last executing test programs:

1.091364436s ago: executing program 1 (id=9635):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r2, &(0x7f00000002c0)="4cf7", 0x2)
splice(r2, &(0x7f0000000040), r1, 0x0, 0x6, 0x0)
readv(r0, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9)

1.091143471s ago: executing program 1 (id=9636):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020303000000000003000000000000000800010001"], 0x1c}}, 0x0)

1.019765806s ago: executing program 1 (id=9638):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

960.196988ms ago: executing program 1 (id=9639):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000030, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

959.376261ms ago: executing program 2 (id=9642):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x12c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@nested={0x100, 0x38, 0x0, 0x1, [@nested={0xfb, 0x5b, 0x0, 0x1, [@generic="eb48ffd650d862ace57a733db7c84dfb76fb7cc7f09f6410e78f588818835a3a64dafe4bb579568c65ec4cf41a5aa9222d7eba6209ccfbc5bc3a05212e4345352317feb9e8c214c72f328fea276985cd79f963251b2b1a35842ac7998938a74869ec147c0f0f108f97d53b5bb37a506f8288a22c4eb3638c718c9def39956c7f3dd1ec10ae00db6fe5601e2f55174a0c149152a240bc15afc226d3abab26801cb029c5ae7b0d78039fffe5531135c28b3da97179254e37ca5847f2370a8cdf9b152474ed49be672edb204801f05803d6bf907f034b07a9cb266a9a7d815bbbad5e881c4628b5a5fa43d7012c957f9cceaee1aebc2cdd74"]}]}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x12c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

851.721676ms ago: executing program 2 (id=9645):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x2000000)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4)
recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/88, 0x58}, 0xa1}], 0x1, 0x45833af92e4b39ff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000206010300000000000000000000000005000500000000000900020073797a32000000000500040000000000050001"], 0x48}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x28, r4, 0x50dc85624ea6cf59, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x6, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0xffffffffffffff81, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r5, r5, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
shutdown(r5, 0x1)

792.071843ms ago: executing program 0 (id=9646):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0)

788.497395ms ago: executing program 2 (id=9647):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94)

783.639185ms ago: executing program 0 (id=9648):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

715.977218ms ago: executing program 0 (id=9649):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f00000003c0)=[{0x15, 0x1, 0x3, 0x6000}, {0x60, 0x8, 0xff}, {}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x3, 0x0, 0x6a}]})

715.646157ms ago: executing program 2 (id=9650):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_BROADCAST={0xa, 0x2, @random="3221e68c37d9"}]}, 0x54}}, 0x800)

651.786472ms ago: executing program 2 (id=9651):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

651.214826ms ago: executing program 2 (id=9652):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000))
ppoll(&(0x7f0000000180)=[{r4}, {r0, 0x4}, {r2, 0x1c}], 0x3, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
poll(&(0x7f0000000040)=[{}], 0x20000000000002d6, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00'})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013000001000200000000000000000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000"], 0xb8}}, 0x20004000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x0, 0xfe, 0x4, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c814)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

50.982896ms ago: executing program 1 (id=9653):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x1f, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228)

50.870633ms ago: executing program 0 (id=9654):
unshare(0x20000400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
shutdown(r0, 0x0)

50.640104ms ago: executing program 1 (id=9655):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308c"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

422.798µs ago: executing program 0 (id=9656):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x3c, r1, 0x1, 0xfffffffc, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x3c}}, 0x0)

0s ago: executing program 0 (id=9657):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x220, 0x2f0, 0xfeffffff, 0xf8, 0x2f0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x40, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)

kernel console output (not intermixed with test programs):

