last executing test programs:

1.390384073s ago: executing program 2 (id=6121):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000001a80)={0x6, 'tunl0\x00', {0x2}, 0x5})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001ac0)={0x0, 'bridge_slave_1\x00', {0x4}, 0x5})

1.389659679s ago: executing program 2 (id=6124):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x20000400)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x400448c9, 0x0)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r8, 0x29, 0x3e, &(0x7f0000000040)="d84f", 0x2)
sendto$inet6(r8, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500000000", 0x5a3, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$cgroup_pid(r10, 0x0, 0x0)
recvmsg$unix(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r11=>0x0})
getpid()
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001768a7ddcb850682ee89f1f5679a998cd69f92d5742bbec26cb5a25000b43024329fac8150ab7698171eb06c469c", @ANYRES16=r2, @ANYBLOB="10002bbd7000ffdbdf253200000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4c005}, 0x2000c040)

1.190300275s ago: executing program 1 (id=6130):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)

1.190064011s ago: executing program 1 (id=6131):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24028044)

1.110251577s ago: executing program 1 (id=6132):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r1=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b40)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90)

511.469275ms ago: executing program 2 (id=6133):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27)

429.986768ms ago: executing program 2 (id=6134):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001600)=@RTM_NEWMDB={0x38, 0x54, 0x601, 0x70bd29, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x3, 0x0, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x291086449e715cc)

355.535558ms ago: executing program 2 (id=6136):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffb800000000000000000000000000010ff02000000000000000000000000000191"], 0x340a)

238.187969ms ago: executing program 0 (id=6140):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)={0x14, 0x11, 0xa, 0x301, 0x70bd2b, 0x25dfdbfd, {0x7}, [@generic]}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x804)
recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x2404c091)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)

238.04995ms ago: executing program 1 (id=6141):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000000)=@tcp6, 0x3}, 0x20)

234.447004ms ago: executing program 2 (id=6142):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0xffffffffffffffff, 0x9, 0x6, 0xfffffffffffffff9, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x3, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newsa={0x210, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0xa0, 0x0, 0x4}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0xca, 0x2, {{'salsa20-generic\x00'}, 0x410, "c8cf29ea454884cd09b513adcde246f1b71da6339926afa870fdd9502b968652891e74c6923f9abd4e2ab25e49aca686291ca9bca1e1776998a71ac3d60c504c7f25525872453e602809f6d033ace55029fd1775d63a4e22cb43730bd2483efd4f83bc252220a0ef8667b957e8ce8e9bc123bc6f530326b9254e18fb279d34b92856"}}, @lastused={0xc, 0xf, 0x4}]}, 0x210}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', <r3=>0x0, 0x1, 0x80, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}})
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xc, r3, 0x4}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r6, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_icmp(0x2, 0x2, 0x1)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0d5}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="24000000360007010300000000000002017c000010"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r13, &(0x7f0000000200), 0x806000)

167.470479ms ago: executing program 1 (id=6143):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)

165.780906ms ago: executing program 0 (id=6144):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

93.554199ms ago: executing program 0 (id=6145):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvmsg(r0, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x10142)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080))

93.233925ms ago: executing program 0 (id=6146):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)

346.763µs ago: executing program 0 (id=6147):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

142.508µs ago: executing program 1 (id=6148):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)

0s ago: executing program 0 (id=6149):
unshare(0x400)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)

kernel console output (not intermixed with test programs):

