid length.
[  794.358449][ T3541] bond22: entered promiscuous mode
[  794.360573][ T3541] 8021q: adding VLAN 0 to HW filter on device bond22
[  794.636829][ T3561] netlink: 'syz.0.12857': attribute type 21 has an invalid length.
[  794.640638][ T3561] netlink: 'syz.0.12857': attribute type 21 has an invalid length.
[  794.951733][ T3586] netlink: 'syz.1.12869': attribute type 21 has an invalid length.
[  795.163940][ T3605] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  795.173693][ T3605] mac80211_hwsim hwsim14 +: renamed from syzkaller0
[  795.180571][ T3605] tipc: Disabling bearer <eth:syzkaller0>
[  795.257595][ T3616] openvswitch: netlink: Tunnel attr 157 out of range max 16
[  796.079284][ T3668] netlink: 'syz.1.12905': attribute type 3 has an invalid length.
[  796.747310][ T3693] netlink: 'syz.3.12916': attribute type 1 has an invalid length.
[  796.759843][ T3693] __nla_validate_parse: 10 callbacks suppressed
[  796.759859][ T3693] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12916'.
[  796.868569][ T5690] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  796.876998][ T5690] CPU: 1 UID: 0 PID: 5690 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  796.877014][ T5690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  796.877042][ T5690] Call Trace:
[  796.877047][ T5690]  <TASK>
[  796.877052][ T5690]  dump_stack_lvl+0xe8/0x150
[  796.877069][ T5690]  dump_header+0xd3/0x4b0
[  796.877084][ T5690]  oom_kill_process+0x3ab/0x970
[  796.877097][ T5690]  out_of_memory+0x1064/0x1480
[  796.877106][ T5690]  ? try_charge_memcg+0xbca/0x1590
[  796.877121][ T5690]  ? __pfx_out_of_memory+0x10/0x10
[  796.877129][ T5690]  ? do_raw_spin_unlock+0x4d/0x210
[  796.877145][ T5690]  try_charge_memcg+0xc74/0x1590
[  796.877159][ T5690]  ? __pfx_try_charge_memcg+0x10/0x10
[  796.877166][ T5690]  ? percpu_ref_tryget+0x15/0x180
[  796.877182][ T5690]  ? charge_memcg+0x20/0x2b0
[  796.877191][ T5690]  charge_memcg+0x19c/0x2b0
[  796.877199][ T5690]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  796.877206][ T5690]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  796.877215][ T5690]  swap_cache_alloc_folio+0x4de/0x990
[  796.877232][ T5690]  swap_cache_read_folio+0x44/0x120
[  796.877249][ T5690]  swap_cluster_readahead+0x3a0/0x640
[  796.877261][ T5690]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  796.877277][ T5690]  ? get_vma_policy+0x27b/0x3c0
[  796.877287][ T5690]  swapin_readahead+0x19a/0xc10
[  796.877298][ T5690]  ? swap_table_get+0x1e/0x260
[  796.877307][ T5690]  ? swap_table_get+0x1e/0x260
[  796.877317][ T5690]  ? __pfx_swapin_readahead+0x10/0x10
[  796.877327][ T5690]  ? swap_table_get+0x1e/0x260
[  796.877336][ T5690]  ? swap_table_get+0x1e/0x260
[  796.877344][ T5690]  ? swap_table_get+0x1e/0x260
[  796.877353][ T5690]  ? swap_table_get+0x216/0x260
[  796.877362][ T5690]  ? swap_cache_get_folio+0x2e7/0x2f0
[  796.877374][ T5690]  do_swap_page+0x455/0x5060
[  796.877390][ T5690]  ? __pte_offset_map+0x29/0x240
[  796.877403][ T5690]  ? __lock_acquire+0x683/0x2cf0
[  796.877410][ T5690]  ? do_swap_page+0x124/0x5060
[  796.877419][ T5690]  ? __pfx_do_swap_page+0x10/0x10
[  796.877427][ T5690]  ? __pte_offset_map+0x1ae/0x240
[  796.877438][ T5690]  ? pte_offset_map_rw_nolock+0xea/0x160
[  796.877449][ T5690]  handle_mm_fault+0x124c/0x3080
[  796.877464][ T5690]  ? handle_mm_fault+0xec/0x3080
[  796.877477][ T5690]  ? __pfx_handle_mm_fault+0x10/0x10
[  796.877485][ T5690]  ? lock_vma_under_rcu+0x45a/0x500
[  796.877507][ T5690]  do_user_addr_fault+0xa4d/0x1340
[  796.877521][ T5690]  ? trace_page_fault_user+0x84/0x1e0
[  796.877530][ T5690]  exc_page_fault+0x6a/0xc0
[  796.877541][ T5690]  asm_exc_page_fault+0x26/0x30
[  796.877549][ T5690] RIP: 0033:0x7f753ed5d68e
[  796.877559][ T5690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  796.877566][ T5690] RSP: 002b:00007ffed4c19e28 EFLAGS: 00010246
[  796.877574][ T5690] RAX: 0000000000000000 RBX: 0000555589d01500 RCX: 00007f753ed5d68e
[  796.877579][ T5690] RDX: 00007ffed4c19e80 RSI: 0000000000000000 RDI: 0000000000000000
[  796.877584][ T5690] RBP: 00007ffed4c19eec R08: 0000000000000000 R09: 0000000000000000
[  796.877589][ T5690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  796.877594][ T5690] R13: 00000000000927c0 R14: 00000000000c25b4 R15: 00007ffed4c19f40
[  796.877607][ T5690]  </TASK>
[  796.878928][ T5690] memory: usage 307200kB, limit 307200kB, failcnt 1301
[  797.015824][ T5690] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[  797.018360][ T5690] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  797.021181][ T5690] Memory cgroup stats for /syz1:
[  797.021635][ T5690] cache 0
[  797.026010][ T5690] rss 0
[  797.027158][ T5690] rss_huge 0
[  797.028394][ T5690] shmem 0
[  797.029533][ T5690] mapped_file 0
[  797.030947][ T5690] dirty 0
[  797.032114][ T5690] writeback 0
[  797.033508][ T5690] workingset_refault_anon 2
[  797.036193][ T5690] workingset_refault_file 0
[  797.038168][ T5690] swap 188416
[  797.039609][ T5690] swapcached 208896
[  797.041289][ T5690] pgpgin 312906
[  797.042750][ T5690] pgpgout 312904
[  797.044181][ T5690] pgfault 695454
[  797.046947][ T5690] pgmajfault 3
[  797.048468][ T5690] inactive_anon 4096
[  797.050097][ T5690] active_anon 4096
[  797.051599][ T5690] inactive_file 0
[  797.054037][ T5690] active_file 0
[  797.056938][ T5690] unevictable 0
[  797.058582][ T5690] hierarchical_memory_limit 314572800
[  797.060903][ T5690] hierarchical_memsw_limit 9223372036854771712
[  797.063415][ T5690] total_cache 0
[  797.065474][ T5690] total_rss 0
[  797.066838][ T5690] total_rss_huge 0
[  797.068529][ T5690] total_shmem 0
[  797.070060][ T5690] total_mapped_file 0
[  797.071836][ T5690] total_dirty 0
[  797.073449][ T5690] total_writeback 0
[  797.076165][ T5690] total_workingset_refault_anon 2
[  797.078341][ T5690] total_workingset_refault_file 0
[  797.080356][ T5690] total_swap 188416
[  797.082274][ T5690] total_swapcached 208896
[  797.083999][ T5690] total_pgpgin 312909
[  797.086430][ T5690] total_pgpgout 312907
[  797.088090][ T5690] total_pgfault 695459
[  797.089833][ T5690] total_pgmajfault 3
[  797.091527][ T5690] total_inactive_anon 4096
[  797.093540][ T5690] total_active_anon 4096
[  797.097726][ T5690] total_inactive_file 0
[  797.102382][ T5690] total_active_file 0
[  797.113823][ T5690] total_unevictable 0
[  797.119392][ T5690] anon_cost 0
[  797.122357][ T5690] file_cost 0
[  797.124047][ T5690] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.12908,pid=3673,uid=0
[  797.136045][ T5690] Memory cgroup out of memory: Killed process 3673 (syz.1.12908) total-vm:102232kB, anon-rss:1260kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  797.190057][ T3673] syz.1.12908 (3673) used greatest stack depth: 19712 bytes left
[  797.447013][ T3711] netlink: 'syz.3.12922': attribute type 3 has an invalid length.
[  797.455952][ T3711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12922'.
[  797.742589][ T3727] netlink: 'syz.1.12931': attribute type 11 has an invalid length.
[  798.343562][ T3760] netlink: 88 bytes leftover after parsing attributes in process `syz.1.12945'.
[  798.349487][ T3760] nbd: must specify a size in bytes for the device
[  798.353160][ T3761] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.12946'.
[  798.362904][ T3761] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.12946'.
[  798.493595][ T3767] tipc: Resetting bearer <eth:syzkaller0>
[  798.763167][ T3782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12955'.
[  798.840955][ T3766] tipc: Resetting bearer <eth:syzkaller0>
[  798.925062][ T3793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12959'.
[  798.928749][ T3793] netlink: 'syz.3.12959': attribute type 1 has an invalid length.
[  798.953137][ T3793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  798.968028][ T3793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  799.245215][ T3813] xt_hashlimit: size too large, truncated to 1048576
[  799.327468][ T3820] netlink: 'syz.1.12966': attribute type 4 has an invalid length.
[  799.609208][T10243] tipc: Resetting bearer <eth:syzkaller0>
[  799.703449][ T3846] syzkaller0: entered promiscuous mode
[  799.707958][ T3846] syzkaller0: entered allmulticast mode
[  799.727971][ T3846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  799.732696][ T3844] tipc: Resetting bearer <eth:syzkaller0>
[  799.768963][ T3844] tipc: Disabling bearer <eth:syzkaller0>
[  799.977547][ T3857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12989'.