.166615][T18480] smc: adding ib device syz0 with port count 1
[  291.176942][T18480] smc:    ib device syz0 port 1 has no pnetid
[  291.401971][T18509] syzkaller0: entered promiscuous mode
[  291.412564][T18509] syzkaller0: entered allmulticast mode
[  291.853615][T18526] netlink: 'syz.0.5615': attribute type 11 has an invalid length.
[  291.856997][T18526] netlink: 'syz.0.5615': attribute type 4 has an invalid length.
[  291.860404][T18526] netlink: 199780 bytes leftover after parsing attributes in process `syz.0.5615'.
[  292.112562][T18534] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5619'.
[  293.174763][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5631'.
[  293.263695][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5635'.
[  293.527244][T18594] netlink: 'syz.0.5647': attribute type 4 has an invalid length.
[  293.617772][T18602] lo: entered allmulticast mode
[  293.628369][T18602] lo: left allmulticast mode
[  293.658619][T18605] netlink: 'syz.1.5650': attribute type 2 has an invalid length.
[  293.676832][T18605] netlink: 'syz.1.5650': attribute type 2 has an invalid length.
[  294.005748][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  294.012116][    C1] bridge0: port 4(vlan2) entered forwarding state
[  294.014956][    C1] bridge0: topology change detected, propagating
[  294.017981][    C1] bridge0: port 3(veth0_virt_wifi) entered forwarding state
[  294.021016][    C1] bridge0: topology change detected, propagating
[  294.083064][T18627] openvswitch: netlink: IP tunnel dst address not specified
[  294.274156][T18657] netlink: 'syz.2.5676': attribute type 1 has an invalid length.
[  294.281321][T18657] netlink: 'syz.2.5676': attribute type 2 has an invalid length.
[  294.293584][T18654] syzkaller0: entered promiscuous mode
[  294.300567][T18654] syzkaller0: entered allmulticast mode
[  294.316991][T18661] netlink: zone id is out of range
[  294.319340][T18661] netlink: zone id is out of range
[  294.321556][T18661] netlink: zone id is out of range
[  294.323660][T18661] netlink: zone id is out of range
[  294.326640][T18661] netlink: zone id is out of range
[  294.330496][T18661] netlink: zone id is out of range
[  294.332294][T18661] netlink: zone id is out of range
[  294.334215][T18661] netlink: zone id is out of range
[  294.336758][T18661] netlink: zone id is out of range
[  294.645641][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  294.759132][T18705] netlink: 'syz.0.5699': attribute type 49 has an invalid length.
[  295.048131][T18734] bond7: entered promiscuous mode
[  295.053734][T18734] bond7: entered allmulticast mode
[  295.064635][T18741] __nla_validate_parse: 11 callbacks suppressed
[  295.064646][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5712'.
[  295.199610][T18751] syzkaller1: entered promiscuous mode
[  295.201578][T18751] syzkaller1: entered allmulticast mode
[  295.248050][T18753] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5719'.
[  295.487252][T18781] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5731'.
[  295.533778][T18786] syzkaller0: entered promiscuous mode
[  295.540047][T18786] syzkaller0: entered allmulticast mode
[  295.613807][T18792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5736'.
[  295.750124][T18801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5740'.
[  295.797696][T18803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5741'.
[  296.248379][T18771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  296.459188][T18841] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5760'.
[  296.462078][T18841] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5760'.
[  296.623592][T18859] 8021q: adding VLAN 0 to HW filter on device bond8
[  296.764615][T18884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5779'.
[  296.891297][T18896] netlink: 'syz.2.5785': attribute type 1 has an invalid length.
[  296.913716][T18898] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5786'.
[  297.008092][ T1252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.011061][ T1252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.022853][T18906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.078608][T18910] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  297.446993][T18927] veth0_vlan: entered allmulticast mode
[  297.453778][ T1252] tipc: Resetting bearer <eth:ipvlan0>
[  297.702336][T18941] netlink: 'syz.2.5804': attribute type 2 has an invalid length.
[  297.707462][T18941] netlink: 'syz.2.5804': attribute type 1 has an invalid length.
[  297.772161][T18943] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  297.780782][T18943] bond9 (unregistering): Released all slaves
[  297.940160][T18948] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  297.944760][T18948] syzkaller0: entered promiscuous mode
[  297.947773][T18948] syzkaller0: entered allmulticast mode
[  298.221506][T18958] syzkaller0: entered promiscuous mode
[  298.235058][T18958] syzkaller0: entered allmulticast mode
[  298.296963][T18960] netlink: 'syz.1.5813': attribute type 1 has an invalid length.
[  298.332321][T18960] 8021q: adding VLAN 0 to HW filter on device bond10
[  298.394987][T18965] netlink: 'syz.1.5815': attribute type 6 has an invalid length.
[  298.739749][T18992] lo speed is unknown, defaulting to 1000
[  299.542997][T19019] ieee802154 phy0 wpan0: encryption failed: -22
[  299.785194][T19022] net_ratelimit: 348 callbacks suppressed
[  299.785207][T19022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  300.326503][T19048] smc: net device hsr0 applied user defined pnetid SYZ2
[  300.603959][T19072] netlink: 'syz.0.5862': attribute type 7 has an invalid length.
[  300.623080][T19068] bridge_slave_0: left allmulticast mode
[  300.626624][T19068] bridge_slave_0: left promiscuous mode
[  300.629852][T19068] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.642544][T19068] bridge_slave_1: left allmulticast mode
[  300.644823][T19068] bridge_slave_1: left promiscuous mode
[  300.647790][T19068] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.654091][T19068] bond0: (slave bond_slave_0): Releasing backup interface
[  300.659703][T19068] bond0: (slave bond_slave_1): Releasing backup interface
[  300.667026][T19068] team_slave_0: left promiscuous mode
[  300.672324][T19068] team0: Port device team_slave_0 removed
[  300.676488][T19068] team_slave_1: left promiscuous mode
[  300.680084][T19068] team0: Port device team_slave_1 removed
[  300.682906][T19068] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.686103][T19068] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.690179][T19068] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  300.698857][ T7592] syz1: Port: 1 Link DOWN
[  300.834484][T19085] bond9: option min_links: invalid value (18446744073709551612)
[  300.837290][T19085] bond9: option min_links: allowed values 0 - 2147483647
[  300.840551][T19085] bond9 (unregistering): Released all slaves
[  300.945174][T19093] netlink: 'syz.0.5871': attribute type 32 has an invalid length.
[  300.953053][T19093] __nla_validate_parse: 10 callbacks suppressed
[  300.953066][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5871'.
[  300.967300][T19093] bond9: Setting coupled_control to off (0)
[  301.551470][T19142] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5892'.
[  301.554528][T19142] netlink: 'syz.1.5892': attribute type 2 has an invalid length.
[  301.619340][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5897'.
[  301.940420][T19163] tipc: Resetting bearer <eth:macvlan1>
[  301.951101][T19163] tipc: Resetting bearer <eth:macvlan1>
[  301.987452][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  302.130424][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5907'.
[  302.148469][T19175] netlink: 65011 bytes leftover after parsing attributes in process `syz.1.5907'.
[  302.599484][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  302.882987][T19229] syzkaller1: entered promiscuous mode
[  302.886833][T19229] syzkaller1: entered allmulticast mode
[  303.092064][T19243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5940'.
[  303.178116][T19245] syzkaller0: entered promiscuous mode
[  303.180610][T19245] syzkaller0: entered allmulticast mode
[  303.610736][T19247] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.5942'.
[  303.766426][T19250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5943'.
[  303.776604][T19250] unsupported nlmsg_type 40
[  304.172858][T19258] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.5947'.
[  304.189221][T19258] netlink: Unknown conntrack attr (type=2304, max=9)
[  304.895132][   T83] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  305.303962][T19304] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  305.303962][T19304] Please contact the netfilter-devel mailing list or update your nftables rules.
[  305.573877][T19331] netlink: 'syz.0.5980': attribute type 1 has an invalid length.
[  305.741902][T19341] netlink: 'syz.2.5984': attribute type 13 has an invalid length.
[  305.816272][ T9206] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  306.345868][T19383] lo speed is unknown, defaulting to 1000
[  306.485689][ T9206] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  306.857934][T19393] openvswitch: netlink: Duplicate or invalid key (type 0).
[  306.860597][T19393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.914134][T19395] nr0: tun_chr_ioctl cmd 1074025677
[  306.918261][T19395] nr0: linktype set to 774
[  307.005077][T19397] syzkaller0: entered promiscuous mode
[  307.007252][T19397] syzkaller0: entered allmulticast mode
[  307.106475][T19401] netlink: 'syz.0.6011': attribute type 29 has an invalid length.
[  307.165394][T19402] netlink: 'syz.0.6011': attribute type 32 has an invalid length.
[  307.714603][T19411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6015'.
[  308.172197][ T5003] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  309.008648][T19401] netlink: 'syz.0.6011': attribute type 29 has an invalid length.
[  309.182235][T19436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6022'.
[  309.872391][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6053'.
[  309.886975][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6053'.
[  310.065716][T19515] lo speed is unknown, defaulting to 1000
[  310.105205][T19518] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma?
[  310.490622][T19539] netlink: 'syz.2.6066': attribute type 11 has an invalid length.
[  310.537189][T19540] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6065'.
[  310.541241][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6065'.
[  312.161890][T19536] lo speed is unknown, defaulting to 1000
[  312.260443][T19549] team_slave_1: Caught tx_queue_len zero misconfig
[  312.322019][T19551] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6071'.
[  312.481684][T19557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  312.531096][T19561] netlink: 'syz.0.6076': attribute type 30 has an invalid length.
[  312.744846][T19569] bond6: (slave lo): Releasing backup interface
[  312.747717][T19569] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  312.751483][T19569] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  312.758493][T19569] bond11: (slave lo): Enslaving as an active interface with an up link
[  312.767026][T19569] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  313.303037][T19588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6087'.
[  313.406479][T19607] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  313.671493][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6114'.
[  313.821197][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6126'.
[  313.824376][T19669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6126'.
[  313.831614][T19669] geneve5: entered promiscuous mode
[  313.833499][T19669] geneve5: entered allmulticast mode
[  313.842620][T19671] syzkaller0: entered promiscuous mode
[  313.846444][T19671] syzkaller0: entered allmulticast mode
[  313.955731][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6129'.
[  314.071213][T19683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.075345][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.191395][T19690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.197060][T19690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.200911][T19690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.204762][T19690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.209253][T19690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.221368][T19689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.372514][T19698] netlink: 'syz.0.6139': attribute type 2 has an invalid length.
[  314.376432][T19698] netlink: 'syz.0.6139': attribute type 8 has an invalid length.
[  314.380235][T19698] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6139'.
[  314.393204][T19698] netlink: 'syz.0.6139': attribute type 2 has an invalid length.
[  314.396843][T19698] netlink: 'syz.0.6139': attribute type 8 has an invalid length.
[  314.400313][T19698] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6139'.
[  314.503648][T19704] netlink: 'syz.0.6142': attribute type 27 has an invalid length.
[  314.705905][T19718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.842034][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6154'.
[  314.866118][T19713] netlink: 'syz.1.6146': attribute type 1 has an invalid length.
[  315.173593][T19766] ip6gretap0: entered promiscuous mode
[  316.405161][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  318.037117][T19749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  318.054596][T19780] netlink: 516 bytes leftover after parsing attributes in process `syz.1.6175'.
[  318.321617][T19800] syzkaller0: entered promiscuous mode
[  318.326757][T19800] syzkaller0: entered allmulticast mode
[  318.387370][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6188'.
[  318.481988][T19813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6192'.
[  318.732888][T19841] xfrm0: left promiscuous mode
[  318.781921][T19841] bond6: left promiscuous mode
[  318.784027][T19841] bridge11: left promiscuous mode
[  318.786816][   T31] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  318.798360][T19841] net_ratelimit: 1 callbacks suppressed
[  318.798374][T19841] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  318.809328][T19846] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6205'.
[  319.005785][ T9206] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  319.789425][T19901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6231'.
[  320.072171][T19877] Bluetooth: hci0: Opcode 0x080f failed: -4
[  320.886846][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.891920][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.189044][T19948] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6249'.
[  321.333492][T19954] netlink: 'syz.1.6252': attribute type 1 has an invalid length.
[  321.339099][T19954] netlink: 'syz.1.6252': attribute type 4 has an invalid length.
[  321.345344][T19954] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6252'.
[  321.348927][T19954] netlink: 'syz.1.6252': attribute type 1 has an invalid length.
[  321.351593][T19954] netlink: 'syz.1.6252': attribute type 4 has an invalid length.
[  321.354449][T19954] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6252'.
[  322.229509][T19961] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6255'.
[  322.271958][T19967] No such timeout policy "syz0"
[  322.346450][T19974] only policy match revision 0 supported
[  322.346467][T19974] unable to load match
[  322.777408][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6270'.
[  322.820416][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  323.069503][T20001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6272'.
[  323.673081][T20053] netlink: 'syz.0.6296': attribute type 2 has an invalid length.
[  323.864148][T20070] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6303'.
[  324.160266][T20090] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6314'.
[  324.196473][T20094] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6315'.
[  324.324360][T20105] bridge12: entered promiscuous mode
[  324.327375][T20105] bridge12: entered allmulticast mode
[  324.370860][T20109] netlink: 'syz.1.6322': attribute type 1 has an invalid length.
[  324.374252][T20109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6322'.
[  324.420561][T20113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6324'.
[  325.016065][T20144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6338'.
[  325.022876][T20144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6338'.
[  325.027675][T20144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6338'.
[  325.092910][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6339'.
[  325.171000][T20154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6343'.
[  325.603338][T20189] syzkaller0: entered promiscuous mode
[  325.605507][T20189] syzkaller0: entered allmulticast mode
[  325.693751][T20199] syzkaller1: tun_chr_ioctl cmd 1074025677
[  325.696607][T20199] syzkaller1: linktype set to 270
[  325.898344][T20221] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  325.902829][T20221] syzkaller0: entered promiscuous mode
[  325.905044][T20221] syzkaller0: entered allmulticast mode
[  326.215839][T20238] tipc: Resetting bearer <eth:ipvlan0>
[  326.222415][T20238] tipc: Resetting bearer <ib:geneve0>
[  326.394751][T20257] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  326.416647][T20259] netlink: 'syz.2.6394': attribute type 4 has an invalid length.
[  326.491578][T20269] tipc: Can't bind to reserved service type 0
[  326.529910][T20273] netlink: 'syz.2.6401': attribute type 1 has an invalid length.
[  326.549894][T20273] bond9: entered promiscuous mode
[  326.552193][T20273] 8021q: adding VLAN 0 to HW filter on device bond9
[  326.598344][T20273] 8021q: adding VLAN 0 to HW filter on device bond9
[  326.607608][T20273] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address
[  326.618717][T20273] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  326.633874][T20273] bond9: (slave wireguard0): making interface the new active one
[  326.639156][T20273] wireguard0: entered promiscuous mode
[  326.642684][T20273] bond9: (slave wireguard0): Enslaving as an active interface with an up link
[  326.655691][T20281] bond9: (slave wireguard1): The slave device specified does not support setting the MAC address
[  326.663687][T20281] bond9: (slave wireguard1): Enslaving as a backup interface with an up link
[  326.740408][T20291] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  326.911979][T20311] ip6gre3: entered promiscuous mode
[  326.913756][T20311] ip6gre3: entered allmulticast mode
[  326.923596][T20311] netlink: 'syz.1.6418': attribute type 6 has an invalid length.
[  326.934301][T20311] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  326.939322][T20311] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  327.198919][T20334] wg1: entered promiscuous mode