e 2 family 0 port 6081 - 0
[  173.602519][T10738] __nla_validate_parse: 3 callbacks suppressed
[  173.602577][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'.
[  173.652754][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  173.662673][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  173.669103][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  173.708300][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  173.715533][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  173.722602][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  173.770328][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  173.777935][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  173.791972][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  174.023214][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.282820][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.610184][T10771] syzkaller0: entered promiscuous mode
[  174.615332][T10771] syzkaller0: entered allmulticast mode
[  174.635781][T10771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.649495][T10770] tipc: Resetting bearer <eth:syzkaller0>
[  174.682526][T10770] tipc: Disabling bearer <eth:syzkaller0>
[  174.813582][T10780] netlink: 712 bytes leftover after parsing attributes in process `syz.1.2154'.
[  174.817275][T10780] netlink: 5504 bytes leftover after parsing attributes in process `syz.1.2154'.
[  174.826319][T10780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2154'.
[  175.129920][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.321216][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.403287][T10815] netlink: 'syz.2.2166': attribute type 1 has an invalid length.
[  175.583298][T10820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2168'.
[  175.975019][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2176'.
[  175.981428][T10842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.249999][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.361069][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.721621][T10879] netlink: 'syz.1.2193': attribute type 11 has an invalid length.
[  176.876873][T10889] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2198'.
[  176.882487][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'.
[  176.920510][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.979216][T10898] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2202'.
[  177.229075][T10913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2208'.
[  177.410524][   T24] net_ratelimit: 1 callbacks suppressed
[  177.410536][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.483924][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.569530][T10925] netlink: 'syz.2.2214': attribute type 3 has an invalid length.
[  177.572326][T10925] netlink: 'syz.2.2214': attribute type 2 has an invalid length.
[  178.168710][T10966] netlink: 'syz.1.2233': attribute type 8 has an invalid length.
[  178.277881][T10972] netlink: 'syz.0.2236': attribute type 1 has an invalid length.
[  178.450001][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.453532][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.762822][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.769218][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.773271][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.820921][T10991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.182898][T11004] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.187419][T11004] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  179.193290][T11004] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.197906][T11004] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  179.295574][T11017] netlink: 'syz.0.2255': attribute type 1 has an invalid length.
[  179.315611][T11004] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.322346][T11004] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  179.331548][T11004] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.335743][T11004] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  179.378313][T11017] 8021q: adding VLAN 0 to HW filter on device bond6
[  179.416725][T11017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.432065][T11004] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.436108][T11004] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  179.440855][T11004] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.447105][T11004] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  179.467619][T11017] bond6: (slave ip6gretap0): making interface the new active one
[  179.472003][T11017] bond6: (slave ip6gretap0): Enslaving as an active interface with an up link
[  179.492449][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.514648][T11004] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.518812][T11004] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[  179.523171][T11004] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.527606][T11004] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  179.625524][ T7725] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.628664][ T7725] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 4352 - 0
[  179.633707][ T7725] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  179.637480][ T7725] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  179.652895][ T7725] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.656682][ T7725] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 4352 - 0
[  179.660484][ T7725] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  179.664178][ T7725] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  179.679630][ T7725] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.683632][ T7725] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 4352 - 0
[  179.687074][ T7725] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  179.690773][ T7725] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  179.703768][ T7725] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.707391][ T7725] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 4352 - 0
[  179.711197][ T7725] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  179.714961][ T7725] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  179.830293][T11021] __nla_validate_parse: 2 callbacks suppressed
[  179.830308][T11021] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2256'.
[  180.022328][T11024] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  180.851929][ T5610] Bluetooth: hci1: command 0x0406 tx timeout
[  182.106519][T11005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  182.492141][T11041] netlink: 'syz.2.2264': attribute type 13 has an invalid length.
[  182.603531][ T6077] net_ratelimit: 6 callbacks suppressed
[  182.603605][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.623780][T11041] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  182.628073][T11041] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  182.716165][T11050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.724248][T11050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.729440][T11050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.736544][T11050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.741219][T11050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.745881][T11050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.758588][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.873492][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.001237][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.037525][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2279'.
[  183.072113][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2280'.
[  183.191881][T11080] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  183.209787][T11080] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  183.213049][T11080] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  183.487391][T11094] syzkaller1: entered promiscuous mode
[  183.489248][T11094] syzkaller1: entered allmulticast mode
[  183.573806][T11100] netlink: 'syz.2.2293': attribute type 7 has an invalid length.
[  183.582829][T11100] netlink: 'syz.2.2293': attribute type 7 has an invalid length.
[  183.585163][ T7725] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.594761][ T7725] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.610761][ T7725] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.617767][ T7725] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.655098][T11102] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2294'.
[  183.705079][T11108] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2297'.
[  183.752910][T11112] syzkaller1: entered promiscuous mode
[  183.755184][T11112] syzkaller1: entered allmulticast mode
[  184.370700][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'.
[  184.562786][T11165] netlink: 'syz.0.2325': attribute type 1 has an invalid length.
[  185.625988][T11218] xt_CT: No such helper "syz0"
[  186.253609][T11233] syzkaller0: entered promiscuous mode
[  186.255995][T11233] syzkaller0: entered allmulticast mode
[  186.679155][T11251] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  186.834563][T11259] geneve3: entered promiscuous mode
[  186.866876][ T5686] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.875626][ T5686] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.879065][ T5686] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.883128][ T5686] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.487652][T11293] netlink: 'syz.0.2378': attribute type 1 has an invalid length.
[  187.628882][T11298] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  187.667248][T11298] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  187.670753][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2378'.
[  187.693618][T11302] macvlan0: entered promiscuous mode
[  187.695867][T11302] macvlan0: entered allmulticast mode
[  187.810600][ T6077] net_ratelimit: 62 callbacks suppressed
[  187.810660][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.225475][T11315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2386'.
[  188.389649][T11317] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  188.469858][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.757926][T11327] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  188.777296][T11327] bond4 (unregistering): Released all slaves
[  188.845102][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.082296][  T713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.131707][T11354] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.140043][T11350] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2400'.
[  189.148327][T11354] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  189.156365][T11354] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  189.384283][T11356] bond0: entered promiscuous mode
[  189.391968][T11356] batadv0: entered promiscuous mode
[  189.398207][T11356] debugfs: 'hsr1' already exists in 'hsr'
[  189.405529][T11356] Cannot create hsr debugfs directory
[  189.414858][T11356] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  189.426495][T11356] 8021q: adding VLAN 0 to HW filter on device hsr1
[  189.436154][T11356] bond0: left promiscuous mode
[  189.441823][T11356] batadv0: left promiscuous mode
[  189.472024][T11354] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.475412][T11354] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  189.478762][T11354] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  189.527493][T11354] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.532424][T11354] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  189.535649][T11354] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  189.570018][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.592121][T11354] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.598989][T11354] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  189.602911][T11354] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  189.648045][T11361] netlink: 'syz.2.2406': attribute type 2 has an invalid length.
[  189.702608][ T7725] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  189.707361][ T7725] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  189.713904][ T7725] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  189.740781][ T7725] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  189.743855][ T7725] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  189.746641][ T7725] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  189.755412][ T7725] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  189.758254][ T7725] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  189.761903][ T7725] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  189.770598][ T7725] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  189.773650][ T7725] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  189.776401][ T7725] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  189.837545][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'.
[  189.843142][T11369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2409'.
[  189.892635][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.018739][T11383] syzkaller1: entered promiscuous mode
[  190.024620][T11383] syzkaller1: entered allmulticast mode
[  190.032733][T11381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2412'.
[  190.039874][T11381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2412'.
[  190.393035][T11403] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2426'.
[  190.399362][T11403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2426'.
[  190.567634][T11418] ip6tnl2: entered allmulticast mode
[  190.670004][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.749147][T11422] netlink: 'syz.2.2434': attribute type 3 has an invalid length.
[  190.757453][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2434'.
[  190.931183][ T6954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.601369][T11455] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  191.608314][T11455] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  191.681273][T11462] netlink: 'syz.1.2446': attribute type 1 has an invalid length.
[  191.684019][T11462] netlink: 'syz.1.2446': attribute type 1 has an invalid length.
[  191.780420][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.943046][T11474] macsec1: entered promiscuous mode
[  191.973408][ T6954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.223595][ T5610] Bluetooth: hci2: link tx timeout
[  192.226274][ T5610] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  192.303001][ T5610] Bluetooth: hci2: link tx timeout
[  192.304995][ T5610] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  192.333660][ T5610] Bluetooth: hci2: link tx timeout
[  192.335947][ T5610] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  192.650253][ T5610] Bluetooth: hci2: link tx timeout
[  192.652350][ T5610] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  192.780831][T11523] netlink: 'syz.1.2474': attribute type 62 has an invalid length.
[  192.839969][    C0] net_ratelimit: 1 callbacks suppressed
[  192.839984][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.850084][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.853597][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.899974][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.012269][ T6954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.170085][ T5610] Bluetooth: hci2: command 0x0405 tx timeout
[  193.867025][T11574] __nla_validate_parse: 5 callbacks suppressed
[  193.867040][T11574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2496'.
[  193.874968][T11574] bond0: ARP target 170.170.170.170 is already present
[  193.877995][T11574] bond0: option arp_ip_target: invalid value (2863311530)
[  193.880236][T11570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.885565][T11570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.890095][T11570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.897163][T11570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.900521][T11570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.316852][T11590] hsr0 speed is unknown, defaulting to 1000
[  194.330642][T11590] hsr0 speed is unknown, defaulting to 1000
[  194.351801][T11590] hsr0 speed is unknown, defaulting to 1000
[  194.354585][T11590] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  194.372491][T11590] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  194.382495][T11590] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  194.494476][T11590] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  194.629392][T11590] hsr0 speed is unknown, defaulting to 1000
[  194.638640][T11590] hsr0 speed is unknown, defaulting to 1000
[  194.646871][T11590] hsr0 speed is unknown, defaulting to 1000
[  194.723937][T11605] netlink: 'syz.1.2505': attribute type 11 has an invalid length.
[  194.740981][T11605] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2505'.
[  194.886339][T11617] netlink: 'syz.2.2513': attribute type 1 has an invalid length.
[  194.949581][T11617] bond3: entered promiscuous mode
[  194.952645][T11617] 8021q: adding VLAN 0 to HW filter on device bond3
[  195.140694][T11617] 8021q: adding VLAN 0 to HW filter on device bond3
[  195.143663][T11617] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  195.159024][T11617] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  195.175008][T11617] bond3: (slave ip6gre1): making interface the new active one
[  195.181125][T11617] ip6gre1: entered promiscuous mode
[  195.186424][T11617] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[  195.250407][ T5619] Bluetooth: hci2: command 0x0405 tx timeout
[  195.348117][T11641] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2523'.
[  195.562428][T11657] netlink: 732 bytes leftover after parsing attributes in process `syz.2.2531'.
[  195.566400][T11657] netlink: 732 bytes leftover after parsing attributes in process `syz.2.2531'.
[  195.625411][T11660] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2533'.
[  196.042584][T11680] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2540'.
[  196.050715][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  196.475436][T11694] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2547'.
