last executing test programs:

240.975331ms ago: executing program 1 (id=11740):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0)

240.638885ms ago: executing program 2 (id=11742):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000400))
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800)

181.30007ms ago: executing program 1 (id=11744):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)

180.926901ms ago: executing program 2 (id=11745):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={r3, 0x3ff}, 0x8)

180.452983ms ago: executing program 0 (id=11746):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x700, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)

180.175913ms ago: executing program 2 (id=11747):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000200081dc010000000300000002000000000000031f00000004001500"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x40084)

129.413871ms ago: executing program 0 (id=11748):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000a0000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0500340000000000100049000cac0f0002ac0f"], 0x34}}, 0x0)

129.258738ms ago: executing program 1 (id=11749):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000000)="f68ded77286c53e27a617e52862477de6a050000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

128.966508ms ago: executing program 0 (id=11750):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x0)

128.785387ms ago: executing program 2 (id=11751):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000002"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x4, 0x4, 0xc, 0x15, r0}, 0x50)

52.169141ms ago: executing program 0 (id=11752):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

52.01631ms ago: executing program 2 (id=11753):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac06, 0xfac05, 0xfac01, 0xfac06]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000)

51.874038ms ago: executing program 1 (id=11754):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x9}, @FRA_FLOW={0x8, 0xb, 0xffffffff}]}, 0x34}}, 0x0)

51.597913ms ago: executing program 2 (id=11755):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, 0x25, 0x109, 0x70bd2c, 0xfffffff9, {0x2}, [@typed={0x4, 0x3, 0x0, 0x0, @binary}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}]}, 0x20}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
shutdown(r3, 0x1)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x10001, 0x12)
sendfile(0xffffffffffffffff, r2, 0x0, 0xf03a0005)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, 0x0, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r6=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000300)={r6, 0x1}, 0x8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$int_in(r1, 0xc8d18aa2428c57fa, &(0x7f0000000100)=0x8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, 0x0, 0x4000084)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9)
sendfile(r8, r7, 0x0, 0x10000)

50.834268ms ago: executing program 0 (id=11756):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37, 0x92}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4084810}, 0x4000)

396.366µs ago: executing program 1 (id=11757):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x1f, 0x4, &(0x7f0000000400)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x80}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94)

154.267µs ago: executing program 1 (id=11758):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1b, 0x0, &(0x7f0000000100))

0s ago: executing program 0 (id=11759):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0xfffffffd, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac01}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