[  327.201331][T20334] wg1: entered allmulticast mode
[  327.351162][T20342] netlink: 'syz.0.6432': attribute type 6 has an invalid length.
[  327.356021][T20342] netlink: 'syz.0.6432': attribute type 23 has an invalid length.
[  327.359143][T20342] IPv6: NLM_F_CREATE should be specified when creating new route
[  327.895332][T20370] netlink: 'syz.1.6446': attribute type 5 has an invalid length.
[  328.068528][T20380] openvswitch: netlink: IPv4 tun info is not correct
[  328.151428][T20385] syzkaller0: entered promiscuous mode
[  328.153806][T20385] syzkaller0: entered allmulticast mode
[  328.565073][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  328.596511][T20409] netlink: 'syz.1.6463': attribute type 3 has an invalid length.
[  328.605177][T20409] netlink: 'syz.1.6463': attribute type 3 has an invalid length.
[  328.887159][T20424] bond12: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  328.891993][T20424] bond12 (unregistering): Released all slaves
[  328.915095][T20425] syzkaller0: entered promiscuous mode
[  328.917566][T20425] syzkaller0: entered allmulticast mode
[  329.094372][T20430] syzkaller1: entered promiscuous mode
[  329.097405][T20430] syzkaller1: entered allmulticast mode
[  329.218381][T20443] __nla_validate_parse: 43 callbacks suppressed
[  329.218400][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6478'.
[  329.224840][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6478'.
[  329.399480][T20460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6487'.
[  329.402822][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6487'.
[  329.420172][T20462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6488'.
[  329.439664][T20464] netlink: 'syz.2.6489': attribute type 1 has an invalid length.
[  329.483581][T20468] syzkaller1: entered promiscuous mode
[  329.485997][T20468] syzkaller1: entered allmulticast mode
[  329.583828][T20474] netlink: 632 bytes leftover after parsing attributes in process `syz.1.6494'.
[  329.638697][T20478] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6496'.
[  329.755236][T20486] xt_hashlimit: size too large, truncated to 1048576
[  329.960566][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6502'.
[  330.164161][T20487] tipc: Resetting bearer <eth:xfrm0>
[  330.237204][T20487] tipc: Resetting bearer <eth:vlan0>
[  330.248284][T20487] veth0_vlan: left promiscuous mode
[  330.486751][ T7601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.793587][T20514] openvswitch: netlink: IP tunnel dst address not specified
[  331.014521][T20487] batman_adv: batadv0: Interface deactivated: macvlan2
[  331.313573][T20504] veth1_macvtap: entered promiscuous mode
[  331.321987][T20504] macsec1: entered promiscuous mode
[  331.329201][ T7339] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.329243][ T7599] syz0: Port: 1 Link DOWN
[  331.337910][ T7339] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.341750][ T7339] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  331.345869][ T7339] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.349764][ T7339] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.353725][ T7339] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  331.366506][ T7339] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.370250][ T7339] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.373725][ T7339] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  331.377599][ T7339] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.381506][ T7339] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.385231][ T7339] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  331.434483][T20524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.559060][T20542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  331.562583][T20542] IPv6: NLM_F_CREATE should be set when creating new route
[  331.570107][T20542] IPv6: NLM_F_CREATE should be set when creating new route
[  331.574968][T20542] IPv6: NLM_F_CREATE should be set when creating new route
[  331.684491][T20550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6526'.
[  331.808662][T20561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.813713][T20561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.818416][T20561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.821844][T20561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.825814][T20561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.828673][T20561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.831608][T20561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.835160][T20561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.838954][T20561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.842123][T20561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.102548][T20573] netlink: 'syz.0.6536': attribute type 89 has an invalid length.
[  332.591579][T20588] syzkaller1: entered promiscuous mode
[  332.593971][T20588] syzkaller1: entered allmulticast mode
[  332.846449][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6545'.
[  332.964437][T20613] netlink: 'syz.1.6549': attribute type 1 has an invalid length.
[  332.988785][T20615] netlink: 'syz.1.6550': attribute type 6 has an invalid length.
[  332.991386][T20615] netlink: 'syz.1.6550': attribute type 5 has an invalid length.
[  333.330712][T20646] sit2: entered promiscuous mode
[  333.439682][T20663] netlink: 'syz.0.6574': attribute type 4 has an invalid length.
[  333.459971][T20663] netlink: 'syz.0.6574': attribute type 4 has an invalid length.
[  333.582091][T20680] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  333.956512][T20706] netlink: 'syz.0.6594': attribute type 1 has an invalid length.
[  333.989295][T20706] 8021q: adding VLAN 0 to HW filter on device bond13
[  333.994049][T20706] bond12: (slave bond13): making interface the new active one
[  333.999001][T20706] bond12: (slave bond13): Enslaving as an active interface with an up link
[  334.013940][T20706] bond12: (slave gretap2): Enslaving as a backup interface with an up link
[  334.022064][T20706] 8021q: adding VLAN 0 to HW filter on device bond12
[  334.284256][T20730] tc_dump_action: action bad kind
[  334.527871][T20745] __nla_validate_parse: 11 callbacks suppressed
[  334.527882][T20745] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6612'.
[  334.686465][T20749] bridge0: port 1(vlan6) entered blocking state
[  334.689418][T20749] bridge0: port 1(vlan6) entered disabled state
[  334.692300][T20749] vlan6: entered allmulticast mode
[  334.694478][T20749] bridge0: entered allmulticast mode
[  334.699444][T20749] vlan6: left allmulticast mode
[  334.701563][T20749] bridge0: left allmulticast mode
[  334.760277][T20751] netlink: 'syz.2.6615': attribute type 13 has an invalid length.
[  335.084350][T20761] lo: Caught tx_queue_len zero misconfig
[  335.456039][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6631'.
[  335.472543][T20785] syzkaller0: entered promiscuous mode
[  335.481409][T20785] syzkaller0: entered allmulticast mode
[  335.949289][T20823] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  335.972718][T20825] netlink: 'syz.1.6651': attribute type 1 has an invalid length.
[  336.355803][T20853] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  336.476241][T20859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6668'.
[  336.538023][T20862] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6669'.
[  336.598953][T20866] netlink: 'syz.1.6669': attribute type 1 has an invalid length.
[  336.607490][T20866] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6669'.
[  336.630118][T20870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6672'.
[  336.835779][T20893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6682'.
[  336.885609][ T1252] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  337.316980][T20942] netlink: 'syz.2.6707': attribute type 1 has an invalid length.
[  337.328700][T20942] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6707'.
[  337.402494][T20952] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6710'.
[  337.408404][T20952] bond0 (unregistering): Released all slaves
[  337.703552][T20981] netlink: 'syz.2.6723': attribute type 1 has an invalid length.
[  337.706934][T20981] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6723'.
[  338.088335][T21005] net_ratelimit: 1020 callbacks suppressed
[  338.088355][T21005] netlink: set zone limit has 4 unknown bytes
[  338.720925][T21046] netlink: 'syz.0.6749': attribute type 1 has an invalid length.
[  339.646553][T21050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  340.089352][ T7588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.140658][T21076] __nla_validate_parse: 2 callbacks suppressed
[  340.140669][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6762'.
[  340.174227][T21076] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  340.197664][T21076] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  340.231967][T21076] bond0: Caught tx_queue_len zero misconfig
[  340.362404][T21092] syzkaller0: entered promiscuous mode
[  340.367742][T21092] syzkaller0: entered allmulticast mode
[  340.446687][T21099] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  340.553760][T21107] syzkaller0: entered promiscuous mode
[  340.556426][T21107] syzkaller0: entered allmulticast mode
[  340.569963][T21107] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6775'.
[  340.864183][T21126] lo speed is unknown, defaulting to 1000
[  340.902186][T21131] batman_adv: batadv0: Adding interface: ipvlan3
[  340.904784][T21131] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  340.912307][T21131] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  341.275645][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6794'.
[  341.303621][T21153] syzkaller0: entered promiscuous mode
[  341.311011][T21153] syzkaller0: entered allmulticast mode
[  341.474396][T21167] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  341.481160][T21167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.557938][T21177] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6807'.
[  341.729158][T21189] ip6tnl0: Caught tx_queue_len zero misconfig
[  341.981475][T21219] netlink: 'syz.0.6828': attribute type 1 has an invalid length.
[  342.036144][T21213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6825'.
[  342.224498][T21242] xt_policy: output policy not valid in PREROUTING and INPUT
[  342.289039][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6842'.
[  342.438714][T21261] syzkaller0: entered promiscuous mode
[  342.441279][T21261] syzkaller0: entered allmulticast mode
[  342.544460][T21267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.547552][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.579545][T21273] netlink: 'syz.2.6852': attribute type 39 has an invalid length.
[  342.655137][T21277] netlink: 'syz.0.6854': attribute type 1 has an invalid length.
[  342.979633][T21313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6866'.
[  343.013075][T21306] netlink: 'syz.2.6865': attribute type 2 has an invalid length.
[  343.016152][T21306] netlink: 'syz.2.6865': attribute type 2 has an invalid length.
[  343.027080][T21306] macsec3: entered promiscuous mode
[  343.062970][T21319] netlink: 'syz.0.6869': attribute type 6 has an invalid length.
[  343.336266][   T55] block nbd3: Receive control failed (result -32)
[  343.403627][T21350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6884'.
[  343.424839][T21353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6886'.
[  343.431334][T21350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6884'.
[  343.512005][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x132
[  343.607763][T21367] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  343.690949][T21374] erspan0: left promiscuous mode
[  343.701363][T21374] bridge0: left promiscuous mode
[  343.703789][T21374] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.707227][T21374] 8021q: adding VLAN 0 to HW filter on device team0
[  343.712906][T21374] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.727908][T21374] xfrm0: left allmulticast mode
[  343.732429][T21374] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  343.736890][T21374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  343.742644][T21374] veth1_vlan: left promiscuous mode
[  343.745050][T21374] veth0_vlan: entered promiscuous mode
[  343.747505][T21374] tipc: Resetting bearer <eth:vlan0>
[  343.749432][T21374] tipc: Resetting bearer <eth:vlan0>
[  343.751988][T21374] veth1_vlan: entered promiscuous mode
[  343.756522][T21374] veth1_macvtap: left promiscuous mode
[  343.759039][T21374] veth0_macvtap: left promiscuous mode
[  343.761567][T21374] veth0_macvtap: entered promiscuous mode
[  343.764155][T21374] veth1_macvtap: entered promiscuous mode
[  343.771304][T21374] 8021q: adding VLAN 0 to HW filter on device eth0
[  343.774143][T21374] 8021q: adding VLAN 0 to HW filter on device eth1
[  343.777203][T21374] 8021q: adding VLAN 0 to HW filter on device eth2
[  343.781041][T21374] 8021q: adding VLAN 0 to HW filter on device eth3
[  343.784554][T21374] erspan0: entered promiscuous mode
[  343.800960][T21374] 8021q: adding VLAN 0 to HW filter on device bond1
[  343.805757][T21374] 8021q: adding VLAN 0 to HW filter on device bond2
[  343.814832][T21374] bond3: left allmulticast mode
[  343.817409][T21374] 8021q: adding VLAN 0 to HW filter on device bond3
[  343.821901][T21374] vlan3: left allmulticast mode
[  343.823925][T21374] veth0_to_bond: left allmulticast mode
[  343.829928][T21374] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  343.833453][T21374] batman_adv: batadv0: Interface activated: macvlan2
[  343.844360][T21374] ip6tnl4: left allmulticast mode
[  343.850451][T21374] 8021q: adding VLAN 0 to HW filter on device bond4
[  343.858953][T21374] 8021q: adding VLAN 0 to HW filter on device bond5
[  343.864032][T21374] 8021q: adding VLAN 0 to HW filter on device bond6
[  343.869425][T21374] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  343.907769][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.913396][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.917917][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  343.921549][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.929455][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.933036][T21376] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  343.938048][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  343.942581][ T7592] syz0: Port: 1 Link ACTIVE
[  343.948509][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.955255][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.961528][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  343.967256][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.974818][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.983065][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  343.991333][ T5629] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  344.000938][ T5629] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  344.017967][  T798] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  344.125633][   T12] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  344.128438][   T12] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  344.155539][ T7592] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  344.200579][T21388] netlink: 'syz.2.6900': attribute type 1 has an invalid length.
[  344.221198][T21388] gretap2: entered allmulticast mode
[  344.228898][T21388] bond11: (slave gretap2): making interface the new active one
[  344.232454][T21388] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  344.305711][ T7588] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  344.525443][ T7588] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  344.805486][ T7592] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  344.887273][ T7592] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  346.456909][T21355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  346.520614][T21414] __nla_validate_parse: 127 callbacks suppressed
[  346.520625][T21414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6911'.
[  346.593013][T21426] syzkaller0: entered promiscuous mode
[  346.596288][T21426] syzkaller0: entered allmulticast mode
[  346.651745][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6919'.
[  346.660628][T21432] : entered promiscuous mode
[  346.681932][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6919'.
[  346.707319][T21432] openvswitch: : Dropping previously announced user features
[  346.810038][T21445] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6924'.
[  346.813805][T21445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.903984][T21455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6929'.
[  347.342454][T21491] x_tables: duplicate underflow at hook 3
[  347.394788][T21498] netlink: 'syz.0.6947': attribute type 12 has an invalid length.
[  347.457473][T21498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.461018][T21502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.464661][T21502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.468803][T21498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.472041][T21498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.475284][T21498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.478408][T21498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.481358][T21502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.669509][ T5461] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  347.695563][T21523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6957'.
[  347.699661][T21523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6957'.
[  347.858457][T21533] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  347.871624][T21533] bond13: (slave lo): Enslaving as an active interface with an up link
[  347.967220][T21550] netlink: 'syz.1.6969': attribute type 1 has an invalid length.
[  348.054009][T21563] tcf_pedit_act: 7 callbacks suppressed
[  348.054019][T21563] tc action pedit offset 20 out of bounds
[  348.136651][T21567] 8021q: adding VLAN 0 to HW filter on device bond14
[  348.155104][T21567] bond14: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  348.422880][T21592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6987'.
[  348.515623][T21599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6989'.
[  348.925116][ T5629] net_ratelimit: 764 callbacks suppressed
[  348.925131][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  348.953046][T21630] netlink: 'syz.2.7004': attribute type 1 has an invalid length.
[  349.035100][ T5461] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  349.128032][ T7588] ip6_tnl_xmit_ctl: 6 callbacks suppressed
[  349.128043][ T7588] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  349.145036][ T5461] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  349.265256][ T5461] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  349.323366][T21663] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7019'.