[  196.840468][T11706] IPv6: Can't replace route, no match found
[  196.843564][T11706] IPv6: Can't replace route, no match found
[  197.193113][T11723] bond4 (unregistering): Released all slaves
[  197.233617][T11727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2562'.
[  197.490667][T11735] syzkaller0: entered promiscuous mode
[  197.494192][T11735] syzkaller0: entered allmulticast mode
[  197.875326][T11771] netlink: 'syz.0.2584': attribute type 1 has an invalid length.
[  197.987719][T11777] vti0: entered promiscuous mode
[  198.199945][ T6064] net_ratelimit: 69 callbacks suppressed
[  198.199959][ T6064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.205605][ T6064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.263953][T11789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.267559][T11789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.270892][T11789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.276360][T11789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.280768][T11789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.295792][T11789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.322123][T11788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.500841][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.848546][T11821] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  198.855287][T11821] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  198.957429][T11828] __nla_validate_parse: 2 callbacks suppressed
[  198.957439][T11828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2606'.
[  199.003039][T11831] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2607'.
[  199.245566][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  199.720647][T11853] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  199.783897][T11858] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2620'.
[  199.787698][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2620'.
[  199.794657][T11858] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2620'.
[  199.799187][T11858] netlink: 'syz.1.2620': attribute type 2 has an invalid length.
[  199.802830][T11858] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2620'.
[  200.166545][T11879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2630'.
[  200.226674][T11884] netlink: 'syz.1.2632': attribute type 1 has an invalid length.
[  200.653058][T11906] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2639'.
[  200.909381][T11922] xt_policy: too many policy elements
[  201.147382][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2652'.
[  201.223078][T11936] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2653'.
[  202.327914][T11968] netlink: 'syz.1.2669': attribute type 1 has an invalid length.
[  202.889984][    T9] IPVS: starting estimator thread 0...
[  202.999829][T12000] IPVS: using max 42 ests per chain, 100800 per kthread
[  203.500395][   T24] net_ratelimit: 15 callbacks suppressed
[  203.500515][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.838142][T12026] netlink: 'syz.0.2685': attribute type 8 has an invalid length.
[  204.155681][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.291641][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.521670][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.289886][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.562222][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.284770][ T6064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.403528][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.610888][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.910093][T12069] team0 (unregistering): Port device team_slave_0 removed
[  206.930182][T12069] team0 (unregistering): Port device team_slave_1 removed
[  207.048774][T12070] hsr0 speed is unknown, defaulting to 1000
[  207.087522][T12081] netem: incorrect ge model size
[  207.096546][T12081] netem: change failed
[  207.243699][T12087] __nla_validate_parse: 1 callbacks suppressed
[  207.244373][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'.
[  207.262472][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2704'.
[  207.272773][T12087] netlink: 'syz.0.2704': attribute type 12 has an invalid length.
[  207.278712][T12087] netlink: 'syz.0.2704': attribute type 13 has an invalid length.
[  207.321199][ T6064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  207.572678][T12097] netlink: 'syz.2.2707': attribute type 3 has an invalid length.
[  207.576723][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2707'.
[  207.583273][T12105] netlink: 'syz.0.2711': attribute type 1 has an invalid length.
[  207.927365][T12133] netlink: 'syz.1.2718': attribute type 30 has an invalid length.
[  208.236849][T12149] SET target dimension over the limit!
[  208.660485][ T5686] net_ratelimit: 10 callbacks suppressed
[  208.660502][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.680553][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.762839][T12165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2728'.
[  208.955638][T12180] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  209.059377][T12187] netlink: 'syz.1.2738': attribute type 6 has an invalid length.
[  209.138196][T12190] netlink: 'syz.2.2740': attribute type 2 has an invalid length.
[  209.148986][T12190] netlink: 'syz.2.2740': attribute type 2 has an invalid length.
[  209.216926][T12194] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[  209.544414][T12215] tipc: Enabled bearer <udp:syz2>, priority 10
[  209.625456][T12223] netlink: zone id is out of range
[  209.627796][T12223] netlink: zone id is out of range
[  209.629555][T12223] netlink: zone id is out of range
[  209.636760][T12223] netlink: zone id is out of range
[  209.639955][T12223] netlink: zone id is out of range
[  209.642163][T12223] netlink: zone id is out of range
[  209.727653][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2756'.
[  209.745940][ T6077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.088665][T12259] bridge8: the hash_elasticity option has been deprecated and is always 16
[  210.094461][T12259] bridge8: entered allmulticast mode
[  210.266617][T12266] netlink: 'syz.1.2773': attribute type 4 has an invalid length.
[  210.275938][T12266] netlink: 'syz.1.2773': attribute type 4 has an invalid length.
[  210.743136][T12301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2792'.
[  211.063077][T12318] ip6gre1: entered allmulticast mode
[  211.203395][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.206811][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.217251][T12332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.185145][T12367] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2823'.
[  212.188139][T12367] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2823'.
[  212.191286][T12367] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2823'.
[  212.289673][T12376] SET target dimension over the limit!
[  212.371864][T12382] validate_nla: 1 callbacks suppressed
[  212.371873][T12382] netlink: 'syz.0.2829': attribute type 1 has an invalid length.
[  212.376477][T12382] netlink: 'syz.0.2829': attribute type 4 has an invalid length.
[  212.379139][T12382] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2829'.
[  212.384264][T12382] netlink: 'syz.0.2829': attribute type 1 has an invalid length.
[  212.387109][T12382] netlink: 'syz.0.2829': attribute type 4 has an invalid length.
[  212.389669][T12382] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2829'.
[  212.478116][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2832'.
[  213.261014][T12450] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2862'.
[  213.473259][T12466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2869'.
[  213.493210][T12466] ip6gre2: entered promiscuous mode
[  213.498819][T12466] ip6gre2: entered allmulticast mode
[  213.518315][T12466] netlink: 'syz.1.2869': attribute type 6 has an invalid length.
[  213.524239][T12466] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2869'.
[  213.541941][T12466] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  213.553773][T12466] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  213.893405][   T24] net_ratelimit: 10 callbacks suppressed
[  213.893534][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.160819][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2881'.
[  214.300082][ T5686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.512442][T12520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.551241][T12520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.559040][T12520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.573730][T12520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.576665][T12520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.579553][T12520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.584685][T12520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.608770][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2893'.
[  214.701789][T12525] tipc: Resetting bearer <eth:xfrm0>
[  214.752289][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2887'.
[  214.947258][T12530] netlink: 'syz.2.2893': attribute type 1 has an invalid length.
[  214.961605][ T5686] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  214.965492][ T5686] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 4352 - 0
[  214.975746][ T5686] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  214.986199][ T5686] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  214.995106][ T5686] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.001456][ T5686] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 4352 - 0
[  215.013001][ T5686] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  215.025249][ T5686] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  215.033547][ T5686] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.042245][ T5686] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 4352 - 0
[  215.049516][ T5686] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  215.055241][ T5686] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  215.071029][ T5686] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.075423][ T5686] netdevsim netdevsim1 eth3: unset [0, 1] type 1 family 0 port 4352 - 0
[  215.083193][ T5686] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  215.087082][ T5686] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  215.114294][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'.
[  215.943281][T12557] tunl0: Caught tx_queue_len zero misconfig
[  217.023539][T12629] openvswitch: netlink: Duplicate key (type 21).
[  217.429133][T12661] __nla_validate_parse: 8 callbacks suppressed
[  217.429150][T12661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2950'.
[  220.014480][T12709] netlink: 'syz.1.2964': attribute type 10 has an invalid length.
[  220.018347][T12709] ipvlan0: entered allmulticast mode
[  220.020943][T12709] veth0_vlan: entered allmulticast mode
[  220.027322][T12709] team0: Device ipvlan0 failed to register rx_handler
[  220.507909][T12732] netlink: 'syz.2.2972': attribute type 61 has an invalid length.
[  220.512722][T12732] netlink: 'syz.2.2972': attribute type 62 has an invalid length.
[  220.751342][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'.
[  220.755570][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2978'.
[  221.081249][T12760] netlink: 'syz.1.2986': attribute type 21 has an invalid length.
[  221.097306][T12761] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  221.100558][T12760] netlink: 'syz.1.2986': attribute type 21 has an invalid length.
[  221.104295][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  221.111346][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  221.117944][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  221.128046][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  221.260731][T12771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2991'.
[  221.369846][T12779] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  221.415582][T12783] netlink: 'syz.2.2996': attribute type 49 has an invalid length.
[  222.302549][T12806] netlink: 'syz.0.3005': attribute type 1 has an invalid length.
[  222.305421][T12806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3005'.
[  222.309101][T12806] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.027474][T12854] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  223.130377][T12863] tipc: New replicast peer: 255.255.255.255
[  223.132949][T12863] tipc: Enabled bearer <udp:syz2>, priority 10
[  223.135427][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3031'.
[  223.167615][T12865] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  223.618034][T12889] pim6reg1: entered promiscuous mode
[  223.626755][T12889] pim6reg1: entered allmulticast mode
[  223.703241][T12893] bond3: entered allmulticast mode
[  223.705406][T12893] ip6gre1: entered allmulticast mode
[  223.712062][T12892] bond3: left allmulticast mode
[  223.714130][T12892] ip6gre1: left allmulticast mode
[  223.793358][T12897] netlink: 'syz.1.3045': attribute type 1 has an invalid length.
[  223.796625][T12897] netlink: 1008 bytes leftover after parsing attributes in process `syz.1.3045'.
[  223.904436][T12902] netlink: 'syz.2.3050': attribute type 10 has an invalid length.
[  223.912936][T12902] tap0: tun_chr_ioctl cmd 1074025677
[  223.914774][T12902] tap0: linktype set to 773
[  223.935708][T12902] : entered promiscuous mode
[  224.071140][T12910] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3054'.
[  224.078038][T12910] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  224.083901][T12910] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  224.090541][T12910] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  224.098406][T12910] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  224.250027][    T9] tipc: Node number set to 468619121
[  224.512368][T12944] ipt_REJECT: TCP_RESET invalid for non-tcp
[  224.648601][T12954] sctp: [Deprecated]: syz.2.3073 (pid 12954) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.648601][T12954] Use struct sctp_sack_info instead
[  224.655146][T12954] sctp: [Deprecated]: syz.2.3073 (pid 12954) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.655146][T12954] Use struct sctp_sack_info instead
[  224.783253][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'.
[  224.807256][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'.
[  224.817751][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'.
[  224.824878][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'.
[  224.828121][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'.
[  225.462609][T13007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3098'.
[  225.657591][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'.
[  225.698893][T13021] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  225.723961][T13021] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  225.905336][T13033] openvswitch: netlink: Message has 1 unknown bytes.
[  225.908120][T13033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.027386][T13042] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  226.031073][T13042] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  226.034416][T13042] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  226.089087][T13047] smc: net device wlan0 erased user defined pnetid SYZ0
[  226.244046][T13059] netlink: 'syz.1.3123': attribute type 11 has an invalid length.
[  226.444093][T13072] pim6reg1: entered promiscuous mode
[  226.445964][T13072] pim6reg1: entered allmulticast mode
[  226.511904][T13073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  226.642160][T13075] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  226.652074][T13075] bond4 (unregistering): Released all slaves
[  226.666770][T13080] ipvlan0: left allmulticast mode
[  226.668533][T13080] veth0_vlan: left allmulticast mode
[  226.683951][T13080] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  226.686603][T13080] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  226.689483][T13080] bridge8: left allmulticast mode
[  226.692855][T13080] ip6gre2: left promiscuous mode
[  226.694630][T13080] ip6gre2: left allmulticast mode
[  226.700592][ T7725] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.703680][ T7725] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.707047][ T7725] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.723058][ T7725] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  228.168626][T13160] netlink: 'syz.2.3168': attribute type 83 has an invalid length.
[  228.249424][T13167] __nla_validate_parse: 7 callbacks suppressed
[  228.249439][T13167] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3171'.
[  228.439014][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3175'.
[  228.759121][T13189] bond4: entered promiscuous mode
[  228.762387][T13189] bond4: entered allmulticast mode
[  228.764325][T13189] 8021q: adding VLAN 0 to HW filter on device bond4
[  229.456836][T13250] tipc: Failed to remove unknown binding: 66,0,0/1453999777:3370011939/3370011941
[  229.460027][T13250] tipc: Failed to remove unknown binding: 66,0,0/1453999777:3370011939/3370011940
[  229.463855][T13250] tipc: Failed to remove unknown binding: 66,0,0/1453999777:3370011939/3370011941
[  229.467291][T13250] tipc: Failed to remove unknown binding: 66,0,0/1453999777:3370011939/3370011940
[  229.511251][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3211'.
[  229.545119][T13255] hsr_slave_1 (unregistering): left promiscuous mode
[  229.661156][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'.
[  229.664153][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'.
[  229.667011][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'.
[  229.671864][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'.
[  229.674922][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'.
[  229.677691][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'.
[  229.681042][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'.
[  229.796277][T13276] netlink: 'syz.0.3221': attribute type 13 has an invalid length.