[  800.642054][ T3916] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  800.650956][ T3916] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  800.654046][ T3916] veth0_virt_wifi: entered allmulticast mode
[  800.660535][ T3916] veth0_virt_wifi: entered promiscuous mode
[  800.821577][ T3931] geneve4: entered promiscuous mode
[  801.023321][ T3952] netlink: 'syz.3.13033': attribute type 1 has an invalid length.
[  801.037162][ T3952] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13033'.
[  801.058354][ T3956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13035'.
[  802.528394][ T3994] netlink: 'syz.3.13049': attribute type 32 has an invalid length.
[  802.531552][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13049'.
[  802.580535][ T3994] bond23: option coupled_control: invalid value (255)
[  802.585890][ T3994] bond23 (unregistering): Released all slaves
[  802.601212][ T3997] netlink: 'syz.3.13049': attribute type 23 has an invalid length.
[  802.804458][ T4016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13055'.
[  802.944487][ T4029] netlink: 'syz.1.13061': attribute type 12 has an invalid length.
[  802.961166][ T4029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13061'.
[  802.979099][ T4029] macsec0: entered promiscuous mode
[  802.989214][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13061'.
[  802.996929][ T4029] macsec0 (unregistering): left promiscuous mode
[  803.146743][ T4040] netlink: 5 bytes leftover after parsing attributes in process `syz.0.13067'.
[  803.195315][ T4046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13068'.
[  803.199978][ T4046] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13068'.
[  803.203721][ T4046] netlink: 'syz.1.13068': attribute type 2 has an invalid length.
[  803.512703][ T4069] syzkaller1: entered promiscuous mode
[  803.515472][ T4069] syzkaller1: entered allmulticast mode
[  803.852681][ T4089] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13090'.
[  803.869264][ T4089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13090'.
[  803.919415][ T4099] tipc: Resetting bearer <eth:syzkaller0>
[  803.970157][ T4101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13094'.
[  807.521295][ T4097] tipc: Resetting bearer <eth:syzkaller0>
[  807.537172][T10231] tipc: Resetting bearer <eth:syzkaller0>
[  807.913305][ T4140] __nla_validate_parse: 4 callbacks suppressed
[  807.913329][ T4140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13112'.
[  808.004123][ T4148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13117'.
[  808.013072][ T4148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13117'.
[  808.076867][ T4155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13119'.
[  808.120464][ T4158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13122'.
[  808.130282][ T4160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13120'.
[  808.135686][ T4160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13120'.
[  808.140062][ T4160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13120'.
[  808.298219][ T4180] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13131'.
[  808.306054][ T4182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13132'.
[  808.364372][ T4186] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  808.398114][ T4188] netlink: 'syz.0.13134': attribute type 9 has an invalid length.
[  808.747237][ T4194] vlan3: entered promiscuous mode
[  808.749213][ T4194] hsr0: entered promiscuous mode
[  808.751797][ T4194] vlan3: entered allmulticast mode
[  808.754204][ T4194] hsr0: entered allmulticast mode
[  808.756676][ T4194] hsr_slave_0: entered allmulticast mode
[  808.758872][ T4194] hsr_slave_1: entered allmulticast mode
[  808.792279][ T4194] hsr_slave_0: left promiscuous mode
[  808.797975][ T4194] hsr_slave_1: left promiscuous mode
[  809.204284][ T4248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  809.502982][ T4273] tipc: Resetting bearer <eth:syzkaller0>
[  809.519670][ T4272] tipc: Resetting bearer <eth:syzkaller0>
[  809.602526][ T7873] tipc: Resetting bearer <eth:syzkaller0>
[  811.007599][ T4283] lo speed is unknown, defaulting to 1000
[  811.011589][ T4283] xfrm0 speed is unknown, defaulting to 1000
[  811.472592][ T4323] ip6gretap2: entered promiscuous mode
[  811.878941][ T4350] netlink: 'syz.3.13208': attribute type 1 has an invalid length.
[  811.922220][ T4354] tipc: Resetting bearer <eth:syzkaller0>
[  811.965925][ T4353] tipc: Resetting bearer <eth:syzkaller0>
[  812.168486][ T4376] tipc: Invalid UDP bearer configuration
[  812.168521][ T4376] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  812.229868][ T4380] ip6tnl6: entered promiscuous mode
[  812.298200][ T4381] bond26: Removing last arp target with arp_interval on
[  812.409541][ T7873] tipc: Resetting bearer <eth:syzkaller0>
[  812.902968][ T4426] mac80211_hwsim hwsim7 wlan0: left promiscuous mode
[  812.907675][ T4426] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  812.918504][T21981] lo speed is unknown, defaulting to 1000
[  812.921120][T21981] syz2: Port: 1 Link ACTIVE
[  813.578308][ T4481] netlink: 'syz.1.13265': attribute type 2 has an invalid length.
[  814.102853][ T4486] "syz.1.13267" (4486) uses obsolete ecb(arc4) skcipher
[  814.388032][ T4508] __nla_validate_parse: 11 callbacks suppressed
[  814.388052][ T4508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13277'.
[  814.749828][ T4543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13291'.
[  815.617924][ T4549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  815.788652][ T4587] netlink: 'syz.3.13309': attribute type 4 has an invalid length.
[  815.792063][   T34] audit: type=1800 audit(1783411281.709:18): pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13309" name="blkio.bfq.time_recursive" dev="tmpfs" ino=20037 res=0 errno=0
[  815.850086][ T4592] xt_cgroup: invalid path, errno=-2
[  815.886288][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13313'.
[  815.904370][ T4599] netlink: 'syz.0.13312': attribute type 1 has an invalid length.
[  815.952865][ T4602] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13314'.
[  815.964510][ T4602] netlink: 43 bytes leftover after parsing attributes in process `syz.1.13314'.
[  815.971268][ T4602] netlink: 'syz.1.13314': attribute type 6 has an invalid length.
[  815.974553][ T4602] netlink: 'syz.1.13314': attribute type 5 has an invalid length.
[  815.980382][ T4602] netlink: 43 bytes leftover after parsing attributes in process `syz.1.13314'.
[  816.064018][ T4599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13312'.
[  816.087442][ T4599] 8021q: adding VLAN 0 to HW filter on device bond27
[  816.228048][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13325'.
[  816.253880][ T4626] 8021q: adding VLAN 0 to HW filter on device bond23
[  816.289474][ T4626] 8021q: adding VLAN 0 to HW filter on device bond24
[  816.295736][ T4626] bond23: (slave bond24): Enslaving as an active interface with an up link
[  816.303276][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13325'.
[  816.328230][ T4626] bond23 (unregistering): (slave bond24): Releasing backup interface
[  816.338610][ T4626] bond23 (unregistering): Released all slaves
[  816.788224][ T4660] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  816.887020][ T4676] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  817.045263][ T4697] IPVS: Unknown mcast interface: macsec0
[  817.178896][ T4708] netlink: 252 bytes leftover after parsing attributes in process `syz.3.13363'.
[  817.392629][ T4726] openvswitch: netlink: Missing valid actions attribute.
[  817.395621][ T4726] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  817.847644][ T5684] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  817.962281][ T4759] xt_TCPMSS: Only works on TCP SYN packets
[  818.269258][ T4766] netlink: 'syz.0.13388': attribute type 1 has an invalid length.
[  818.297134][ T4766] bond28: (slave gretap4): making interface the new active one
[  818.304285][ T4766] bond28: (slave gretap4): Enslaving as an active interface with an up link
[  818.319378][ T4766] vlan6: entered allmulticast mode
[  818.322099][ T4766] bond28: entered allmulticast mode
[  818.346049][ T4766] gretap4: entered allmulticast mode
[  818.349852][ T4766] bond28: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  819.066434][ T4803] syzkaller1: entered promiscuous mode
[  819.068936][ T4803] syzkaller1: entered allmulticast mode
[  819.570002][ T4862] netlink: 'syz.1.13421': attribute type 62 has an invalid length.
[  819.721376][ T4873] __nla_validate_parse: 5 callbacks suppressed
[  819.721401][ T4873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13426'.
[  819.777218][ T4878] netlink: 67 bytes leftover after parsing attributes in process `syz.1.13425'.
[  820.278597][ T4921] bond23: entered allmulticast mode
[  820.322029][ T4921] macvlan2: entered promiscuous mode
[  820.324492][ T4921] macvlan2: entered allmulticast mode
[  820.331814][ T4921] bond23: entered promiscuous mode
[  820.338013][ T4921] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  821.151522][ T4921] bond23: left promiscuous mode
[  821.190207][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13447'.
[  821.238455][ T4930] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  821.424189][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13448'.
[  821.442340][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13455'.
[  821.561885][ T4954] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  821.638065][ T4960] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13460'.
[  821.642424][ T4960] netlink: 47 bytes leftover after parsing attributes in process `syz.0.13460'.
[  821.646132][ T4960] netlink: 'syz.0.13460': attribute type 6 has an invalid length.
[  821.649441][ T4960] netlink: 47 bytes leftover after parsing attributes in process `syz.0.13460'.
[  821.653753][ T4962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  821.710818][ T4964] bond24: option resend_igmp: invalid value (2878)
[  821.713634][ T4964] bond24: option resend_igmp: allowed values 0 - 255
[  821.721336][ T4964] bond24 (unregistering): Released all slaves
[  821.807641][ T4969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13464'.
[  822.282178][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13486'.
[  822.478427][ T5029] tipc: Resetting bearer <eth:syzkaller0>
[  822.619255][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  822.623045][ T5038] netlink: 'syz.1.13491': attribute type 1 has an invalid length.
[  822.627330][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  822.631370][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  822.635938][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  822.992409][ T5063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  823.188070][ T5072] netlink: 'syz.0.13504': attribute type 1 has an invalid length.
[  824.426314][ T5153] syzkaller0: entered promiscuous mode
[  824.428859][ T5153] syzkaller0: entered allmulticast mode
[  824.747318][ T5182] __nla_validate_parse: 7 callbacks suppressed
[  824.747338][ T5182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13555'.