vxcan1): Error -95 calling set_mac_address
[  327.431337][T19531] bond11: (slave gretap2): making interface the new active one
[  327.436773][T19531] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  327.448884][T19532] macvlan0: entered promiscuous mode
[  327.452076][T19532] macvlan0: entered allmulticast mode
[  327.454765][T19533] syzkaller1: tun_chr_ioctl cmd 1074025677
[  327.457031][T19533] syzkaller1: Refused to change device type
[  327.671529][T19557] __nla_validate_parse: 3 callbacks suppressed
[  327.671544][T19557] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6005'.
[  327.842598][T19575] netlink: 'syz.2.6011': attribute type 1 has an invalid length.
[  327.857032][T19575] 8021q: adding VLAN 0 to HW filter on device bond3
[  327.951405][T19578] netlink: 'syz.1.6014': attribute type 13 has an invalid length.
[  328.392068][T19596] wg1 speed is unknown, defaulting to 1000
[  328.400033][T19596] wg1 speed is unknown, defaulting to 1000
[  328.405203][T19596] wg1 speed is unknown, defaulting to 1000
[  328.483369][T19594] block nbd1: server does not support multiple connections per device.
[  328.495815][T19594] block nbd1: shutting down sockets
[  328.513012][T19597] bridge0: port 1(vlan0) entered blocking state
[  328.515541][T19597] bridge0: port 1(vlan0) entered disabled state
[  328.518101][T19597] vlan0: entered allmulticast mode
[  328.520161][T19597] geneve0: entered allmulticast mode
[  328.526695][T19597] vlan0: entered promiscuous mode
[  328.528648][T19597] geneve0: entered promiscuous mode
[  328.591738][T19596] infiniband syz0: set down
[  328.594308][ T5910] wg1 speed is unknown, defaulting to 1000
[  328.596624][T19596] infiniband syz0: added wg1
[  328.673449][T19596] RDS/IB: syz0: added
[  328.675080][T19596] smc: adding ib device syz0 with port count 1
[  328.677571][T19596] smc:    ib device syz0 port 1 has pnetid SYZ2 (user defined)
[  328.681634][ T5910] wg1 speed is unknown, defaulting to 1000
[  328.696188][T19596] wg1 speed is unknown, defaulting to 1000
[  328.796177][T19606] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  328.798692][T19606] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  328.970799][T19596] wg1 speed is unknown, defaulting to 1000
[  329.135573][T19596] wg1 speed is unknown, defaulting to 1000
[  329.241068][T19625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  329.325198][T19629] netlink: 'syz.1.6036': attribute type 1 has an invalid length.
[  329.328901][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6035'.
[  329.372524][T19629] bond19: entered promiscuous mode
[  329.374934][T19629] 8021q: adding VLAN 0 to HW filter on device bond19
[  329.400742][T19632] syzkaller0: entered promiscuous mode
[  329.404346][T19632] syzkaller0: entered allmulticast mode
[  329.415031][T19629] macvtap0: entered allmulticast mode
[  329.454010][T19629] bond19: (slave bridge11): making interface the new active one
[  329.456496][T19629] bridge11: entered promiscuous mode
[  329.459925][T19629] bond19: (slave bridge11): Enslaving as an active interface with an up link
[  329.883332][T19665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6050'.
[  329.886004][T19665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6050'.
[  329.889757][T19665] syzkaller0: entered promiscuous mode
[  329.891407][T19665] syzkaller0: entered allmulticast mode
[  330.197414][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6058'.
[  330.445791][T19693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6064'.
[  330.637337][T19728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  330.670189][T19734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6084'.
[  330.738040][T19741] netlink: 'syz.2.6086': attribute type 1 has an invalid length.
[  330.786121][T19741] bond4: (slave geneve4): making interface the new active one
[  330.794240][T19741] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  330.799263][T12956] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  330.801799][T12956] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  330.811022][T12956] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  330.820825][T12956] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  330.827229][T19741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6086'.
[  330.839002][T19741] 8021q: adding VLAN 0 to HW filter on device bond4
[  330.896805][T19741] tipc: Resetting bearer <eth:syzkaller0>
[  331.398590][T19793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6110'.
[  331.504080][T19805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6116'.
[  331.507232][T19805] netlink: 'syz.2.6116': attribute type 5 has an invalid length.
[  331.518262][T19805] geneve5: entered promiscuous mode
[  331.520080][T19805] geneve5: entered allmulticast mode
[  331.523126][ T5667] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  331.525946][ T5667] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  331.528836][ T5667] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  331.532956][ T5667] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  332.074132][T19849] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  332.234566][T11341] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  332.243623][T11341] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  332.249260][T11341] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  332.256924][T11341] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  332.514233][T19871] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  332.516989][T19871] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  332.519876][T19871] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  332.523352][T19871] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  332.526196][T19871] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  332.529069][T19871] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  332.531911][T19871] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  332.535888][T19871] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  332.538877][T19871] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  332.543335][T19871] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  332.844565][T19886] veth0_macvtap: left promiscuous mode
[  333.277582][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811614a000: rx timeout, send abort
[  333.781945][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811614a000: abort rx timeout. Force session deactivation
[  333.951222][T19954] xt_nfacct: accounting object `syz0' does not exist
[  334.217556][T19990] __nla_validate_parse: 3 callbacks suppressed
[  334.217572][T19990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6193'.
[  334.230906][T19993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6195'.
[  334.234246][T19993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6195'.
[  334.377690][T20005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6199'.
[  334.381023][T20005] netlink: 'syz.1.6199': attribute type 1 has an invalid length.
[  334.385652][T20005] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6199'.
[  334.388855][T20005] netlink: 252 bytes leftover after parsing attributes in process `syz.1.6199'.
[  334.392189][T20005] netlink: 'syz.1.6199': attribute type 1 has an invalid length.
[  334.395624][T20005] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6199'.
[  334.538816][T20016] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6205'.
[  334.625660][T20023] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6207'.
[  335.107384][T20060] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  335.200123][T20069] lo speed is unknown, defaulting to 1000
[  335.240320][T20076] lo: Caught tx_queue_len zero misconfig
[  335.424097][T20069] wg1 speed is unknown, defaulting to 1000
[  335.526990][T20095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6239'.
[  335.872701][T20104] batman_adv: batadv0: Removing interface: macvtap1
[  336.236866][T20138] netlink: zone id is out of range
[  336.238742][T20138] netlink: zone id is out of range
[  336.240341][T20138] netlink: zone id is out of range
[  336.241866][T20138] netlink: zone id is out of range
[  336.244031][T20138] netlink: zone id is out of range
[  336.245584][T20138] netlink: zone id is out of range
[  336.247268][T20138] netlink: zone id is out of range
[  336.248754][T20138] netlink: zone id is out of range
[  336.250258][T20138] netlink: zone id is out of range
[  336.412091][T20150] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  336.851322][T20186] vti1: entered promiscuous mode
[  336.978087][T20198] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  337.061717][T20202] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  337.065091][T20202] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  337.425873][T20223] netlink: 'syz.2.6299': attribute type 3 has an invalid length.
[  337.429425][T20223] netlink: 'syz.2.6299': attribute type 2 has an invalid length.
[  338.966272][T20370] 8021q: VLANs not supported on lo
[  339.320083][T20401] __nla_validate_parse: 10 callbacks suppressed
[  339.320094][T20401] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6380'.
[  339.326089][T20401] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6380'.
[  339.398018][T20405] netlink: 'syz.0.6382': attribute type 10 has an invalid length.
[  339.797275][T20430] lo speed is unknown, defaulting to 1000
[  339.830075][T20432] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  340.166417][T20430] wg1 speed is unknown, defaulting to 1000
[  340.381045][T20458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6405'.
[  340.927128][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6419'.
[  341.008946][T20488] net_ratelimit: 338 callbacks suppressed