[  230.034117][T13276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.048686][T13276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.316102][ T7725] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.321305][ T7725] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  230.330946][ T7725] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  230.335966][ T7725] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.345330][ T7725] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  230.355484][ T7725] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  230.360837][ T7725] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.370015][ T7725] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  230.373130][ T7725] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  230.380341][ T7725] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.390467][ T7725] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  230.395419][ T7725] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  230.599150][T13292] xt_hashlimit: size too large, truncated to 1048576
[  230.956207][T13306] syzkaller1: tun_chr_ioctl cmd 35111
[  231.514322][T13334] netlink: 'syz.1.3249': attribute type 64 has an invalid length.
[  232.111583][T13380] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  232.114655][T13380] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  232.267291][T13388] netlink: 'syz.1.3274': attribute type 11 has an invalid length.
[  232.520222][ T5610] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  232.531161][ T5610] Bluetooth: hci2: command 0x0405 tx timeout
[  233.552444][T13418] sctp: [Deprecated]: syz.0.3286 (pid 13418) Use of int in maxseg socket option.
[  233.552444][T13418] Use struct sctp_assoc_value instead
[  233.752205][T13426] __nla_validate_parse: 102 callbacks suppressed
[  233.752266][T13426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3292'.
[  234.717315][T13432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3294'.
[  234.766565][T13434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.903090][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3298'.
[  235.316961][T13461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3306'.
[  235.505616][T13474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3309'.
[  235.531478][T13477] x_tables: unsorted underflow at hook 4
[  235.540241][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'.
[  235.594449][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'.
[  235.941584][T13507] netlink: 'syz.1.3324': attribute type 2 has an invalid length.
[  237.490569][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3360'.
[  237.494363][T13586] team_slave_1: Caught tx_queue_len zero misconfig
[  237.637175][T13597] bond0: Device is already in use.
[  238.247032][T13632] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3382'.
[  238.254864][T13632] bond0 (unregistering): left promiscuous mode
[  238.257577][T13632] bond_slave_0: left promiscuous mode
[  238.260563][T13632] bond_slave_1: left promiscuous mode
[  238.265256][T13632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.272689][T13632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.278343][T13632] bond0 (unregistering): Released all slaves
[  238.594008][T13647] xt_hashlimit: size too large, truncated to 1048576
[  238.751010][T13657] netlink: 'syz.0.3393': attribute type 12 has an invalid length.
[  239.010739][T13670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3398'.
[  239.825520][T13708] netlink: 'syz.0.3416': attribute type 9 has an invalid length.
[  239.829023][T13708] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.3416'.
[  240.438310][T13753] pimreg9: entered allmulticast mode
[  240.556551][T13759] openvswitch: netlink: Invalid VLAN frame
[  241.140859][   T32] audit: type=1800 audit(1778600112.771:9): pid=13801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3453" name=CB dev="tmpfs" ino=5839 res=0 errno=0
[  241.225125][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3455'.
[  241.276868][T13809] dvmrp1: tun_chr_ioctl cmd 1074025677
[  241.278816][T13809] dvmrp1: linktype set to 0
[  241.296802][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3456'.
[  242.426714][T13866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3476'.
[  242.564688][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3482'.
[  242.751581][T13891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3489'.
[  243.846469][T13917] bridge9: entered promiscuous mode
[  243.848710][T13917] bridge9: entered allmulticast mode
[  243.852896][T13917] team0: Port device bridge9 added
[  243.859425][T13917] bridge0: port 1(team0) entered blocking state
[  243.862442][T13917] bridge0: port 1(team0) entered disabled state
[  243.871446][T13917] team0: entered allmulticast mode
[  243.875654][T13917] team0: entered promiscuous mode
[  244.680674][ T5610] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  244.691570][ T5610] Bluetooth: hci2: command 0x0405 tx timeout
[  244.753986][T13945] netlink: 'syz.1.3513': attribute type 1 has an invalid length.
[  244.764684][T13945] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3513'.
[  244.771161][T13945] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3513'.
[  244.775826][T13945] netlink: 'syz.1.3513': attribute type 1 has an invalid length.
[  244.778319][T13945] netlink: 634 bytes leftover after parsing attributes in process `syz.1.3513'.
[  244.807219][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3515'.
[  244.873189][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3517'.
[  244.933511][T13956] netlink: 'syz.0.3519': attribute type 58 has an invalid length.
[  244.936080][T13956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3519'.
[  245.161602][T13964] syzkaller1: entered promiscuous mode
[  245.166153][T13964] syzkaller1: entered allmulticast mode
[  245.293100][T13980] netlink: 'syz.0.3530': attribute type 4 has an invalid length.
[  245.296034][T13980] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3530'.
[  245.488253][T13990] netlink: 'syz.0.3534': attribute type 4 has an invalid length.
[  245.496123][T13990] netlink: 'syz.0.3534': attribute type 1 has an invalid length.
[  245.499263][T13990] netlink: 15506 bytes leftover after parsing attributes in process `syz.0.3534'.
[  245.587820][T13998] netlink: 'syz.2.3537': attribute type 1 has an invalid length.
[  245.590736][T13998] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3537'.
[  245.674294][T14008] netem: change failed
[  245.850614][T14020] syzkaller0: entered promiscuous mode
[  245.852535][T14020] syzkaller0: entered allmulticast mode
[  246.267442][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3550'.
[  246.454208][T14000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  247.181499][T14080] netlink: 'syz.1.3571': attribute type 29 has an invalid length.
[  247.184735][T14080] netlink: 'syz.1.3571': attribute type 29 has an invalid length.
[  247.187597][T14080] netlink: 'syz.1.3571': attribute type 29 has an invalid length.
[  247.201342][T14080] hsr0: entered promiscuous mode
[  247.233868][T14079] hsr0: left promiscuous mode
[  247.767274][T14087] hsr0 speed is unknown, defaulting to 1000
[  248.395585][T14102] syzkaller0: entered promiscuous mode
[  248.398222][T14102] syzkaller0: entered allmulticast mode
[  248.460599][ T7725] tipc: Subscription rejected, illegal request
[  249.005273][T14137] ipip0: entered promiscuous mode
[  249.117916][T14148] xt_cgroup: path and classid specified
[  250.092428][T14204] __nla_validate_parse: 33 callbacks suppressed
[  250.092443][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3627'.
[  250.148644][T14208] ip6t_REJECT: ECHOREPLY is not supported
[  250.449307][T14226] batadv_slave_1: entered promiscuous mode
[  250.452711][T14225] batadv_slave_1: left promiscuous mode
[  250.666860][T14241] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3643'.
[  250.770132][T14245] hsr0 speed is unknown, defaulting to 1000
[  251.285701][T14263] bond5: option downdelay: invalid value (18446744073709547521)
[  251.288564][T14263] bond5: option downdelay: allowed values 0 - 2147483647
[  251.293862][T14263] bond5 (unregistering): Released all slaves
[  252.115816][T14307] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  252.253602][T14318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3676'.
[  252.256554][T14318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3676'.
[  252.307771][T14319] syzkaller0: entered promiscuous mode
[  252.312314][T14319] syzkaller0: entered allmulticast mode
[  252.317572][T14319] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.330256][T14316] tipc: Resetting bearer <eth:syzkaller0>
[  252.366519][T14316] tipc: Disabling bearer <eth:syzkaller0>
[  252.383052][T14328] openvswitch: netlink: IP tunnel dst address not specified
[  252.445615][T14332] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3682'.
[  252.728384][T14353] tap0: tun_chr_ioctl cmd 1074025692
[  252.893854][T14367] lo: Caught tx_queue_len zero misconfig
[  252.908181][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3698'.
[  252.919002][T14369] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  253.045277][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'.
[  253.056694][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'.
[  253.059470][T14372] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3701'.
[  253.062739][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'.
[  253.326436][T14392] veth0_to_team: entered promiscuous mode
[  253.550361][T14399] tipc: Resetting bearer <eth:xfrm0>
[  253.668246][T14408] validate_nla: 28 callbacks suppressed
[  253.668350][T14408] netlink: 'syz.1.3715': attribute type 3 has an invalid length.
[  253.983414][T14418] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  254.943871][ T5610] Bluetooth: hci2: link tx timeout
[  254.951126][ T5610] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  255.137208][T14469] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  255.141187][T14469] tipc: Bearer <udp:s>: trying with adjusted priority
[  255.144950][T14469] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  255.526397][T14496] netlink: 'syz.0.3757': attribute type 21 has an invalid length.
[  255.529785][T14496] netlink: 'syz.0.3757': attribute type 22 has an invalid length.
[  255.533095][T14496] netlink: 'syz.0.3757': attribute type 23 has an invalid length.
[  255.536327][T14496] __nla_validate_parse: 3 callbacks suppressed
[  255.536339][T14496] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3757'.
[  255.589984][T14498] syzkaller1: entered promiscuous mode
[  255.592766][T14498] syzkaller1: entered allmulticast mode
[  255.597553][ T9442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.605944][ T9442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.626606][T14498] netlink: 'syz.0.3758': attribute type 298 has an invalid length.
[  255.680033][T14504] netlink: 'syz.2.3760': attribute type 178 has an invalid length.
[  255.722526][T14508] netlink: 'syz.2.3762': attribute type 8 has an invalid length.
[  255.805737][T14513] netlink: 'syz.0.3765': attribute type 12 has an invalid length.
[  255.852986][T14518] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3768'.
[  255.856604][T14518] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3768'.
[  256.031598][T14528] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3772'.
[  256.037554][T14528] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3772'.
[  256.040996][T14528] netlink: 'syz.0.3772': attribute type 5 has an invalid length.
[  256.043673][T14528] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3772'.
[  256.071683][T14531] netlink: 'syz.0.3774': attribute type 2 has an invalid length.
[  256.145933][T14537] ip6gre2: entered promiscuous mode
[  256.147775][T14537] ip6gre2: entered allmulticast mode
[  256.267796][T14538] syzkaller0: entered promiscuous mode
[  256.271750][T14538] syzkaller0: entered allmulticast mode
[  256.285772][T14549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.629853][T14569] 8021q: adding VLAN 0 to HW filter on device bond5
[  256.658350][T14569] bond5: (slave veth9): Enslaving as an active interface with a down link
[  256.662632][T14573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3792'.
[  256.669503][T14569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3790'.
[  257.000317][ T5619] Bluetooth: hci2: command 0x0405 tx timeout
[  257.303865][T14603] hsr0 speed is unknown, defaulting to 1000
[  257.314579][T14600] IPVS: set_ctl: invalid protocol: 136 172.30.0.1:20005
[  257.641887][T14623] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3810'.
[  257.741368][T14623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.831779][T14623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.842357][T14623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.860939][T14623] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  257.871710][T14632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3813'.
[  257.902703][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.905761][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.995004][T14691] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  259.714834][T14726] syz.1.3841: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  259.730491][T14726] CPU: 0 UID: 0 PID: 14726 Comm: syz.1.3841 Not tainted syzkaller #0 PREEMPT(full) 
[  259.730504][T14726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  259.730509][T14726] Call Trace:
[  259.730513][T14726]  <TASK>
[  259.730516][T14726]  dump_stack_lvl+0xe8/0x150
[  259.730529][T14726]  warn_alloc+0x249/0x340
[  259.730541][T14726]  ? stack_trace_save+0xa9/0x100
[  259.730555][T14726]  ? __pfx_warn_alloc+0x10/0x10
[  259.730568][T14726]  ? kasan_save_track+0x4f/0x80
[  259.730578][T14726]  ? kasan_save_track+0x3e/0x80
[  259.730586][T14726]  ? __kasan_kmalloc+0x93/0xb0
[  259.730596][T14726]  ? __kmalloc_cache_noprof+0x31c/0x660
[  259.730606][T14726]  ? xskq_create+0x56/0x170
[  259.730624][T14726]  ? xsk_setsockopt+0x54c/0x990
[  259.730633][T14726]  ? do_sock_setsockopt+0x17c/0x1b0
[  259.730644][T14726]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  259.730654][T14726]  ? do_syscall_64+0x15f/0xf80
[  259.730663][T14726]  __vmalloc_node_range_noprof+0x132/0x1750
[  259.730686][T14726]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  259.730700][T14726]  ? __kasan_kmalloc+0x93/0xb0
[  259.730713][T14726]  vmalloc_user_noprof+0xad/0xe0
[  259.730724][T14726]  ? xskq_create+0xbf/0x170
[  259.730735][T14726]  xskq_create+0xbf/0x170
[  259.730746][T14726]  xsk_init_queue+0x8a/0xe0
[  259.730758][T14726]  xsk_setsockopt+0x54c/0x990
[  259.730769][T14726]  ? __pfx_xsk_setsockopt+0x10/0x10
[  259.730779][T14726]  ? __pfx_aa_sk_perm+0x10/0x10
[  259.730790][T14726]  ? aa_sock_opt_perm+0xff/0x1a0
[  259.730800][T14726]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  259.730810][T14726]  ? __pfx_xsk_setsockopt+0x10/0x10
[  259.730820][T14726]  do_sock_setsockopt+0x17c/0x1b0
[  259.730832][T14726]  __x64_sys_setsockopt+0x13d/0x1b0
[  259.730843][T14726]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.730851][T14726]  do_syscall_64+0x15f/0xf80
[  259.730858][T14726]  ? trace_irq_disable+0x3b/0x140
[  259.730872][T14726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.730880][T14726] RIP: 0033:0x7f63fed9cdd9
[  259.730889][T14726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.730896][T14726] RSP: 002b:00007f63ffbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  259.730905][T14726] RAX: ffffffffffffffda RBX: 00007f63ff015fa0 RCX: 00007f63fed9cdd9
[  259.730910][T14726] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  259.730915][T14726] RBP: 00007f63fee32d69 R08: 0000000000000004 R09: 0000000000000000
[  259.730920][T14726] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.730924][T14726] R13: 00007f63ff016038 R14: 00007f63ff015fa0 R15: 00007ffdc0599ef8
[  259.730936][T14726]  </TASK>
[  259.730939][T14726] Mem-Info:
[  259.838720][T14726] active_anon:13576 inactive_anon:5 isolated_anon:0
[  259.838720][T14726]  active_file:12222 inactive_file:38456 isolated_file:0
[  259.838720][T14726]  unevictable:1768 dirty:324 writeback:0
[  259.838720][T14726]  slab_reclaimable:10794 slab_unreclaimable:136112
[  259.838720][T14726]  mapped:18237 shmem:2368 pagetables:1108
[  259.838720][T14726]  sec_pagetables:0 bounce:0
[  259.838720][T14726]  kernel_misc_reclaimable:0
[  259.838720][T14726]  free:1070458 free_pcp:18670 free_cma:0
[  259.870569][T14726] Node 0 active_anon:44832kB inactive_anon:0kB active_file:25212kB inactive_file:131884kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51588kB dirty:244kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10728kB pagetables:3236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  259.882063][T14726] Node 1 active_anon:9220kB inactive_anon:20kB active_file:23676kB inactive_file:21940kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:21260kB dirty:1052kB writeback:0kB shmem:4580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:2620kB pagetables:1296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  259.904634][T14726] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  259.916644][T14726] lowmem_reserve[]: 0 1587 2117 2117 2117
[  259.928135][T14726] Node 0 DMA32 free:1112216kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33620kB inactive_anon:0kB active_file:20984kB inactive_file:33576kB unevictable:0kB writepending:212kB zspages:0kB present:2080636kB managed:1625236kB mlocked:0kB bounce:0kB free_pcp:21380kB local_pcp:16372kB free_cma:0kB
[  259.941424][T14726] lowmem_reserve[]: 0 0 530 530 530
[  259.943367][T14726] Node 0 Normal free:12704kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11192kB inactive_anon:0kB active_file:4228kB inactive_file:98308kB unevictable:3536kB writepending:32kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:3776kB local_pcp:3680kB free_cma:0kB
[  259.954728][T14726] lowmem_reserve[]: 0 0 0 0 0
[  259.956440][T14726] Node 1 Normal free:3142108kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9320kB inactive_anon:20kB active_file:23676kB inactive_file:21940kB unevictable:3536kB writepending:1052kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:49208kB local_pcp:32548kB free_cma:0kB
[  259.969649][T14726] lowmem_reserve[]: 0 0 0 0 0
[  259.972267][T14726] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  259.976384][T14726] Node 0 DMA32: 384*4kB (UE) 407*8kB (UE) 400*16kB (UME) 135*32kB (UME) 660*64kB (UME) 272*128kB (UME) 191*256kB (UE) 118*512kB (UME) 95*1024kB (U) 45*2048kB (UME) 176*4096kB (UM) = 1112216kB