[  824.761909][ T5182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13555'.
[  824.973691][ T5200] netlink: 'syz.1.13563': attribute type 1 has an invalid length.
[  825.045860][ T5204] IPv6: Can't replace route, no match found
[  825.910271][ T5245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13583'.
[  826.228903][ T5269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13595'.
[  826.287657][ T5270] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  826.757101][ T5288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  826.808412][ T5288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  826.819396][ T5288] veth1_vlan: left promiscuous mode
[  826.823669][ T5288] veth0_vlan: entered promiscuous mode
[  826.833583][ T5288] veth1_vlan: entered promiscuous mode
[  826.850138][ T5288] 8021q: adding VLAN 0 to HW filter on device bond1
[  826.862999][ T5288] 8021q: adding VLAN 0 to HW filter on device bond2
[  826.890910][ T5295] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13607'.
[  826.930141][ T5288] tipc: Resetting bearer <eth:syzkaller0>
[  826.939785][ T5288] 8021q: adding VLAN 0 to HW filter on device bond3
[  826.948720][ T5288] 8021q: adding VLAN 0 to HW filter on device bond0
[  826.953140][ T5288] 8021q: adding VLAN 0 to HW filter on device bond4
[  826.961037][ T5288] 8021q: adding VLAN 0 to HW filter on device bond5
[  826.966369][ T5288] 8021q: adding VLAN 0 to HW filter on device bond6
[  826.970102][ T5288] 8021q: adding VLAN 0 to HW filter on device bond7
[  826.975712][ T5288] bridge0: port 2(batadv1) entered blocking state
[  826.978358][ T5288] bridge0: port 2(batadv1) entered listening state
[  826.981595][ T5288] 8021q: adding VLAN 0 to HW filter on device batadv1
[  826.987300][ T5288] 8021q: adding VLAN 0 to HW filter on device bond8
[  826.990572][ T5288] 8021q: adding VLAN 0 to HW filter on device bond9
[  826.993789][ T5288] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  827.006535][   T24] batman_adv: batadv0: Interface activated: vlan4
[  827.033942][ T7873] bridge0: port 1(vlan3) entered blocking state
[  827.036165][ T7873] bridge0: port 1(vlan3) entered listening state
[  827.060715][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  827.066091][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  827.069921][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  827.073410][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  827.136664][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  827.140776][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  827.164260][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  827.168908][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  827.250049][ T7156] bond5: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  827.272368][ T7156] bond5: (slave veth0_to_bond): making interface the new active one
[  827.288572][ T7156] bond5: active interface up!
[  827.331926][ T5305] netlink: 'syz.0.13611': attribute type 22 has an invalid length.
[  827.336103][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13611'.
[  827.340785][ T5305] netlink: 'syz.0.13611': attribute type 22 has an invalid length.
[  827.344336][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13611'.
[  827.621200][ T5323] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  827.668911][ T5327] netlink: 'syz.3.13621': attribute type 3 has an invalid length.
[  827.671927][ T5327] netlink: 'syz.3.13621': attribute type 1 has an invalid length.
[  827.676533][ T5327] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13621'.
[  827.812523][ T5334] netlink: 144 bytes leftover after parsing attributes in process `syz.3.13623'.
[  828.039186][ T5349] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  828.087603][ T5349] netlink: 'syz.3.13627': attribute type 49 has an invalid length.
[  828.301463][ T5364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13629'.
[  828.687865][ T5338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  828.694127][ T5362] netlink: 'syz.1.13629': attribute type 1 has an invalid length.
[  829.604529][ T7153] tipc: Subscription rejected, illegal request
[  829.851627][ T5447] __nla_validate_parse: 4 callbacks suppressed
[  829.851644][ T5447] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13668'.
[  829.933824][ T5451] syzkaller0: entered promiscuous mode
[  829.937028][ T5451] syzkaller0: entered allmulticast mode
[  830.454345][ T5475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13681'.
[  830.469055][ T5478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13682'.
[  830.576986][ T5484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13686'.
[  830.639846][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13689'.
[  830.652684][ T5490] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  830.779809][ T5509] tipc: Resetting bearer <eth:syzkaller0>
[  830.813305][ T5508] tipc: Resetting bearer <eth:syzkaller0>
[  830.909250][ T7869] tipc: Resetting bearer <eth:syzkaller0>
[  830.953466][ T5523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13701'.
[  831.008038][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13701'.
[  831.523534][ T5566] tipc: Resetting bearer <eth:syzkaller0>
[  831.544148][ T5568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13719'.
[  831.599402][ T5574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13722'.
[  831.951078][ T5611] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13739'.
[  832.118020][ T5624] xt_ecn: cannot match TCP bits for non-tcp packets
[  832.282007][ T5636] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  832.291697][ T5636] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  832.528144][ T5660] netlink: 'syz.3.13761': attribute type 3 has an invalid length.
[  832.629157][ T5668] netlink: 'syz.0.13765': attribute type 1 has an invalid length.
[  833.021108][ T5696] netlink: 'syz.3.13777': attribute type 1 has an invalid length.
[  834.069677][ T5808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  834.127013][ T5808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  834.184427][ T5815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  834.344344][ T5826] netlink: 'syz.1.13830': attribute type 83 has an invalid length.
[  834.951643][ T5874] smc: net device wlan0 applied user defined pnetid SYZ0
[  835.010956][ T5878] __nla_validate_parse: 7 callbacks suppressed
[  835.010973][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13850'.
[  835.113795][ T5882] netlink: 'syz.3.13852': attribute type 7 has an invalid length.
[  835.119287][ T5882] netlink: 148 bytes leftover after parsing attributes in process `syz.3.13852'.
[  835.580965][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13867'.
[  835.707284][ T5923] syzkaller0: entered promiscuous mode
[  835.710767][ T5923] syzkaller0: entered allmulticast mode
[  835.722992][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13872'.
[  835.729506][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13872'.
[  835.821538][ T5930] tipc: Resetting bearer <eth:syzkaller0>
[  835.827858][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13875'.
[  835.832031][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13875'.
[  835.861049][ T5930] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13875'.
[  835.880569][ T5929] tipc: Resetting bearer <eth:syzkaller0>
[  835.915772][ T5934] netlink: 'syz.3.13877': attribute type 1 has an invalid length.
[  836.142915][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13885'.
[  836.148215][ T5954] block nbd8: Unsupported socket: should be TCP or UNIX.
[  836.178095][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13884'.
[  836.292488][ T5963] siw: device registration error -23
[  836.681264][ T5990] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  836.690688][ T5990] batman_adv: batadv0: Adding interface: gretap5
[  836.699361][ T5990] batman_adv: batadv0: Interface activated: gretap5
[  836.888802][ T7869] tipc: Resetting bearer <eth:syzkaller0>
[  837.132199][ T6035] netlink: 'syz.1.13917': attribute type 2 has an invalid length.
[  837.257409][ T6041] bond25: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  837.263257][ T6041] bond25 (unregistering): Released all slaves
[  837.671407][ T6066] netlink: 'syz.1.13931': attribute type 1 has an invalid length.
[  838.743897][ T6140] vlan0: entered promiscuous mode
[  838.748130][ T6140] bond14: entered promiscuous mode
[  838.837655][ T6150] netlink: 'syz.0.13967': attribute type 8 has an invalid length.
[  840.094016][ T6230] netlink: 'syz.1.14007': attribute type 2 has an invalid length.
[  840.099420][ T6230] netlink: 'syz.1.14007': attribute type 11 has an invalid length.
[  840.102957][ T6230] __nla_validate_parse: 10 callbacks suppressed
[  840.102975][ T6230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14007'.
[  840.429883][ T6263] netlink: 'syz.1.14020': attribute type 1 has an invalid length.
[  840.476771][ T6263] macvtap0: entered allmulticast mode
[  840.488811][ T6263] macvtap1: entered allmulticast mode
[  840.500763][ T6263] bond25: (slave bridge32): making interface the new active one
[  840.506630][ T6263] bond25: (slave bridge32): Enslaving as an active interface with an up link
[  840.631486][ T6281] netlink: 'syz.3.14027': attribute type 5 has an invalid length.
[  840.750545][ T6294] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14033'.
[  840.781611][ T6288] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  840.787514][ T6295] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  840.791225][ T6295] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  840.943072][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14040'.
[  840.949818][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14040'.
[  840.953784][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14040'.
[  840.961554][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14040'.
[  840.966012][ T6308] netlink: 'syz.1.14040': attribute type 6 has an invalid length.
[  841.010570][ T6311] netlink: 'syz.1.14042': attribute type 6 has an invalid length.
[  841.070913][ T6314] bridge_slave_1: default FDB implementation only supports local addresses
[  841.230828][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14049'.
[  841.866858][ T6352] netlink: 'syz.3.14060': attribute type 3 has an invalid length.
[  842.215853][ T6334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  842.366328][ T6369] netlink: 'syz.1.14068': attribute type 2 has an invalid length.
[  842.631858][ T6383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14074'.
[  842.934236][ T6396] openvswitch: netlink: Duplicate key (type 6).
[  843.044087][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14082'.
[  843.523698][ T6387] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  843.992501][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14093'.
[  844.444104][ T6453] validate_nla: 1 callbacks suppressed
[  844.444137][ T6453] netlink: 'syz.1.14107': attribute type 1 has an invalid length.
[  844.449861][ T6453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  844.454020][ T6451] netlink: 'syz.3.14106': attribute type 5 has an invalid length.
[  845.142295][ T6510] syzkaller1: entered promiscuous mode
[  845.144545][ T6510] syzkaller1: entered allmulticast mode
[  845.250695][ T6516] netlink: 'syz.1.14135': attribute type 7 has an invalid length.