[  349.336928][T21663] siw: device registration error -23
[  349.375907][ T5461] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  349.403230][T21675] netlink: 'syz.1.7026': attribute type 2 has an invalid length.
[  349.470643][T21684] syzkaller0: entered promiscuous mode
[  349.472453][T21684] syzkaller0: entered allmulticast mode
[  349.481955][T21684] 0: reclassify loop, rule prio 0, protocol 700
[  349.485346][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  349.606952][ T5461] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  349.684657][T21695] smbdirect: ib_dev[syz1] removed
[  349.686382][ T7588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.696150][T21706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.141861][T21754] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  350.559199][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  350.569243][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.762702][T21812] netlink: 'syz.1.7088': attribute type 10 has an invalid length.
[  351.358201][T21860] netlink: 'syz.2.7111': attribute type 2 has an invalid length.
[  351.366968][T21862] Cannot find set identified by id 0 to match
[  351.482191][T21874] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  351.507204][T21874] syzkaller0: entered promiscuous mode
[  351.509546][T21874] syzkaller0: entered allmulticast mode
[  351.807585][T21865] syz.0.7114 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  351.830845][T21865] CPU: 1 UID: 0 PID: 21865 Comm: syz.0.7114 Not tainted syzkaller #0 PREEMPT(full) 
[  351.830866][T21865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  351.830875][T21865] Call Trace:
[  351.830881][T21865]  <TASK>
[  351.830887][T21865]  dump_stack_lvl+0xe8/0x150
[  351.830908][T21865]  dump_header+0xd3/0x4c0
[  351.830932][T21865]  oom_kill_process+0x3ab/0x970
[  351.830952][T21865]  out_of_memory+0x106c/0x1410
[  351.830968][T21865]  ? try_charge_memcg+0xbb9/0x1570
[  351.830989][T21865]  ? __pfx___mutex_lock+0x10/0x10
[  351.831013][T21865]  ? __pfx_out_of_memory+0x10/0x10
[  351.831029][T21865]  ? do_raw_spin_unlock+0xf5/0x210
[  351.831079][T21865]  try_charge_memcg+0xc77/0x1570
[  351.831112][T21865]  ? __pfx_try_charge_memcg+0x10/0x10
[  351.831129][T21865]  ? percpu_ref_tryget+0x15/0x180
[  351.831162][T21865]  ? charge_memcg+0x23/0x2b0
[  351.831182][T21865]  charge_memcg+0x1a2/0x2b0
[  351.831202][T21865]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  351.831220][T21865]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  351.831240][T21865]  __swap_cache_prepare_and_add+0xdc/0x700
[  351.831261][T21865]  ? page_rmappable_folio+0x9a/0x170
[  351.831287][T21865]  swap_cache_alloc_folio+0xf1/0x240
[  351.831306][T21865]  swap_cluster_readahead+0x523/0x670
[  351.831327][T21865]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  351.831351][T21865]  ? get_vma_policy+0x27b/0x3c0
[  351.831374][T21865]  swapin_readahead+0x196/0xc50
[  351.831409][T21865]  ? swap_table_get+0x1e/0x260
[  351.831429][T21865]  ? __pfx_swapin_readahead+0x10/0x10
[  351.831446][T21865]  ? swap_table_get+0x1e/0x260
[  351.831458][T21865]  ? swap_table_get+0x1e/0x260
[  351.831472][T21865]  ? swap_table_get+0x1e/0x260
[  351.831486][T21865]  ? swap_table_get+0x216/0x260
[  351.831502][T21865]  ? swap_cache_get_folio+0x2e4/0x2f0
[  351.831520][T21865]  do_swap_page+0x555/0x5120
[  351.831541][T21865]  ? __pte_offset_map+0x29/0x240
[  351.831557][T21865]  ? __pte_offset_map+0x29/0x240
[  351.831580][T21865]  ? do_swap_page+0x128/0x5120
[  351.831595][T21865]  ? __pfx_do_swap_page+0x10/0x10
[  351.831607][T21865]  ? __pte_offset_map+0x1ae/0x240
[  351.831626][T21865]  ? pte_offset_map_rw_nolock+0xea/0x160
[  351.831644][T21865]  handle_mm_fault+0x12d2/0x3170
[  351.831671][T21865]  ? handle_mm_fault+0xee/0x3170
[  351.831692][T21865]  ? __pfx_handle_mm_fault+0x10/0x10
[  351.831707][T21865]  ? lock_vma_under_rcu+0x45a/0x500
[  351.831749][T21865]  do_user_addr_fault+0xa73/0x1340
[  351.831769][T21865]  ? rcu_is_watching+0x15/0xb0
[  351.831785][T21865]  ? trace_page_fault_user+0x84/0x1e0
[  351.831801][T21865]  exc_page_fault+0x6a/0xc0
[  351.831819][T21865]  asm_exc_page_fault+0x26/0x30
[  351.831833][T21865] RIP: 0033:0x7fb4caa6a78c
[  351.831848][T21865] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  351.831858][T21865] RSP: 002b:00007ffe345a0390 EFLAGS: 00010202
[  351.831872][T21865] RAX: 0000000000000000 RBX: 00007fb4cae17080 RCX: 0000555564c1b808
[  351.831880][T21865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  351.831887][T21865] RBP: 00007fb4cae17da0 R08: 0000000000000000 R09: 0000000000000000
[  351.831894][T21865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000055f4f
[  351.831903][T21865] R13: 00007fb4cae15fac R14: 0000000000055c41 R15: 00007ffe345a0490
[  351.831924][T21865]  </TASK>
[  351.831964][T21865] memory: usage 307200kB, limit 307200kB, failcnt 223
[  351.976307][T21865] memory+swap: usage 292492kB, limit 9007199254740988kB, failcnt 0
[  351.979590][T21865] kmem: usage 292280kB, limit 9007199254740988kB, failcnt 0
[  351.982888][T21865] Memory cgroup stats for /syz0:
[  351.982987][T21865] cache 0
[  351.986608][T21865] rss 0
[  351.987837][T21865] rss_huge 0
[  351.989192][T21865] shmem 0
[  351.990512][T21865] mapped_file 0
[  351.991980][T21865] dirty 0
[  351.993237][T21865] writeback 0
[  351.994687][T21865] workingset_refault_anon 8
[  351.996758][T21865] workingset_refault_file 0
[  351.998755][T21865] swap 114688
[  352.000311][T21865] swapcached 172032
[  352.002029][T21865] pgpgin 221007
[  352.003543][T21865] pgpgout 221006
[  352.005187][T21865] pgfault 480094
[  352.006723][T21865] pgmajfault 11
[  352.008219][T21865] inactive_anon 0
[  352.009801][T21865] active_anon 4096
[  352.011510][T21865] inactive_file 0
[  352.013180][T21865] active_file 0
[  352.014685][T21865] unevictable 0
[  352.016819][T21865] hierarchical_memory_limit 314572800
[  352.027751][T21865] hierarchical_memsw_limit 9223372036854771712
[  352.036945][T21865] total_cache 0
[  352.045021][T21865] total_rss 0
[  352.052964][T21865] total_rss_huge 0
[  352.061900][T21865] total_shmem 0
[  352.063523][T21865] total_mapped_file 0
[  352.065450][T21865] total_dirty 0
[  352.074451][T21865] total_writeback 0
[  352.076257][T21865] total_workingset_refault_anon 8
[  352.078386][T21865] total_workingset_refault_file 0
[  352.080471][T21865] total_swap 114688
[  352.081999][T21865] total_swapcached 172032
[  352.084106][T21865] total_pgpgin 221008
[  352.086887][T21865] total_pgpgout 221007
[  352.088679][T21865] total_pgfault 480108
[  352.099998][T21865] total_pgmajfault 11
[  352.101924][T21865] total_inactive_anon 0
[  352.114134][T21865] total_active_anon 4096
[  352.116133][T21865] total_inactive_file 0
[  352.117930][T21865] total_active_file 0
[  352.119665][T21865] total_unevictable 0
[  352.121349][T21865] anon_cost 0
[  352.122788][T21865] file_cost 0
[  352.124259][T21865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7114,pid=21865,uid=0
[  352.130747][T21865] Memory cgroup out of memory: Killed process 21865 (syz.0.7114) total-vm:102232kB, anon-rss:1248kB, file-rss:21584kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  353.583888][T21899] IPVS: length: 15 != 8
[  353.590898][T21896] macsec3: entered promiscuous mode
[  353.643942][T21902] __nla_validate_parse: 5 callbacks suppressed
[  353.643953][T21902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7132'.
[  353.731749][T21911] SET target dimension over the limit!
[  353.768998][T21913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7135'.
[  353.775964][T21913] SET target dimension over the limit!
[  353.869941][T21915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.935111][   T13] net_ratelimit: 20 callbacks suppressed
[  353.935122][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  354.045006][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  354.154977][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  354.265508][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  354.375001][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  354.389921][T21939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7147'.
[  354.485425][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  354.605053][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  356.095373][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  356.725952][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  356.926111][T21943] ip6gretap0: left promiscuous mode
[  356.965908][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  357.085398][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  357.196440][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  357.272502][T21979] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20001
[  357.282101][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7159'.
[  357.337422][T21983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7160'.
[  357.434336][T21989] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.442420][T21989] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.503889][T21989] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.510832][T21989] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.551244][T21989] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.555315][T21989] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.611780][T21989] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.616791][T21989] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.704724][ T7339] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  357.707579][ T7339] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.730294][ T7339] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  357.733893][ T7339] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  357.755708][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  357.759186][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  357.779485][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  357.782922][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  357.832130][T22009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7169'.
[  358.042726][T22025] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7177'.
[  358.107539][T22025] bond0 (unregistering): (slave team0): Releasing backup interface
[  358.119964][T22025] bond0 (unregistering): Released all slaves
[  358.362045][T22057] syzkaller0: entered promiscuous mode
[  358.366043][T22057] syzkaller0: entered allmulticast mode
[  358.372142][T21887] syzkaller0: tun_net_xmit 70
[  358.376562][T22057] syzkaller0: tun_net_xmit 14
[  358.488467][T22068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7197'.
[  358.549615][T22074] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7199'.
[  358.569769][T22072] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  358.586627][T22072] bond12: (slave lo): Enslaving as an active interface with an up link
[  358.592044][ T7588] lo speed is unknown, defaulting to 1000
[  358.605663][ T7588] sqz0: Port: 1 Link ACTIVE
[  358.608081][ T7588] lo speed is unknown, defaulting to 1000
[  358.651589][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7201'.
[  358.695687][T22081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7202'.
[  358.878139][T22091] netlink: 'syz.2.7207': attribute type 3 has an invalid length.
[  358.881708][T22091] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7207'.
[  358.920984][T22093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7208'.
[  358.976296][T21887] net_ratelimit: 15 callbacks suppressed
[  358.976312][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  359.097851][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  359.111972][T22105] netlink: 'syz.0.7214': attribute type 8 has an invalid length.
[  359.205418][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  359.316691][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  359.428962][T22129] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 4294967272. macoff=96
[  359.465156][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  359.575360][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  359.690236][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  359.805373][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  359.852291][T22162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7240'.
[  359.915285][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  359.988756][T22175] xt_l2tp: invalid flags combination: 8
[  360.004727][T22170] netlink: 'syz.2.7240': attribute type 1 has an invalid length.
[  360.022095][T22162] gre0: entered promiscuous mode
[  360.023948][T22162] gre0: entered allmulticast mode
[  360.055608][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  360.058611][T22179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7242'.
[  360.183734][T22191] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7246'.
[  360.224132][T22193] netlink: 'syz.0.7248': attribute type 1 has an invalid length.
[  360.283621][T22193] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address
[  360.290950][T22193] bond14: (slave vxcan3): Error -95 calling set_mac_address
[  360.320395][T22200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7248'.
[  360.339197][T22200] bond14: (slave bridge11): Enslaving as an active interface with a down link
[  360.399728][T22193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7248'.
[  360.417931][T22193] 8021q: adding VLAN 0 to HW filter on device bond14
[  360.433646][T22193] macvlan7: entered promiscuous mode
[  360.436227][T22203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7252'.
[  360.438205][T22193] macvlan7: entered allmulticast mode
[  360.442173][T22193] bond14: entered promiscuous mode
[  360.444770][T22193] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  360.449632][T22193] bond14: left promiscuous mode
[  360.720766][T22219] netlink: 'syz.0.7258': attribute type 13 has an invalid length.
[  360.730852][T22219] netlink: 'syz.0.7258': attribute type 17 has an invalid length.
[  360.831178][T22216] bridge0: port 4(vlan2) entered disabled state
[  360.834015][T22216] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  360.861302][T22228] netlink: 'syz.1.7262': attribute type 11 has an invalid length.
[  360.913955][T22232] netlink: 'syz.1.7263': attribute type 1 has an invalid length.
[  361.127211][T22216] tipc: Resetting bearer <eth:macvlan1>
[  361.483790][T22216] gretap0: left allmulticast mode
[  361.639910][T22219] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.659457][T22219] wg1: left promiscuous mode
[  361.661222][T22219] wg1: left allmulticast mode
[  361.672539][T22219] veth0_to_team: left promiscuous mode
[  361.685309][T22219] hsr0: left promiscuous mode
[  361.691546][T22219] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  361.694394][T22219] bridge0: port 3(veth0_virt_wifi) entered listening state
[  361.698203][T22219] virt_wifi0: left promiscuous mode
[  361.700880][T22219] veth1_vlan: left promiscuous mode
[  361.703230][T22219] veth0_vlan: left promiscuous mode
[  361.705961][T22219] veth0_vlan: entered promiscuous mode
[  361.708797][T22219] veth1_vlan: entered promiscuous mode
[  361.711839][T22219] tipc: Resetting bearer <eth:macvlan1>
[  361.713819][T22219] tipc: Resetting bearer <eth:macvlan1>
[  361.717801][T22219] veth1_macvtap: left promiscuous mode
[  361.720298][T22219] veth0_macvtap: left promiscuous mode
[  361.723077][T22219] veth0_macvtap: entered promiscuous mode
[  361.726591][T22219] veth1_macvtap: entered promiscuous mode
[  361.730890][T22219] bridge0: port 4(vlan2) entered blocking state
[  361.733044][T22219] bridge0: port 4(vlan2) entered listening state
[  361.753324][T22219] virt_wifi0: entered promiscuous mode
[  361.761064][T22219] veth0_to_team: entered promiscuous mode
[  361.764751][T22219] 8021q: adding VLAN 0 to HW filter on device bond1
[  361.770700][T22219] 8021q: adding VLAN 0 to HW filter on device bond2
[  361.774323][T22219] 8021q: adding VLAN 0 to HW filter on device bond3
[  361.783399][  T916] hsr0: entered promiscuous mode
[  361.834323][T22231] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  361.864141][T22232] 8021q: adding VLAN 0 to HW filter on device bond13
[  361.882723][T22240] bond13: (slave ip6gretap0): making interface the new active one
[  361.886513][T22240] bond13: (slave ip6gretap0): Enslaving as an active interface with an up link
[  362.264826][T22289] netlink: 'syz.2.7282': attribute type 1 has an invalid length.
[  362.344644][T22289] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[  362.365438][T22289] bond0: (slave vxcan1): Error -95 calling set_mac_address
[  362.447571][T22293] bond0: (slave bridge13): Enslaving as an active interface with a down link
[  362.487546][T22289] ip6gretap2: entered promiscuous mode
[  362.489429][T22289] ip6gretap2: entered allmulticast mode
[  362.493674][T22289] bond0: (slave ip6gretap2): making interface the new active one
[  362.497534][T22289] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link
[  362.507623][T22301] netlink: 'syz.1.7286': attribute type 11 has an invalid length.
[  362.873518][T22328] --map-set only usable from mangle table
[  363.277769][T22349] netlink: 'syz.0.7309': attribute type 29 has an invalid length.
[  363.618679][T22375] syzkaller0: entered promiscuous mode
[  363.625064][T22375] syzkaller0: entered allmulticast mode
[  364.025235][   T13] net_ratelimit: 24 callbacks suppressed
[  364.025250][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  364.135773][T22421] __nla_validate_parse: 9 callbacks suppressed
[  364.135785][T22421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7344'.
[  364.137855][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  364.255574][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  364.267323][T22436] syzkaller0: entered promiscuous mode
[  364.269708][T22436] syzkaller0: entered allmulticast mode
[  364.279161][T22427] block nbd4: server does not support multiple connections per device.
[  364.289482][T22427] block nbd4: shutting down sockets
[  364.295453][T22440] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7352'.
[  364.367130][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  364.401873][T22448] syzkaller0: entered promiscuous mode
[  364.404341][T22448] syzkaller0: entered allmulticast mode
[  364.477137][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  364.595486][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  364.705921][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  364.815748][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  364.906442][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7370'.
[  364.910119][T22481] veth1: Caught tx_queue_len zero misconfig
[  364.925640][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  365.036550][ T7339] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  365.659859][T22529] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  366.297374][T22572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7413'.