[  341.008957][T20488] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  341.267748][T20502] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6427'.
[  341.272083][T20502] netlink: 'syz.0.6427': attribute type 1 has an invalid length.
[  341.759185][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6435'.
[  341.763011][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6435'.
[  341.831416][T20521] netlink: 'syz.2.6436': attribute type 2 has an invalid length.
[  341.861289][T20523] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6437'.
[  341.871279][T20523] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6437'.
[  341.892062][T20523] netlink: 'syz.1.6437': attribute type 5 has an invalid length.
[  341.901088][T20523] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6437'.
[  341.979321][T20535] openvswitch: netlink: IP tunnel dst address not specified
[  342.015505][T20539] netlink: 'syz.2.6445': attribute type 11 has an invalid length.
[  342.332138][T20572] netlink: 'syz.0.6461': attribute type 10 has an invalid length.
[  342.619886][T20595] pim6reg: entered allmulticast mode
[  342.628455][T20595] pim6reg: left allmulticast mode
[  342.776897][T20606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  342.933759][T20618] syzkaller1: tun_chr_ioctl cmd 35108
[  343.225429][T20640] syzkaller0: entered promiscuous mode
[  343.235579][T20640] 0: reclassify loop, rule prio 0, protocol 700
[  343.899870][T20681] lo: entered allmulticast mode
[  343.901513][T20681] lo: left allmulticast mode
[  344.433835][T20716] netlink: 'syz.1.6522': attribute type 1 has an invalid length.
[  344.579817][T20726] __nla_validate_parse: 6 callbacks suppressed
[  344.579834][T20726] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6527'.
[  345.243991][T20724] syz.1.6526 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  345.279041][T20724] CPU: 0 UID: 0 PID: 20724 Comm: syz.1.6526 Not tainted syzkaller #0 PREEMPT(full) 
[  345.279057][T20724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  345.279063][T20724] Call Trace:
[  345.279068][T20724]  <TASK>
[  345.279073][T20724]  dump_stack_lvl+0xe8/0x150
[  345.279092][T20724]  dump_header+0xd3/0x4c0
[  345.279123][T20724]  oom_kill_process+0x3ab/0x970
[  345.279139][T20724]  out_of_memory+0x106c/0x1410
[  345.279151][T20724]  ? try_charge_memcg+0xba6/0x1560
[  345.279166][T20724]  ? __pfx___mutex_lock+0x10/0x10
[  345.279181][T20724]  ? __pfx_out_of_memory+0x10/0x10
[  345.279193][T20724]  ? do_raw_spin_unlock+0xf5/0x210
[  345.279207][T20724]  try_charge_memcg+0xc53/0x1560
[  345.279228][T20724]  ? __pfx_try_charge_memcg+0x10/0x10
[  345.279244][T20724]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  345.279258][T20724]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  345.279273][T20724]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  345.279288][T20724]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  345.279303][T20724]  __swap_cache_prepare_and_add+0xe8/0x760
[  345.279317][T20724]  ? page_rmappable_folio+0x9a/0x170
[  345.279330][T20724]  swap_cache_alloc_folio+0xf1/0x240
[  345.279342][T20724]  swap_cluster_readahead+0x369/0x690
[  345.279356][T20724]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  345.279373][T20724]  ? get_vma_policy+0x27b/0x3c0
[  345.279383][T20724]  swapin_readahead+0x196/0xc50
[  345.279396][T20724]  ? swap_table_get+0x1e/0x260
[  345.279408][T20724]  ? __pfx_swapin_readahead+0x10/0x10
[  345.279441][T20724]  ? swap_table_get+0x1e/0x260
[  345.279451][T20724]  ? swap_table_get+0x1e/0x260
[  345.279460][T20724]  ? swap_table_get+0x1e/0x260
[  345.279470][T20724]  ? swap_table_get+0x216/0x260
[  345.279481][T20724]  ? swap_cache_get_folio+0x513/0x520
[  345.279494][T20724]  do_swap_page+0x56f/0x5a20
[  345.279514][T20724]  ? do_swap_page+0x127/0x5a20
[  345.279524][T20724]  ? __pfx_do_swap_page+0x10/0x10
[  345.279533][T20724]  ? __pte_offset_map+0x1ae/0x240
[  345.279547][T20724]  ? pte_offset_map_rw_nolock+0xea/0x160
[  345.279559][T20724]  handle_mm_fault+0x12d2/0x3310
[  345.279577][T20724]  ? handle_mm_fault+0xee/0x3310
[  345.279591][T20724]  ? __pfx_handle_mm_fault+0x10/0x10
[  345.279601][T20724]  ? lock_vma_under_rcu+0x45a/0x500
[  345.279625][T20724]  do_user_addr_fault+0xa73/0x1340
[  345.279641][T20724]  ? rcu_is_watching+0x15/0xb0
[  345.279654][T20724]  ? trace_page_fault_user+0x84/0x1e0
[  345.279667][T20724]  exc_page_fault+0x6a/0xc0
[  345.279677][T20724]  asm_exc_page_fault+0x26/0x30
[  345.279686][T20724] RIP: 0033:0x7f37ba59cdeb
[  345.279696][T20724] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41
[  345.279704][T20724] RSP: 002b:00007f37bb384028 EFLAGS: 00010217
[  345.279713][T20724] RAX: 000000000000000c RBX: 00007f37ba815fa0 RCX: ffffffffffffffe8
[  345.279720][T20724] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000
[  345.279725][T20724] RBP: 00007f37ba632d69 R08: 0000000000000000 R09: 0000000000000000
[  345.279731][T20724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  345.279736][T20724] R13: 00007f37ba816038 R14: 00007f37ba815fa0 R15: 00007ffc2a8cdb08
[  345.279750][T20724]  </TASK>
[  345.300048][T20763] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  345.332575][T20724] memory: usage 307200kB, limit 307200kB, failcnt 223
[  345.381911][T20763] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  345.398514][T20724] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[  345.404586][T20724] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  345.408857][T20724] Memory cgroup stats for /syz1:
[  345.409309][T20724] cache 0
[  345.418240][T20724] rss 0
[  345.419357][T20724] rss_huge 0
[  345.420606][T20724] shmem 0
[  345.421721][T20724] mapped_file 0
[  345.427738][T20724] dirty 0
[  345.428964][T20724] writeback 0
[  345.432215][T20724] workingset_refault_anon 0
[  345.437598][T20767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6546'.
[  345.440867][T20724] workingset_refault_file 0
[  345.443947][T20724] swap 192512
[  345.445706][T20724] swapcached 196608
[  345.448865][T20724] pgpgin 171031
[  345.450209][T20724] pgpgout 171031
[  345.457932][T20724] pgfault 374538
[  345.459429][T20724] pgmajfault 0
[  345.462310][T20724] inactive_anon 0
[  345.464173][T20724] active_anon 0
[  345.465562][T20724] inactive_file 0
[  345.468451][T20724] active_file 0
[  345.469825][T20724] unevictable 0
[  345.475088][T20724] hierarchical_memory_limit 314572800
[  345.477506][T20724] hierarchical_memsw_limit 9223372036854771712
[  345.479810][T20724] total_cache 0
[  345.481098][T20724] total_rss 0
[  345.489471][T20724] total_rss_huge 0
[  345.492625][T20724] total_shmem 0
[  345.494005][T20724] total_mapped_file 0
[  345.497514][T20724] total_dirty 0
[  345.498812][T20724] total_writeback 0
[  345.504654][T20724] total_workingset_refault_anon 0
[  345.507655][T20724] total_workingset_refault_file 0
[  345.517770][T20724] total_swap 192512
[  345.521281][T20724] total_swapcached 196608
[  345.526637][T20724] total_pgpgin 171034
[  345.531273][T20724] total_pgpgout 171034
[  345.537191][T20724] total_pgfault 374554
[  345.543194][T20724] total_pgmajfault 0
[  345.547481][T20724] total_inactive_anon 0
[  345.552007][T20724] total_active_anon 0
[  345.558526][T20724] total_inactive_file 0
[  345.564902][T20724] total_active_file 0
[  345.568084][T20724] total_unevictable 0
[  345.572799][T20724] anon_cost 0
[  345.574217][T20724] file_cost 0
[  345.584824][T20724] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6526,pid=20723,uid=0
[  345.601296][T20724] Memory cgroup out of memory: Killed process 20723 (syz.1.6526) total-vm:104340kB, anon-rss:1252kB, file-rss:22548kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  345.692866][T20769] tipc: Resetting bearer <eth:syzkaller0>
[  345.929445][T20783] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  346.089892][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6556'.
[  346.886144][T20845] pimreg9: entered allmulticast mode
[  346.929345][T20846] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6582'.
[  347.559492][T20857] netlink: 'syz.2.6588': attribute type 3 has an invalid length.
[  347.562419][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6588'.
[  347.671662][T20860] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  347.833363][T20879] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  347.858569][T20868] netlink: 'syz.0.6591': attribute type 39 has an invalid length.
[  347.910455][T20885] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  347.913676][T20885] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  348.240882][T20913] netlink: 'syz.2.6612': attribute type 83 has an invalid length.
[  348.516715][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6623'.
[  348.519865][T20935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6623'.
[  348.523257][T20935] netlink: 'syz.1.6623': attribute type 5 has an invalid length.
[  348.526074][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6623'.
[  348.529010][T20935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6623'.
[  348.531969][T20935] netlink: 'syz.1.6623': attribute type 5 has an invalid length.
[  348.720815][T20948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6629'.
[  349.203070][T20980] lo speed is unknown, defaulting to 1000
[  349.483525][T20980] wg1 speed is unknown, defaulting to 1000
[  350.751924][T21050] bond13: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  350.774418][T21050] bond13 (unregistering): Released all slaves
[  351.985647][T21089] netlink: 'syz.1.6693': attribute type 1 has an invalid length.
[  352.051007][T21089] 8021q: adding VLAN 0 to HW filter on device bond21
[  352.075195][T21093] vlan3: entered allmulticast mode
[  352.078368][T21093] bond21: entered allmulticast mode