[  845.402729][ T6520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  845.408042][ T6520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  845.501037][ T6520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  845.505940][ T6520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  845.656872][ T6520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  845.663211][ T6520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  845.762411][ T6520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  845.769426][ T6520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  845.930179][ T7156] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  845.933083][ T7156] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  845.947353][ T7154] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  845.950249][ T7154] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  845.983331][ T7154] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  845.986787][ T7154] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  846.026475][ T7154] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  846.030484][ T7154] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  846.184455][ T6561] nbd: socks must be embedded in a SOCK_ITEM attr
[  846.188069][ T6561] block nbd8: shutting down sockets
[  846.407304][ T6592] tipc: Failed to remove unknown binding: 66,0,0/2807740523:1430865862/1430865864
[  846.410820][ T6592] tipc: Failed to remove unknown binding: 66,0,0/2807740523:1430865862/1430865863
[  846.414285][ T6592] tipc: Failed to remove unknown binding: 66,0,0/2807740523:1430865862/1430865864
[  846.418148][ T6592] tipc: Failed to remove unknown binding: 66,0,0/2807740523:1430865862/1430865863
[  846.619070][ T6611] __nla_validate_parse: 5 callbacks suppressed
[  846.619081][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14177'.
[  846.724228][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14180'.
[  847.518531][ T6656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14199'.
[  847.642239][ T6664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14203'.
[  847.772049][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14207'.
[  847.785536][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14207'.
[  847.877613][ T6681] syzkaller1: entered promiscuous mode
[  847.879704][ T6681] syzkaller1: entered allmulticast mode
[  847.927950][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14209'.
[  848.006309][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14209'.
[  848.333493][ T6707] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14224'.
[  848.337810][ T6707] netlink: 19 bytes leftover after parsing attributes in process `syz.3.14224'.
[  848.485554][   T34] audit: type=1804 audit(1783411314.399:19): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.14228" name="/newroot/4766/cgroup.controllers" dev="tmpfs" ino=24043 res=1 errno=0
[  848.501617][   T34] audit: type=1800 audit(1783411314.399:20): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14228" name="cgroup.controllers" dev="tmpfs" ino=24043 res=0 errno=0
[  848.611586][ T6730] netlink: 'syz.3.14231': attribute type 26 has an invalid length.
[  848.615702][ T6730] netlink: 'syz.3.14231': attribute type 26 has an invalid length.
[  848.736841][ T6738] netlink: 'syz.3.14235': attribute type 4 has an invalid length.
[  848.828856][ T6744] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  849.199849][ T6775] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  849.234276][ T6775] tipc: Resetting bearer <eth:syzkaller0>
[  849.291698][ T6780] netlink: 'syz.0.14254': attribute type 1 has an invalid length.
[  849.317251][ T6780] bond30: entered promiscuous mode
[  849.320301][ T6780] 8021q: adding VLAN 0 to HW filter on device bond30
[  849.353573][ T6780] bond30: (slave bridge17): making interface the new active one
[  849.357495][ T6780] bridge17: entered promiscuous mode
[  849.361521][ T6780] bond30: (slave bridge17): Enslaving as an active interface with an up link
[  849.390131][ T6780] bond30: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  849.396427][ T6780] bond30: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  849.929986][ T6807] netlink: 'syz.3.14267': attribute type 4 has an invalid length.
[  850.122562][ T6819] tipc: Resetting bearer <eth:syzkaller0>
[  850.127749][ T6819] tipc: Resetting bearer <eth:syzkaller0>
[  850.502018][ T6845] bond26: entered promiscuous mode
[  850.504252][ T6845] bond26: entered allmulticast mode
[  850.642853][ T6858] netlink: 'syz.1.14290': attribute type 9 has an invalid length.
[  850.647320][ T6858] netlink: 'syz.1.14290': attribute type 6 has an invalid length.
[  851.015620][T10236] tipc: Resetting bearer <eth:syzkaller0>
[  852.083203][ T6968] tipc: Resetting bearer <eth:syzkaller0>
[  852.109301][ T6967] tipc: Resetting bearer <eth:syzkaller0>
[  853.551938][ T7869] tipc: Resetting bearer <eth:syzkaller0>
[  853.586230][ T7033] netlink: 'syz.1.14368': attribute type 4 has an invalid length.
[  853.637780][ T7037] __nla_validate_parse: 13 callbacks suppressed
[  853.637793][ T7037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14370'.
[  853.831619][ T7061] xt_time: invalid argument - start or stop time greater than 23:59:59
[  853.912927][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14382'.
[  853.918938][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14382'.
[  853.930945][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14382'.
[  853.936327][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14382'.
[  853.941499][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14382'.
[  853.945800][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14382'.
[  853.953015][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14382'.
[  853.964934][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14382'.
[  853.969717][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14382'.
[  853.998107][ T7071] veth1_macvtap: left promiscuous mode
[  854.001553][ T7071] veth1_macvtap: entered promiscuous mode
[  854.004484][ T7071] geneve0: left promiscuous mode
[  854.009863][ T7071] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  854.012495][ T7071] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  854.016583][ T7071] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  854.019703][ T7071] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  854.023231][ T7071] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  854.026582][ T7071] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[  854.030950][ T7071] geneve0: entered promiscuous mode
[  854.033992][ T7071] 8021q: adding VLAN 0 to HW filter on device bond1
[  854.059237][ T7071] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  854.081044][ T7071] mac80211_hwsim hwsim14 +: left promiscuous mode
[  854.084143][ T7071] mac80211_hwsim hwsim14 +: left allmulticast mode
[  854.088908][ T7071] A link change request failed with some changes committed already. Interface + may have been left with an inconsistent configuration, please check.
[  854.156800][ T7154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  854.167549][ T7154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  854.177576][ T7073] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  854.190100][ T7154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  854.196477][ T7154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  854.549486][ T7108] netlink: 'syz.3.14398': attribute type 3 has an invalid length.
[  854.553141][ T7108] netlink: 'syz.3.14398': attribute type 3 has an invalid length.
[  854.769737][ T7121] tipc: Resetting bearer <eth:syzkaller0>
[  854.838044][ T7119] tipc: Resetting bearer <eth:syzkaller0>
[  855.885603][T10231] tipc: Resetting bearer <eth:syzkaller0>
[  855.923126][ T7185] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  856.178795][ T7207] xt_CT: You must specify a L4 protocol and not use inversions on it
[  856.319592][ T7213] veth0: entered promiscuous mode
[  856.406044][ T7211] veth0: left promiscuous mode
[  856.828637][ T7234] netlink: 'syz.0.14452': attribute type 4 has an invalid length.
[  857.436265][ T7287] tipc: Resetting bearer <eth:syzkaller0>
[  857.465096][    C1] bridge0: port 1(vlan3) entered learning state
[  857.468508][    C1] bridge0: port 2(batadv1) entered learning state
[  857.491357][ T7286] tipc: Resetting bearer <eth:syzkaller0>
[  857.520352][ T7292] netlink: 'syz.0.14478': attribute type 29 has an invalid length.
[  857.796811][ T7305] bridge33: entered promiscuous mode
[  857.805605][ T7305] bridge33: entered allmulticast mode
[  857.887244][ T7878] tipc: Resetting bearer <eth:syzkaller0>
[  858.518281][ T7351] netlink: 'syz.1.14500': attribute type 16 has an invalid length.
[  858.654176][ T7357] xt_CT: You must specify a L4 protocol and not use inversions on it
[  858.862376][ T7369] netlink: 'syz.1.14508': attribute type 2 has an invalid length.
[  858.987190][ T7377] : renamed from team_slave_1 (while UP)
[  859.250172][ T7393] __nla_validate_parse: 59 callbacks suppressed
[  859.250196][ T7393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14519'.
[  859.301148][ T7397] pimreg: tun_chr_ioctl cmd 2147767520
[  859.442680][ T7405] netlink: 'syz.3.14525': attribute type 27 has an invalid length.
[  859.474275][ T7407] xt_CT: You must specify a L4 protocol and not use inversions on it
[  860.115200][ T7405] macvlan1: left promiscuous mode
[  860.122630][ T7405] macvlan1: left allmulticast mode
[  860.132361][ T7405] bond21: left promiscuous mode
[  860.134520][ T7405] bond21: left allmulticast mode
[  860.137034][ T7405] bond22: left promiscuous mode
[  860.141037][ T7405] batman_adv: batadv0: Interface deactivated: gretap5
[  860.242982][ T7408] veth1_macvtap: left promiscuous mode
[  860.253043][ T7408] veth1_macvtap: entered promiscuous mode
[  860.257225][ T7408] geneve0: left promiscuous mode
[  860.262863][ T7408] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  860.266999][ T7408] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  860.270650][ T7408] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  860.275842][ T7408] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  860.280441][ T7408] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[  860.285628][ T7408] geneve0: entered promiscuous mode
[  860.288817][ T7408] 8021q: adding VLAN 0 to HW filter on device bond1
[  860.305469][ T7408] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  860.310905][ T7408] A link change request failed with some changes committed already. Interface + may have been left with an inconsistent configuration, please check.
[  860.345254][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14533'.
[  860.370180][ T7423] xt_hashlimit: size too large, truncated to 1048576
[  860.413264][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14533'.
[  860.426227][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14533'.
[  860.431324][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14533'.
[  860.443012][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14533'.
[  860.456014][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14533'.
[  860.461300][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14533'.
[  860.468568][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14533'.
[  860.471941][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14536'.
[  860.490800][ T7430] 8021q: adding VLAN 0 to HW filter on device bond25
[  860.903661][ T7462] tipc: Resetting bearer <eth:syzkaller0>
[  860.935457][ T7461] tipc: Resetting bearer <eth:syzkaller0>
[  861.196369][ T7488] ip6t_rpfilter: unknown options
[  861.329850][ T7878] tipc: Resetting bearer <eth:syzkaller0>
[  861.432907][ T7511] netlink: 'syz.1.14571': attribute type 1 has an invalid length.
[  861.436425][ T7511] netlink: 'syz.1.14571': attribute type 1 has an invalid length.