[  366.301875][T22572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7413'.
[  366.306223][T22572] validate_nla: 1 callbacks suppressed
[  366.306236][T22572] netlink: 'syz.2.7413': attribute type 12 has an invalid length.
[  366.311676][T22572] netlink: 'syz.2.7413': attribute type 13 has an invalid length.
[  366.476248][T22580] team0: entered promiscuous mode
[  366.708056][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7423'.
[  366.742257][T22592] bond15: entered promiscuous mode
[  366.744655][T22592] 8021q: adding VLAN 0 to HW filter on device bond15
[  366.777658][T22592] 8021q: adding VLAN 0 to HW filter on device bond15
[  366.780943][T22592] bond15: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  366.786267][T22592] bond15: (slave ip6gre3): Error -95 calling set_mac_address
[  367.313879][T22639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7446'.
[  367.318173][T22639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7446'.
[  367.419972][T22645] lo speed is unknown, defaulting to 1000
[  367.596422][T22658] syzkaller0: entered promiscuous mode
[  367.599021][T22658] syzkaller0: entered allmulticast mode
[  368.059821][T22681] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  368.131656][T22685] netlink: 'syz.1.7467': attribute type 178 has an invalid length.
[  368.358481][T22697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7473'.
[  368.770652][T22731] bridge: RTM_NEWNEIGH with invalid state 0x8
[  368.885217][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  369.129110][ T7339] net_ratelimit: 38 callbacks suppressed
[  369.129169][ T7339] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  369.255135][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  369.365744][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  369.375712][T22777] netlink: 'syz.0.7504': attribute type 16 has an invalid length.
[  369.485423][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  369.488137][T22782] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7506'.
[  369.499112][T22782] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7506'.
[  369.591041][T22790] xt_CT: You must specify a L4 protocol and not use inversions on it
[  369.596967][ T7339] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  369.642238][T22794] netlink: 'syz.2.7512': attribute type 1 has an invalid length.
[  369.682800][T22796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7513'.
[  369.688604][T22796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7513'.
[  369.706301][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  369.815083][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  369.925065][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  370.035790][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  370.145374][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  370.649167][T22804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  370.743446][T22822] netlink: 'syz.2.7523': attribute type 10 has an invalid length.
[  370.746603][T22822] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7523'.
[  370.888985][T22827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7525'.
[  371.027476][T22837] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7528'.
[  371.759556][T22905] netlink: 'syz.2.7556': attribute type 1 has an invalid length.
[  371.783253][T22905] 8021q: adding VLAN 0 to HW filter on device bond16
[  371.799432][T22905] bond16: (slave gretap3): making interface the new active one
[  371.804454][T22905] bond16: (slave gretap3): Enslaving as an active interface with an up link
[  371.843206][T22905] syz.2.7556 (22905) used greatest stack depth: 17952 bytes left
[  372.071684][T22920] netlink: 'syz.2.7559': attribute type 16 has an invalid length.
[  372.093048][T22920] netlink: 'syz.2.7559': attribute type 17 has an invalid length.
[  372.112876][T22920] gre0: left promiscuous mode
[  372.117631][T22920] gre0: left allmulticast mode
[  372.128563][T22920] team0: left promiscuous mode
[  372.131620][T22920] 8021q: adding VLAN 0 to HW filter on device team0
[  372.187644][T22924] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7563'.
[  372.227825][  T916] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  372.247012][  T916] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  372.292816][T22927] sctp: [Deprecated]: syz.1.7564 (pid 22927) Use of struct sctp_assoc_value in delayed_ack socket option.
[  372.292816][T22927] Use struct sctp_sack_info instead
[  372.375206][ T7592] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  372.578131][T22900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  372.725958][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  372.835885][T22954] SET target dimension over the limit!
[  372.967367][ T7592] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  373.093379][T22976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7587'.
[  373.130703][T22978] xt_hl: Unknown TTL match mode: 237
[  374.007626][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  374.165481][T21887] net_ratelimit: 35 callbacks suppressed
[  374.165498][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  374.194694][T23020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7606'.
[  374.276525][ T7339] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  374.395455][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  374.505421][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  374.582942][T23039] __nla_validate_parse: 2 callbacks suppressed
[  374.582956][T23039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7614'.
[  374.625187][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  374.735935][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  374.855257][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  374.883949][T23065] tunl0: Caught tx_queue_len zero misconfig
[  374.914390][T23053] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  374.920012][T23053] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  374.965175][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  375.076076][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  375.118146][T23084] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  375.185283][ T7339] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  375.423088][T23101] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  375.788389][T23133] pim6reg1: entered promiscuous mode
[  375.790753][T23133] pim6reg1: entered allmulticast mode
[  375.804076][T23135] tunl0: entered promiscuous mode
[  375.812244][T23135] netlink: 'syz.0.7660': attribute type 4 has an invalid length.
[  375.816243][T23135] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7660'.
[  375.960949][T23143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7663'.
[  376.000330][T23152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7666'.
[  376.005209][T23152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7666'.
[  376.117019][T23164] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.7672'.
[  376.177259][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7676'.
[  376.234670][T23177] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7678'.
[  376.238970][T23177] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7678'.
[  376.242978][T23177] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7678'.
[  376.301774][T23181] netlink: 'syz.2.7680': attribute type 2 has an invalid length.
[  376.304763][T23181] netlink: 'syz.2.7680': attribute type 1 has an invalid length.
[  376.512723][T23197] 8021q: adding VLAN 0 to HW filter on device bond17
[  376.540627][T23202] bond15: entered promiscuous mode
[  376.543101][T23202] 8021q: adding VLAN 0 to HW filter on device bond15
[  376.570161][T23202] vlan4: entered allmulticast mode
[  376.572170][T23202] bond15: entered allmulticast mode
[  377.360615][T23257] netlink: 'syz.0.7714': attribute type 3 has an invalid length.
[  377.364020][T23257] netlink: 'syz.0.7714': attribute type 3 has an invalid length.
[  377.454084][T23265] netlink: 'syz.2.7718': attribute type 1 has an invalid length.
[  378.346905][T23332] netlink: 'syz.2.7742': attribute type 46 has an invalid length.
[  378.979162][T23358] ip6gretap0: entered allmulticast mode
[  379.290911][T23364] bridge0: port 4(vlan2) entered disabled state
[  379.293557][T23364] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  379.380260][T23370] syz.2.7757: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  379.409976][T23370] CPU: 1 UID: 0 PID: 23370 Comm: syz.2.7757 Not tainted syzkaller #0 PREEMPT(full) 
[  379.409998][T23370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  379.410006][T23370] Call Trace:
[  379.410013][T23370]  <TASK>
[  379.410019][T23370]  dump_stack_lvl+0xe8/0x150
[  379.410040][T23370]  warn_alloc+0x249/0x340
[  379.410061][T23370]  ? stack_trace_save+0xa9/0x100
[  379.410083][T23370]  ? __pfx_warn_alloc+0x10/0x10
[  379.410105][T23370]  ? kasan_save_track+0x4f/0x80
[  379.410121][T23370]  ? kasan_save_track+0x3e/0x80
[  379.410136][T23370]  ? __kasan_kmalloc+0x93/0xb0
[  379.410152][T23370]  ? __kmalloc_cache_noprof+0x31c/0x660
[  379.410168][T23370]  ? xskq_create+0x56/0x170
[  379.410185][T23370]  ? xsk_setsockopt+0x54c/0x990
[  379.410197][T23370]  ? do_sock_setsockopt+0x17c/0x1b0
[  379.410214][T23370]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  379.410229][T23370]  ? do_syscall_64+0x15f/0xf80
[  379.410248][T23370]  __vmalloc_node_range_noprof+0x132/0x1750
[  379.410288][T23370]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  379.410310][T23370]  ? __kasan_kmalloc+0x93/0xb0
[  379.410331][T23370]  vmalloc_user_noprof+0xad/0xe0
[  379.410349][T23370]  ? xskq_create+0xbf/0x170
[  379.410364][T23370]  xskq_create+0xbf/0x170
[  379.410380][T23370]  xsk_init_queue+0x8a/0xe0
[  379.410398][T23370]  xsk_setsockopt+0x54c/0x990
[  379.410414][T23370]  ? __pfx_xsk_setsockopt+0x10/0x10
[  379.410429][T23370]  ? __pfx_aa_sk_perm+0x10/0x10
[  379.410447][T23370]  ? aa_sock_opt_perm+0xff/0x1a0
[  379.410466][T23370]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  379.410481][T23370]  ? __pfx_xsk_setsockopt+0x10/0x10
[  379.410495][T23370]  do_sock_setsockopt+0x17c/0x1b0
[  379.410515][T23370]  __x64_sys_setsockopt+0x13d/0x1b0
[  379.410534][T23370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.410548][T23370]  do_syscall_64+0x15f/0xf80
[  379.410563][T23370]  ? trace_irq_disable+0x3b/0x140
[  379.410582][T23370]  ? clear_bhb_loop+0x40/0x90
[  379.410598][T23370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.410610][T23370] RIP: 0033:0x7f907d59cdd9
[  379.410632][T23370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.410645][T23370] RSP: 002b:00007f907e37a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  379.410660][T23370] RAX: ffffffffffffffda RBX: 00007f907d815fa0 RCX: 00007f907d59cdd9
[  379.410671][T23370] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  379.410678][T23370] RBP: 00007f907d632d69 R08: 0000000000000004 R09: 0000000000000000
[  379.410687][T23370] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  379.410696][T23370] R13: 00007f907d816038 R14: 00007f907d815fa0 R15: 00007ffdb4187708
[  379.410717][T23370]  </TASK>
[  379.410722][T23370] Mem-Info:
[  379.545017][T23370] active_anon:17665 inactive_anon:2 isolated_anon:0
[  379.545017][T23370]  active_file:13314 inactive_file:38449 isolated_file:0
[  379.545017][T23370]  unevictable:1768 dirty:326 writeback:0
[  379.545017][T23370]  slab_reclaimable:11514 slab_unreclaimable:176603
[  379.545017][T23370]  mapped:19297 shmem:2352 pagetables:1041
[  379.545017][T23370]  sec_pagetables:0 bounce:0
[  379.545017][T23370]  kernel_misc_reclaimable:0
[  379.545017][T23370]  free:1017256 free_pcp:18052 free_cma:0
[  379.565294][T23370] Node 0 active_anon:29832kB inactive_anon:0kB active_file:9980kB inactive_file:146708kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:19896kB dirty:256kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10176kB pagetables:1964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  379.579686][T23370] Node 1 active_anon:40828kB inactive_anon:8kB active_file:43276kB inactive_file:7088kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:57292kB dirty:1048kB writeback:0kB shmem:4556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3648kB pagetables:2200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  379.595965][T23370] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  379.610308][T23370] lowmem_reserve[]: 0 1587 2117 2117 2117
[  379.612806][T23370] Node 0 DMA32 free:1246696kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19400kB inactive_anon:0kB active_file:9888kB inactive_file:664kB unevictable:0kB writepending:232kB zspages:4kB present:2080636kB managed:1625368kB mlocked:0kB bounce:0kB free_pcp:15540kB local_pcp:15060kB free_cma:0kB
[  379.630110][T23370] lowmem_reserve[]: 0 0 530 530 530
[  379.632720][T23370] Node 0 Normal free:10636kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10432kB inactive_anon:0kB active_file:92kB inactive_file:146044kB unevictable:3536kB writepending:24kB zspages:0kB present:1572868kB managed:543156kB mlocked:0kB bounce:0kB free_pcp:3204kB local_pcp:2492kB free_cma:0kB
[  379.646037][T23370] lowmem_reserve[]: 0 0 0 0 0
[  379.648159][T23370] Node 1 Normal free:2796332kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40828kB inactive_anon:8kB active_file:43276kB inactive_file:7088kB unevictable:3536kB writepending:1048kB zspages:0kB present:3670012kB managed:3594680kB mlocked:0kB bounce:0kB free_pcp:53788kB local_pcp:34256kB free_cma:0kB
[  379.662362][T23370] lowmem_reserve[]: 0 0 0 0 0
[  379.664505][T23370] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  379.670169][T23370] Node 0 DMA32: 1016*4kB (UM) 777*8kB (UME) 420*16kB (UME) 67*32kB (UME) 230*64kB (UME) 105*128kB (UME) 67*256kB (UM) 45*512kB (UME) 14*1024kB (UE) 11*2048kB (UME) 274*4096kB (UM) = 1246664kB
[  379.678315][T23370] Node 0 Normal: 413*4kB (U) 1*8kB (U) 149*16kB (U) 60*32kB (U) 49*64kB (U) 12*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10636kB
[  379.684269][T23370] Node 1 Normal: 3347*4kB (UME) 2092*8kB (UME) 1420*16kB (UME) 698*32kB (UME) 818*64kB (UME) 294*128kB (UM) 68*256kB (UM) 45*512kB (UME) 28*1024kB (UME) 21*2048kB (UME) 615*4096kB (UM) = 2796332kB
[  379.695597][T23370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  379.699520][T23370] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  379.704056][T23370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  379.711026][T23370] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  379.716743][T23370] 54118 total pagecache pages
[  379.718912][T23370] 3 pages in swap cache
[  379.720926][T23370] Free swap  = 124468kB
[  379.722933][T23370] Total swap = 124996kB
[  379.725567][T23370] 1834877 pages RAM
[  379.727459][T23370] 0 pages HighMem/MovableOnly
[  379.729663][T23370] 390236 pages reserved
[  379.731570][T23370] 0 pages cma reserved
[  379.791205][T23364] tipc: Resetting bearer <eth:macvlan1>
[  379.837758][T23374] GUP no longer grows the stack in syz.1.7758 (23374): 200000003000-20000000a000 (200000001000)
[  379.844283][T23374] CPU: 0 UID: 0 PID: 23374 Comm: syz.1.7758 Not tainted syzkaller #0 PREEMPT(full) 
[  379.844305][T23374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  379.844313][T23374] Call Trace:
[  379.844319][T23374]  <TASK>
[  379.844325][T23374]  dump_stack_lvl+0xe8/0x150
[  379.844346][T23374]  __get_user_pages+0x2378/0x2720
[  379.844385][T23374]  ? __gup_longterm_locked+0xc4e/0x1630
[  379.844414][T23374]  ? __gup_longterm_locked+0xc4e/0x1630
[  379.844431][T23374]  ? down_read_killable+0x1bb/0x340
[  379.844455][T23374]  __gup_longterm_locked+0xdcf/0x1630
[  379.844474][T23374]  ? lock_acquire+0x106/0x350
[  379.844503][T23374]  gup_fast_fallback+0x1d84/0x20d0
[  379.844541][T23374]  ? __pfx_gup_fast_fallback+0x10/0x10
[  379.844567][T23374]  ? is_valid_gup_args+0x11f/0x200
[  379.844585][T23374]  ? get_user_pages_fast+0x4d/0xb0
[  379.844602][T23374]  __iov_iter_get_pages_alloc+0x370/0xa10
[  379.844626][T23374]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  379.844648][T23374]  iov_iter_get_pages2+0x5e/0xa0
[  379.844670][T23374]  __se_sys_vmsplice+0x7c7/0x1620
[  379.844699][T23374]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  379.844717][T23374]  ? __pfx_futex_wait+0x10/0x10
[  379.844740][T23374]  ? lockdep_hardirqs_on+0x7a/0x110
[  379.844793][T23374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.844807][T23374]  do_syscall_64+0x15f/0xf80
[  379.844824][T23374]  ? trace_irq_disable+0x3b/0x140
[  379.844841][T23374]  ? clear_bhb_loop+0x40/0x90
[  379.844857][T23374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.844904][T23374] RIP: 0033:0x7fb54399cdd9
[  379.844919][T23374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.844931][T23374] RSP: 002b:00007fb5447a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  379.844947][T23374] RAX: ffffffffffffffda RBX: 00007fb543c15fa0 RCX: 00007fb54399cdd9
[  379.844956][T23374] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[  379.844965][T23374] RBP: 00007fb543a32d69 R08: 0000000000000000 R09: 0000000000000000
[  379.844973][T23374] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  379.844980][T23374] R13: 00007fb543c16038 R14: 00007fb543c15fa0 R15: 00007ffcafa369f8
[  379.845003][T23374]  </TASK>
[  380.054766][T23365] block nbd4: Receive control failed (result -32)
[  380.058991][   T55] block nbd4: Receive control failed (result -32)
[  380.091005][T23384] netlink: 'syz.1.7762': attribute type 9 has an invalid length.
[  380.095185][T23384] __nla_validate_parse: 11 callbacks suppressed
[  380.095200][T23384] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.7762'.
[  380.349207][T23366] vlan5: entered promiscuous mode
[  380.364625][ T5629] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  380.369851][ T5629] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  380.374689][ T5629] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  380.379220][ T5629] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  380.382572][ T5629] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  380.386548][ T5629] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  380.389853][ T5629] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  380.393039][ T5629] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  380.415267][ T5629] net_ratelimit: 31 callbacks suppressed
[  380.415282][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  380.535412][ T7339] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  380.604175][T23402] xt_CT: You must specify a L4 protocol and not use inversions on it
[  380.655340][ T7339] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  380.775223][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  380.854646][T23416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7777'.