[  352.313942][T21111] __nla_validate_parse: 1 callbacks suppressed
[  352.313955][T21111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6702'.
[  352.370546][T21115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6704'.
[  352.432772][T21117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6704'.
[  352.437069][T21117] nbd: nbd64 already in use
[  352.930106][T21150] netlink: 'syz.0.6717': attribute type 16 has an invalid length.
[  352.981007][T21152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6718'.
[  353.314493][T21164] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6724'.
[  353.679522][T21186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6735'.
[  354.210064][T21243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6760'.
[  354.313920][T21253] syzkaller0: entered promiscuous mode
[  354.316061][T21253] syzkaller0: entered allmulticast mode
[  354.423030][T21263] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  354.426934][T21263] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  354.431463][T21263] netlink: 'syz.2.6770': attribute type 2 has an invalid length.
[  354.506347][T21272] hmac(sha2: entered promiscuous mode
[  354.587802][T21281] netlink: 'syz.0.6779': attribute type 142 has an invalid length.
[  354.604501][T21283] netlink: 'syz.2.6780': attribute type 1 has an invalid length.
[  354.616115][T21283] netlink: 'syz.2.6780': attribute type 2 has an invalid length.
[  354.676186][T21291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6784'.
[  354.679676][T21291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6784'.
[  354.915997][T21307] netlink: 'syz.2.6791': attribute type 1 has an invalid length.
[  354.920104][T21307] netlink: 'syz.2.6791': attribute type 1 has an invalid length.
[  355.526855][T21332] netlink: 'syz.2.6802': attribute type 4 has an invalid length.
[  355.566424][T21332] netlink: 'syz.2.6802': attribute type 4 has an invalid length.
[  355.627150][T21338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.675994][T21342] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  355.742191][T21346] xt_hashlimit: size too large, truncated to 1048576
[  355.858633][T21348] bridge0: port 1(vlan1) entered disabled state
[  355.886776][T21348] macsec0: left promiscuous mode
[  355.893006][T21348] macsec0: left allmulticast mode
[  355.921145][T21348] erspan1: left promiscuous mode
[  355.923888][T21348] erspan1: left allmulticast mode
[  355.929078][T21348] bond2: left promiscuous mode
[  355.930972][T21348] ip6gre1: left promiscuous mode
[  355.941354][T21348] bond3: left promiscuous mode
[  355.944016][T21348] bridge0: left promiscuous mode
[  355.950451][T21348] tipc: Resetting bearer <eth:ipvlan0>
[  355.961060][T21348] bond4: left promiscuous mode
[  355.963673][T21348] team_slave_1: left promiscuous mode
[  355.966053][T21348] bond4: left allmulticast mode
[  355.968009][T21348] team_slave_1: left allmulticast mode
[  355.971344][T21348] bond5: left promiscuous mode
[  355.973853][T21348] bridge4: left promiscuous mode
[  355.976059][T21348] bond5: left allmulticast mode
[  355.978071][T21348] bridge4: left allmulticast mode
[  355.986950][T21348] bond6: left promiscuous mode
[  355.988910][T21348] wireguard0: left promiscuous mode
[  355.996020][T21348] bond7: left promiscuous mode
[  355.997923][T21348] bridge5: left promiscuous mode
[  356.002020][T21348] ipvlan2: left allmulticast mode
[  356.008377][T21348] bond8: left promiscuous mode
[  356.010344][T21348] bridge6: left promiscuous mode
[  356.018372][T21348] vlan2: left allmulticast mode
[  356.020304][T21348] bond8: left allmulticast mode
[  356.022149][T21348] bridge6: left allmulticast mode
[  356.033848][T21348] veth11: left allmulticast mode
[  356.044157][T21348] bond14: left promiscuous mode
[  356.046250][T21348] ip6gretap0: left allmulticast mode
[  356.048628][T21348] ip6tnl2: left allmulticast mode
[  356.057590][T21348] bond16: left allmulticast mode
[  356.064011][T21348] bond19: left promiscuous mode
[  356.065849][T21348] bridge11: left promiscuous mode
[  356.069954][T21348] macvtap0: left allmulticast mode
[  356.077419][T21348] vlan3: left allmulticast mode
[  356.079361][T21348] bond21: left allmulticast mode
[  356.085901][T12956] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  356.090236][T12956] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  356.106691][T12956] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  356.113973][T12956] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  356.118767][T21357] pim6reg1: entered promiscuous mode
[  356.122980][T21357] pim6reg1: entered allmulticast mode
[  356.323394][T21366] bond5: entered promiscuous mode
[  356.325825][T21366] 8021q: adding VLAN 0 to HW filter on device bond5
[  356.350567][T21366] 8021q: adding VLAN 0 to HW filter on device bond5
[  356.353977][T21366] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[  356.357858][T21366] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  356.372502][T21366] bond5: (slave wireguard0): making interface the new active one
[  356.375519][T21366] wireguard0: entered promiscuous mode
[  356.379103][T21366] bond5: (slave wireguard0): Enslaving as an active interface with an up link
[  356.574989][T21381] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  356.619752][T21386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6823'.
[  356.939533][T21407] veth0_macvtap: Caught tx_queue_len zero misconfig
[  357.465565][T21423] pim6reg1: entered promiscuous mode
[  357.467466][T21423] pim6reg1: entered allmulticast mode
[  357.730464][T21431] validate_nla: 2 callbacks suppressed
[  357.730475][T21431] netlink: 'syz.2.6842': attribute type 1 has an invalid length.
[  357.767405][T21433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6843'.
[  357.797864][T21435] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  358.160779][T21453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.551311][T21485] syzkaller0: entered promiscuous mode
[  358.556474][T21485] syzkaller0: entered allmulticast mode
[  358.581529][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6868'.
[  358.604935][T21487] netlink: 'syz.0.6868': attribute type 1 has an invalid length.
[  358.610961][T21487] netlink: 'syz.0.6868': attribute type 2 has an invalid length.
[  358.650776][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6869'.
[  358.810534][T21498] lo speed is unknown, defaulting to 1000
[  359.037827][T21518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6879'.
[  359.048332][T21518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6879'.
[  359.072593][T21498] wg1 speed is unknown, defaulting to 1000
[  359.134484][T21524] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  359.384670][T21541] lo speed is unknown, defaulting to 1000
[  359.402145][T21539] syzkaller1: entered promiscuous mode
[  359.413070][T21539] syzkaller1: entered allmulticast mode
[  360.604897][T21567] gre2: entered promiscuous mode
[  360.611285][T21541] wg1 speed is unknown, defaulting to 1000
[  361.601865][T21619] openvswitch: netlink: IP tunnel TTL not specified.
[  361.714765][T21623] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6922'.
[  361.816883][T21630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  361.901415][T21637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6930'.
[  361.905187][T21637] netlink: 'syz.1.6930': attribute type 30 has an invalid length.
[  361.908066][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6930'.
[  361.971320][T21643] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  362.045262][T21650] rdma_op ffff8881b2ec61f0 conn xmit_rdma 0000000000000000
[  362.068919][T21654] netlink: 'syz.2.6938': attribute type 1 has an invalid length.
[  362.146925][T21654] 8021q: adding VLAN 0 to HW filter on device bond7
[  362.149897][T21654] bond6: (slave bond7): making interface the new active one
[  362.158946][T21654] bond6: (slave bond7): Enslaving as an active interface with an up link
[  362.174512][T21654] bond6: (slave gretap2): Enslaving as a backup interface with an up link
[  362.188052][T21654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6938'.
[  362.193754][T21654] 8021q: adding VLAN 0 to HW filter on device bond6
[  363.524719][T21720] netlink: 'syz.0.6965': attribute type 1 has an invalid length.
[  363.527163][T21720] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6965'.
[  363.568070][T21722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6966'.
[  363.570702][T21722] netlink: 'syz.0.6966': attribute type 1 has an invalid length.
[  363.573997][T21722] netlink: 568 bytes leftover after parsing attributes in process `syz.0.6966'.
[  363.671117][T21726] bond13: Unable to set peer notification delay as MII monitoring is disabled
[  363.685120][T21726] bond13 (unregistering): Released all slaves
[  364.017935][ T5870] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  364.032178][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  364.032192][ T5870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.032198][ T5870] Call Trace:
[  364.032203][ T5870]  <TASK>
[  364.032207][ T5870]  dump_stack_lvl+0xe8/0x150
[  364.032238][ T5870]  dump_header+0xd3/0x4c0
[  364.032252][ T5870]  oom_kill_process+0x3ab/0x970
[  364.032268][ T5870]  out_of_memory+0x106c/0x1410
[  364.032280][ T5870]  ? try_charge_memcg+0xba6/0x1560
[  364.032295][ T5870]  ? __pfx___mutex_lock+0x10/0x10
[  364.032310][ T5870]  ? __pfx_out_of_memory+0x10/0x10
[  364.032320][ T5870]  ? do_raw_spin_unlock+0xf5/0x210
[  364.032334][ T5870]  try_charge_memcg+0xc53/0x1560
[  364.032355][ T5870]  ? __pfx_try_charge_memcg+0x10/0x10