[  861.451373][ T7512] bridge22: entered promiscuous mode
[  861.461856][ T7512] bridge22: entered allmulticast mode
[  861.472417][ T7512] team0: Port device bridge22 added
[  861.541309][ T7512] bridge23: entered promiscuous mode
[  861.543292][ T7512] bridge23: entered allmulticast mode
[  861.552263][ T7512] team0: Port device bridge23 added
[  862.633154][ T7587] tipc: Resetting bearer <eth:syzkaller0>
[  862.687522][ T7586] tipc: Resetting bearer <eth:syzkaller0>
[  863.057337][ T7599] netlink: 'syz.1.14609': attribute type 8 has an invalid length.
[  863.173381][ T7605] veth0_virt_wifi: left allmulticast mode
[  863.179620][ T7605] veth0_virt_wifi: left promiscuous mode
[  863.182379][ T7605] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  863.233877][ T7605] bond1: (slave veth3): Releasing backup interface
[  863.256237][ T7605] bond5: (slave ip6gretap2): Releasing active interface
[  863.267796][ T7605] bond6: (slave bond7): Releasing backup interface
[  863.277430][ T7605] bond8: (slave erspan2): Releasing active interface
[  863.307705][ T7605] bond9: (slave bond10): Releasing backup interface
[  863.315271][ T7605] bond9: (slave bond10): the permanent HWaddr of slave - b6:b3:a7:08:80:40 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  863.337964][ T7605] bond9: (slave gretap2): Releasing backup interface
[  863.344013][ T7605] bond0: (slave bridge9): Removing an active aggregator
[  863.356540][ T7605] bond0: (slave bridge9): Releasing backup interface
[  863.359834][ T7605] bond0: (slave bridge9): the permanent HWaddr of slave - 06:ba:99:52:c7:c5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  863.376179][ T7605] bond0: (slave bridge10): Releasing backup interface
[  863.396792][ T7605] bond11: (slave bridge15): Releasing active interface
[  863.408272][ T7605] bond12: (slave veth19): Releasing backup interface
[  863.412323][ T7605] bond17: (slave batadv0): Releasing active interface
[  863.422165][ T7605] bond19: (slave bond20): Releasing backup interface
[  863.431309][ T7605] batman_adv: batadv0: Removing interface: gretap5
[  863.443276][ T7605] team0: Port device bridge22 removed
[  863.453532][ T7605] team0: Port device bridge23 removed
[  863.469440][T10236] tipc: Resetting bearer <eth:syzkaller0>
[  863.489138][ T7621] team0: Mode changed to "activebackup"
[  864.448703][ T7684] netlink: 'syz.0.14641': attribute type 9 has an invalid length.
[  864.558775][ T7695] IPv6: sit6: Disabled Multicast RS
[  865.674545][ T7733] __nla_validate_parse: 7 callbacks suppressed
[  865.674569][ T7733] netlink: 220 bytes leftover after parsing attributes in process `syz.0.14661'.
[  865.683386][ T7733] netlink: 220 bytes leftover after parsing attributes in process `syz.0.14661'.
[  865.687291][ T7733] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14661'.
[  866.182378][ T7747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14666'.
[  866.601553][ T7737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  866.608796][ T7745] netlink: 136 bytes leftover after parsing attributes in process `syz.3.14665'.
[  866.920169][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14688'.
[  866.926471][ T7797] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14689'.
[  867.083202][ T7806] syzkaller1: entered promiscuous mode
[  867.085358][ T7806] syzkaller1: entered allmulticast mode
[  867.178450][ T7812] netlink: 'syz.3.14694': attribute type 1 has an invalid length.
[  867.348787][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14698'.
[  867.485438][ T7830] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  867.767434][ T7844] xt_CT: You must specify a L4 protocol and not use inversions on it
[  867.901936][ T7851] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000
[  867.971223][ T7799] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  868.197617][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14722'.
[  868.291836][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14727'.
[  868.591564][ T7915] openvswitch: netlink: Missing key (keys=40, expected=100)
[  869.070853][ T7956] netlink: 'syz.3.14760': attribute type 15 has an invalid length.
[  869.520539][   T34] audit: type=1800 audit(1783411335.439:21): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14764" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=23692 res=0 errno=0
[  870.406224][ T8028] netlink: 'syz.3.14791': attribute type 9 has an invalid length.
[  870.532369][ T8038] ip6tnl7: entered allmulticast mode
[  870.546056][   T13] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  870.552224][   T13] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  870.585825][T17534] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  870.685181][T17534] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  870.691612][ T8059] __nla_validate_parse: 7 callbacks suppressed
[  870.691631][ T8059] netlink: 292 bytes leftover after parsing attributes in process `syz.1.14807'.
[  870.693292][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14808'.
[  870.765527][T17534] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  870.899397][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14815'.
[  871.054012][ T8088] tipc: Resetting bearer <eth:syzkaller0>
[  871.096601][ T8088] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14823'.
[  871.113404][ T8086] tipc: Resetting bearer <eth:syzkaller0>
[  871.120451][ T8092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  871.129962][ T8092] syzkaller0: entered promiscuous mode
[  871.138026][ T8092] syzkaller0: entered allmulticast mode
[  871.182407][ T8092] tipc: Resetting bearer <eth:syzkaller0>
[  871.191956][ T8091] tipc: Resetting bearer <eth:syzkaller0>
[  871.219082][ T8091] tipc: Disabling bearer <eth:syzkaller0>
[  871.447091][ T8110] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  871.502156][ T8112] lo speed is unknown, defaulting to 1000
[  871.505376][ T8112] xfrm0 speed is unknown, defaulting to 1000
[  871.611478][ T8114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14834'.
[  872.105401][ T7869] tipc: Resetting bearer <eth:syzkaller0>
[  872.193660][ T8132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  872.555366][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14853'.
[  872.572725][ T8160] team1: entered promiscuous mode
[  872.576859][ T8160] team1: entered allmulticast mode
[  872.579873][ T8160] 8021q: adding VLAN 0 to HW filter on device team1
[  872.584083][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14853'.
[  872.615497][ T8160] team2: entered promiscuous mode
[  872.617881][ T8160] team2: entered allmulticast mode
[  872.621076][ T8160] 8021q: adding VLAN 0 to HW filter on device team2
[  872.771725][ T8174] netlink: 'syz.0.14859': attribute type 4 has an invalid length.
[  873.047841][ T8195] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14870'.
[  873.461637][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14885'.
[  873.567888][ T8240] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14889'.
[  873.617625][ T8242] tipc: Resetting bearer <eth:syzkaller0>
[  873.661347][ T8241] tipc: Resetting bearer <eth:syzkaller0>
[  874.003237][ T8259] lo speed is unknown, defaulting to 1000
[  874.009505][ T8259] xfrm0 speed is unknown, defaulting to 1000
[  874.293589][ T7846] tipc: Resetting bearer <eth:syzkaller0>
[  874.301012][ T8267] netlink: 'syz.3.14899': attribute type 2 has an invalid length.
[  874.325386][    C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  875.706576][ T8359] lo speed is unknown, defaulting to 1000
[  875.711192][ T8359] xfrm0 speed is unknown, defaulting to 1000
[  875.746254][ T8361] __nla_validate_parse: 2 callbacks suppressed
[  875.746268][ T8361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14943'.
[  875.803760][ T8361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14943'.
[  876.456412][ T8392] netlink: 'syz.1.14957': attribute type 61 has an invalid length.
[  876.520855][ T8398] netlink: 176 bytes leftover after parsing attributes in process `syz.1.14960'.
[  876.525877][ T8398] netlink: 'syz.1.14960': attribute type 1 has an invalid length.
[  876.823883][ T8425] netlink: 'syz.1.14972': attribute type 1 has an invalid length.
[  877.168978][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14979'.
[  877.260287][ T8457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14986'.
[  877.713590][ T8486] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  878.020745][ T8503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15004'.
[  878.708794][ T8539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15021'.
[  878.713794][ T8539] netlink: 11 bytes leftover after parsing attributes in process `syz.1.15021'.
[  879.063140][ T8563] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  879.233352][ T8568] xt_policy: output policy not valid in PREROUTING and INPUT
[  879.294202][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15038'.
[  879.310454][ T8572] 8021q: adding VLAN 0 to HW filter on device bond26
[  879.318122][ T8572] bond26: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  879.356016][ T8578] netlink: 76 bytes leftover after parsing attributes in process `syz.3.15040'.
[  879.356904][ T8575] IPVS: Scheduler module ip_vs_sip not found
[  879.803294][ T8620] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  880.332167][ T8658] xt_hashlimit: size too large, truncated to 1048576
[  881.000428][ T8698] __nla_validate_parse: 5 callbacks suppressed
[  881.000440][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15090'.
[  881.006001][ T8698] netlink: 'syz.0.15090': attribute type 5 has an invalid length.
[  881.008870][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15090'.
[  881.809900][ T8738] tipc: Resetting bearer <eth:syzkaller0>
[  881.825970][ T8737] tipc: Resetting bearer <eth:syzkaller0>
[  882.405218][    C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  882.451419][ T8767] netlink: 'syz.1.15117': attribute type 1 has an invalid length.
[  882.454161][ T8767] netlink: 'syz.1.15117': attribute type 1 has an invalid length.
[  882.457043][ T8767] netlink: 264 bytes leftover after parsing attributes in process `syz.1.15117'.
[  882.460694][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15117'.
[  882.464568][ T8767] netlink: 'syz.1.15117': attribute type 1 has an invalid length.
[  882.467759][ T8767] netlink: 'syz.1.15117': attribute type 1 has an invalid length.
[  882.470990][ T8767] netlink: 264 bytes leftover after parsing attributes in process `syz.1.15117'.
[  882.475034][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15117'.
[  882.813653][ T8788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15124'.
[  882.945259][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15121'.
[  882.997382][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15121'.