[  259.983275][T14726] Node 0 Normal: 470*4kB (UME) 458*8kB (UME) 151*16kB (UME) 56*32kB (UME) 38*64kB (UME) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12696kB
[  259.988427][T14726] Node 1 Normal: 2*4kB (UE) 660*8kB (UME) 656*16kB (UM) 1068*32kB (UME) 472*64kB (UME) 131*128kB (UM) 35*256kB (UM) 10*512kB (UME) 8*1024kB (UME) 2*2048kB (ME) 737*4096kB (UM) = 3142056kB
[  259.995985][T14726] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  259.999490][T14726] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  260.003050][T14726] 53058 total pagecache pages
[  260.004726][T14726] 12 pages in swap cache
[  260.006296][T14726] Free swap  = 124436kB
[  260.007922][T14726] Total swap = 124996kB
[  260.011387][T14726] 1834877 pages RAM
[  260.012771][T14726] 0 pages HighMem/MovableOnly
[  260.014544][T14726] 390269 pages reserved
[  260.016014][T14726] 0 pages cma reserved
[  260.406728][ T7725] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.410276][ T7725] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  260.416029][ T7725] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.421172][ T7725] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  260.429837][ T7725] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.432634][ T7725] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  260.440746][ T7725] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.443617][ T7725] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  260.515539][T14751] lo speed is unknown, defaulting to 1000
[  260.528926][T14751] lo speed is unknown, defaulting to 1000
[  260.531317][T14751] lo speed is unknown, defaulting to 1000
[  260.625323][    T9] lo speed is unknown, defaulting to 1000
[  260.628206][T14751] infiniband sqz0: set active
[  260.630744][T14751] infiniband sqz0: added lo
[  260.642151][T14751] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  260.647787][T14751] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  260.653583][T14751] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  260.686302][T14751] RDS/IB: sqz0: added
[  260.687245][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  260.692763][T14751] smc: adding ib device sqz0 with port count 1
[  260.695180][T14751] smc:    ib device sqz0 port 1 has no pnetid
[  260.705059][    T9] lo speed is unknown, defaulting to 1000
[  260.710301][T14751] lo speed is unknown, defaulting to 1000
[  260.802907][T14751] lo speed is unknown, defaulting to 1000
[  260.893318][T14751] lo speed is unknown, defaulting to 1000
[  261.133149][T14761] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.139517][T14761] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.136321][T14761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  264.154620][T14761] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  264.159442][T14761] veth1_vlan: left promiscuous mode
[  264.163235][T14761] veth0_vlan: left promiscuous mode
[  264.166206][T14761] veth0_vlan: entered promiscuous mode
[  264.170601][T14761] veth1_vlan: entered promiscuous mode
[  264.179911][T14761] veth1_macvtap: left promiscuous mode
[  264.183335][T14761] veth0_macvtap: left promiscuous mode
[  264.240422][T14761] veth1_macvtap: entered promiscuous mode
[  264.254707][T14761] 8021q: adding VLAN 0 to HW filter on device bond1
[  264.259631][T14761] 8021q: adding VLAN 0 to HW filter on device batadv1
[  264.263093][T14761] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  264.266441][T14761] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  264.284552][T14762] pim6reg: entered allmulticast mode
[  264.308812][T14768] pim6reg: left allmulticast mode
[  264.425072][ T6077] hsr0 speed is unknown, defaulting to 1000
[  264.425092][ T7725] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.427612][ T7725] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.432085][ T6077] syz2: Port: 1 Link ACTIVE
[  264.438056][    T9] hsr0 speed is unknown, defaulting to 1000
[  264.440478][ T7725] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.443840][ T7725] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.628896][T14789] __nla_validate_parse: 4 callbacks suppressed
[  264.628907][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3863'.
[  264.915832][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3869'.
[  264.921010][T14810] netlink: 94 bytes leftover after parsing attributes in process `syz.2.3869'.
[  264.924890][T14810] validate_nla: 3 callbacks suppressed
[  264.924901][T14810] netlink: 'syz.2.3869': attribute type 1 has an invalid length.
[  264.930978][T14810] netlink: 568 bytes leftover after parsing attributes in process `syz.2.3869'.
[  265.055997][T14819] netlink: 'syz.2.3877': attribute type 4 has an invalid length.
[  266.479134][T14888] netlink: 'syz.1.3911': attribute type 49 has an invalid length.
[  266.567780][T14896] netlink: 774 bytes leftover after parsing attributes in process `syz.0.3910'.
[  266.574741][T14896] netlink: 'syz.0.3910': attribute type 1 has an invalid length.
[  266.734766][T14901] netlink: 'syz.1.3917': attribute type 1 has an invalid length.
[  266.737818][T14901] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3917'.
[  266.995086][T14911] netlink: 'syz.0.3921': attribute type 1 has an invalid length.
[  267.009895][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3921'.
[  267.286365][T14926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3929'.
[  267.486947][T14941] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  267.704208][T14950] hsr0 speed is unknown, defaulting to 1000
[  267.711521][T14950] lo speed is unknown, defaulting to 1000
[  267.720593][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888113245800: rx timeout, send abort
[  268.225584][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888113245800: abort rx timeout. Force session deactivation
[  268.719353][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8881135c6c00: rx timeout, send abort
[  268.797550][T14993] netlink: 'syz.1.3960': attribute type 11 has an invalid length.
[  269.222027][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8881135c6c00: abort rx timeout. Force session deactivation
[  269.250982][T15022] netlink: 'syz.2.3969': attribute type 13 has an invalid length.
[  269.258382][T15022] netlink: 'syz.2.3969': attribute type 17 has an invalid length.
[  269.602372][T15022] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.611731][T15022] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.705868][T15022] veth1_vlan: left promiscuous mode
[  269.709507][T15022] veth0_vlan: left promiscuous mode
[  269.713900][T15022] veth0_vlan: entered promiscuous mode
[  269.720567][T15022] veth1_vlan: entered promiscuous mode
[  269.741230][T15022] veth1_macvtap: left promiscuous mode
[  269.751954][T15022] veth1_macvtap: entered promiscuous mode
[  269.774275][T15022] 8021q: adding VLAN 0 to HW filter on device bond1
[  269.780777][T15022] 8021q: adding VLAN 0 to HW filter on device batadv1
[  269.784325][T15022] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  269.787407][T15022] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  269.791616][T15022] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  269.845805][ T6065] hsr0 speed is unknown, defaulting to 1000
[  269.854477][ T6077] hsr0 speed is unknown, defaulting to 1000
[  270.622047][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3979'.
[  270.729445][T15062] ipip1: entered promiscuous mode
[  270.829375][T15070] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  270.834223][T15070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  271.173867][T15092] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3996'.
[  271.535008][T15130] sch_tbf: burst 0 is lower than device lo mtu (1550) !
[  271.581519][T15135] bond6 (unregistering): Released all slaves
[  272.082021][T15174] netlink: 'syz.1.4030': attribute type 2 has an invalid length.
[  273.780931][T15188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  273.886311][T15208] netlink: 'syz.1.4043': attribute type 1 has an invalid length.
[  273.891019][T15208] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4043'.
[  273.968118][T15215] netlink: 'syz.1.4046': attribute type 2 has an invalid length.
[  274.449142][T15118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  274.565472][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4066'.
[  274.584182][T15258] xt_l2tp: invalid flags combination: 8
[  274.596165][T15258] netlink: 'syz.2.4066': attribute type 1 has an invalid length.
[  274.604175][T15258] gre0: entered promiscuous mode
[  274.606405][T15258] gre0: entered allmulticast mode
[  274.885450][T15276] syzkaller1: tun_chr_ioctl cmd 1074025677
[  274.890712][T15276] syzkaller1: linktype set to 805
[  275.509590][T15335] syzkaller1: entered promiscuous mode
[  275.512148][T15335] syzkaller1: entered allmulticast mode
[  275.563074][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4099'.
[  275.566001][T15337] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.571486][T15337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.651004][T15343] hsr0 speed is unknown, defaulting to 1000
[  275.654832][T15343] lo speed is unknown, defaulting to 1000
[  275.895467][T15356] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4107'.
[  275.898659][T15356] netlink: Unknown conntrack attr (0)
[  276.108246][T15374] bridge0: port 2(syz_tun) entered blocking state
[  276.126709][T15374] bridge0: port 2(syz_tun) entered disabled state
[  276.132995][T15374] syz_tun: entered allmulticast mode
[  276.149014][T15374] syz_tun: entered promiscuous mode
[  276.175305][T15379] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4116'.
[  276.794943][T15446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4147'.
[  276.832604][T15450] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4149'.
[  277.254835][T15492] syzkaller1: entered promiscuous mode
[  277.257168][T15492] syzkaller1: entered allmulticast mode
[  277.560731][T15526] netlink: 'syz.1.4184': attribute type 1 has an invalid length.
[  277.564089][T15526] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4184'.
[  277.567762][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4184'.
[  277.768649][T15548] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  277.795389][T15550] tipc: MTU too low for tipc bearer
[  277.855337][T15556] netlink: 'syz.1.4200': attribute type 27 has an invalid length.
[  277.938015][T15564] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4204'.
[  278.145441][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4216'.
[  278.155019][T15589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4216'.
[  278.315805][T15602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.318685][T15602] syzkaller0: entered promiscuous mode
[  278.320799][T15602] syzkaller0: entered allmulticast mode
[  278.334358][T15602] tipc: Resetting bearer <eth:syzkaller0>
[  278.337177][T15601] tipc: Resetting bearer <eth:syzkaller0>
[  278.346332][T15601] tipc: Disabling bearer <eth:syzkaller0>
[  279.462881][T15690] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  279.470092][ T6077] lo speed is unknown, defaulting to 1000
[  279.701072][T15712] hsr0 speed is unknown, defaulting to 1000
[  279.705279][T15712] lo speed is unknown, defaulting to 1000
[  279.725562][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4277'.
[  279.896668][T15731] syzkaller1: entered promiscuous mode
[  279.903775][T15731] syzkaller1: entered allmulticast mode
[  280.438569][T15772] netlink: 'syz.2.4301': attribute type 10 has an invalid length.
[  280.544387][T15787] netlink: 'syz.2.4308': attribute type 1 has an invalid length.
[  280.564769][T15787] bond6: entered promiscuous mode
[  280.567144][T15787] 8021q: adding VLAN 0 to HW filter on device bond6
[  280.620852][T15787] 8021q: adding VLAN 0 to HW filter on device bond6
[  280.625373][T15787] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[  280.634328][T15787] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  280.638987][T15787] bond6: (slave vcan1): making interface the new active one
[  280.642454][T15787] vcan1: entered promiscuous mode
[  280.644849][T15796] xt_l2tp: v2 tid > 0xffff: 37482740
[  280.647382][T15787] bond6: (slave vcan1): Enslaving as an active interface with an up link
[  280.728050][T15798] hsr0 speed is unknown, defaulting to 1000
[  280.737841][T15798] lo speed is unknown, defaulting to 1000
[  280.816238][T15810] openvswitch: netlink: IPv4 tunnel dst address is zero
[  281.109783][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.114143][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.117178][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.120560][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.123444][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.126320][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.128974][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.133441][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.136297][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.139107][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.583478][T15853] netlink: 'syz.0.4336': attribute type 29 has an invalid length.
[  281.585963][T15853] __nla_validate_parse: 1 callbacks suppressed
[  281.585970][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'.
[  281.592752][T15853] netlink: 'syz.0.4336': attribute type 29 has an invalid length.
[  281.595325][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'.
[  281.598381][T15853] netlink: 'syz.0.4336': attribute type 29 has an invalid length.
[  281.601002][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'.
[  281.604115][T15853] netlink: 'syz.0.4336': attribute type 29 has an invalid length.
[  281.611640][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'.
[  281.624326][T15853] netlink: 'syz.0.4336': attribute type 29 has an invalid length.
[  281.626870][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'.
[  281.630124][T15853] netlink: 'syz.0.4336': attribute type 29 has an invalid length.
[  281.632868][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'.
[  281.635906][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'.
[  281.638936][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'.
[  281.642111][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'.
[  281.645242][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'.
[  281.830445][T15867] bond8: invalid ARP target 0.0.0.0 specified for addition
[  281.833475][T15867] bond8: option arp_ip_target: invalid value (0)
[  281.837323][T15867] bond8 (unregistering): Released all slaves
[  281.967433][ T6070] hsr0 speed is unknown, defaulting to 1000
[  281.969414][ T7725] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.974468][ T6070] syz2: Port: 1 Link DOWN
[  281.977332][ T7725] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.990362][ T7725] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.997748][ T7725] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.099381][T15875] syzkaller0: entered promiscuous mode
[  282.105808][T15875] syzkaller0: entered allmulticast mode
[  282.410259][T15890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.413207][T15890] syzkaller0: entered promiscuous mode
[  282.415067][T15890] syzkaller0: entered allmulticast mode
[  282.431033][T15890] tipc: Resetting bearer <eth:syzkaller0>
[  282.436549][T15889] tipc: Resetting bearer <eth:syzkaller0>
[  282.456910][T15889] tipc: Disabling bearer <eth:syzkaller0>
[  283.794262][T15944] syzkaller1: entered promiscuous mode
[  283.796244][T15944] syzkaller1: entered allmulticast mode
[  284.154472][T15968] xt_hashlimit: max too large, truncated to 1048576
[  284.557845][T16004] syzkaller0: entered promiscuous mode
[  284.559927][T16004] syzkaller0: entered allmulticast mode
[  285.098084][T16059] hsr0 speed is unknown, defaulting to 1000
[  285.104317][T16059] lo speed is unknown, defaulting to 1000
[  286.425355][T16098] team0 (unregistering): left allmulticast mode
[  286.430339][T16098] team0 (unregistering): left promiscuous mode
[  286.439545][T16098] bridge0: port 1(team0) entered disabled state
[  286.456814][T16098] team0 (unregistering): Port device bridge9 removed
[  286.578772][T16111] net_ratelimit: 1018 callbacks suppressed
[  286.578888][T16111] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[  286.893640][T16136] __nla_validate_parse: 33 callbacks suppressed
[  286.893652][T16136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4465'.
[  287.400706][T16176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4485'.
[  287.672930][T16198] hsr0 speed is unknown, defaulting to 1000
[  287.678421][T16198] lo speed is unknown, defaulting to 1000
[  288.082534][T16209] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.4497'.
[  288.181583][T16216] tun0: tun_chr_ioctl cmd 1074025675
[  288.184585][T16216] tun0: persist enabled
[  288.186566][T16216] tun0: tun_chr_ioctl cmd 1074025675
[  288.188139][T16216] tun0: persist disabled
[  288.306377][T16223] netlink: 566 bytes leftover after parsing attributes in process `syz.2.4503'.
[  288.352587][T16226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  289.042635][T16218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  289.048786][T16249] validate_nla: 24 callbacks suppressed
[  289.048797][T16249] netlink: 'syz.2.4514': attribute type 1 has an invalid length.
[  289.062488][T16249] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4514'.
[  289.316852][T16282] netlink: 'syz.1.4523': attribute type 2 has an invalid length.
[  289.320646][T16282] netlink: 'syz.1.4523': attribute type 2 has an invalid length.
[  289.604122][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4541'.
[  289.607872][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4541'.
[  289.619488][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  289.619594][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4541'.
[  289.627117][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4541'.
[  289.628843][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  289.634404][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  289.638973][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  289.683709][T16313] xt_nat: multiple ranges no longer supported