[  364.032371][ T5870]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  364.032384][ T5870]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  364.032399][ T5870]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  364.032413][ T5870]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  364.032427][ T5870]  __swap_cache_prepare_and_add+0xe8/0x760
[  364.032441][ T5870]  ? page_rmappable_folio+0x9a/0x170
[  364.032454][ T5870]  swap_cache_alloc_folio+0xf1/0x240
[  364.032466][ T5870]  swap_cluster_readahead+0x369/0x690
[  364.032480][ T5870]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  364.032497][ T5870]  ? get_vma_policy+0x27b/0x3c0
[  364.032512][ T5870]  swapin_readahead+0x196/0xc50
[  364.032525][ T5870]  ? swap_table_get+0x1e/0x260
[  364.032537][ T5870]  ? __pfx_swapin_readahead+0x10/0x10
[  364.032548][ T5870]  ? swap_table_get+0x1e/0x260
[  364.032558][ T5870]  ? swap_table_get+0x1e/0x260
[  364.032567][ T5870]  ? swap_table_get+0x1e/0x260
[  364.032577][ T5870]  ? swap_table_get+0x216/0x260
[  364.032587][ T5870]  ? swap_cache_get_folio+0x513/0x520
[  364.032600][ T5870]  do_swap_page+0x56f/0x5a20
[  364.032620][ T5870]  ? do_swap_page+0x127/0x5a20
[  364.032630][ T5870]  ? __pfx_do_swap_page+0x10/0x10
[  364.032639][ T5870]  ? __pte_offset_map+0x1ae/0x240
[  364.032652][ T5870]  ? pte_offset_map_rw_nolock+0xea/0x160
[  364.032664][ T5870]  handle_mm_fault+0x12d2/0x3310
[  364.032681][ T5870]  ? handle_mm_fault+0xee/0x3310
[  364.032694][ T5870]  ? __pfx_handle_mm_fault+0x10/0x10
[  364.032703][ T5870]  ? lock_vma_under_rcu+0x45a/0x500
[  364.032726][ T5870]  do_user_addr_fault+0xa73/0x1340
[  364.032741][ T5870]  ? rcu_is_watching+0x15/0xb0
[  364.032753][ T5870]  ? trace_page_fault_user+0x84/0x1e0
[  364.032764][ T5870]  exc_page_fault+0x6a/0xc0
[  364.032775][ T5870]  asm_exc_page_fault+0x26/0x30
[  364.032783][ T5870] RIP: 0033:0x7f262a15d60e
[  364.032792][ T5870] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  364.032799][ T5870] RSP: 002b:00007ffe9e8286f8 EFLAGS: 00010246
[  364.032807][ T5870] RAX: 0000000000000000 RBX: 0000555577ac1500 RCX: 00007f262a15d60e
[  364.032813][ T5870] RDX: 00007ffe9e828750 RSI: 0000000000000000 RDI: 0000000000000000
[  364.032837][ T5870] RBP: 00007ffe9e8287bc R08: 0000000000000000 R09: 0000000000000000
[  364.032842][ T5870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  364.032846][ T5870] R13: 00000000000927c0 R14: 0000000000058abd R15: 00007ffe9e828810
[  364.032860][ T5870]  </TASK>
[  364.272938][ T5870] memory: usage 304860kB, limit 307200kB, failcnt 2877
[  364.275585][ T5870] memory+swap: usage 304184kB, limit 9007199254740988kB, failcnt 0
[  364.278202][ T5870] kmem: usage 302988kB, limit 9007199254740988kB, failcnt 0
[  364.280364][ T5870] Memory cgroup stats for /syz2:
[  364.280434][ T5870] cache 0
[  364.283312][ T5870] rss 0
[  364.284140][ T5870] rss_huge 0
[  364.285308][ T5870] shmem 0
[  364.286170][ T5870] mapped_file 0
[  364.287179][ T5870] dirty 0
[  364.288055][ T5870] writeback 0
[  364.289031][ T5870] workingset_refault_anon 1
[  364.290339][ T5870] workingset_refault_file 0
[  364.291646][ T5870] swap 106496
[  364.305970][ T5870] swapcached 122880
[  364.307131][ T5870] pgpgin 207520
[  364.309878][ T5870] pgpgout 207518
[  364.311007][ T5870] pgfault 451036
[  364.318567][ T5870] pgmajfault 2
[  364.319585][ T5870] inactive_anon 0
[  364.327329][ T5870] active_anon 8192
[  364.328494][ T5870] inactive_file 0
[  364.333710][ T5870] active_file 0
[  364.334818][ T5870] unevictable 0
[  364.341556][ T5870] hierarchical_memory_limit 314572800
[  364.346006][ T5870] hierarchical_memsw_limit 9223372036854771712
[  364.349636][ T5870] total_cache 0
[  364.350715][ T5870] total_rss 0
[  364.359094][ T5870] total_rss_huge 0
[  364.360278][ T5870] total_shmem 0
[  364.363290][ T5870] total_mapped_file 0
[  364.364843][ T5870] total_dirty 0
[  364.366283][ T5870] total_writeback 0
[  364.367753][ T5870] total_workingset_refault_anon 1
[  364.369843][ T5870] total_workingset_refault_file 0
[  364.371769][ T5870] total_swap 106496
[  364.374183][ T5870] total_swapcached 122880
[  364.375889][ T5870] total_pgpgin 207522
[  364.377458][ T5870] total_pgpgout 207520
[  364.378642][ T5870] total_pgfault 451058
[  364.379953][ T5870] total_pgmajfault 2
[  364.381283][ T5870] total_inactive_anon 0
[  364.384106][ T5870] total_active_anon 8192
[  364.385627][ T5870] total_inactive_file 0
[  364.387117][ T5870] total_active_file 0
[  364.388677][ T5870] total_unevictable 0
[  364.394585][ T5870] anon_cost 0
[  364.395724][ T5870] file_cost 0
[  364.396761][ T5870] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6961,pid=21711,uid=0
[  364.401212][ T5870] Memory cgroup out of memory: Killed process 21711 (syz.2.6961) total-vm:102160kB, anon-rss:1248kB, file-rss:21584kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  364.772881][T21762] netlink: 'syz.0.6974': attribute type 1 has an invalid length.
[  364.782212][T21763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6981'.
[  364.815872][T21763] veth1_to_team: entered promiscuous mode
[  364.822374][T21763] veth1_to_team: left promiscuous mode
[  364.926122][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6983'.
[  364.931322][T21767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6983'.
[  365.571726][T21799] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  365.701359][T21807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7000'.
[  365.851561][T21819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7005'.
[  365.919319][T21821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7006'.
[  366.110315][T21820] bridge_slave_0: left promiscuous mode
[  366.118016][T21820] xfrm0: left promiscuous mode
[  366.120049][T21820] xfrm0: left allmulticast mode
[  366.122211][T21820] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  366.125519][T21820] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  366.128528][T21820] gre1: left allmulticast mode
[  366.130747][T21820] vti0: left promiscuous mode
[  366.132981][T21820] vti0: left allmulticast mode
[  366.135020][T21820] veth3: left promiscuous mode
[  366.137120][T21820] vlan3: left allmulticast mode
[  366.139226][T21820] macvtap0: left allmulticast mode
[  366.142747][T21820] ip6gretap2: left promiscuous mode
[  366.145006][T21820] ip6erspan0: left allmulticast mode
[  366.168755][T21820] geneve5: left promiscuous mode
[  366.170317][T21820] geneve5: left allmulticast mode
[  366.173594][T21820] vti1: left promiscuous mode
[  366.207348][T21820] bond5: left promiscuous mode
[  366.209230][T21820] wireguard0: left promiscuous mode
[  366.248249][T12956] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  366.260988][T12956] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  366.275489][T12956] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  366.283244][T12956] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  366.289341][T12956] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  366.301840][T12956] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  366.306267][T12956] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  366.310470][T12956] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  366.757059][T21867] syzkaller0: entered promiscuous mode
[  366.758651][T21867] syzkaller0: entered allmulticast mode
[  367.027610][T21876] netlink: 'syz.0.7028': attribute type 7 has an invalid length.
[  367.030472][T21876] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7028'.
[  367.466791][T21894] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  368.487607][T21963] netem: change failed
[  368.940151][T21994] __nla_validate_parse: 6 callbacks suppressed
[  368.940166][T21994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7084'.
[  369.072505][    C0] ip6_tnl_xmit_ctl: 240 callbacks suppressed
[  369.072539][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  369.885773][T22063] syzkaller1: tun_chr_ioctl cmd 2147767506
[  369.942059][T22069] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7119'.
[  369.950786][T22069] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7119'.
[  370.449252][T22119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7142'.
[  370.482962][T22123] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.7144'.
[  370.589887][T22133] lo speed is unknown, defaulting to 1000
[  371.018151][T22133] wg1 speed is unknown, defaulting to 1000
[  371.848516][T22172] netlink: 'syz.1.7166': attribute type 83 has an invalid length.
[  371.903060][T22169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7165'.
[  371.910338][T22169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7165'.
[  372.388713][T22203] openvswitch: netlink: IP tunnel dst address not specified
[  372.507304][T22209] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7182'.
[  372.739914][T22225] xt_l2tp: invalid flags combination: 0
[  372.762668][T22223] syzkaller0: entered promiscuous mode
[  372.764367][T22223] syzkaller0: entered allmulticast mode
[  373.901542][T22239] "syz.1.7195" (22239) uses obsolete ecb(arc4) skcipher
[  375.040543][T22266] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.046916][T22266] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  375.049678][T22266] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  375.300799][T22282] netlink: 'syz.1.7213': attribute type 1 has an invalid length.
[  375.327008][T22282] bond22: entered promiscuous mode
[  375.328940][T22282] bond22: entered allmulticast mode
[  375.331212][T22282] 8021q: adding VLAN 0 to HW filter on device bond22
[  375.347930][T22282] macvlan0: entered promiscuous mode
[  375.349945][T22282] macvlan0: entered allmulticast mode
[  375.358058][T22282] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  375.477922][T22292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7217'.