[  883.156694][ T7878] tipc: Resetting bearer <eth:syzkaller0>
[  883.642652][ T8811] mac80211_hwsim hwsim5 syzkaller1: entered promiscuous mode
[  883.662443][ T8811] mac80211_hwsim hwsim5 syzkaller1: entered allmulticast mode
[  883.986032][ T8822] netlink: 'syz.3.15138': attribute type 25 has an invalid length.
[  884.492231][ T8834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15143'.
[  884.581287][ T8842] gre5: entered promiscuous mode
[  884.660190][ T8848] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  884.669035][ T8848] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  884.822578][T10236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  884.826981][T10236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  884.839780][ T8860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  885.019240][ T8863] mac80211_hwsim hwsim5 syzkaller1: left promiscuous mode
[  885.055176][ T8863] mac80211_hwsim hwsim5 syzkaller1: left allmulticast mode
[  885.812732][ T8873] syzkaller1: entered promiscuous mode
[  885.815214][ T8873] syzkaller1: entered allmulticast mode
[  886.712416][ T8878] __nla_validate_parse: 3 callbacks suppressed
[  886.712430][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15157'.
[  886.725318][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15157'.
[  886.730758][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15157'.
[  886.733708][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15157'.
[  886.736995][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15157'.
[  886.740650][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15157'.
[  886.779661][ T8880] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15158'.
[  886.853006][ T8888] PKCS7: Unknown OID: [4] (bad)
[  886.856542][ T8888] PKCS7: Only support pkcs7_signedData type
[  886.920316][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15164'.
[  887.528997][    C1] bridge0: port 2(batadv1) entered forwarding state
[  887.531899][    C1] bridge0: topology change detected, propagating
[  887.537742][    C1] bridge0: port 1(vlan3) entered forwarding state
[  887.540224][    C1] bridge0: topology change detected, propagating
[  890.622554][ T8942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  891.264527][ T9043] netlink: zone id is out of range
[  891.276897][ T9045] syzkaller1: entered promiscuous mode
[  891.279355][ T9045] syzkaller1: entered allmulticast mode
[  891.541811][ T9063] netlink: 'syz.3.15236': attribute type 12 has an invalid length.
[  891.678520][ T9073] netlink: 'syz.1.15239': attribute type 2 has an invalid length.
[  891.754342][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15241'.
[  891.860452][ T9077] 8021q: adding VLAN 0 to HW filter on device bond29
[  891.879140][ T9077] bond29 (unregistering): Released all slaves
[  892.259200][ T9096] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  892.600693][ T5356] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  892.934585][ T9121] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15256'.
[  892.944520][ T9121] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15256'.
[  892.984013][ T9124] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15259'.
[  892.988873][ T9124] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15259'.
[  893.031022][ T9129] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  893.714291][ T7149] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  893.720382][ T7149] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  893.723538][ T7149] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  893.872524][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15269'.
[  893.933969][ T9167] xt_socket: unknown flags 0xc
[  894.209276][ T9196] tipc: Resetting bearer <eth:syzkaller0>
[  894.277844][ T9191] lo speed is unknown, defaulting to 1000
[  894.281788][ T9191] xfrm0 speed is unknown, defaulting to 1000
[  894.854186][ T9231] sctp: [Deprecated]: syz.3.15296 (pid 9231) Use of struct sctp_assoc_value in delayed_ack socket option.
[  894.854186][ T9231] Use struct sctp_sack_info instead
[  895.057166][ T9196] tipc: Resetting bearer <eth:syzkaller0>
[  895.061251][ T9247] netlink: 292 bytes leftover after parsing attributes in process `syz.3.15304'.
[  895.146853][ T9255] netlink: zone id is out of range
[  895.149007][ T9255] netlink: zone id is out of range
[  895.151286][ T9255] netlink: zone id is out of range
[  895.153453][ T9255] netlink: zone id is out of range
[  895.156762][ T9255] netlink: zone id is out of range
[  895.159245][ T9255] netlink: zone id is out of range
[  895.161716][ T9255] netlink: zone id is out of range
[  895.163961][ T9255] netlink: zone id is out of range
[  895.464088][ T9283] tipc: Resetting bearer <eth:syzkaller0>
[  895.520876][ T9279] tipc: Resetting bearer <eth:syzkaller0>
[  895.570747][ T9293] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15324'.
[  895.688580][   T52] tipc: Resetting bearer <eth:syzkaller0>
[  896.000964][ T9321] bond27: Removing last arp target with arp_interval on
[  896.101654][ T9328] sctp: [Deprecated]: syz.1.15340 (pid 9328) Use of int in max_burst socket option.
[  896.101654][ T9328] Use struct sctp_assoc_value instead
[  897.641207][ T9363] netlink: 'syz.0.15355': attribute type 1 has an invalid length.
[  897.657440][ T9363] 8021q: adding VLAN 0 to HW filter on device bond31
[  897.678950][ T9363] vlan7: entered allmulticast mode
[  897.681143][ T9363] bond31: entered allmulticast mode
[  897.700553][ T9363] bond31: (slave geneve5): making interface the new active one
[  897.703710][ T9363] geneve5: entered allmulticast mode
[  897.711814][ T9363] bond31: (slave geneve5): Enslaving as an active interface with an up link
[  897.731733][ T9363] syz.0.15355 (9363) used greatest stack depth: 18560 bytes left
[  897.774783][    C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[  898.160112][ T9385] syzkaller0: left promiscuous mode
[  898.163392][ T9385] tipc: Resetting bearer <eth:syzkaller0>
[  898.191636][ T9385] net_ratelimit: 720 callbacks suppressed
[  898.191653][ T9385] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  898.504689][ T9286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  898.642715][ T9395] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15369'.
[  898.664439][ T9395] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  898.670814][ T9395] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15369'.
[  898.825106][ T9401] tun0: tun_chr_ioctl cmd 1074025680
[  899.083057][ T9415] syzkaller0: entered promiscuous mode
[  899.086773][ T9415] syzkaller0: entered allmulticast mode
[  899.243505][ T9425] netlink: 'syz.3.15378': attribute type 12 has an invalid length.
[  899.393601][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15383'.
[  899.425285][ T9435] bond29: entered promiscuous mode
[  899.430785][ T9435] bond29: entered allmulticast mode
[  899.510687][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15389'.
[  899.514337][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15389'.
[  899.598889][ T9455] netlink: 'syz.3.15393': attribute type 2 has an invalid length.
[  899.643684][ T9458] netlink: 80 bytes leftover after parsing attributes in process `syz.3.15394'.
[  900.499721][ T9460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  900.672409][ T9480] tipc: Resetting bearer <eth:syzkaller0>
[  900.682578][ T9478] tipc: Resetting bearer <eth:syzkaller0>
[  900.827104][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15408'.
[  900.857366][ T9496] sctp: [Deprecated]: syz.3.15409 (pid 9496) Use of int in maxseg socket option.
[  900.857366][ T9496] Use struct sctp_assoc_value instead
[  900.916284][ T9500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15411'.
[  900.969512][T10236] tipc: Resetting bearer <eth:syzkaller0>
[  902.531103][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15449'.
[  902.580400][ T9584] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  902.818087][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15456'.
[  903.017992][ T9611] xt_cgroup: xt_cgroup: no path or classid specified
[  903.471889][ T9653] netlink: 'syz.1.15483': attribute type 12 has an invalid length.
[  903.476083][ T9653] netlink: 'syz.1.15483': attribute type 14 has an invalid length.
[  903.702839][ T9676] bridge22: left promiscuous mode
[  903.708720][ T9676] bridge22: left allmulticast mode
[  903.710930][ T9676] bridge23: left promiscuous mode
[  903.712728][ T9676] bridge23: left allmulticast mode
[  903.715309][ T9676] gre5: left promiscuous mode
[  903.717029][ T9680] __nla_validate_parse: 4 callbacks suppressed
[  903.717043][ T9680] netlink: 312 bytes leftover after parsing attributes in process `syz.0.15497'.
[  903.718899][ T9676] bond29: left promiscuous mode
[  903.726014][ T9676] bond29: left allmulticast mode
[  903.728531][ T9674] netlink: 80 bytes leftover after parsing attributes in process `syz.1.15492'.
[  903.731549][ T9674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15492'.
[  903.736920][ T9674] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15492'.
[  903.762501][ T9680] netlink: 1 bytes leftover after parsing attributes in process `syz.0.15497'.
[  903.911253][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15504'.
[  903.914516][ T9696] netlink: 'syz.3.15504': attribute type 2 has an invalid length.
[  903.917623][ T9696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15504'.
[  904.407250][ T9735] netlink: 'syz.3.15523': attribute type 21 has an invalid length.
[  904.410094][ T9735] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15523'.
[  904.454169][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15525'.
[  904.554146][ T9747] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15530'.
[  904.760784][ T9763] IPVS: Unknown mcast interface: vcan0
[  904.830552][ T9766] syzkaller0: entered promiscuous mode
[  904.832822][ T9766] syzkaller0: entered allmulticast mode
[  904.862806][ T9766] tc action pedit 'at' offset 20 out of bounds
[  905.300064][ T9781] netlink: 'syz.3.15545': attribute type 32 has an invalid length.
[  905.835930][ T9798] erspan0: entered promiscuous mode
[  906.579381][ T9846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  908.617680][ T9934] netlink: 'syz.3.15607': attribute type 10 has an invalid length.
[  908.930464][ T9971] __nla_validate_parse: 5 callbacks suppressed
[  908.930484][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15622'.
[  909.070340][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15628'.
[  909.074378][ T9983] 8021q: adding VLAN 0 to HW filter on device bond0
[  909.078337][ T9985] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[  909.084227][ T7878] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  909.117665][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15630'.
[  909.121575][ T9988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15630'.
[  909.137063][ T9985] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15629'.
[  909.176588][ T9985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  909.261112][T10000] netlink: 'syz.0.15636': attribute type 1 has an invalid length.
[  909.876225][T10045] syzkaller1: entered promiscuous mode
[  909.878957][T10045] syzkaller1: entered allmulticast mode
[  910.245263][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15663'.