[  380.895182][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  381.005062][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  381.115185][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  381.225228][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  381.335151][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  381.448066][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  381.473010][T23443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7789'.
[  381.882049][T23472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7803'.
[  382.306745][T23513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7822'.
[  382.310716][T23513] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  382.426989][T23521] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  382.432344][T23521] bond14 (unregistering): Released all slaves
[  383.434451][T23535] IPVS: length: 35 != 24
[  383.515659][T23541] syzkaller0: entered promiscuous mode
[  383.524999][T23541] syzkaller0: entered allmulticast mode
[  383.537662][T23541] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  383.701573][T23557] netlink: 'syz.2.7842': attribute type 3 has an invalid length.
[  384.032608][T23588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7856'.
[  384.039610][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7856'.
[  384.044340][T23588] netlink: 'syz.1.7856': attribute type 14 has an invalid length.
[  384.050556][T23588] netlink: 'syz.1.7856': attribute type 13 has an invalid length.
[  384.228423][T23610] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7867'.
[  384.231817][T23610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7867'.
[  384.238113][T23610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7867'.
[  385.435615][T21887] net_ratelimit: 36 callbacks suppressed
[  385.435626][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  385.448674][T23723] __nla_validate_parse: 4 callbacks suppressed
[  385.448688][T23723] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7921'.
[  385.555102][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  385.588096][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7925'.
[  385.591805][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7925'.
[  385.670491][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  385.785622][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  385.802031][T23746] lo speed is unknown, defaulting to 1000
[  385.875913][T23755] IPVS: Scheduler module ip_vs_sip not found
[  385.895586][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  386.005023][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  386.107373][T23767] batadv0: entered promiscuous mode
[  386.110953][T23767] 8021q: adding VLAN 0 to HW filter on device macsec0
[  386.117801][T23767] batadv0: left promiscuous mode
[  386.135139][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  386.245876][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  386.339323][T23777] netlink: zone id is out of range
[  386.342698][T23777] netlink: zone id is out of range
[  386.676313][T23797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7951'.
[  387.289131][T23833] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7968'.
[  387.300431][T23833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7968'.
[  387.334405][T23837] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7970'.
[  387.533062][T23849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7976'.
[  387.536455][T23849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7976'.
[  387.739465][T23865] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7984'.
[  388.009016][T23895] bridge14: entered allmulticast mode
[  388.181159][T23912] netlink: 'syz.2.8004': attribute type 3 has an invalid length.
[  388.650098][T23936] lo speed is unknown, defaulting to 1000
[  390.148927][T24027] lo speed is unknown, defaulting to 1000
[  390.475084][   T12] net_ratelimit: 142 callbacks suppressed
[  390.475100][   T12] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  390.591496][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  390.710289][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  390.837345][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  390.951289][T24070] syzkaller0: entered promiscuous mode
[  390.965540][T24070] syzkaller0: entered allmulticast mode
[  391.055340][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  391.141174][T24081] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[  391.167118][T21887] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  391.275180][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  391.341710][T24097] : renamed from veth0_to_bond (while UP)
[  391.385024][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  391.505322][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  391.920268][T24131] pim6reg: entered allmulticast mode
[  391.923571][T24130] pim6reg: left allmulticast mode
[  392.890283][T24174] netlink: 'syz.2.8122': attribute type 7 has an invalid length.
[  392.895640][T24174] netlink: 'syz.2.8122': attribute type 7 has an invalid length.
[  393.305366][T24194] sctp: [Deprecated]: syz.2.8131 (pid 24194) Use of struct sctp_assoc_value in delayed_ack socket option.
[  393.305366][T24194] Use struct sctp_sack_info instead
[  393.318493][T24194] sctp: [Deprecated]: syz.2.8131 (pid 24194) Use of struct sctp_assoc_value in delayed_ack socket option.
[  393.318493][T24194] Use struct sctp_sack_info instead
[  393.555464][T24205] __nla_validate_parse: 5 callbacks suppressed
[  393.555487][T24205] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8136'.
[  393.593951][T24205] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8136'.
[  393.598914][T24205] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8136'.
[  393.608753][T24208] dvmrp8: entered allmulticast mode
[  393.964389][T24241] netlink: 'syz.1.8154': attribute type 1 has an invalid length.
[  393.992626][T24241] 8021q: adding VLAN 0 to HW filter on device bond14
[  394.032495][T24241] bond14: (slave veth25): Enslaving as an active interface with an up link
[  394.110402][T24241] netlink: 'syz.1.8154': attribute type 1 has an invalid length.
[  394.123192][T24241] 8021q: adding VLAN 0 to HW filter on device batadv2
[  394.128681][T24241] bond14: (slave batadv2): Enslaving as an active interface with an up link
[  394.264650][T24258] netlink: 'syz.1.8161': attribute type 1 has an invalid length.
[  394.303424][T24258] bond15: (slave geneve4): making interface the new active one
[  394.308868][T24258] bond15: (slave geneve4): Enslaving as an active interface with an up link
[  394.312432][T19959] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  394.317893][T19959] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  394.322323][T19959] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  394.567527][T24273] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  394.938116][T24295] syzkaller0: entered promiscuous mode
[  394.940292][T24295] syzkaller0: entered allmulticast mode
[  394.958705][T24295] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  395.068677][T24298] netlink: 'syz.1.8179': attribute type 1 has an invalid length.
[  395.187677][T24308] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  395.502746][T24325] IPVS: ip_vs_add_dest(): server weight less than zero
[  395.565408][ T5629] net_ratelimit: 35 callbacks suppressed
[  395.565423][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  395.675029][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  395.760461][T24349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8202'.
[  395.764067][T24349] bond0: option resend_igmp: invalid value (41663)
[  395.767669][T24349] bond0: option resend_igmp: allowed values 0 - 255
[  395.785518][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  395.792326][T24351] syzkaller0: entered promiscuous mode
[  395.797193][T24351] syzkaller0: entered allmulticast mode
[  395.890102][T24359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8207'.
[  395.895353][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  395.957717][T24366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8209'.
[  396.005181][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  396.116621][T19959] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  396.225124][   T13] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  396.337320][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  396.457792][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  396.567144][ T5629] bond14: (slave ip6gretap1): failed to get link speed/duplex
[  396.685271][T24422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8237'.
[  397.031863][T24453] syzkaller1: entered promiscuous mode
[  397.045332][T24453] syzkaller1: entered allmulticast mode
[  397.052179][T24453] netlink: 'syz.2.8251': attribute type 298 has an invalid length.
[  397.860267][T24499] netlink: 'syz.0.8275': attribute type 13 has an invalid length.
[  397.863828][T24499] netlink: 'syz.0.8275': attribute type 17 has an invalid length.
[  397.873475][T24499] tunl0: left promiscuous mode
[  397.893991][T24499] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.912107][T24499] veth0_to_team: left promiscuous mode
[  397.922820][T24499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  397.928422][T24499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  397.933561][T24499] hsr0: left promiscuous mode
[  397.960956][   T32] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  397.963263][   T32] bridge0: port 3(veth0_virt_wifi) entered listening state
[  398.017239][T24508] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8279'.
[  398.184457][T24524] netlink: 'syz.2.8283': attribute type 13 has an invalid length.
[  398.189124][T24524] netlink: 'syz.2.8283': attribute type 17 has an invalid length.
[  398.493736][T24522] tipc: Resetting bearer <eth:xfrm0>
[  398.551340][T24522] tipc: Resetting bearer <eth:vlan0>
[  398.560981][T24522] veth0_vlan: left promiscuous mode
[  398.757886][T24522] batman_adv: batadv0: Interface deactivated: macvlan2
[  399.097976][T24524] erspan0: left promiscuous mode
[  399.136025][T24524] 8021q: adding VLAN 0 to HW filter on device team0
[  399.146607][T24524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.192336][T24524] veth1_vlan: left promiscuous mode
[  399.197073][T24524] veth0_vlan: entered promiscuous mode
[  399.202878][T24524] veth1_vlan: entered promiscuous mode
[  399.213433][T24524] veth1_macvtap: left promiscuous mode
[  399.217149][T24524] veth0_macvtap: left promiscuous mode
[  399.221012][T24524] veth0_macvtap: entered promiscuous mode
[  399.230109][T24524] veth1_macvtap: entered promiscuous mode
[  399.259818][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  399.263573][   T13] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  399.281364][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  399.286668][   T13] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  399.291837][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  399.296584][   T13] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  399.303713][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  399.307202][   T13] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  399.652517][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8297'.
[  399.913131][T24583] bridge0: entered allmulticast mode
[  399.917256][T24583] bridge0: left allmulticast mode
[  399.946737][T24585] syzkaller0: entered promiscuous mode
[  399.951326][T24585] syzkaller0: entered allmulticast mode
[  400.452778][T24607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8320'.
[  400.683033][T24629] IPVS: Scheduler module ip_vs_sip not found
[  400.781896][T24641] netlink: 'syz.1.8335': attribute type 21 has an invalid length.
[  400.785429][T24641] IPv6: NLM_F_CREATE should be specified when creating new route
[  400.828615][T24645] sock: sock_timestamping_bind_phc: sock not bind to device
[  400.878437][T24647] smc: removing ib device sqz0
[  400.922737][T24647] smbdirect: ib_dev[sqz0] removed
[  401.062835][T24652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8339'.
[  401.077536][T24651] block nbd5: server does not support multiple connections per device.
[  401.102014][T24651] block nbd5: shutting down sockets
[  401.883363][T24698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8362'.
[  401.945339][T24704] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  401.961323][T24704] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8366'.
[  401.992066][T24707] syzkaller0: entered promiscuous mode
[  401.996039][T24707] syzkaller0: entered allmulticast mode
[  402.196948][T24718] bridge15: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  402.382086][T24722] xt_hashlimit: overflow, rate too high: 0
[  402.582291][T24728] netlink: 'syz.2.8374': attribute type 1 has an invalid length.
[  402.590106][T24728] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8374'.
[  402.615667][T24728] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8374'.
[  402.634976][T24728] netlink: 'syz.2.8374': attribute type 1 has an invalid length.
[  402.641223][T24728] netlink: 634 bytes leftover after parsing attributes in process `syz.2.8374'.
[  402.869321][T24738] netlink: 'syz.2.8379': attribute type 2 has an invalid length.
[  403.031449][T24745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8383'.
[  403.173572][T24769] netlink: 'syz.2.8390': attribute type 8 has an invalid length.
[  403.179965][T24769] IPVS: Unknown mcast interface: bridge_slave_0
[  403.599926][T24805] xt_l2tp: wrong L2TP version: 0
[  404.348058][T24839] syzkaller0: entered promiscuous mode
[  404.350667][T24839] syzkaller0: entered allmulticast mode
[  404.497235][T24847] syzkaller0: entered promiscuous mode
[  404.499962][T24847] syzkaller0: entered allmulticast mode
[  404.614103][T24857] net_ratelimit: 16 callbacks suppressed
[  404.614169][T24857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.764205][T24907] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  406.768954][T24905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8450'.
[  407.257856][T24938] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  407.564251][T24957] netlink: 548 bytes leftover after parsing attributes in process `syz.0.8475'.
[  408.109688][T24972] 8021q: VLANs not supported on gre0
[  408.138012][T24974] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  408.258745][T24982] netlink: 'syz.2.8485': attribute type 8 has an invalid length.
[  408.330965][T24986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8487'.
[  408.500051][T24998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8493'.
[  408.502005][T24997] sctp: [Deprecated]: syz.0.8492 (pid 24997) Use of int in max_burst socket option deprecated.
[  408.502005][T24997] Use struct sctp_assoc_value instead
[  408.505836][T24998] gtp3: entered promiscuous mode
[  408.510963][T24998] gtp3: entered allmulticast mode
[  408.669691][T25013] netlink: 'syz.1.8500': attribute type 2 has an invalid length.
[  409.045334][T25049] syzkaller0: entered promiscuous mode
[  409.048292][T25049] syzkaller0: entered allmulticast mode
[  409.203611][T25059] netlink: 'syz.1.8517': attribute type 13 has an invalid length.
[  409.221008][T25059] netlink: 'syz.1.8517': attribute type 17 has an invalid length.
[  409.382667][T25053] tipc: Resetting bearer <eth:ipvlan0>
[  409.422948][T25053] tipc: Resetting bearer <ib:geneve0>
[  410.021467][T25059] 8021q: adding VLAN 0 to HW filter on device team0
[  410.025899][T25059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.039092][T25059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  410.042808][T25059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  410.051577][T25059] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  410.115760][T19959] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  410.126618][T19959] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.135352][T19959] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  410.184705][T19959] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  410.205277][T19959] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.211656][T19959] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  410.219341][T19959] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  410.228830][T19959] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.233405][T19959] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  410.423150][T25107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8538'.
[  410.482931][T25112] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.8540'.
[  410.490458][T25113] openvswitch: netlink: Flow actions attr not present in new flow.
[  410.555939][T25117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8542'.
[  413.685940][T25133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  413.848579][T25187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8573'.
[  413.870565][T23365] block nbd5: Receive control failed (result -1)
[  414.011896][T25198] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  414.189412][T25213] 5n: entered promiscuous mode
[  414.299253][T25226] veth0: entered promiscuous mode
[  414.307930][T25226] veth0: left promiscuous mode
[  414.499350][T25249] tipc: Enabling of bearer <eth:lo> rejected, max 3 bearers permitted
[  414.540727][T25251] netlink: 'syz.0.8598': attribute type 10 has an invalid length.
[  414.564429][T25251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8598'.
[  414.566018][T25256] syzkaller0: entered promiscuous mode
[  414.569497][T25256] syzkaller0: entered allmulticast mode
[  414.771823][T25264] syzkaller1: entered promiscuous mode
[  414.773671][T25264] syzkaller1: entered allmulticast mode
[  414.823138][T25270] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:16
[  414.919605][T25280] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8612'.
[  415.028639][T25292] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:16
[  415.089230][T25299] netlink: 'syz.1.8621': attribute type 4 has an invalid length.
[  415.101890][T25299] netlink: 'syz.1.8621': attribute type 4 has an invalid length.
[  415.109823][T25299] netlink: 'syz.1.8621': attribute type 4 has an invalid length.
[  415.258992][T25315] netlink: 'syz.0.8629': attribute type 1 has an invalid length.
[  415.261616][T25315] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8629'.
[  415.289261][T25317] syzkaller1: entered promiscuous mode
[  415.291313][T25317] syzkaller1: entered allmulticast mode
[  415.445276][T25324] syzkaller0: entered promiscuous mode
[  415.447328][T25324] syzkaller0: entered allmulticast mode
[  415.998754][T25334] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[  416.791931][T25391] tipc: Resetting bearer <eth:ipvlan0>
[  416.797606][T25391] tipc: Resetting bearer <eth:ipvlan0>
[  416.800963][T25391] tipc: Resetting bearer <ib:geneve0>
[  417.483588][T25400] netlink: 'syz.0.8666': attribute type 12 has an invalid length.
[  417.757630][T25404] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8667'.
[  418.199732][T25427] IPv6: NLM_F_CREATE should be specified when creating new route