[  375.748227][T22303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.171669][T22334] lo speed is unknown, defaulting to 1000
[  376.264099][T22338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7236'.
[  376.425962][T22334] wg1 speed is unknown, defaulting to 1000
[  376.561316][T22356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7245'.
[  376.621872][T22356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7245'.
[  377.197057][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7264'.
[  377.200571][T22397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7264'.
[  377.205441][T22397] netlink: 'syz.1.7264': attribute type 15 has an invalid length.
[  377.934426][T22440] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7283'.
[  377.947653][T22440] openvswitch: netlink: EtherType 0 is less than min 600
[  378.115997][T22459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7292'.
[  378.216145][T22467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7296'.
[  378.254740][T22470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7297'.
[  378.273464][T22472] tap0: tun_chr_ioctl cmd 2147767521
[  378.390926][T22490] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  379.463356][T22513] hsr_slave_0: left promiscuous mode
[  379.466350][T22513] hsr_slave_1: left promiscuous mode
[  379.474035][T22513] hsr0 (unregistering): left allmulticast mode
[  379.478910][T22513] hsr0 (unregistering): left promiscuous mode
[  379.481323][T22513] bridge0: port 3(hsr0) entered disabled state
[  379.775732][T22543] netlink: 'syz.0.7333': attribute type 4 has an invalid length.
[  379.780120][T22543] netlink: 'syz.0.7333': attribute type 4 has an invalid length.
[  379.806129][T22546] ip6tnl0: Caught tx_queue_len zero misconfig
[  379.875100][T22553] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  380.054942][T22568] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  380.208739][T22584] netlink: 'syz.0.7353': attribute type 2 has an invalid length.
[  380.592890][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.876997][T22630] __nla_validate_parse: 5 callbacks suppressed
[  380.877008][T22630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7375'.
[  381.457183][T22671] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  382.330230][T22715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7413'.
[  382.373548][T22717] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7414'.
[  382.457389][T22721] sctp: [Deprecated]: syz.1.7416 (pid 22721) Use of int in max_burst socket option.
[  382.457389][T22721] Use struct sctp_assoc_value instead
[  382.758216][T22741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7426'.
[  382.925379][T22759] netlink: 'syz.0.7435': attribute type 1 has an invalid length.
[  382.927772][T22759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7435'.
[  382.946335][T22762] netlink: 'syz.2.7436': attribute type 1 has an invalid length.
[  382.949304][T22762] netlink: 'syz.2.7436': attribute type 3 has an invalid length.
[  382.952038][T22762] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7436'.
[  383.009836][T22768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7439'.
[  383.045795][T22769] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  383.051435][T22769] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  383.215999][T22784] netlink: 'syz.0.7445': attribute type 1 has an invalid length.
[  383.218598][T22784] netlink: 264 bytes leftover after parsing attributes in process `syz.0.7445'.
[  383.221634][T22784] netlink: 'syz.0.7445': attribute type 1 has an invalid length.
[  383.224006][T22784] netlink: 264 bytes leftover after parsing attributes in process `syz.0.7445'.
[  383.294525][T22788] syzkaller0: entered promiscuous mode
[  383.296672][T22788] syzkaller0: entered allmulticast mode
[  383.444476][T22792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7449'.
[  383.630525][T22802] netlink: 'syz.0.7454': attribute type 9 has an invalid length.
[  383.635244][T22802] netlink: 'syz.0.7454': attribute type 11 has an invalid length.
[  383.897746][T22819] syzkaller0: entered promiscuous mode
[  383.902003][T22819] syzkaller0: entered allmulticast mode
[  383.918727][T22819] tc action pedit 'at' offset 8666 out of bounds
[  383.920998][T22819] tc action pedit 'at' offset 8666 out of bounds
[  383.924366][T22819] tc action pedit 'at' offset 8666 out of bounds
[  383.926483][T22819] tc action pedit 'at' offset 8666 out of bounds
[  383.928652][T22819] tc action pedit 'at' offset 8666 out of bounds
[  383.930869][T22819] tc action pedit 'at' offset 8666 out of bounds
[  383.932927][T22819] tc action pedit 'at' offset 8666 out of bounds
[  383.935005][T22819] tc action pedit 'at' offset 8666 out of bounds
[  383.937007][T22819] tc action pedit 'at' offset 8666 out of bounds
[  383.938997][T22819] tc action pedit 'at' offset 8666 out of bounds
[  383.940800][T22819] TC_ACT_REPEAT abuse ?
[  384.511637][T22818] syz.0.7462 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  384.515961][T22818] CPU: 1 UID: 0 PID: 22818 Comm: syz.0.7462 Not tainted syzkaller #0 PREEMPT(full) 
[  384.515984][T22818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  384.515993][T22818] Call Trace:
[  384.515999][T22818]  <TASK>
[  384.516006][T22818]  dump_stack_lvl+0xe8/0x150
[  384.516034][T22818]  dump_header+0xd3/0x4c0
[  384.516054][T22818]  oom_kill_process+0x3ab/0x970
[  384.516106][T22818]  out_of_memory+0x106c/0x1410
[  384.516142][T22818]  ? try_charge_memcg+0xba6/0x1560
[  384.516166][T22818]  ? __pfx___mutex_lock+0x10/0x10
[  384.516191][T22818]  ? __pfx_out_of_memory+0x10/0x10
[  384.516209][T22818]  ? do_raw_spin_unlock+0xf5/0x210
[  384.516235][T22818]  try_charge_memcg+0xc53/0x1560
[  384.516272][T22818]  ? __pfx_try_charge_memcg+0x10/0x10
[  384.516300][T22818]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  384.516324][T22818]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  384.516350][T22818]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  384.516375][T22818]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  384.516400][T22818]  __swap_cache_prepare_and_add+0xe8/0x760
[  384.516425][T22818]  ? page_rmappable_folio+0x9a/0x170
[  384.516447][T22818]  swap_cache_alloc_folio+0xf1/0x240
[  384.516470][T22818]  swap_cluster_readahead+0x369/0x690
[  384.516494][T22818]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  384.516531][T22818]  ? get_vma_policy+0x27b/0x3c0
[  384.516550][T22818]  swapin_readahead+0x196/0xc50
[  384.516572][T22818]  ? swap_table_get+0x1e/0x260
[  384.516594][T22818]  ? __pfx_swapin_readahead+0x10/0x10
[  384.516614][T22818]  ? swap_table_get+0x1e/0x260
[  384.516632][T22818]  ? swap_table_get+0x1e/0x260
[  384.516646][T22818]  ? swap_table_get+0x1e/0x260
[  384.516664][T22818]  ? swap_table_get+0x216/0x260
[  384.516682][T22818]  ? swap_cache_get_folio+0x513/0x520
[  384.516705][T22818]  do_swap_page+0x56f/0x5a20
[  384.516741][T22818]  ? do_swap_page+0x127/0x5a20
[  384.516757][T22818]  ? __pfx_do_swap_page+0x10/0x10
[  384.516773][T22818]  ? __pte_offset_map+0x1ae/0x240
[  384.516794][T22818]  ? pte_offset_map_rw_nolock+0xea/0x160
[  384.516816][T22818]  handle_mm_fault+0x12d2/0x3310
[  384.516846][T22818]  ? handle_mm_fault+0xee/0x3310
[  384.516871][T22818]  ? __pfx_handle_mm_fault+0x10/0x10
[  384.516889][T22818]  ? lock_vma_under_rcu+0x45a/0x500
[  384.516930][T22818]  do_user_addr_fault+0xa73/0x1340
[  384.516973][T22818]  ? rcu_is_watching+0x15/0xb0
[  384.516996][T22818]  ? trace_page_fault_user+0x84/0x1e0
[  384.517018][T22818]  exc_page_fault+0x6a/0xc0
[  384.517036][T22818]  asm_exc_page_fault+0x26/0x30
[  384.517051][T22818] RIP: 0033:0x7f7646357f14
[  384.517087][T22818] Code: 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ae 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c <41> 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20
[  384.517102][T22818] RSP: 002b:00007fff2f542790 EFLAGS: 00010246
[  384.517115][T22818] RAX: 0000000000000000 RBX: 000055557ac47500 RCX: 0000000000000000
[  384.517126][T22818] RDX: 00007fff2f5427d0 RSI: 0000000000000000 RDI: 0000000000000000
[  384.517135][T22818] RBP: 00007f7646617da0 R08: 0000000000000000 R09: 0000000000000000
[  384.517143][T22818] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005de44
[  384.517153][T22818] R13: 00007f7646615fac R14: 000000000005db35 R15: 00007fff2f542900
[  384.517178][T22818]  </TASK>
[  384.517368][T22818] memory: usage 307200kB, limit 307200kB, failcnt 3797
[  384.630123][T22818] memory+swap: usage 307276kB, limit 9007199254740988kB, failcnt 0
[  384.633238][T22818] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0
[  384.635777][T22818] Memory cgroup stats for /syz0:
[  384.635876][T22818] cache 0
[  384.638601][T22818] rss 0
[  384.639595][T22818] rss_huge 0
[  384.640803][T22818] shmem 0
[  384.641823][T22818] mapped_file 0
[  384.643726][T22818] dirty 0
[  384.644675][T22818] writeback 0
[  384.645695][T22818] workingset_refault_anon 5
[  384.647041][T22818] workingset_refault_file 0
[  384.648360][T22818] swap 77824
[  384.649272][T22818] swapcached 196608
[  384.650369][T22818] pgpgin 241359
[  384.651382][T22818] pgpgout 241339
[  384.653817][T22818] pgfault 454330
[  384.655175][T22818] pgmajfault 4
[  384.656373][T22818] inactive_anon 81920
[  384.657812][T22818] active_anon 0
[  384.659113][T22818] inactive_file 0
[  384.660390][T22818] active_file 0
[  384.661550][T22818] unevictable 0
[  384.664023][T22818] hierarchical_memory_limit 314572800
[  384.665983][T22818] hierarchical_memsw_limit 9223372036854771712
[  384.668107][T22818] total_cache 0
[  384.669338][T22818] total_rss 0
[  384.670562][T22818] total_rss_huge 0
[  384.671939][T22818] total_shmem 0
[  384.673782][T22818] total_mapped_file 0