[  910.250885][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15663'.
[  910.414328][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15667'.
[  910.466502][T10077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15669'.
[  910.765834][T10099] netlink: 'syz.0.15679': attribute type 10 has an invalid length.
[  911.285138][ T7878] wlan1: Trigger new scan to find an IBSS to join
[  911.300183][ T7878] wlan1: Trigger new scan to find an IBSS to join
[  912.172965][ T9959] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  912.262114][T10148] netlink: 424 bytes leftover after parsing attributes in process `syz.3.15698'.
[  912.873855][T10131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  913.419151][T10194] tipc: Resetting bearer <eth:syzkaller0>
[  913.426498][T10193] tipc: Resetting bearer <eth:syzkaller0>
[  913.968191][ T7149] bond0: (slave bond4): link status definitely down, disabling slave
[  913.997942][ T7149] bond0: now running without any active interface!
[  914.107435][T10233] __nla_validate_parse: 1 callbacks suppressed
[  914.107453][T10233] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15737'.
[  914.245924][ T7869] wlan1: Trigger new scan to find an IBSS to join
[  914.269942][ T7869] wlan1: Trigger new scan to find an IBSS to join
[  914.288952][T10236] tipc: Resetting bearer <eth:syzkaller0>
[  915.863128][T10391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  915.866149][T10391] IPv6: NLM_F_CREATE should be set when creating new route
[  915.870522][T10391] IPv6: NLM_F_CREATE should be set when creating new route
[  915.873501][T10391] IPv6: NLM_F_CREATE should be set when creating new route
[  915.879780][T10391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  915.970441][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15807'.
[  915.974257][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15807'.
[  915.979091][T10404] netlink: 'syz.0.15807': attribute type 13 has an invalid length.
[  916.059136][T10412] lo speed is unknown, defaulting to 1000
[  916.063141][T10412] xfrm0 speed is unknown, defaulting to 1000
[  916.771470][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15826'.
[  916.776539][T10447] netlink: 168 bytes leftover after parsing attributes in process `syz.0.15826'.
[  916.780499][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15826'.
[  917.191768][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15838'.
[  917.287416][T10243] wlan1: Trigger new scan to find an IBSS to join
[  917.349842][ T7869] wlan1: Trigger new scan to find an IBSS to join
[  917.558602][T10492] tipc: Resetting bearer <eth:syzkaller0>
[  917.613154][T10491] tipc: Resetting bearer <eth:syzkaller0>
[  917.827836][ T7873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  918.581128][ T7873] tipc: Resetting bearer <eth:syzkaller0>
[  918.749679][T10536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15864'.
[  919.154551][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15873'.
[  919.162529][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15873'.
[  919.719967][T10586] syzkaller0: entered promiscuous mode
[  919.726955][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15884'.
[  919.734969][T10590] netlink: 348 bytes leftover after parsing attributes in process `syz.1.15884'.
[  919.739612][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15884'.
[  919.743602][T10590] netlink: 348 bytes leftover after parsing attributes in process `syz.1.15884'.
[  919.748549][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15884'.
[  919.903916][T10600] tipc: Resetting bearer <eth:syzkaller0>
[  919.919532][T10600] syzkaller0: left promiscuous mode
[  919.922011][T10600] syzkaller0: left allmulticast mode
[  919.932960][T10599] tipc: Resetting bearer <eth:syzkaller0>
[  920.317339][T10631] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  920.321989][T10631] syzkaller0: entered promiscuous mode
[  920.334780][T10631] syzkaller0: entered allmulticast mode
[  920.337957][T10631] tipc: Resetting bearer <eth:syzkaller0>
[  921.044866][T10243] tipc: Resetting bearer <eth:syzkaller0>
[  921.048509][T10682] tipc: Resetting bearer <eth:syzkaller0>
[  921.078319][T10681] tipc: Resetting bearer <eth:syzkaller0>
[  921.482570][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15923'.
[  921.491411][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15923'.
[  922.006376][T10236] tipc: Resetting bearer <eth:syzkaller0>
[  922.607489][T10728] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  922.781718][T10755] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  922.854389][T10759] x_tables: duplicate underflow at hook 2
[  923.730638][T10808] netlink: 204 bytes leftover after parsing attributes in process `syz.0.15969'.
[  924.130868][T10824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  924.270158][T10835] __nla_validate_parse: 1 callbacks suppressed
[  924.270176][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15981'.
[  924.754260][T10843] netlink: 80 bytes leftover after parsing attributes in process `syz.0.15984'.
[  924.758160][T10843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15984'.
[  925.151491][T10877] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  925.408772][T10881] 
[  925.409798][T10881] ======================================================
[  925.412929][T10881] WARNING: possible circular locking dependency detected
[  925.416200][T10881] syzkaller #0 Not tainted
[  925.418455][T10881] ------------------------------------------------------
[  925.421500][T10881] syz.1.16002/10881 is trying to acquire lock:
[  925.424258][T10881] ffff8881027f1828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  925.428166][T10881] 
[  925.428166][T10881] but task is already holding lock:
[  925.431453][T10881] ffff8881027f1300 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: elevator_change+0x194/0x480
[  925.436085][T10881] 
[  925.436085][T10881] which lock already depends on the new lock.
[  925.436085][T10881] 
[  925.440188][T10881] 
[  925.440188][T10881] the existing dependency chain (in reverse order) is:
[  925.443261][T10881] 
[  925.443261][T10881] -> #6 (&q->q_usage_counter(io)#58){++++}-{0:0}:
[  925.446573][T10881]        blk_alloc_queue+0x544/0x690
[  925.448480][T10881]        __blk_mq_alloc_disk+0x194/0x390
[  925.450619][T10881]        nbd_dev_add+0x494/0xb60
[  925.452844][T10881]        nbd_init+0x15f/0x1e0
[  925.454676][T10881]        do_one_initcall+0x250/0x870
[  925.456472][T10881]        do_initcall_level+0x10a/0x1a0
[  925.458314][T10881]        do_initcalls+0x59/0xa0
[  925.460005][T10881]        kernel_init_freeable+0x29d/0x3e0
[  925.462818][T10881]        kernel_init+0x1d/0x1d0
[  925.464862][T10881]        ret_from_fork+0x514/0xb70
[  925.467040][T10881]        ret_from_fork_asm+0x1a/0x30
[  925.468874][T10881] 
[  925.468874][T10881] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  925.471241][T10881]        fs_reclaim_acquire+0x71/0x100
[  925.473059][T10881]        kmem_cache_alloc_node_noprof+0x6a/0x610
[  925.475525][T10881]        __alloc_skb+0x1d7/0x7a0
[  925.477260][T10881]        __ip6_append_data+0x2ec4/0x40c0
[  925.479580][T10881]        ip6_append_data+0x108/0x270
[  925.482856][T10881]        rawv6_sendmsg+0x1298/0x18c0
[  925.485010][T10881]        sock_sendmsg_nosec+0x10e/0x180
[  925.486916][T10881]        ____sys_sendmsg+0x54e/0x850
[  925.488740][T10881]        ___sys_sendmsg+0x2a5/0x360
[  925.490583][T10881]        __x64_sys_sendmsg+0x1b1/0x290
[  925.492588][T10881]        do_syscall_64+0x174/0x580
[  925.494534][T10881]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  925.496919][T10881] 
[  925.496919][T10881] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  925.499926][T10881]        lock_sock_nested+0x41/0x100
[  925.502120][T10881]        inet_shutdown+0x6a/0x390
[  925.503992][T10881]        nbd_mark_nsock_dead+0x2cb/0x550
[  925.505970][T10881]        recv_work+0x1cee/0x1e10
[  925.507646][T10881]        process_scheduled_works+0xa8e/0x14e0
[  925.509793][T10881]        worker_thread+0xa47/0xfb0
[  925.511555][T10881]        kthread+0x388/0x470
[  925.513231][T10881]        ret_from_fork+0x514/0xb70
[  925.515201][T10881]        ret_from_fork_asm+0x1a/0x30
[  925.517224][T10881] 
[  925.517224][T10881] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  925.520030][T10881]        __mutex_lock+0x19d/0x1550
[  925.522004][T10881]        nbd_queue_rq+0x373/0x1150
[  925.524023][T10881]        blk_mq_dispatch_rq_list+0x499/0x1990
[  925.526534][T10881]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  925.529146][T10881]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  925.532063][T10881]        blk_mq_run_work_fn+0x16c/0x300
[  925.534239][T10881]        process_scheduled_works+0xa8e/0x14e0
[  925.536476][T10881]        worker_thread+0xa47/0xfb0
[  925.538203][T10881]        kthread+0x388/0x470
[  925.539882][T10881]        ret_from_fork+0x514/0xb70
[  925.541628][T10881]        ret_from_fork_asm+0x1a/0x30
[  925.543766][T10881] 
[  925.543766][T10881] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  925.546991][T10881]        __mutex_lock+0x19d/0x1550
[  925.549238][T10881]        nbd_queue_rq+0xc1/0x1150
[  925.551518][T10881]        blk_mq_dispatch_rq_list+0x499/0x1990