[  418.638385][T25456] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  418.647286][T25456] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  418.734520][T25463] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8689'.
[  419.232311][T25495] syzkaller0: entered promiscuous mode
[  419.234776][T25495] syzkaller0: entered allmulticast mode
[  419.346783][T25500] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  419.840816][T25541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8726'.
[  419.929401][T25546] syzkaller0: entered promiscuous mode
[  419.931830][T25546] syzkaller0: entered allmulticast mode
[  420.280875][T25570] netlink: 'syz.0.8739': attribute type 8 has an invalid length.
[  420.429280][T25590] bridge0: entered allmulticast mode
[  420.441938][T25590] pim6reg: entered allmulticast mode
[  420.491533][T25594] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  421.160121][T25577] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  421.223939][T25642] netlink: 566 bytes leftover after parsing attributes in process `syz.2.8773'.
[  421.340874][T25653] netlink: 'syz.2.8777': attribute type 29 has an invalid length.
[  421.344199][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8777'.
[  421.347573][T25655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8778'.
[  421.349828][T25653] netlink: 'syz.2.8777': attribute type 29 has an invalid length.
[  421.354778][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8777'.
[  421.359111][T25653] netlink: 'syz.2.8777': attribute type 29 has an invalid length.
[  421.362695][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8777'.
[  421.369834][T25653] netlink: 'syz.2.8777': attribute type 29 has an invalid length.
[  421.373182][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8777'.
[  421.380527][T25653] netlink: 'syz.2.8777': attribute type 29 has an invalid length.
[  421.383848][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8777'.
[  421.387982][T25653] netlink: 'syz.2.8777': attribute type 29 has an invalid length.
[  421.390897][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8777'.
[  421.403843][T25653] netlink: 'syz.2.8777': attribute type 29 has an invalid length.
[  421.407524][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8777'.
[  421.411450][T25653] netlink: 'syz.2.8777': attribute type 29 has an invalid length.
[  421.415091][T25656] hsr0: entered promiscuous mode
[  421.419182][T25653] netlink: 'syz.2.8777': attribute type 29 has an invalid length.
[  421.649750][T25678] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  421.720108][T25686] erspan0: entered promiscuous mode
[  422.157325][T25730] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1520) !
[  423.906575][T25864] openvswitch: netlink: Key type 142 is out of range max 32
[  424.105808][T25879] syzkaller0: entered promiscuous mode
[  424.108207][T25879] syzkaller0: entered allmulticast mode
[  425.319019][T25953] bond11: (slave lo): Releasing backup interface
[  425.327665][T25953] bond11: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  425.360375][T25953] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  425.414401][T25959] batadv_slave_1: entered promiscuous mode
[  425.424102][T25959] __nla_validate_parse: 58 callbacks suppressed
[  425.424112][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8923'.
[  425.443440][T25959] batadv_slave_1 (unregistering): left promiscuous mode
[  426.323273][T26000] syzkaller1: entered promiscuous mode
[  426.328557][T26000] syzkaller1: entered allmulticast mode
[  426.482033][T26004] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  426.828981][T26030] validate_nla: 48 callbacks suppressed
[  426.828992][T26030] netlink: 'syz.0.8954': attribute type 3 has an invalid length.
[  427.014118][T26050] sctp: [Deprecated]: syz.2.8964 (pid 26050) Use of int in maxseg socket option.
[  427.014118][T26050] Use struct sctp_assoc_value instead
[  427.220849][T26072] syzkaller0: entered promiscuous mode
[  427.223761][T26072] syzkaller0: entered allmulticast mode
[  427.248232][T26072] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  427.719263][T26110] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8993'.
[  427.740409][T26110] syzkaller1: entered promiscuous mode
[  427.747256][T26110] syzkaller1: entered allmulticast mode
[  427.802715][T26112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.823816][T26112] syzkaller0: entered promiscuous mode
[  427.826440][T26112] syzkaller0: entered allmulticast mode
[  427.828816][T26112] tipc: Resetting bearer <eth:syzkaller0>
[  427.836880][T26111] tipc: Resetting bearer <eth:syzkaller0>
[  429.747308][T26111] tipc: Disabling bearer <eth:syzkaller0>
[  429.969167][T26144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9009'.
[  429.972696][T26144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9009'.
[  429.977972][T26144] netlink: 58 bytes leftover after parsing attributes in process `syz.0.9009'.
[  430.072705][T26154] xt_CT: No such helper "snmp_trap"
[  430.326893][T26187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9028'.
[  430.827121][T26224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.941860][T26232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9049'.
[  430.951067][T26232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9049'.
[  430.963576][T26235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9050'.
[  431.043180][T26237] bond0: entered promiscuous mode
[  431.047303][T26237] batadv0: entered promiscuous mode
[  431.049741][T26237] batadv0: left promiscuous mode
[  431.053348][T26237] bond0: left promiscuous mode
[  431.297642][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9055'.
[  431.380608][T26264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9062'.
[  431.452625][T26277] netlink: 'syz.2.9068': attribute type 5 has an invalid length.
[  431.509107][T26284] syzkaller0: entered promiscuous mode
[  431.511259][T26284] syzkaller0: entered allmulticast mode
[  431.704129][T26301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9079'.
[  431.832583][T26315] netlink: 732 bytes leftover after parsing attributes in process `syz.1.9086'.
[  431.845795][T26315] netlink: 732 bytes leftover after parsing attributes in process `syz.1.9086'.
[  431.848893][T26317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.852855][T26317] syzkaller0: entered promiscuous mode
[  431.855295][T26317] syzkaller0: entered allmulticast mode
[  431.863952][T26317] tipc: Resetting bearer <eth:syzkaller0>
[  431.871667][T26317] tipc: Resetting bearer <eth:syzkaller0>
[  431.895608][T26317] tipc: Disabling bearer <eth:syzkaller0>
[  432.011971][T26338] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9097'.
[  432.089398][T26346] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9101'.
[  433.186802][T26376] netlink: 'syz.0.9113': attribute type 12 has an invalid length.
[  433.505521][T26391] sctp: [Deprecated]: syz.0.9120 (pid 26391) Use of int in maxseg socket option.
[  433.505521][T26391] Use struct sctp_assoc_value instead
[  433.825189][T26409] netlink: 'syz.0.9129': attribute type 1 has an invalid length.
[  433.845441][T26409] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address
[  433.849148][T26409] bond16: (slave vxcan3): Error -95 calling set_mac_address
[  433.915921][T26409] macvlan7: entered promiscuous mode
[  433.918119][T26409] macvlan7: entered allmulticast mode
[  433.927777][T26409] bond16: entered promiscuous mode
[  433.933891][T26409] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  433.948886][T26409] bond16: left promiscuous mode
[  434.119043][T26442] netlink: 'syz.0.9144': attribute type 1 has an invalid length.
[  434.166907][T26445] netlink: 'syz.1.9145': attribute type 1 has an invalid length.
[  434.170207][T26445] netlink: 'syz.1.9145': attribute type 2 has an invalid length.
[  434.519228][T26474] syzkaller1: entered promiscuous mode
[  434.521739][T26474] syzkaller1: entered allmulticast mode
[  434.997309][T26446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  435.147483][T26485] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  435.309987][T26506] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  435.389422][T26514] netlink: 'syz.0.9172': attribute type 1 has an invalid length.
[  435.421267][T26514] 8021q: adding VLAN 0 to HW filter on device bond17
[  435.440314][T26514] vlan5: entered promiscuous mode
[  435.442332][T26514] bond17: entered promiscuous mode
[  435.444474][T26514] vlan5: entered allmulticast mode
[  435.451967][T26514] bond17: entered allmulticast mode
[  435.464222][T26514] 8021q: adding VLAN 0 to HW filter on device batadv2
[  435.469840][T26514] bond17: (slave batadv2): making interface the new active one
[  435.472455][T26514] batadv2: entered promiscuous mode
[  435.474834][T26514] batadv2: entered allmulticast mode
[  435.480135][T26514] bond17: (slave batadv2): Enslaving as an active interface with an up link
[  435.542028][T26531] SET target dimension over the limit!
[  436.058200][T26580] __nla_validate_parse: 7 callbacks suppressed
[  436.058215][T26580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9203'.
[  436.647786][T26631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9228'.
[  436.651623][T26631] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9228'.
[  436.699071][T26637] netlink: 'syz.1.9231': attribute type 11 has an invalid length.
[  436.702464][T26637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9231'.
[  436.786961][T26643] netlink: 724 bytes leftover after parsing attributes in process `syz.1.9234'.
[  436.790177][T26643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9234'.
[  436.800460][T26643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9234'.
[  436.806850][T26643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9234'.
[  436.858795][T26649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9236'.
[  437.011467][T26663] syzkaller0: entered promiscuous mode
[  437.016862][T26663] syzkaller0: entered allmulticast mode
[  437.086217][T26671] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.9247'.
[  437.303860][T26684] bond19: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  437.321372][T26684] bond19 (unregistering): Released all slaves
[  437.951036][T26725] netlink: 'syz.1.9271': attribute type 1 has an invalid length.
[  438.007167][T26725] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address
[  438.021381][T26725] bond16: (slave vxcan3): Error -95 calling set_mac_address
[  438.041000][   T33] audit: type=1800 audit(1778532449.212:10): pid=26720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9269" name="memory.events" dev="tmpfs" ino=15745 res=0 errno=0
[  438.062351][T26727] bond16: (slave gretap2): making interface the new active one
[  438.065470][T26727] bond16: (slave gretap2): Enslaving as an active interface with an up link
[  438.091339][T26727] bond16: (slave bridge17): Enslaving as an active interface with a down link
[  438.110571][T26725] macvlan5: entered promiscuous mode
[  438.112357][T26725] macvlan5: entered allmulticast mode
[  438.114541][T26725] bond16: entered promiscuous mode
[  438.124943][T26725] gretap2: entered promiscuous mode
[  438.127625][T26725] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  438.135263][T26725] bond16: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  438.147479][T26725] bond16: left promiscuous mode
[  438.149637][T26725] gretap2: left promiscuous mode
[  438.588988][T26749] netlink: 'syz.1.9281': attribute type 10 has an invalid length.
[  439.364049][T26800] openvswitch: netlink: Message has 1 unknown bytes.
[  439.369862][T26800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.751224][T26841] geneve6: entered promiscuous mode
[  439.754569][T26841] geneve6: entered allmulticast mode
[  440.203982][T26865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.302650][T26873] netlink: 'syz.1.9339': attribute type 62 has an invalid length.
[  441.657359][T26950] __nla_validate_parse: 8 callbacks suppressed
[  441.657369][T26950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9371'.
[  441.657842][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9372'.
[  441.668600][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9372'.
[  441.672438][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9372'.
[  441.676928][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9372'.
[  441.680161][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9372'.
[  441.683624][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9372'.
[  441.691359][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9372'.
[  441.695160][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9372'.
[  441.698335][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9372'.
[  442.045546][T26988] netlink: 'syz.1.9388': attribute type 1 has an invalid length.
[  442.614532][T27017] tipc: Resetting bearer <eth:vlan0>
[  442.677880][   T32] smc: removing ib device syz0
[  442.687561][T27017] tipc: Disabling bearer <eth:vlan0>
[  442.697662][T24533] syz0: Port: 1 Link DOWN
[  442.720159][   T32] smbdirect: ib_dev[syz0] removed
[  443.085681][T27022] nbd6: detected capacity change from 0 to 127
[  443.097450][T23365] block nbd6: Receive control failed (result -32)
[  443.107204][T27025] block nbd6: Dead connection, failed to find a fallback
[  443.109783][T27025] block nbd6: shutting down sockets
[  443.112184][T27025] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.118105][T27025] Buffer I/O error on dev nbd6, logical block 0, async page read
[  443.122686][T27025] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.126302][T27025] Buffer I/O error on dev nbd6, logical block 1, async page read
[  443.130151][T27025] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.133924][T27025] Buffer I/O error on dev nbd6, logical block 2, async page read
[  443.144445][T27025] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.148363][T27025] Buffer I/O error on dev nbd6, logical block 3, async page read
[  443.151092][T27025] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.155555][T27025] Buffer I/O error on dev nbd6, logical block 0, async page read
[  443.158694][T27025] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.162173][T27027] xt_TPROXY: Can be used only with -p tcp or -p udp
[  443.164513][T27025] Buffer I/O error on dev nbd6, logical block 1, async page read
[  443.167506][T27025] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.171025][T27025] Buffer I/O error on dev nbd6, logical block 2, async page read
[  443.173848][T27025] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.183577][T27025] Buffer I/O error on dev nbd6, logical block 3, async page read
[  443.189808][T27025] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.194668][T27025] Buffer I/O error on dev nbd6, logical block 0, async page read
[  443.198715][T27025] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.202108][T27025] Buffer I/O error on dev nbd6, logical block 1, async page read
[  443.209077][T27025] ldm_validate_partition_table(): Disk read failed.
[  443.214748][T27025] Dev nbd6: unable to read RDB block 0
[  443.219220][T27025]  nbd6: unable to read partition table
[  443.232011][T27025] ldm_validate_partition_table(): Disk read failed.
[  443.237811][T27025] Dev nbd6: unable to read RDB block 0
[  443.240799][T27025]  nbd6: unable to read partition table
[  443.576164][T27076] netlink: 'syz.2.9427': attribute type 1 has an invalid length.
[  443.603962][T27076] 8021q: adding VLAN 0 to HW filter on device bond19
[  443.650846][T27089] openvswitch: netlink: Missing valid actions attribute.
[  443.660741][T27089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  443.682932][T27090] netlink: 'syz.2.9427': attribute type 1 has an invalid length.
[  443.693667][T27090] bond19: (slave batadv2): Opening slave failed
[  443.747294][T27099] netlink: 'syz.0.9437': attribute type 3 has an invalid length.
[  443.750668][T27099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  443.983762][T27130] IPVS: persistence engine module ip_vs_pe_ not found
[  443.988279][T27134] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  444.027090][T27136] netlink: 'syz.1.9454': attribute type 11 has an invalid length.
[  445.224284][T27220] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  447.305781][T27170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  447.971098][T27286] __nla_validate_parse: 5 callbacks suppressed
[  447.971114][T27286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9516'.
[  448.019599][T27289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9518'.
[  448.025751][T27289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9518'.
[  448.072168][T27291] bridge18: entered promiscuous mode
[  448.183340][T27303] netlink: 'syz.2.9525': attribute type 21 has an invalid length.
[  448.249556][T27306] netlink: 'syz.0.9526': attribute type 10 has an invalid length.
[  448.253813][T27308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9527'.
[  448.264747][T27306] tap0: tun_chr_ioctl cmd 1074025677
[  448.267194][T27306] tap0: linktype set to 773
[  448.366188][T27314] veth21: entered allmulticast mode
[  448.386052][T27316] syzkaller0: entered promiscuous mode
[  448.388235][T27316] syzkaller0: entered allmulticast mode
[  448.392198][T27316] 0: reclassify loop, rule prio 0, protocol 800
[  448.511384][T27325] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  448.662360][T27344] netem: change failed
[  448.900722][T27376] netlink: 'syz.0.9559': attribute type 3 has an invalid length.
[  448.903718][T27376] netlink: 'syz.0.9559': attribute type 3 has an invalid length.
[  448.908074][T27376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9559'.
[  448.922026][T27378] syzkaller1: entered promiscuous mode
[  448.923869][T27378] syzkaller1: entered allmulticast mode
[  449.231268][T27409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9574'.
[  449.258718][T27409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9574'.
[  450.309550][T27457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9596'.
[  450.316350][T27457] netlink: 'syz.0.9596': attribute type 30 has an invalid length.
[  450.324807][T27457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9596'.
[  450.324843][ T5629] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  450.328208][T27457] netlink: 'syz.0.9596': attribute type 30 has an invalid length.
[  450.333821][ T5629] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  450.341325][ T5629] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  450.343827][ T5629] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  450.399587][T27466] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  450.447874][T27471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9602'.
[  450.451253][T27472] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  450.579177][T27488] netlink: 'syz.0.9611': attribute type 21 has an invalid length.
[  450.581945][T27488] netlink: 'syz.0.9611': attribute type 5 has an invalid length.