[  384.675222][T22818] total_dirty 0
[  384.676477][T22818] total_writeback 0
[  384.677797][T22818] total_workingset_refault_anon 5
[  384.679362][T22818] total_workingset_refault_file 0
[  384.680968][T22818] total_swap 77824
[  384.682148][T22818] total_swapcached 196608
[  384.684263][T22818] total_pgpgin 241359
[  384.685622][T22818] total_pgpgout 241339
[  384.687009][T22818] total_pgfault 454336
[  384.688388][T22818] total_pgmajfault 4
[  384.689755][T22818] total_inactive_anon 81920
[  384.691084][T22818] total_active_anon 0
[  384.693009][T22818] total_inactive_file 0
[  384.694279][T22818] total_active_file 0
[  384.695446][T22818] total_unevictable 0
[  384.696590][T22818] anon_cost 0
[  384.697707][T22818] file_cost 0
[  384.698735][T22818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7462,pid=22818,uid=0
[  384.703780][T22818] Memory cgroup out of memory: Killed process 22818 (syz.0.7462) total-vm:102160kB, anon-rss:1248kB, file-rss:21584kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  385.339473][T22878] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.343254][T22878] 8021q: adding VLAN 0 to HW filter on device team0
[  385.348106][T22878] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  385.504846][T22887] syzkaller0: entered promiscuous mode
[  385.506533][T22887] syzkaller0: entered allmulticast mode
[  385.849709][T22904] netlink: 'syz.1.7498': attribute type 5 has an invalid length.
[  386.654680][T22943] __nla_validate_parse: 5 callbacks suppressed
[  386.654697][T22943] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7516'.
[  386.736786][T22949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7519'.
[  386.863244][T22959] lo speed is unknown, defaulting to 1000
[  386.896848][T22966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7522'.
[  387.270113][T22959] wg1 speed is unknown, defaulting to 1000
[  387.511971][T22979] syzkaller0: entered promiscuous mode
[  387.514122][T22979] syzkaller0: entered allmulticast mode
[  387.861675][T22995] netlink: 'syz.0.7537': attribute type 1 has an invalid length.
[  387.886864][T22995] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7537'.
[  388.940522][T23048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7559'.
[  389.005434][T23050] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7561'.
[  389.203706][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7566'.
[  389.367054][T23072] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee
[  389.430972][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7575'.
[  389.434895][T23080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7575'.
[  389.530385][T23086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7578'.
[  389.795166][T23106] x_tables: ip_tables: ah match: only valid for protocol 51
[  389.902968][T23118] veth1_to_bond: entered allmulticast mode
[  389.907956][T23118] veth1_to_bond (unregistering): left allmulticast mode
[  390.808212][T23157] netlink: 'syz.1.7610': attribute type 13 has an invalid length.
[  390.811335][T23157] netlink: 'syz.1.7610': attribute type 17 has an invalid length.
[  390.835876][T23157] erspan0: left promiscuous mode
[  390.865436][T23157] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.878833][T23157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  390.887030][    T9] lo speed is unknown, defaulting to 1000
[  390.889049][    T9] sqz0: Port: 1 Link ACTIVE
[  390.890469][    T9] lo speed is unknown, defaulting to 1000
[  390.985560][T23170] bridge0: port 1(vlan1) entered blocking state
[  390.987974][T23170] bridge0: port 1(vlan1) entered forwarding state
[  391.011290][T23170] bridge0: port 1(vlan1) entered disabled state
[  391.661649][T23231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.769996][    T9] lo speed is unknown, defaulting to 1000
[  391.770040][T23240] __nla_validate_parse: 6 callbacks suppressed
[  391.770056][T23240] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7649'.
[  391.772832][    T9] sqz0: Port: 1 Link DOWN
[  391.779340][    T9] lo speed is unknown, defaulting to 1000
[  392.572995][T23262] netlink: 'syz.0.7657': attribute type 1 has an invalid length.
[  392.575318][T23262] netlink: 'syz.0.7657': attribute type 6 has an invalid length.
[  392.578052][T23262] netlink: 'syz.0.7657': attribute type 3 has an invalid length.
[  392.618249][T23266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7659'.
[  392.653342][T23266] veth11: entered allmulticast mode
[  392.660938][T23266] bond13: (slave veth11): Enslaving as an active interface with an up link
[  392.674447][T23266] bond13 (unregistering): (slave veth11): Releasing backup interface
[  392.680051][T23266] bond13 (unregistering): Released all slaves
[  393.721265][T23294] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  396.152980][T23302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7673'.
[  396.176204][T23302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7673'.
[  396.287530][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7678'.
[  396.560232][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7688'.
[  396.590032][T23342] netlink: 'syz.1.7690': attribute type 1 has an invalid length.
[  396.621871][T23342] 8021q: adding VLAN 0 to HW filter on device bond23
[  396.651117][T23348] netlink: 'syz.0.7692': attribute type 1 has an invalid length.
[  396.659011][T23348] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7692'.
[  396.854194][T23378] netlink: 'syz.2.7707': attribute type 49 has an invalid length.
[  396.946689][T23378] ip6gretap0: entered promiscuous mode
[  396.948458][T23378] ip6gretap0: entered allmulticast mode
[  397.040061][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7713'.
[  397.043849][T23393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7713'.
[  397.048071][T23393] netlink: 'syz.2.7713': attribute type 14 has an invalid length.
[  397.052904][T23393] netlink: 'syz.2.7713': attribute type 11 has an invalid length.
[  397.283821][T23409] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  397.302442][T23409] nbd: couldn't find a device at index 2
[  397.334892][T23409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.547303][T23428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7726'.
[  397.700997][T23432] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7728'.
[  397.890704][T23443] block nbd0: NBD_DISCONNECT
[  397.892329][T23443] block nbd0: Send disconnect failed -32
[  397.894617][T23443] block nbd0: shutting down sockets
[  398.557962][T23476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7744'.
[  398.561400][T23476] veth1_to_batadv: entered allmulticast mode
[  398.600383][T23484] netlink: 'syz.1.7748': attribute type 21 has an invalid length.
[  398.604967][T23484] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7748'.
[  398.607684][T23484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7748'.
[  398.738851][T23494] IPVS: persistence engine module ip_vs_pe_ not found
[  398.748603][T23498] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  398.788823][T23502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7755'.
[  398.882393][T23514] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  398.949150][T23524] netlink: 'syz.0.7767': attribute type 1 has an invalid length.
[  398.952145][T23524] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7767'.
[  399.115932][T23543] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  399.147778][T23548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7778'.
[  399.753129][T23582] syzkaller1: entered promiscuous mode
[  399.756813][T23582] syzkaller1: entered allmulticast mode
[  400.046456][T23589] ip6tnl3: entered allmulticast mode
[  400.074990][T23592] tc_dump_action: action bad kind
[  400.845366][T23642] openvswitch: netlink: Missing key (keys=40, expected=80)
[  402.104762][T23711] xt_TCPMSS: Only works on TCP SYN packets
[  402.338808][T23728] __nla_validate_parse: 4 callbacks suppressed
[  402.338824][T23728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7858'.
[  402.437883][T23737] netlink: 'syz.2.7862': attribute type 4 has an invalid length.
[  402.447996][T23739] netlink: 'syz.1.7863': attribute type 1 has an invalid length.
[  402.516503][T23743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7865'.
[  402.519919][T23743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7865'.
[  402.524173][T23743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7865'.
[  402.558626][T23745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7867'.
[  402.822124][T23761] netlink: 'syz.1.7873': attribute type 8 has an invalid length.
[  403.325957][T23786] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7885'.
[  403.751559][T23803] syzkaller0: entered promiscuous mode
[  403.761225][T23803] syzkaller0: entered allmulticast mode
[  404.090746][T23828] xt_cluster: node mask cannot exceed total number of nodes
[  404.137808][T23830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7906'.
[  404.264581][T23834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.267490][T23834] d: renamed from syzkaller0
[  404.268075][   T55] block nbd0: Receive control failed (result -32)
[  404.270667][T23835] block nbd0: Receive control failed (result -32)
[  404.276371][T23834] tipc: Disabling bearer <eth:syzkaller0>
[  404.569053][T23860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7920'.
[  404.736295][T23868] netlink: 'syz.2.7923': attribute type 32 has an invalid length.
[  404.957552][T23878] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.968199][T23878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  404.975948][ T5741] lo speed is unknown, defaulting to 1000
[  404.978440][ T5741] sqz0: Port: 1 Link ACTIVE
[  404.984637][ T5741] lo speed is unknown, defaulting to 1000