[  290.022111][T16332] netlink: 'syz.2.4551': attribute type 1 has an invalid length.
[  290.025344][T16332] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4551'.
[  290.028995][T16332] netlink: 'syz.2.4551': attribute type 1 has an invalid length.
[  290.178237][T16347] bond6: entered promiscuous mode
[  290.183639][T16348] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  290.186428][T16348] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  290.718890][T16391] hsr0 speed is unknown, defaulting to 1000
[  290.731565][T16391] lo speed is unknown, defaulting to 1000
[  291.983013][T16506] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  291.999302][T16510] __nla_validate_parse: 10 callbacks suppressed
[  291.999312][T16510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4632'.
[  292.121771][T16527] openvswitch: netlink: EtherType 50a is less than min 600
[  292.876982][T16517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  293.041178][T16559] netlink: 'syz.2.4650': attribute type 29 has an invalid length.
[  293.044851][T16559] netlink: 'syz.2.4650': attribute type 29 has an invalid length.
[  293.047784][T16559] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4650'.
[  293.052721][T16559] netlink: 380 bytes leftover after parsing attributes in process `syz.2.4650'.
[  293.055780][T16559] netlink: 380 bytes leftover after parsing attributes in process `syz.2.4650'.
[  293.058837][T16559] netlink: 22 bytes leftover after parsing attributes in process `syz.2.4650'.
[  293.102731][T16563] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4653'.
[  293.106571][T16563] netlink: 'syz.1.4653': attribute type 2 has an invalid length.
[  293.109147][T16563] netlink: 'syz.1.4653': attribute type 1 has an invalid length.
[  293.333716][T16587] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  293.486583][T16600] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4670'.
[  293.497818][T16600] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4670'.
[  293.845704][T16634] xt_hashlimit: size too large, truncated to 1048576
[  293.847814][T16634] xt_hashlimit: max too large, truncated to 1048576
[  294.045958][   T32] audit: type=1107 audit(1778600165.681:10): pid=16649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  294.183474][T16665] pimreg9: entered allmulticast mode
[  294.251226][T16674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.312356][T16676] hsr0 speed is unknown, defaulting to 1000
[  294.316036][T16676] lo speed is unknown, defaulting to 1000
[  294.529211][T16694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4713'.
[  295.206060][T16714] netlink: 'syz.0.4722': attribute type 1 has an invalid length.
[  295.209440][T16714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.610936][ T5614] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  295.615529][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  295.615548][ T5614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.615555][ T5614] Call Trace:
[  295.615561][ T5614]  <TASK>
[  295.615566][ T5614]  dump_stack_lvl+0xe8/0x150
[  295.615587][ T5614]  dump_header+0xd3/0x4c0
[  295.615608][ T5614]  oom_kill_process+0x3ab/0x970
[  295.615628][ T5614]  out_of_memory+0x106c/0x1410
[  295.615643][ T5614]  ? try_charge_memcg+0xbb9/0x1570
[  295.615663][ T5614]  ? __pfx___mutex_lock+0x10/0x10
[  295.615682][ T5614]  ? __pfx_out_of_memory+0x10/0x10
[  295.615696][ T5614]  ? do_raw_spin_unlock+0x4d/0x210
[  295.615721][ T5614]  try_charge_memcg+0xc77/0x1570
[  295.615751][ T5614]  ? __pfx_try_charge_memcg+0x10/0x10
[  295.615767][ T5614]  ? percpu_ref_tryget+0x15/0x180
[  295.615799][ T5614]  ? charge_memcg+0x23/0x2b0
[  295.615818][ T5614]  charge_memcg+0x1a2/0x2b0
[  295.615836][ T5614]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  295.615854][ T5614]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  295.615873][ T5614]  __swap_cache_prepare_and_add+0xdc/0x700
[  295.615892][ T5614]  ? page_rmappable_folio+0x9a/0x170
[  295.615915][ T5614]  swap_cache_alloc_folio+0xf1/0x240
[  295.615931][ T5614]  swap_cluster_readahead+0x355/0x670
[  295.615950][ T5614]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  295.615997][ T5614]  ? get_vma_policy+0x27b/0x3c0
[  295.616019][ T5614]  swapin_readahead+0x196/0xc50
[  295.616036][ T5614]  ? swap_table_get+0x1e/0x260
[  295.616052][ T5614]  ? __pfx_swapin_readahead+0x10/0x10
[  295.616068][ T5614]  ? swap_table_get+0x1e/0x260
[  295.616081][ T5614]  ? swap_table_get+0x1e/0x260
[  295.616091][ T5614]  ? swap_table_get+0x1e/0x260
[  295.616104][ T5614]  ? swap_table_get+0x216/0x260
[  295.616117][ T5614]  ? swap_cache_get_folio+0x2e4/0x2f0
[  295.616134][ T5614]  do_swap_page+0x555/0x5120
[  295.616152][ T5614]  ? __pte_offset_map+0x29/0x240
[  295.616168][ T5614]  ? __pte_offset_map+0x29/0x240
[  295.616187][ T5614]  ? do_swap_page+0x128/0x5120
[  295.616201][ T5614]  ? __pfx_do_swap_page+0x10/0x10
[  295.616212][ T5614]  ? __pte_offset_map+0x1ae/0x240
[  295.616227][ T5614]  ? pte_offset_map_rw_nolock+0xea/0x160
[  295.616245][ T5614]  handle_mm_fault+0x12d2/0x3170
[  295.616269][ T5614]  ? handle_mm_fault+0xee/0x3170
[  295.616289][ T5614]  ? __pfx_handle_mm_fault+0x10/0x10
[  295.616302][ T5614]  ? lock_vma_under_rcu+0x45a/0x500
[  295.616336][ T5614]  do_user_addr_fault+0xa73/0x1340
[  295.616355][ T5614]  ? rcu_is_watching+0x15/0xb0
[  295.616377][ T5614]  ? trace_page_fault_user+0x84/0x1e0
[  295.616392][ T5614]  exc_page_fault+0x6a/0xc0
[  295.616411][ T5614]  asm_exc_page_fault+0x26/0x30
[  295.616424][ T5614] RIP: 0033:0x7f63fed5d60e
[  295.616437][ T5614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  295.616448][ T5614] RSP: 002b:00007ffdc059a1d8 EFLAGS: 00010246
[  295.616460][ T5614] RAX: 0000000000000000 RBX: 000055556782d500 RCX: 00007f63fed5d60e
[  295.616469][ T5614] RDX: 00007ffdc059a230 RSI: 0000000000000000 RDI: 0000000000000000
[  295.616476][ T5614] RBP: 00007ffdc059a29c R08: 0000000000000000 R09: 0000000000000000
[  295.616483][ T5614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  295.616491][ T5614] R13: 00000000000927c0 R14: 00000000000480ca R15: 00007ffdc059a2f0
[  295.616512][ T5614]  </TASK>
[  295.616518][ T5614] memory: usage 307200kB, limit 307200kB, failcnt 3646
[  295.760232][ T5614] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0
[  295.763567][ T5614] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  295.766535][ T5614] Memory cgroup stats for /syz1:
[  295.766621][ T5614] cache 0
[  295.809920][ T5614] rss 0
[  295.811143][ T5614] rss_huge 0
[  295.819830][ T5614] shmem 0
[  295.821005][ T5614] mapped_file 0
[  295.829894][ T5614] dirty 0
[  295.831155][ T5614] writeback 0
[  295.832629][ T5614] workingset_refault_anon 29
[  295.834534][ T5614] workingset_refault_file 1
[  295.836417][ T5614] swap 712704
[  295.837783][ T5614] swapcached 950272
[  295.839320][ T5614] pgpgin 134895
[  295.840895][ T5614] pgpgout 134891
[  295.842410][ T5614] pgfault 306092
[  295.843917][ T5614] pgmajfault 37
[  295.845354][ T5614] inactive_anon 4096
[  295.846891][ T5614] active_anon 12288
[  295.848445][ T5614] inactive_file 0
[  295.881365][ T5614] active_file 0
[  295.882961][ T5614] unevictable 0
[  295.884465][ T5614] hierarchical_memory_limit 314572800
[  295.886650][ T5614] hierarchical_memsw_limit 9223372036854771712
[  295.889172][ T5614] total_cache 0
[  295.899850][ T5614] total_rss 0
[  295.901349][ T5614] total_rss_huge 0
[  295.902867][ T5614] total_shmem 0
[  295.904319][ T5614] total_mapped_file 0
[  295.905918][ T5614] total_dirty 0
[  295.907358][ T5614] total_writeback 0
[  295.908940][ T5614] total_workingset_refault_anon 29
[  295.920147][ T5614] total_workingset_refault_file 1
[  295.922409][ T5614] total_swap 712704
[  295.924070][ T5614] total_swapcached 950272
[  295.927211][ T5614] total_pgpgin 134899
[  295.931384][ T5614] total_pgpgout 134895
[  295.934088][ T5614] total_pgfault 306125
[  295.937728][ T5614] total_pgmajfault 37
[  295.940821][ T5614] total_inactive_anon 4096
[  295.944827][ T5614] total_active_anon 12288
[  295.949044][ T5614] total_inactive_file 0
[  295.953222][ T5614] total_active_file 0
[  295.957266][ T5614] total_unevictable 0
[  295.960916][ T5614] anon_cost 0
[  295.964225][ T5614] file_cost 0
[  295.967353][ T5614] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4720,pid=16709,uid=0
[  295.980334][ T5614] Memory cgroup out of memory: Killed process 16709 (syz.1.4720) total-vm:104340kB, anon-rss:1240kB, file-rss:22672kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  296.224238][T16736] bond7: option lacp_active: invalid value (8)
[  296.228392][T16736] bond7 (unregistering): Released all slaves
[  298.250847][T16717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  298.368591][T16743] netlink: 'syz.1.4731': attribute type 29 has an invalid length.
[  298.372625][T16743] netlink: 'syz.1.4731': attribute type 29 has an invalid length.
[  298.376615][T16743] netlink: 508 bytes leftover after parsing attributes in process `syz.1.4731'.
[  298.435030][T16751] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.4734'.
[  298.646331][T16783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4749'.
[  298.792197][T16798] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4753'.
[  298.962086][T16825] netlink: 'syz.1.4761': attribute type 32 has an invalid length.
[  299.215021][T16866] netlink: 'syz.1.4771': attribute type 9 has an invalid length.
[  299.217628][T16866] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4771'.
[  299.303103][T16879] netlink: 'syz.2.4774': attribute type 11 has an invalid length.
[  299.304306][T16881] sctp: [Deprecated]: syz.1.4772 (pid 16881) Use of int in maxseg socket option.
[  299.304306][T16881] Use struct sctp_assoc_value instead
[  299.712644][T16930] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  299.722076][T16932] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  299.724557][T16932] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  300.552853][T16993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4801'.
[  300.556094][T16993] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  301.022239][T17012] geneve4: entered promiscuous mode
[  301.031800][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.036564][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.040523][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.043814][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.122649][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4808'.
[  301.126869][T17016] netlink: 'syz.1.4808': attribute type 14 has an invalid length.
[  301.132959][T17016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4808'.
[  301.272597][T17022] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  301.275395][T17022] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  301.581210][T17043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4819'.
[  301.798042][T17056] hsr0 speed is unknown, defaulting to 1000
[  301.814226][T17056] lo speed is unknown, defaulting to 1000
[  302.624557][T17106] openvswitch: netlink: Flow actions attr not present in new flow.
[  302.673451][T17106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4847'.
[  302.867420][T17132] hsr0 speed is unknown, defaulting to 1000
[  302.872215][T17132] lo speed is unknown, defaulting to 1000
[  303.568744][T17202] __nla_validate_parse: 3 callbacks suppressed
[  303.568754][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4890'.
[  303.659355][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4893'.
[  303.665164][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4893'.
[  304.181404][T17244] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4911'.
[  304.184484][T17244] netlink: 'syz.1.4911': attribute type 1 has an invalid length.
[  304.249593][T17251] bridge14: entered promiscuous mode
[  304.266144][T17253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4915'.
[  304.352776][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4920'.
[  304.357715][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4920'.
[  304.662843][T17282] netlink: 'syz.2.4929': attribute type 1 has an invalid length.
[  304.679916][T17282] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4929'.
[  304.864142][T17313] syzkaller0: mtu less than device minimum
[  304.866924][T17313] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  304.873592][T17313] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  305.055509][T17335] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4954'.
[  305.114748][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4956'.
[  305.294839][T17351] netem: change failed
[  305.319840][ T5619] Bluetooth: hci2: command 0x0405 tx timeout
[  305.551773][T17371] netlink: Unknown conntrack attr (type=2304, max=9)
[  307.016091][T17427] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  307.367173][T17452] hsr0 speed is unknown, defaulting to 1000
[  307.372713][T17452] lo speed is unknown, defaulting to 1000
[  307.496213][T17456] vlan4: entered promiscuous mode
[  307.989294][T17470] siw: device registration error -23
[  308.311920][T17488] netlink: 'syz.2.5018': attribute type 1 has an invalid length.
[  308.471173][T17496] block nbd0: NBD_DISCONNECT
[  308.534997][T17498] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  308.539436][T17498] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  308.586244][T17502] netlink: 'syz.2.5025': attribute type 1 has an invalid length.
[  308.589613][T17502] netlink: 'syz.2.5025': attribute type 3 has an invalid length.
[  308.593402][T17502] __nla_validate_parse: 16 callbacks suppressed
[  308.593413][T17502] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5025'.
[  308.601679][T17502] NCSI netlink: No device for ifindex 813332851
[  308.916630][T17519] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5033'.
[  308.949319][T17521] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5034'.
[  309.005961][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5032'.
[  309.742349][T17546] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5043'.
[  310.059108][T17566] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5053'.
[  310.145362][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5055'.
[  310.189139][T17579] tipc: Started in network mode
[  310.194730][T17579] tipc: Node identity ac14140f, cluster identity 4711
[  310.197060][T17579] tipc: New replicast peer: 255.255.255.255
[  310.201363][T17579] tipc: Enabled bearer <udp:syz2>, priority 10
[  310.205886][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5059'.
[  310.241021][T17584] netlink: 'syz.1.5062': attribute type 24 has an invalid length.
[  310.426965][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5068'.
[  310.455368][T17602] netlink: 'syz.1.5069': attribute type 2 has an invalid length.
[  310.510995][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5073'.
[  310.985971][T17647] syzkaller0: entered promiscuous mode
[  310.988698][T17647] syzkaller0: entered allmulticast mode
[  311.133090][T17654] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.201050][ T6076] tipc: Node number set to 2886997007
[  311.259348][T17666] vlan0: entered promiscuous mode
[  311.261740][T17666] geneve1: entered promiscuous mode
[  311.264181][T17666] vlan0: entered allmulticast mode
[  311.266298][T17666] geneve1: entered allmulticast mode
[  311.450771][T17686] pimreg: entered allmulticast mode
[  311.455748][T17686] pimreg: left allmulticast mode
[  311.776257][T17709] macsec1: entered promiscuous mode
[  312.177101][T17741] tipc: New replicast peer: 255.255.255.255
[  312.180434][T17741] tipc: Enabled bearer <udp:syz1>, priority 10
[  312.362720][T17762] bridge0: port 2(syz_tun) entered blocking state
[  312.365493][T17762] bridge0: port 2(syz_tun) entered listening state
[  312.372536][T17762] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.378984][T17762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.657747][T17801] pimreg: entered allmulticast mode
[  312.661071][T17801] pimreg: left allmulticast mode
[  312.696592][T17805] IPVS: Scheduler module ip_vs_sip not found
[  313.160033][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.658161][T17847] batman_adv: batadv0: Adding interface: vlan0
[  313.661598][T17847] batman_adv: batadv0: The MTU of interface vlan0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem.
[  313.672497][T17847] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active
[  313.765380][T17855] __nla_validate_parse: 7 callbacks suppressed
[  313.765390][T17855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5182'.
[  313.857384][T17867] 8021q: adding VLAN 0 to HW filter on device bond8
[  313.871605][T17867] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  313.970604][   T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  314.090371][   T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  314.130042][T17841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  314.186856][T17890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5194'.
[  314.577163][T17910] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  314.579599][T17910] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  314.733287][T17877] Bluetooth: hci0: Opcode 0x080f failed: -4
[  314.888643][T17922] syzkaller0: entered promiscuous mode
[  314.892631][T17922] syzkaller0: entered allmulticast mode
[  314.996721][T17937] syzkaller1: entered allmulticast mode
[  315.036680][ T5502] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  315.042662][T17939] hsr0 speed is unknown, defaulting to 1000
[  315.048344][T17939] lo speed is unknown, defaulting to 1000
[  315.201812][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5217'.
[  315.626912][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5228'.
[  316.166437][T17976] can: request_module (can-proto-0) failed.
[  316.330689][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5232'.
[  316.359864][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.363106][T17983] hsr_slave_1 (unregistering): left promiscuous mode
[  317.640539][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.937861][T17930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  318.024615][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5244'.