[  925.554015][T10881]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  925.556754][T10881]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  925.559222][T10881]        blk_mq_run_work_fn+0x16c/0x300
[  925.561572][T10881]        process_scheduled_works+0xa8e/0x14e0
[  925.564224][T10881]        worker_thread+0xa47/0xfb0
[  925.566869][T10881]        kthread+0x388/0x470
[  925.568592][T10881]        ret_from_fork+0x514/0xb70
[  925.570298][T10881]        ret_from_fork_asm+0x1a/0x30
[  925.572137][T10881] 
[  925.572137][T10881] -> #1 (set->srcu){.+.+}-{0:0}:
[  925.575236][T10881]        __synchronize_srcu+0xc9/0x2f0
[  925.577450][T10881]        elevator_switch+0x1e8/0x7b0
[  925.579502][T10881]        elevator_change+0x2fa/0x480
[  925.581520][T10881]        elevator_set_default+0x375/0x440
[  925.583819][T10881]        blk_register_queue+0x3f3/0x4e0
[  925.585827][T10881]        __add_disk+0x6cb/0xe30
[  925.587531][T10881]        add_disk_fwnode+0xfb/0x4b0
[  925.589209][T10881]        nbd_dev_add+0x733/0xb60
[  925.590830][T10881]        nbd_init+0x15f/0x1e0
[  925.592506][T10881]        do_one_initcall+0x250/0x870
[  925.594368][T10881]        do_initcall_level+0x10a/0x1a0
[  925.596502][T10881]        do_initcalls+0x59/0xa0
[  925.598577][T10881]        kernel_init_freeable+0x29d/0x3e0
[  925.600903][T10881]        kernel_init+0x1d/0x1d0
[  925.602810][T10881]        ret_from_fork+0x514/0xb70
[  925.604622][T10881]        ret_from_fork_asm+0x1a/0x30
[  925.606594][T10881] 
[  925.606594][T10881] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  925.609521][T10881]        __lock_acquire+0x1520/0x2cf0
[  925.611598][T10881]        lock_acquire+0x106/0x350
[  925.613684][T10881]        __mutex_lock+0x19d/0x1550
[  925.616260][T10881]        elevator_change+0x1af/0x480
[  925.618243][T10881]        elevator_set_none+0xb5/0x140
[  925.620241][T10881]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  925.622401][T10881]        nbd_start_device+0x189/0xb30
[  925.624370][T10881]        nbd_genl_connect+0x1597/0x1c10
[  925.626429][T10881]        genl_family_rcv_msg_doit+0x233/0x340
[  925.628602][T10881]        genl_rcv_msg+0x614/0x7a0
[  925.630704][T10881]        netlink_rcv_skb+0x226/0x4a0
[  925.633317][T10881]        genl_rcv+0x28/0x40
[  925.635692][T10881]        netlink_unicast+0x7bb/0x940
[  925.637594][T10881]        netlink_sendmsg+0x813/0xb40
[  925.639598][T10881]        sock_sendmsg_nosec+0x13a/0x180
[  925.642052][T10881]        ____sys_sendmsg+0x54e/0x850
[  925.644050][T10881]        ___sys_sendmsg+0x2a5/0x360
[  925.645968][T10881]        __x64_sys_sendmsg+0x1b1/0x290
[  925.647835][T10881]        do_syscall_64+0x174/0x580
[  925.649623][T10881]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  925.652217][T10881] 
[  925.652217][T10881] other info that might help us debug this:
[  925.652217][T10881] 
[  925.656050][T10881] Chain exists of:
[  925.656050][T10881]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#58
[  925.656050][T10881] 
[  925.660648][T10881]  Possible unsafe locking scenario:
[  925.660648][T10881] 
[  925.663184][T10881]        CPU0                    CPU1
[  925.665364][T10881]        ----                    ----
[  925.667806][T10881]   lock(&q->q_usage_counter(io)#58);
[  925.670169][T10881]                                lock(fs_reclaim);
[  925.672607][T10881]                                lock(&q->q_usage_counter(io)#58);
[  925.675363][T10881]   lock(&q->elevator_lock);
[  925.677101][T10881] 
[  925.677101][T10881]  *** DEADLOCK ***
[  925.677101][T10881] 
[  925.680960][T10881] 6 locks held by syz.1.16002/10881:
[  925.683537][T10881]  #0: ffffffff8fe5d9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  925.687117][T10881]  #1: ffffffff8fe5d7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  925.691056][T10881]  #2: ffff8881033e21c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0
[  925.696746][T10881]  #3: ffff8881033e20d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0
[  925.701658][T10881]  #4: ffff8881027f1300 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: elevator_change+0x194/0x480
[  925.706302][T10881]  #5: ffff8881027f1338 (&q->q_usage_counter(queue)#42){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  925.710896][T10881] 
[  925.710896][T10881] stack backtrace:
[  925.714014][T10881] CPU: 1 UID: 0 PID: 10881 Comm: syz.1.16002 Not tainted syzkaller #0 PREEMPT(full) 
[  925.714037][T10881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  925.714047][T10881] Call Trace:
[  925.714056][T10881]  <TASK>
[  925.714065][T10881]  dump_stack_lvl+0xe8/0x150
[  925.714082][T10881]  print_circular_bug+0x2e1/0x300
[  925.714095][T10881]  check_noncircular+0x12e/0x150
[  925.714109][T10881]  __lock_acquire+0x1520/0x2cf0
[  925.714130][T10881]  ? elevator_change+0x1af/0x480
[  925.714140][T10881]  lock_acquire+0x106/0x350
[  925.714149][T10881]  ? elevator_change+0x1af/0x480
[  925.714161][T10881]  __mutex_lock+0x19d/0x1550
[  925.714174][T10881]  ? elevator_change+0x1af/0x480
[  925.714183][T10881]  ? rcu_is_watching+0x15/0xb0
[  925.714197][T10881]  ? elevator_change+0x1af/0x480
[  925.714206][T10881]  ? __pfx___mutex_lock+0x10/0x10
[  925.714216][T10881]  ? enable_work+0x17f/0x230
[  925.714225][T10881]  ? lockdep_hardirqs_on+0x7a/0x110
[  925.714236][T10881]  ? __cancel_work_sync+0xf7/0x110
[  925.714245][T10881]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  925.714258][T10881]  elevator_change+0x1af/0x480
[  925.714270][T10881]  elevator_set_none+0xb5/0x140
[  925.714280][T10881]  ? __pfx_elevator_set_none+0x10/0x10
[  925.714290][T10881]  ? xa_load+0x1db/0x210
[  925.714302][T10881]  blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  925.714314][T10881]  ? kernfs_add_one+0x480/0x5e0
[  925.714324][T10881]  ? nbd_start_device+0x17d/0xb30
[  925.714379][T10881]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  925.714402][T10881]  ? sysfs_add_file_mode_ns+0x258/0x300
[  925.714422][T10881]  nbd_start_device+0x189/0xb30
[  925.714440][T10881]  ? device_create_file+0xf4/0x1b0
[  925.714459][T10881]  nbd_genl_connect+0x1597/0x1c10
[  925.714481][T10881]  ? __pfx_nbd_genl_connect+0x10/0x10
[  925.714497][T10881]  ? rcu_is_watching+0x15/0xb0
[  925.714514][T10881]  ? trace_kmalloc+0x2a/0xf0
[  925.714534][T10881]  ? __kmalloc_noprof+0x396/0x720
[  925.714554][T10881]  ? __nla_parse+0x40/0x60
[  925.714572][T10881]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  925.714586][T10881]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  925.714603][T10881]  genl_family_rcv_msg_doit+0x233/0x340
[  925.714620][T10881]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  925.714639][T10881]  ? __lock_acquire+0x683/0x2cf0
[  925.714656][T10881]  genl_rcv_msg+0x614/0x7a0
[  925.714672][T10881]  ? __pfx_genl_rcv_msg+0x10/0x10
[  925.714687][T10881]  ? __pfx_nbd_genl_connect+0x10/0x10
[  925.714708][T10881]  netlink_rcv_skb+0x226/0x4a0
[  925.714724][T10881]  ? __pfx_genl_rcv_msg+0x10/0x10
[  925.714732][T10881]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  925.714746][T10881]  ? down_read+0x2be/0x330
[  925.714757][T10881]  genl_rcv+0x28/0x40
[  925.714765][T10881]  netlink_unicast+0x7bb/0x940
[  925.714777][T10881]  netlink_sendmsg+0x813/0xb40
[  925.714790][T10881]  ? __pfx_netlink_sendmsg+0x10/0x10
[  925.714801][T10881]  ? aa_sock_msg_perm+0xf1/0x1b0
[  925.714814][T10881]  ? __pfx_netlink_sendmsg+0x10/0x10
[  925.714824][T10881]  sock_sendmsg_nosec+0x13a/0x180
[  925.714834][T10881]  ____sys_sendmsg+0x54e/0x850
[  925.714846][T10881]  ? __pfx_____sys_sendmsg+0x10/0x10
[  925.714858][T10881]  ? import_iovec+0x73/0xa0
[  925.714869][T10881]  ___sys_sendmsg+0x2a5/0x360
[  925.714879][T10881]  ? __lock_acquire+0x683/0x2cf0
[  925.714887][T10881]  ? __pfx____sys_sendmsg+0x10/0x10
[  925.714898][T10881]  ? futex_wake+0x51b/0x5f0
[  925.714915][T10881]  ? __fget_files+0x2a/0x420
[  925.714924][T10881]  ? __fget_files+0x3a2/0x420
[  925.714933][T10881]  __x64_sys_sendmsg+0x1b1/0x290
[  925.714944][T10881]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  925.714958][T10881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  925.714966][T10881]  do_syscall_64+0x174/0x580
[  925.714976][T10881]  ? trace_irq_disable+0x3b/0x140
[  925.714985][T10881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  925.714993][T10881] RIP: 0033:0x7f753ed9ce59
[  925.715004][T10881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  925.715012][T10881] RSP: 002b:00007f753fc9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  925.715024][T10881] RAX: ffffffffffffffda RBX: 00007f753f015fa0 RCX: 00007f753ed9ce59
[  925.715029][T10881] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006
[  925.715036][T10881] RBP: 00007f753ee32e6f R08: 0000000000000000 R09: 0000000000000000
[  925.715041][T10881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  925.715046][T10881] R13: 00007f753f016038 R14: 00007f753f015fa0 R15: 00007ffed4c19b48
[  925.715055][T10881]  </TASK>
[  926.044468][T10894] block nbd9: Receive control failed (result -32)
[  926.048117][   T57] block nbd9: Receive control failed (result -32)
[  926.071241][T11498] block nbd9: Receive control failed (result -32)
[  927.844816][    C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