[  450.584388][T27488] netlink: 'syz.0.9611': attribute type 6 has an invalid length.
[  451.060479][T27523] syzkaller0: entered promiscuous mode
[  451.062461][T27523] syzkaller0: entered allmulticast mode
[  451.403044][T27543] netlink: 'syz.1.9638': attribute type 21 has an invalid length.
[  451.407656][T27543] netlink: 'syz.1.9638': attribute type 1 has an invalid length.
[  451.510628][T27552] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  451.578618][T27556] netlink: 'syz.0.9644': attribute type 3 has an invalid length.
[  452.447412][T27585] xt_TCPMSS: Only works on TCP SYN packets
[  452.447797][T27581] 
[  452.450203][T27581] ======================================================
[  452.452660][T27581] WARNING: possible circular locking dependency detected
[  452.454980][T27581] syzkaller #0 Not tainted
[  452.456579][T27581] ------------------------------------------------------
[  452.458678][T27581] syz.1.9655/27581 is trying to acquire lock:
[  452.460678][T27581] ffff8881012aca10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0
[  452.464557][T27581] 
[  452.464557][T27581] but task is already holding lock:
[  452.466962][T27581] ffff8881012ac980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  452.469944][T27581] 
[  452.469944][T27581] which lock already depends on the new lock.
[  452.469944][T27581] 
[  452.473632][T27581] 
[  452.473632][T27581] the existing dependency chain (in reverse order) is:
[  452.476906][T27581] 
[  452.476906][T27581] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  452.479537][T27581]        down_write+0x96/0x200
[  452.481028][T27581]        kernfs_add_one+0x41/0x5c0
[  452.482681][T27581]        kernfs_create_dir_ns+0xde/0x130
[  452.484488][T27581]        internal_create_group+0x425/0x1180
[  452.486381][T27581]        cpuhp_invoke_callback+0x445/0x860
[  452.488263][T27581]        cpuhp_issue_call+0x430/0x7a0
[  452.489974][T27581]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  452.492121][T27581]        __cpuhp_setup_state+0x3f/0x60
[  452.493896][T27581]        do_one_initcall+0x250/0x870
[  452.495616][T27581]        do_initcall_level+0x104/0x190
[  452.497351][T27581]        do_initcalls+0x59/0xa0
[  452.498872][T27581]        kernel_init_freeable+0x2a6/0x3e0
[  452.500689][T27581]        kernel_init+0x1d/0x1d0
[  452.502250][T27581]        ret_from_fork+0x514/0xb70
[  452.503895][T27581]        ret_from_fork_asm+0x1a/0x30
[  452.505674][T27581] 
[  452.505674][T27581] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  452.508137][T27581] 
[  452.508137][T27581] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  452.510639][T27581]        cpus_read_lock+0x42/0x160
[  452.512307][T27581]        static_key_slow_inc+0x12/0x30
[  452.513981][T27581]        nbd_genl_reconfigure+0x132f/0x1ea0
[  452.515827][T27581]        genl_family_rcv_msg_doit+0x22a/0x330
[  452.517774][T27581]        genl_rcv_msg+0x61c/0x7a0
[  452.519416][T27581]        netlink_rcv_skb+0x232/0x4b0
[  452.521195][T27581]        genl_rcv+0x28/0x40
[  452.522681][T27581]        netlink_unicast+0x75c/0x8e0
[  452.524376][T27581]        netlink_sendmsg+0x813/0xb40
[  452.526080][T27581]        ____sys_sendmsg+0x972/0x9f0
[  452.528065][T27581]        ___sys_sendmsg+0x2a5/0x360
[  452.529988][T27581]        __x64_sys_sendmsg+0x1bd/0x2a0
[  452.531708][T27581]        do_syscall_64+0x15f/0xf80
[  452.533577][T27581]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.535914][T27581] 
[  452.535914][T27581] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  452.538929][T27581]        __mutex_lock+0x1a3/0x1550
[  452.540624][T27581]        nbd_queue_rq+0x37b/0x1100
[  452.542329][T27581]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  452.544375][T27581]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  452.546566][T27581]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  452.548649][T27581]        blk_mq_run_hw_queue+0x348/0x4f0
[  452.550498][T27581]        blk_mq_dispatch_list+0xd16/0xe10
[  452.552314][T27581]        blk_mq_flush_plug_list+0x48d/0x570
[  452.554272][T27581]        __blk_flush_plug+0x3ed/0x4d0
[  452.556003][T27581]        __submit_bio+0x28d/0x580
[  452.557620][T27581]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  452.559584][T27581]        block_read_full_folio+0x599/0x830
[  452.561448][T27581]        filemap_read_folio+0x137/0x3b0
[  452.563201][T27581]        do_read_cache_folio+0x358/0x590
[  452.565024][T27581]        read_part_sector+0xb6/0x2b0
[  452.566724][T27581]        adfspart_check_ICS+0xb1/0x960
[  452.568464][T27581]        bdev_disk_changed+0x817/0x1770
[  452.570216][T27581]        blkdev_get_whole+0x380/0x510
[  452.571935][T27581]        bdev_open+0x31e/0xd30
[  452.573494][T27581]        blkdev_open+0x470/0x610
[  452.575175][T27581]        do_dentry_open+0x785/0x14e0
[  452.576892][T27581]        vfs_open+0x3b/0x340
[  452.578381][T27581]        path_openat+0x2e08/0x3860
[  452.580054][T27581]        do_file_open+0x23e/0x4a0
[  452.581712][T27581]        do_sys_openat2+0x113/0x200
[  452.583616][T27581]        __x64_sys_openat+0x138/0x170
[  452.585381][T27581]        do_syscall_64+0x15f/0xf80
[  452.587112][T27581]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.589141][T27581] 
[  452.589141][T27581] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  452.591618][T27581]        __mutex_lock+0x1a3/0x1550
[  452.593524][T27581]        nbd_queue_rq+0xc6/0x1100
[  452.595183][T27581]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  452.597315][T27581]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  452.599950][T27581]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  452.602529][T27581]        blk_mq_run_hw_queue+0x348/0x4f0
[  452.604783][T27581]        blk_mq_dispatch_list+0xd16/0xe10
[  452.605549][T27589] erspan0: left promiscuous mode
[  452.607063][T27581]        blk_mq_flush_plug_list+0x48d/0x570
[  452.607085][T27581]        __blk_flush_plug+0x3ed/0x4d0
[  452.607095][T27581]        __submit_bio+0x28d/0x580
[  452.607101][T27581]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  452.617054][T27581]        block_read_full_folio+0x599/0x830
[  452.618980][T27581]        filemap_read_folio+0x137/0x3b0
[  452.620773][T27581]        do_read_cache_folio+0x358/0x590
[  452.622575][T27581]        read_part_sector+0xb6/0x2b0
[  452.624587][T27581]        adfspart_check_ICS+0xb1/0x960
[  452.626711][T27581]        bdev_disk_changed+0x817/0x1770
[  452.628894][T27581]        blkdev_get_whole+0x380/0x510
[  452.630963][T27581]        bdev_open+0x31e/0xd30
[  452.632785][T27581]        blkdev_open+0x470/0x610
[  452.634571][T27581]        do_dentry_open+0x785/0x14e0
[  452.636258][T27589] 8021q: adding VLAN 0 to HW filter on device team0
[  452.636771][T27581]        vfs_open+0x3b/0x340
[  452.636783][T27581]        path_openat+0x2e08/0x3860
[  452.636794][T27581]        do_file_open+0x23e/0x4a0
[  452.636804][T27581]        do_sys_openat2+0x113/0x200
[  452.636811][T27581]        __x64_sys_openat+0x138/0x170
[  452.636820][T27581]        do_syscall_64+0x15f/0xf80
[  452.650281][T27581]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.652662][T27581] 
[  452.652662][T27581] -> #4 (set->srcu){.+.+}-{0:0}:
[  452.655038][T27581]        __synchronize_srcu+0xca/0x300
[  452.656529][T27589] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.657219][T27581]        elevator_switch+0x1e8/0x7a0
[  452.661702][T27581]        elevator_change+0x2cc/0x450
[  452.663413][T27581]        elevator_set_default+0x36c/0x430
[  452.665263][T27581]        blk_register_queue+0x3e9/0x4e0
[  452.667275][T27581]        __add_disk+0x677/0xd50
[  452.668916][T27581]        add_disk_fwnode+0xfb/0x480
[  452.670926][T27581]        nbd_dev_add+0x72c/0xb50
[  452.672984][T27581]        nbd_init+0x168/0x1f0
[  452.674929][T27581]        do_one_initcall+0x250/0x870
[  452.676906][T27581]        do_initcall_level+0x104/0x190
[  452.678731][T27581]        do_initcalls+0x59/0xa0
[  452.680303][T27581]        kernel_init_freeable+0x2a6/0x3e0
[  452.682516][T27581]        kernel_init+0x1d/0x1d0
[  452.684367][T27581]        ret_from_fork+0x514/0xb70
[  452.686145][T27581]        ret_from_fork_asm+0x1a/0x30
[  452.688118][T27581] 
[  452.688118][T27581] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  452.690742][T27581]        __mutex_lock+0x1a3/0x1550
[  452.692404][T27581]        elevator_change+0x1b3/0x450
[  452.694353][T27581]        elevator_set_none+0xb5/0x140
[  452.696271][T27581]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  452.698301][T27581]        nbd_start_device+0x17f/0xb10
[  452.700061][T27581]        nbd_genl_connect+0x165b/0x1cf0
[  452.701834][T27581]        genl_family_rcv_msg_doit+0x22a/0x330
[  452.703726][T27581]        genl_rcv_msg+0x61c/0x7a0
[  452.705594][T27581]        netlink_rcv_skb+0x232/0x4b0
[  452.707720][T27581]        genl_rcv+0x28/0x40
[  452.709534][T27581]        netlink_unicast+0x75c/0x8e0
[  452.711532][T27581]        netlink_sendmsg+0x813/0xb40
[  452.713652][T27581]        ____sys_sendmsg+0x972/0x9f0
[  452.715808][T27581]        ___sys_sendmsg+0x2a5/0x360
[  452.717899][T27581]        __x64_sys_sendmsg+0x1bd/0x2a0
[  452.719873][T27581]        do_syscall_64+0x15f/0xf80
[  452.721832][T27581]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.724602][T27581] 
[  452.724602][T27581] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[  452.727783][T27581]        blk_alloc_queue+0x546/0x680
[  452.729933][T27581]        __blk_mq_alloc_disk+0x197/0x390
[  452.732204][T27581]        nbd_dev_add+0x499/0xb50
[  452.734225][T27581]        nbd_init+0x168/0x1f0
[  452.736118][T27581]        do_one_initcall+0x250/0x870
[  452.738254][T27581]        do_initcall_level+0x104/0x190
[  452.740493][T27581]        do_initcalls+0x59/0xa0
[  452.742493][T27581]        kernel_init_freeable+0x2a6/0x3e0
[  452.744522][T27581]        kernel_init+0x1d/0x1d0
[  452.746106][T27581]        ret_from_fork+0x514/0xb70
[  452.747780][T27581]        ret_from_fork_asm+0x1a/0x30
[  452.749511][T27581] 
[  452.749511][T27581] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  452.751876][T27581]        fs_reclaim_acquire+0x71/0x100
[  452.753631][T27581]        kmem_cache_alloc_noprof+0x40/0x650
[  452.755555][T27581]        __kernfs_iattrs+0xdf/0x320
[  452.757304][T27581]        kernfs_iop_setattr+0xea/0x3f0
[  452.759127][T27581]        notify_change+0xc1a/0xf40
[  452.760823][T27581]        do_truncate+0x1c2/0x250
[  452.762503][T27581]        path_openat+0x2f89/0x3860
[  452.764233][T27581]        do_file_open+0x23e/0x4a0
[  452.765947][T27581]        do_sys_openat2+0x113/0x200
[  452.767785][T27581]        __x64_sys_openat+0x138/0x170
[  452.769638][T27581]        do_syscall_64+0x15f/0xf80
[  452.771379][T27581]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.773509][T27581] 
[  452.773509][T27581] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  452.776609][T27581]        __lock_acquire+0x15a5/0x2cf0
[  452.778693][T27581]        lock_acquire+0x106/0x350
[  452.780445][T27581]        down_write+0x96/0x200
[  452.782078][T27581]        kernfs_link_sibling+0x4ed/0x5c0
[  452.784016][T27581]        kernfs_add_one+0x1ca/0x5c0
[  452.785990][T27581]        kernfs_create_dir_ns+0xde/0x130
[  452.788260][T27581]        sysfs_create_dir_ns+0x12f/0x2a0
[  452.790561][T27581]        kobject_add_internal+0x62b/0xd00
[  452.792902][T27581]        kobject_add+0x163/0x240
[  452.794981][T27581]        device_add+0x408/0xbb0
[  452.796933][T27581]        __add_disk+0x4be/0xd50
[  452.799052][T27581]        add_disk_fwnode+0xfb/0x480
[  452.801233][T27581]        nbd_dev_add+0x72c/0xb50
[  452.803284][T27581]        nbd_genl_connect+0x962/0x1cf0
[  452.805507][T27581]        genl_family_rcv_msg_doit+0x22a/0x330
[  452.808031][T27581]        genl_rcv_msg+0x61c/0x7a0
[  452.810113][T27581]        netlink_rcv_skb+0x232/0x4b0
[  452.812277][T27581]        genl_rcv+0x28/0x40
[  452.814159][T27581]        netlink_unicast+0x75c/0x8e0
[  452.816405][T27581]        netlink_sendmsg+0x813/0xb40
[  452.818663][T27581]        ____sys_sendmsg+0x972/0x9f0
[  452.820906][T27581]        ___sys_sendmsg+0x2a5/0x360
[  452.823082][T27581]        __x64_sys_sendmsg+0x1bd/0x2a0
[  452.825352][T27581]        do_syscall_64+0x15f/0xf80
[  452.827444][T27581]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.829923][T27581] 
[  452.829923][T27581] other info that might help us debug this:
[  452.829923][T27581] 
[  452.833763][T27581] Chain exists of:
[  452.833763][T27581]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  452.833763][T27581] 
[  452.839054][T27581]  Possible unsafe locking scenario:
[  452.839054][T27581] 
[  452.842121][T27581]        CPU0                    CPU1
[  452.844313][T27581]        ----                    ----
[  452.846511][T27581]   lock(&root->kernfs_rwsem);
[  452.848451][T27581]                                lock(cpuhp_state_mutex);
[  452.851296][T27581]                                lock(&root->kernfs_rwsem);
[  452.854268][T27581]   lock(&root->kernfs_iattr_rwsem);
[  452.856448][T27581] 
[  452.856448][T27581]  *** DEADLOCK ***
[  452.856448][T27581] 
[  452.859790][T27581] 4 locks held by syz.1.9655/27581:
[  452.861985][T27581]  #0: ffffffff8fe3eec8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  452.865348][T27581]  #1: ffffffff8fe3ed00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  452.869076][T27581]  #2: ffff8881aec6f1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480
[  452.873372][T27581]  #3: ffff8881012ac980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  452.877454][T27581] 
[  452.877454][T27581] stack backtrace:
[  452.879945][T27581] CPU: 1 UID: 0 PID: 27581 Comm: syz.1.9655 Not tainted syzkaller #0 PREEMPT(full) 
[  452.879962][T27581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  452.879971][T27581] Call Trace:
[  452.879977][T27581]  <TASK>
[  452.879984][T27581]  dump_stack_lvl+0xe8/0x150
[  452.880001][T27581]  print_circular_bug+0x2e1/0x300
[  452.880020][T27581]  check_noncircular+0x12e/0x150
[  452.880039][T27581]  __lock_acquire+0x15a5/0x2cf0
[  452.880055][T27581]  ? __lock_acquire+0x6b5/0x2cf0
[  452.880072][T27581]  ? kernfs_link_sibling+0x4ed/0x5c0
[  452.880089][T27581]  lock_acquire+0x106/0x350
[  452.880102][T27581]  ? kernfs_link_sibling+0x4ed/0x5c0
[  452.880123][T27581]  down_write+0x96/0x200
[  452.880142][T27581]  ? kernfs_link_sibling+0x4ed/0x5c0
[  452.880159][T27581]  ? __pfx_down_write+0x10/0x10
[  452.880177][T27581]  ? kernfs_root+0x1c/0x230
[  452.880191][T27581]  ? kernfs_root+0x1c/0x230
[  452.880206][T27581]  ? kernfs_root+0x1ea/0x230
[  452.880221][T27581]  kernfs_link_sibling+0x4ed/0x5c0
[  452.880241][T27581]  kernfs_add_one+0x1ca/0x5c0
[  452.880258][T27581]  kernfs_create_dir_ns+0xde/0x130
[  452.880276][T27581]  sysfs_create_dir_ns+0x12f/0x2a0
[  452.880291][T27581]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  452.880307][T27581]  ? do_raw_spin_unlock+0xf5/0x210
[  452.880325][T27581]  kobject_add_internal+0x62b/0xd00
[  452.880347][T27581]  kobject_add+0x163/0x240
[  452.880365][T27581]  ? __pfx_kobject_add+0x10/0x10
[  452.880384][T27581]  ? get_device_parent+0x366/0x3a0
[  452.880399][T27581]  device_add+0x408/0xbb0
[  452.880413][T27581]  __add_disk+0x4be/0xd50
[  452.880453][T27581]  ? down_read+0x270/0x2e0
[  452.880470][T27581]  add_disk_fwnode+0xfb/0x480
[  452.880485][T27581]  nbd_dev_add+0x72c/0xb50
[  452.880499][T27581]  ? __pfx_nbd_dev_add+0x10/0x10
[  452.880517][T27581]  ? bpf_lsm_capable+0x9/0x20
[  452.880529][T27581]  ? security_capable+0x7e/0x2c0
[  452.880543][T27581]  ? radix_tree_lookup+0x240/0x290
[  452.880557][T27581]  nbd_genl_connect+0x962/0x1cf0
[  452.880569][T27581]  ? __pfx___nla_validate_parse+0x10/0x10
[  452.880590][T27581]  ? __pfx_nbd_genl_connect+0x10/0x10
[  452.880604][T27581]  ? rcu_is_watching+0x15/0xb0
[  452.880618][T27581]  ? trace_kmalloc+0x2a/0xf0
[  452.880637][T27581]  ? __nla_parse+0x40/0x60
[  452.880654][T27581]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  452.880668][T27581]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  452.880683][T27581]  genl_family_rcv_msg_doit+0x22a/0x330
[  452.880698][T27581]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  452.880714][T27581]  ? __lock_acquire+0x6b5/0x2cf0
[  452.880730][T27581]  genl_rcv_msg+0x61c/0x7a0
[  452.880744][T27581]  ? __pfx_genl_rcv_msg+0x10/0x10
[  452.880755][T27581]  ? __pfx_nbd_genl_connect+0x10/0x10
[  452.880770][T27581]  netlink_rcv_skb+0x232/0x4b0
[  452.880785][T27581]  ? __pfx_genl_rcv_msg+0x10/0x10
[  452.880798][T27581]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  452.880823][T27581]  ? down_read+0x270/0x2e0
[  452.880839][T27581]  ? genl_rcv+0xd/0x40
[  452.880851][T27581]  genl_rcv+0x28/0x40
[  452.880861][T27581]  netlink_unicast+0x75c/0x8e0
[  452.880876][T27581]  netlink_sendmsg+0x813/0xb40
[  452.880894][T27581]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.880912][T27581]  ? aa_sock_msg_perm+0xf1/0x1b0
[  452.880928][T27581]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  452.880943][T27581]  ____sys_sendmsg+0x972/0x9f0
[  452.880959][T27581]  ? __might_fault+0xaf/0x130
[  452.880974][T27581]  ? __pfx_____sys_sendmsg+0x10/0x10
[  452.880992][T27581]  ? import_iovec+0x73/0xa0
[  452.881009][T27581]  ___sys_sendmsg+0x2a5/0x360
[  452.881024][T27581]  ? __lock_acquire+0x6b5/0x2cf0
[  452.881037][T27581]  ? __pfx____sys_sendmsg+0x10/0x10
[  452.881056][T27581]  ? futex_wait+0x2a2/0x390
[  452.881079][T27581]  ? __fget_files+0x2a/0x420
[  452.881093][T27581]  ? __fget_files+0x3a0/0x420
[  452.881109][T27581]  __x64_sys_sendmsg+0x1bd/0x2a0
[  452.881126][T27581]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  452.881145][T27581]  ? rcu_is_watching+0x15/0xb0
[  452.881161][T27581]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.881173][T27581]  do_syscall_64+0x15f/0xf80
[  452.881188][T27581]  ? trace_irq_disable+0x3b/0x140
[  452.881206][T27581]  ? clear_bhb_loop+0x40/0x90
[  452.881219][T27581]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.881232][T27581] RIP: 0033:0x7fb54399cdd9
[  452.881244][T27581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.881256][T27581] RSP: 002b:00007fb5447a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  452.881270][T27581] RAX: ffffffffffffffda RBX: 00007fb543c15fa0 RCX: 00007fb54399cdd9
[  452.881279][T27581] RDX: 0000000004000000 RSI: 0000200000001ac0 RDI: 0000000000000009
[  452.881288][T27581] RBP: 00007fb543a32d69 R08: 0000000000000000 R09: 0000000000000000
[  452.881295][T27581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.881302][T27581] R13: 00007fb543c16038 R14: 00007fb543c15fa0 R15: 00007ffcafa369f8
[  452.881315][T27581]  </TASK>
[  453.098075][T27589] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  453.105824][T27589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  453.111953][T27589] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  453.146181][T27587] block nbd1: NBD_DISCONNECT