[  318.239664][T18040] netlink: 'syz.1.5257': attribute type 11 has an invalid length.
[  319.021861][   T32] audit: type=1804 audit(1778600190.661:11): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5282" name="/newroot/1895/cgroup.controllers" dev="tmpfs" ino=9569 res=1 errno=0
[  319.047915][   T32] audit: type=1800 audit(1778600190.671:12): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5282" name="cgroup.controllers" dev="tmpfs" ino=9569 res=0 errno=0
[  319.071115][   T32] audit: type=1800 audit(1778600190.671:13): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5282" name="cgroup.controllers" dev="tmpfs" ino=9569 res=0 errno=0
[  319.117861][T18126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5287'.
[  319.194881][T18136] netlink: 'syz.1.5292': attribute type 1 has an invalid length.
[  320.086805][T18162] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5302'.
[  320.172007][T18174] netlink: 'syz.0.5309': attribute type 61 has an invalid length.
[  320.176131][T18174] netlink: 'syz.0.5309': attribute type 62 has an invalid length.
[  320.291709][T18187] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5314'.
[  320.425513][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5325'.
[  320.594735][T18232] xt_TPROXY: Can be used only with -p tcp or -p udp
[  320.598905][T18228] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  320.987668][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5345'.
[  321.016121][T18271] bond8: entered promiscuous mode
[  321.019384][T18271] bond8: entered allmulticast mode
[  321.263377][T18287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5350'.
[  321.303165][T18287] bond9: (slave bridge8): Enslaving as an active interface with an up link
[  321.545197][T18304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.547997][T18304] syzkaller0: entered promiscuous mode
[  321.550255][T18304] syzkaller0: entered allmulticast mode
[  321.555993][T18304] netem: change failed
[  321.662696][T18303] tipc: Resetting bearer <eth:syzkaller0>
[  321.677617][T18303] tipc: Disabling bearer <eth:syzkaller0>
[  321.713447][T18320] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5363'.
[  321.774469][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5365'.
[  321.921527][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5371'.
[  322.000959][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5373'.
[  322.105982][T18348] netlink: 'syz.0.5376': attribute type 2 has an invalid length.
[  322.122854][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  322.197801][T18354] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  322.555290][T18386] vxcan2: entered allmulticast mode
[  322.655619][T18395] netlink: 'syz.0.5398': attribute type 11 has an invalid length.
[  322.689019][T18397] xt_bpf: check failed: parse error
[  322.959019][T18420] vlan3: entered allmulticast mode
[  322.962032][T18420] veth0_to_bond: entered allmulticast mode
[  322.977348][T18422] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  323.019887][T18428] openvswitch: netlink: Key type 29 is not supported
[  323.873796][T18480] netlink: 'syz.2.5439': attribute type 49 has an invalid length.
[  324.260481][T18506] __nla_validate_parse: 9 callbacks suppressed
[  324.260492][T18506] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5450'.
[  324.278169][T18506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5450'.
[  324.281671][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5450'.
[  324.777999][T18552] xt_TPROXY: Can be used only with -p tcp or -p udp
[  324.873548][T18563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5478'.
[  324.878438][T18563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5478'.
[  325.246849][T18603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5497'.
[  325.252101][T18603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5497'.
[  325.678018][T18655] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  325.861533][T18673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5528'.
[  325.967263][T18683] Bluetooth: MGMT ver 1.23
[  325.969308][T18683] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  326.168810][T18709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5545'.
[  326.172666][T18709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5545'.
[  326.176756][T18709] netlink: 'syz.1.5545': attribute type 3 has an invalid length.
[  326.180465][T18709] netlink: 'syz.1.5545': attribute type 2 has an invalid length.
[  326.184818][T18709] netlink: 'syz.1.5545': attribute type 2 has an invalid length.
[  326.345563][T18732] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[  327.059340][T18798] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  328.402516][T18883] netlink: 'syz.1.5626': attribute type 5 has an invalid length.
[  328.519952][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.082549][T18877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  329.254514][T18932] syzkaller1: entered promiscuous mode
[  329.256409][T18932] syzkaller1: entered allmulticast mode
[  330.120503][T12854] IPVS: ip_vs_send_async error -101
[  330.270009][T18940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  330.350776][T18967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.466271][T18982] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  330.468987][T18982] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  330.502673][T18987] openvswitch: netlink: Missing valid actions attribute.
[  330.507662][T18987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.732625][T19021] netlink: 'syz.1.5689': attribute type 12 has an invalid length.
[  330.856715][T19031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.000634][T19043] __nla_validate_parse: 13 callbacks suppressed
[  331.000652][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5698'.
[  331.063910][T19047] netlink: 'syz.2.5700': attribute type 1 has an invalid length.
[  331.879799][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.042848][T19124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5732'.
[  332.068795][T19124] 8021q: adding VLAN 0 to HW filter on device bond10
[  332.108056][T19129] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  332.278943][T19132] infiniband syz0: set down
[  332.281905][T19132] infiniband syz0: added bridge_slave_1
[  332.300941][T19132] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  332.309919][T19132] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  332.317175][T19132] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  332.350387][T19132] RDS/IB: syz0: added
[  332.353252][T19132] smc: adding ib device syz0 with port count 1
[  332.356140][T19132] smc:    ib device syz0 port 1 has no pnetid
[  332.869633][T19163] netlink: 'syz.2.5749': attribute type 11 has an invalid length.
[  332.930207][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.983859][T19169] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5750'.
[  333.038450][T19165] hsr0 speed is unknown, defaulting to 1000
[  333.043929][T19165] lo speed is unknown, defaulting to 1000
[  333.217088][T19182] netlink: 'syz.0.5755': attribute type 3 has an invalid length.
[  333.225231][T19182] netlink: 'syz.0.5755': attribute type 3 has an invalid length.
[  333.228817][T19182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5755'.
[  333.597401][T19214] xt_connbytes: Forcing CT accounting to be enabled
[  333.602912][T19215] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  333.992846][T19245] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5782'.
[  334.007979][T19245] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  334.012033][T19245] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  334.128821][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5789'.
[  334.676438][T19287] netlink: 'syz.1.5802': attribute type 21 has an invalid length.
[  334.679089][T19287] netlink: 'syz.1.5802': attribute type 6 has an invalid length.
[  334.683994][T19287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5802'.
[  334.828971][T19298] veth0_virt_wifi: entered allmulticast mode
[  335.166241][T19322] SET target dimension over the limit!
[  335.202844][T19326] netlink: 'syz.1.5821': attribute type 1 has an invalid length.
[  335.206760][T19326] netlink: 'syz.1.5821': attribute type 2 has an invalid length.
[  335.295492][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5826'.
[  335.362189][T19338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.415706][T19344] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[  335.522575][T19359] netlink: 'syz.1.5837': attribute type 13 has an invalid length.
[  335.607077][T19362] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig
[  335.632926][T19359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5837'.
[  335.709881][   T13] bond8: (slave ip6gretap1): link status up again after 0 ms
[  335.719400][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  335.830223][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  335.949932][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  336.060211][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  336.107176][T19405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5858'.
[  336.148301][T19409] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.5859'.
[  336.169895][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  336.484173][T19436] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5871'.
[  337.237537][T19444] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.249845][T19444] batadv_slave_0: entered promiscuous mode
[  337.251830][T19444] batadv_slave_0: entered allmulticast mode
[  337.269860][   T13] net_ratelimit: 4 callbacks suppressed
[  337.269871][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  337.389858][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  337.409350][T19461] hsr0 speed is unknown, defaulting to 1000
[  337.412937][T19461] lo speed is unknown, defaulting to 1000
[  337.479900][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.499903][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  337.610062][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  337.733996][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  337.802943][T19490] SET target dimension over the limit!
[  337.849868][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  337.989988][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  338.110077][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  338.220002][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  338.343812][T19522] netlink: 'syz.1.5905': attribute type 40 has an invalid length.
[  338.476131][T19532] tipc: Enabling of bearer <eth:ipvlan0> rejected, failed to enable media
[  338.638202][T19550] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  338.793697][T19569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5927'.
[  338.797409][T19569] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5927'.
[  338.802371][T19569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5927'.
[  338.907764][T19582] netlink: 'syz.2.5934': attribute type 1 has an invalid length.
[  338.944505][T19582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5934'.
[  338.948359][T19582] 8021q: adding VLAN 0 to HW filter on device bond7
[  338.956869][T19582] macvlan2: entered promiscuous mode
[  338.958685][T19582] macvlan2: entered allmulticast mode
[  338.961692][T19582] bond7: entered promiscuous mode
[  338.966981][T19582] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  338.975306][T19582] bond7: left promiscuous mode
[  339.412278][T19624] netlink: 'syz.0.5952': attribute type 1 has an invalid length.
[  339.772013][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5969'.
[  339.776532][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5969'.
[  339.788667][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5969'.
[  340.149610][T19689] macsec2: entered promiscuous mode
[  340.348230][T19640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  340.353433][T19686] netlink: 'syz.2.5973': attribute type 2 has an invalid length.
[  340.363976][T19686] netlink: 'syz.2.5973': attribute type 2 has an invalid length.
[  340.465969][T19696] netlink: 'syz.1.5979': attribute type 1 has an invalid length.
[  340.527002][T19696] bond9: (slave bridge16): making interface the new active one
[  340.531140][T19696] bond9: (slave bridge16): Enslaving as an active interface with an up link
[  340.600709][T19702] bond10: option updelay: invalid value (18446744073709518847)
[  340.603830][T19702] bond10: option updelay: allowed values 0 - 2147483647
[  340.607108][T19702] bond10 (unregistering): Released all slaves
[  340.695586][T19708] pim6reg1: entered promiscuous mode
[  340.697693][T19708] pim6reg1: entered allmulticast mode
[  341.631906][T19711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  341.714770][T19737] netlink: 'syz.2.5996': attribute type 8 has an invalid length.
[  341.777620][T19742] netlink: 'syz.2.5997': attribute type 1 has an invalid length.
[  341.787743][T19742] __nla_validate_parse: 5 callbacks suppressed
[  341.787759][T19742] netlink: 936 bytes leftover after parsing attributes in process `syz.2.5997'.
[  341.996715][T19762] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6007'.
[  342.267183][T19793] netlink: 'syz.0.6021': attribute type 13 has an invalid length.
[  342.299903][ T7725] net_ratelimit: 38 callbacks suppressed
[  342.299921][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  342.314007][T19793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6021'.
[  342.383930][T19802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.410042][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  342.520195][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  342.601476][    C0] bridge0: port 2(syz_tun) entered learning state
[  342.629951][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  342.635790][T19813] veth0: Caught tx_queue_len zero misconfig
[  342.639490][T19813] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6030'.
[  342.722759][T19821] sctp: [Deprecated]: syz.0.6033 (pid 19821) Use of struct sctp_assoc_value in delayed_ack socket option.
[  342.722759][T19821] Use struct sctp_sack_info instead
[  342.749941][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  342.871489][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  342.980062][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  343.090152][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  343.115099][T19843] syzkaller0: entered promiscuous mode
[  343.119855][T19843] syzkaller0: entered allmulticast mode
[  343.200125][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  343.422872][T19872] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6058'.
[  343.423335][T19869] netlink: 'syz.1.6056': attribute type 13 has an invalid length.
[  343.463557][T19869] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig
[  343.480755][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6056'.
[  343.607393][T19892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6067'.
[  343.610933][T19892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6067'.
[  343.620927][T19886] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6065'.
[  343.856155][T19913] syzkaller0: entered promiscuous mode
[  343.858124][T19913] syzkaller0: entered allmulticast mode
[  343.877859][T19913] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  343.964075][T19905] nbd0: detected capacity change from 0 to 63
[  343.974652][T19915] block nbd0: Receive control failed (result -32)
[  343.977950][   T56] block nbd0: Receive control failed (result -32)
[  343.986587][T18853] block nbd0: Dead connection, failed to find a fallback
[  343.990625][T18853] block nbd0: shutting down sockets
[  343.993379][T18853] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  344.000973][T18853] Buffer I/O error on dev nbd0, logical block 0, async page read
[  344.007889][T18853] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  344.014341][T18853] Buffer I/O error on dev nbd0, logical block 1, async page read
[  344.020057][T18853] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  344.023199][T18853] Buffer I/O error on dev nbd0, logical block 2, async page read
[  344.025824][T18853] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  344.029525][T18853] Buffer I/O error on dev nbd0, logical block 3, async page read
[  344.037064][T18853] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  344.051905][T18853] Buffer I/O error on dev nbd0, logical block 0, async page read
[  344.061304][T18853] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  344.070381][T18853] Buffer I/O error on dev nbd0, logical block 1, async page read
[  344.076250][T18853] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  344.082893][T18853] Buffer I/O error on dev nbd0, logical block 2, async page read
[  344.088166][T18853] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  344.099374][T18853] Buffer I/O error on dev nbd0, logical block 3, async page read
[  344.102394][T18853] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  344.105659][T18853] Buffer I/O error on dev nbd0, logical block 0, async page read
[  344.108731][T18853] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  344.114181][T18853] Buffer I/O error on dev nbd0, logical block 1, async page read
[  344.122074][T18853] ldm_validate_partition_table(): Disk read failed.
[  344.129501][T18853] Dev nbd0: unable to read RDB block 0
[  344.132320][T18853]  nbd0: unable to read partition table
[  344.143213][T18853] ldm_validate_partition_table(): Disk read failed.
[  344.146276][T18853] Dev nbd0: unable to read RDB block 0
[  344.148980][T18853]  nbd0: unable to read partition table
[  344.228054][T19941] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  344.228054][T19941] Please contact the netfilter-devel mailing list or update your nftables rules.
[  344.263905][T19945] hsr0 speed is unknown, defaulting to 1000
[  344.267175][T19945] lo speed is unknown, defaulting to 1000
[  344.320451][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6092'.
[  345.218575][T19960] syzkaller1: tun_chr_ioctl cmd 2147767506
[  345.575187][T19979] netlink: 'syz.0.6102': attribute type 1 has an invalid length.
[  345.578035][T19979] netlink: 'syz.0.6102': attribute type 2 has an invalid length.
[  345.947732][T20012] geneve5: entered promiscuous mode
[  345.950549][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 55018 - 0
[  345.955433][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 55018 - 0
[  345.966552][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 55018 - 0
[  345.969572][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 55018 - 0
[  346.055436][T20020] xt_CT: No such helper "netbios-ns"
[  346.212280][T20033] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  346.216315][T20040] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  346.219450][T20040] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  347.300743][T20075] __nla_validate_parse: 3 callbacks suppressed
[  347.300759][T20075] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6142'.
[  347.410384][ T5502] net_ratelimit: 31 callbacks suppressed
[  347.410402][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  347.411955][T20076] nbd1: detected capacity change from 0 to 63
[  347.426917][T20081] block nbd1: NBD_DISCONNECT
[  347.431255][T20081] block nbd1: Disconnected due to user request.
[  347.434949][T20081] block nbd1: shutting down sockets
[  347.448769][T18853] ldm_validate_partition_table(): Disk read failed.
[  347.458433][T18853] Dev nbd1: unable to read RDB block 0
[  347.470843][T18853]  nbd1: unable to read partition table
[  347.504630][T20087] pim6reg: entered allmulticast mode
[  347.516632][T18853] ldm_validate_partition_table(): Disk read failed.
[  347.520069][   T13] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  347.524462][T18853] Dev nbd1: unable to read RDB block 0
[  347.534084][T18853]  nbd1: unable to read partition table
[  347.555099][T18853] 
[  347.556140][T18853] ======================================================
[  347.558975][T18853] WARNING: possible circular locking dependency detected
[  347.561831][T18853] syzkaller #0 Not tainted
[  347.563869][T18853] ------------------------------------------------------
[  347.566689][T18853] udevd/18853 is trying to acquire lock:
[  347.568875][T18853] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  347.572874][T18853] 
[  347.572874][T18853] but task is already holding lock:
[  347.575866][T18853] ffffffff901760e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  347.580166][T18853] 
[  347.580166][T18853] which lock already depends on the new lock.
[  347.580166][T18853] 
[  347.584395][T18853] 
[  347.584395][T18853] the existing dependency chain (in reverse order) is:
[  347.587953][T18853] 
[  347.587953][T18853] -> #9 (uevent_sock_mutex){+.+.}-{4:4}:
[  347.591094][T18853]        __mutex_lock+0x1a3/0x1550
[  347.593155][T18853]        kobject_uevent_net_broadcast+0x27e/0x560
[  347.595844][T18853]        kobject_uevent_env+0x55c/0x9e0
[  347.598143][T18853]        device_add+0x557/0xbb0
[  347.600163][T18853]        device_create+0x269/0x300
[  347.602275][T18853]        msr_device_create+0x33/0x50
[  347.604453][T18853]        cpuhp_invoke_callback+0x445/0x860
[  347.606787][T18853]        cpuhp_thread_fun+0x36b/0x780
[  347.608969][T18853]        smpboot_thread_fn+0x541/0xa50
[  347.611101][T18853]        kthread+0x388/0x470
[  347.613050][T18853]        ret_from_fork+0x514/0xb70
[  347.615132][T18853]        ret_from_fork_asm+0x1a/0x30
[  347.617299][T18853] 
[  347.617299][T18853] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[  347.620430][T18853]        cpuhp_thread_fun+0x127/0x780
[  347.622666][T18853]        smpboot_thread_fn+0x541/0xa50
[  347.624873][T18853]        kthread+0x388/0x470
[  347.626815][T18853]        ret_from_fork+0x514/0xb70
[  347.628918][T18853]        ret_from_fork_asm+0x1a/0x30
[  347.631061][T18853] 
[  347.631061][T18853] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  347.634090][T18853]        cpus_read_lock+0x42/0x160
[  347.636170][T18853]        static_key_slow_inc+0x12/0x30
[  347.638349][T18853]        ipv6_flowlabel_opt+0x1b94/0x28e0
[  347.640690][T18853]        do_ipv6_setsockopt+0xd9f/0x3150
[  347.642995][T18853]        ipv6_setsockopt+0x59/0x170
[  347.645109][T18853]        do_sock_setsockopt+0x17c/0x1b0
[  347.647353][T18853]        __x64_sys_setsockopt+0x13d/0x1b0
[  347.649728][T18853]        do_syscall_64+0x15f/0xf80
[  347.651850][T18853]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.654469][T18853] 
[  347.654469][T18853] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  347.657632][T18853]        lock_sock_nested+0x41/0x100
[  347.659821][T18853]        inet_shutdown+0x6a/0x390
[  347.661837][T18853]        nbd_mark_nsock_dead+0x2e9/0x560
[  347.664106][T18853]        sock_shutdown+0x15e/0x260
[  347.666120][T18853]        nbd_clear_sock+0x24/0x170
[  347.668200][T18853]        nbd_config_put+0x2dd/0x580
[  347.670184][T18853]        nbd_genl_connect+0x19d5/0x1cf0
[  347.672434][T18853]        genl_family_rcv_msg_doit+0x22a/0x330
[  347.674923][T18853]        genl_rcv_msg+0x61c/0x7a0
[  347.676996][T18853]        netlink_rcv_skb+0x232/0x4b0
[  347.679085][T18853]        genl_rcv+0x28/0x40
[  347.680910][T18853]        netlink_unicast+0x75c/0x8e0
[  347.683093][T18853]        netlink_sendmsg+0x813/0xb40
[  347.685299][T18853]        ____sys_sendmsg+0x972/0x9f0
[  347.687453][T18853]        ___sys_sendmsg+0x2a5/0x360
[  347.689597][T18853]        __x64_sys_sendmsg+0x1bd/0x2a0
[  347.691849][T18853]        do_syscall_64+0x15f/0xf80
[  347.693946][T18853]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.696592][T18853] 
[  347.696592][T18853] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  347.699712][T18853]        __mutex_lock+0x1a3/0x1550
[  347.701799][T18853]        nbd_queue_rq+0x37b/0x1100
[  347.703898][T18853]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  347.706441][T18853]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  347.709266][T18853]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  347.711945][T18853]        blk_mq_run_hw_queue+0x348/0x4f0
[  347.714180][T18853]        blk_mq_dispatch_list+0xd16/0xe10
[  347.716465][T18853]        blk_mq_flush_plug_list+0x48d/0x570
[  347.718888][T18853]        __blk_flush_plug+0x3ed/0x4d0
[  347.721091][T18853]        __submit_bio+0x28d/0x580
[  347.723150][T18853]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  347.725650][T18853]        block_read_full_folio+0x599/0x830
[  347.728006][T18853]        filemap_read_folio+0x137/0x3b0
[  347.730308][T18853]        do_read_cache_folio+0x358/0x590
[  347.732663][T18853]        read_part_sector+0xb6/0x2b0
[  347.734840][T18853]        adfspart_check_ICS+0xb1/0x960
[  347.737105][T18853]        bdev_disk_changed+0x817/0x1770
[  347.739382][T18853]        blkdev_get_whole+0x380/0x510
[  347.741551][T18853]        bdev_open+0x31e/0xd30
[  347.743467][T18853]        blkdev_open+0x470/0x610
[  347.745541][T18853]        do_dentry_open+0x785/0x14e0
[  347.747701][T18853]        vfs_open+0x3b/0x340
[  347.749620][T18853]        path_openat+0x2e08/0x3860
[  347.751758][T18853]        do_file_open+0x23e/0x4a0
[  347.753886][T18853]        do_sys_openat2+0x113/0x200
[  347.756029][T18853]        __x64_sys_openat+0x138/0x170
[  347.758275][T18853]        do_syscall_64+0x15f/0xf80
[  347.760388][T18853]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.763008][T18853] 
[  347.763008][T18853] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  347.765973][T18853]        __mutex_lock+0x1a3/0x1550
[  347.768111][T18853]        nbd_queue_rq+0xc6/0x1100
[  347.770193][T18853]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  347.772717][T18853]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  347.775519][T18853]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  347.778177][T18853]        blk_mq_run_hw_queue+0x348/0x4f0
[  347.780530][T18853]        blk_mq_dispatch_list+0xd16/0xe10
[  347.782896][T18853]        blk_mq_flush_plug_list+0x48d/0x570
[  347.785350][T18853]        __blk_flush_plug+0x3ed/0x4d0
[  347.787624][T18853]        __submit_bio+0x28d/0x580
[  347.789727][T18853]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  347.792297][T18853]        block_read_full_folio+0x599/0x830
[  347.794719][T18853]        filemap_read_folio+0x137/0x3b0
[  347.797048][T18853]        do_read_cache_folio+0x358/0x590
[  347.799411][T18853]        read_part_sector+0xb6/0x2b0
[  347.801619][T18853]        adfspart_check_ICS+0xb1/0x960
[  347.803864][T18853]        bdev_disk_changed+0x817/0x1770
[  347.806235][T18853]        blkdev_get_whole+0x380/0x510
[  347.808505][T18853]        bdev_open+0x31e/0xd30
[  347.810534][T18853]        blkdev_open+0x470/0x610
[  347.812584][T18853]        do_dentry_open+0x785/0x14e0
[  347.814807][T18853]        vfs_open+0x3b/0x340
[  347.816745][T18853]        path_openat+0x2e08/0x3860
[  347.818883][T18853]        do_file_open+0x23e/0x4a0
[  347.820919][T18853]        do_sys_openat2+0x113/0x200
[  347.823060][T18853]        __x64_sys_openat+0x138/0x170
[  347.825206][T18853]        do_syscall_64+0x15f/0xf80
[  347.827262][T18853]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.829991][T18853] 
[  347.829991][T18853] -> #3 (set->srcu){.+.+}-{0:0}:
[  347.832851][T18853]        __synchronize_srcu+0xca/0x300
[  347.835125][T18853]        elevator_switch+0x1e8/0x7a0
[  347.837323][T18853]        elevator_change+0x2cc/0x450
[  347.839534][T18853]        elevator_set_default+0x36c/0x430
[  347.841877][T18853]        blk_register_queue+0x3e9/0x4e0
[  347.844190][T18853]        __add_disk+0x677/0xd50
[  347.846233][T18853]        add_disk_fwnode+0xfb/0x480
[  347.848412][T18853]        nbd_dev_add+0x72c/0xb50
[  347.850460][T18853]        nbd_init+0x168/0x1f0
[  347.852305][T18853]        do_one_initcall+0x250/0x870
[  347.854544][T18853]        do_initcall_level+0x104/0x190
[  347.856828][T18853]        do_initcalls+0x59/0xa0
[  347.858852][T18853]        kernel_init_freeable+0x2a6/0x3e0
[  347.861242][T18853]        kernel_init+0x1d/0x1d0
[  347.863242][T18853]        ret_from_fork+0x514/0xb70
[  347.865436][T18853]        ret_from_fork_asm+0x1a/0x30
[  347.867618][T18853] 
[  347.867618][T18853] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  347.870712][T18853]        __mutex_lock+0x1a3/0x1550
[  347.872786][T18853]        elevator_change+0x1b3/0x450
[  347.874854][T18853]        elevator_set_none+0xb5/0x140
[  347.876978][T18853]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  347.879527][T18853]        nbd_start_device+0x17f/0xb10
[  347.881785][T18853]        nbd_genl_connect+0x165b/0x1cf0
[  347.883962][T18853]        genl_family_rcv_msg_doit+0x22a/0x330
[  347.886351][T18853]        genl_rcv_msg+0x61c/0x7a0
[  347.888488][T18853]        netlink_rcv_skb+0x232/0x4b0
[  347.890519][T18853]        genl_rcv+0x28/0x40
[  347.892345][T18853]        netlink_unicast+0x75c/0x8e0
[  347.894403][T18853]        netlink_sendmsg+0x813/0xb40
[  347.896528][T18853]        ____sys_sendmsg+0x972/0x9f0
[  347.898754][T18853]        ___sys_sendmsg+0x2a5/0x360
[  347.900924][T18853]        __x64_sys_sendmsg+0x1bd/0x2a0
[  347.903232][T18853]        do_syscall_64+0x15f/0xf80
[  347.905382][T18853]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.908025][T18853] 
[  347.908025][T18853] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  347.911521][T18853]        blk_alloc_queue+0x546/0x680
[  347.913714][T18853]        __blk_mq_alloc_disk+0x197/0x390
[  347.916014][T18853]        nbd_dev_add+0x499/0xb50
[  347.917858][T18853]        nbd_init+0x168/0x1f0
[  347.919623][T18853]        do_one_initcall+0x250/0x870
[  347.921438][T18853]        do_initcall_level+0x104/0x190
[  347.923231][T18853]        do_initcalls+0x59/0xa0
[  347.924874][T18853]        kernel_init_freeable+0x2a6/0x3e0
[  347.926672][T18853]        kernel_init+0x1d/0x1d0
[  347.928273][T18853]        ret_from_fork+0x514/0xb70
[  347.929929][T18853]        ret_from_fork_asm+0x1a/0x30
[  347.931655][T18853] 
[  347.931655][T18853] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  347.934136][T18853]        __lock_acquire+0x15a5/0x2cf0
[  347.935950][T18853]        lock_acquire+0x106/0x350
[  347.937836][T18853]        fs_reclaim_acquire+0x71/0x100
[  347.939534][T18853]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  347.941660][T18853]        __alloc_skb+0x1d0/0x7d0
[  347.943537][T18853]        alloc_uevent_skb+0x7d/0x230
[  347.945288][T18853]        kobject_uevent_net_broadcast+0x2fa/0x560
[  347.947377][T18853]        kobject_uevent_env+0x55c/0x9e0
[  347.949181][T18853]        nbd_config_put+0x14c/0x580
[  347.950864][T18853]        nbd_release+0xfe/0x140
[  347.952475][T18853]        bdev_release+0x536/0x650
[  347.954214][T18853]        blkdev_release+0x15/0x20
[  347.955923][T18853]        __fput+0x44f/0xa60
[  347.957416][T18853]        fput_close_sync+0x11f/0x240
[  347.959115][T18853]        __x64_sys_close+0x7e/0x110
[  347.960877][T18853]        do_syscall_64+0x15f/0xf80
[  347.962775][T18853]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.965127][T18853] 
[  347.965127][T18853] other info that might help us debug this:
[  347.965127][T18853] 
[  347.968345][T18853] Chain exists of:
[  347.968345][T18853]   fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex
[  347.968345][T18853] 
[  347.972593][T18853]  Possible unsafe locking scenario:
[  347.972593][T18853] 
[  347.975091][T18853]        CPU0                    CPU1
[  347.976865][T18853]        ----                    ----
[  347.978589][T18853]   lock(uevent_sock_mutex);
[  347.980092][T18853]                                lock(cpuhp_state-up);
[  347.982291][T18853]                                lock(uevent_sock_mutex);
[  347.984586][T18853]   lock(fs_reclaim);
[  347.985909][T18853] 
[  347.985909][T18853]  *** DEADLOCK ***
[  347.985909][T18853] 
[  347.988570][T18853] 3 locks held by udevd/18853:
[  347.990110][T18853]  #0: ffff88810a625350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650
[  347.993254][T18853]  #1: ffff88810a6ac260 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0
[  347.996729][T18853]  #2: ffffffff901760e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  348.000232][T18853] 
[  348.000232][T18853] stack backtrace:
[  348.002143][T18853] CPU: 1 UID: 0 PID: 18853 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  348.002158][T18853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  348.002166][T18853] Call Trace:
[  348.002173][T18853]  <TASK>
[  348.002182][T18853]  dump_stack_lvl+0xe8/0x150
[  348.002197][T18853]  print_circular_bug+0x2e1/0x300
[  348.002207][T18853]  check_noncircular+0x12e/0x150
[  348.002217][T18853]  __lock_acquire+0x15a5/0x2cf0
[  348.002225][T18853]  ? lockdep_unlock+0x5d/0xd0
[  348.002231][T18853]  ? __lock_acquire+0x146e/0x2cf0
[  348.002241][T18853]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  348.002250][T18853]  lock_acquire+0x106/0x350
[  348.002258][T18853]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  348.002267][T18853]  ? lock_acquire+0x106/0x350
[  348.002277][T18853]  fs_reclaim_acquire+0x71/0x100
[  348.002291][T18853]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  348.002305][T18853]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  348.002318][T18853]  ? __alloc_skb+0x1d0/0x7d0
[  348.002328][T18853]  ? __local_bh_enable_ip+0xd0/0x130
[  348.002336][T18853]  __alloc_skb+0x1d0/0x7d0
[  348.002347][T18853]  alloc_uevent_skb+0x7d/0x230
[  348.002388][T18853]  kobject_uevent_net_broadcast+0x2fa/0x560
[  348.002402][T18853]  kobject_uevent_env+0x55c/0x9e0
[  348.002412][T18853]  nbd_config_put+0x14c/0x580
[  348.002422][T18853]  nbd_release+0xfe/0x140
[  348.002429][T18853]  ? __pfx_nbd_release+0x10/0x10
[  348.002436][T18853]  bdev_release+0x536/0x650
[  348.002448][T18853]  ? __pfx_blkdev_release+0x10/0x10
[  348.002455][T18853]  blkdev_release+0x15/0x20
[  348.002461][T18853]  __fput+0x44f/0xa60
[  348.002471][T18853]  fput_close_sync+0x11f/0x240
[  348.002479][T18853]  ? __pfx_fput_close_sync+0x10/0x10
[  348.002488][T18853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.002495][T18853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.002502][T18853]  __x64_sys_close+0x7e/0x110
[  348.002511][T18853]  do_syscall_64+0x15f/0xf80
[  348.002520][T18853]  ? trace_irq_disable+0x3b/0x140
[  348.002531][T18853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.002539][T18853] RIP: 0033:0x7f0a82b8d0a8
[  348.002547][T18853] Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83
[  348.002553][T18853] RSP: 002b:00007ffc3e1101c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  348.002561][T18853] RAX: ffffffffffffffda RBX: 00007f0a82ab6ae0 RCX: 00007f0a82b8d0a8
[  348.002567][T18853] RDX: 0000000003938700 RSI: 000000000aba9500 RDI: 0000000000000008
[  348.002571][T18853] RBP: 000055b85168c780 R08: 0000000000000001 R09: 6c2c6db9bf8ec642
[  348.002576][T18853] R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000005
[  348.002580][T18853] R13: 000055b85167f120 R14: 0000000000000008 R15: 000055b85166c910
[  348.002588][T18853]  </TASK>
[  348.008382][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  348.200027][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  348.309838][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  348.419810][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  348.529864][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  348.639898][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  348.749903][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  348.859796][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  352.459982][ T7725] net_ratelimit: 31 callbacks suppressed
[  352.460039][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  352.569907][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  352.690255][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  352.809845][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  352.840045][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.919821][ T7725] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  353.039883][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  353.149865][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  353.259870][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
[  353.369867][ T5502] bond8: (slave ip6gretap1): failed to get link speed/duplex