[  405.408462][T23901] netlink: 'syz.0.7937': attribute type 1 has an invalid length.
[  405.637931][T23913] IPv6: sit2: Disabled Multicast RS
[  405.953834][T23932] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.7952'.
[  406.280799][T23955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  406.372798][T23963] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7967'.
[  406.757976][   T33] audit: type=1800 audit(1778259377.575:7): pid=23976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7972" name="memory.events" dev="tmpfs" ino=13991 res=0 errno=0
[  408.635477][T24113] netlink: 'syz.2.8031': attribute type 1 has an invalid length.
[  408.801814][T24126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8037'.
[  409.399554][T24165] netlink: 312 bytes leftover after parsing attributes in process `syz.0.8056'.
[  409.402568][T24165] netlink: 'syz.0.8056': attribute type 1 has an invalid length.
[  409.441307][T24165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8056'.
[  409.496814][T24173] geneve5: entered promiscuous mode
[  409.499144][T12956] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.501760][T12956] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.504928][T12956] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.507380][T12956] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.575173][T24177] tcf_pedit_act: 22 callbacks suppressed
[  409.575184][T24177] tc action pedit 'at' offset 6 out of bounds
[  409.697960][T24192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8067'.
[  409.702144][T24192] netlink: 121 bytes leftover after parsing attributes in process `syz.0.8067'.
[  410.098834][T24227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8084'.
[  410.337334][T24247] netlink: 'syz.2.8094': attribute type 6 has an invalid length.
[  410.718314][T24282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8110'.
[  411.271215][T24315] netlink: 'syz.0.8125': attribute type 11 has an invalid length.
[  411.347887][T24320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8128'.
[  411.584189][T24334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8133'.
[  411.587319][T24334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8133'.
[  411.638878][T24339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  411.779791][T24347] pim6reg1: entered allmulticast mode
[  412.010491][T24361] batman_adv: batadv0: Adding interface: veth13
[  412.013130][T24361] batman_adv: batadv0: The MTU of interface veth13 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.021066][T24361] batman_adv: batadv0: Interface activated: veth13
[  412.986358][T24429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.055072][T24435] netlink: 'syz.0.8178': attribute type 32 has an invalid length.
[  413.285989][T24452] netlink: 'syz.1.8180': attribute type 49 has an invalid length.
[  413.363094][T24457] netlink: 'syz.0.8184': attribute type 3 has an invalid length.
[  413.648564][T24470] syzkaller1: entered promiscuous mode
[  413.650723][T24470] syzkaller1: entered allmulticast mode
[  413.896799][T24488] __nla_validate_parse: 8 callbacks suppressed
[  413.896816][T24488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8198'.
[  413.958516][T24491] syzkaller0: entered promiscuous mode
[  413.960284][T24491] syzkaller0: entered allmulticast mode
[  414.096224][T24503] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8205'.
[  414.150492][T24509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8208'.
[  414.224993][T24513] batman_adv: batadv0: Interface deactivated: veth13
[  414.273464][T24522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8214'.
[  414.417010][T24536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8220'.
[  414.422128][T24536] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8220'.
[  414.428554][T24536] xt_hashlimit: size too large, truncated to 1048576
[  414.483222][T24542] : renamed from dummy0 (while UP)
[  414.527176][T24545] block nbd1: Unsupported socket: should be TCP or UNIX.
[  414.868904][T24585] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8241'.
[  415.200862][T24617] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8257'.
[  415.368033][T24632] netlink: 'syz.2.8264': attribute type 1 has an invalid length.
[  415.412167][T24632] 8021q: adding VLAN 0 to HW filter on device bond9
[  415.454122][T24632] bond9: (slave veth15): Enslaving as an active interface with a down link
[  415.482408][T24632] bond9: (slave veth17): Enslaving as an active interface with a down link
[  415.485103][T24639] lo speed is unknown, defaulting to 1000
[  415.495887][T24632] bond9: entered allmulticast mode
[  415.862120][T24639] wg1 speed is unknown, defaulting to 1000
[  415.918528][T24669] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8279'.
[  416.253684][T24686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8287'.
[  416.298900][T24686] bond0: entered promiscuous mode
[  416.306680][T24686] bridge7: port 1(bond0) entered blocking state
[  416.316209][T24686] bridge7: port 1(bond0) entered disabled state
[  416.322870][T24686] bond0: entered allmulticast mode
[  416.790739][T24717] bond0: (slave ): Releasing backup interface
[  416.806499][T24717] bond0: (slave bond_slave_0): Releasing backup interface
[  416.813541][T24717] bond4: (slave team_slave_1): Releasing backup interface
[  416.818685][T24717] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  416.965860][T24739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.174504][T24759] bond10 (unregistering): Released all slaves
[  417.336452][T24781] ipt_REJECT: ECHOREPLY no longer supported.
[  417.842095][T24820] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  417.852667][T24820] bond10 (unregistering): Released all slaves
[  418.098300][T24841] sctp: [Deprecated]: syz.0.8358 (pid 24841) Use of int in maxseg socket option.
[  418.098300][T24841] Use struct sctp_assoc_value instead
[  418.469290][T24877] syzkaller0: entered promiscuous mode
[  418.470996][T24877] syzkaller0: entered allmulticast mode
[  418.664488][T24888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.677114][T24888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.750903][T24899] netlink: 'syz.2.8385': attribute type 4 has an invalid length.
[  418.853276][T24910] IPVS: dh: TCP 172.20.20.170:0 - no destination available
[  419.327395][T24944] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004
[  419.424754][T24950] __nla_validate_parse: 10 callbacks suppressed
[  419.424766][T24950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8406'.
[  419.586843][T24966] syzkaller1: entered promiscuous mode
[  419.588933][T24966] syzkaller1: entered allmulticast mode
[  419.593275][T24966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8413'.
[  419.885450][T24993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8425'.
[  419.891451][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8424'.
[  419.904336][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8424'.
[  419.957876][T24998] netlink: 'syz.1.8428': attribute type 3 has an invalid length.
[  419.966216][T24998] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8428'.
[  420.139132][T25007] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8433'.
[  420.280333][T25026] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  420.419662][T25038] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8446'.
[  420.484120][T25042] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8447'.
[  420.492836][T25042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  420.737400][T25064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8459'.
[  420.966929][T25088] syzkaller0: entered promiscuous mode
[  420.970703][T25088] syzkaller0: entered allmulticast mode
[  421.031509][T25090] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  421.041416][T25090] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  421.288810][T25112] ipt_REJECT: TCP_RESET invalid for non-tcp
[  422.123681][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  422.128644][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.133601][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  422.138731][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.147381][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  422.156545][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.163441][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  422.172586][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.370550][T25199] vlan4: entered promiscuous mode
[  422.372708][T25199] vlan4: entered allmulticast mode
[  422.374731][T25199] gretap0: entered allmulticast mode
[  422.583419][T25215] lo speed is unknown, defaulting to 1000
[  422.654123][T25225] netlink: 'syz.1.8526': attribute type 1 has an invalid length.
[  422.656512][T25225] netlink: 'syz.1.8526': attribute type 1 has an invalid length.
[  422.656536][T25230] netlink: 'syz.0.8528': attribute type 8 has an invalid length.
[  422.730876][T25234] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  422.853583][T25215] wg1 speed is unknown, defaulting to 1000
[  424.686847][T25368] __nla_validate_parse: 15 callbacks suppressed
[  424.686859][T25368] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8586'.
[  424.811315][T25378] netlink: 'syz.2.8592': attribute type 33 has an invalid length.
[  424.830280][T25380] xt_l2tp: missing protocol rule (udp|l2tpip)
[  425.066175][T25398] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.070277][T25398] 8021q: adding VLAN 0 to HW filter on device team0
[  425.077953][T25398] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  425.414222][T25414] netlink: 'syz.0.8609': attribute type 1 has an invalid length.
[  425.422507][T25414] netlink: 'syz.0.8609': attribute type 2 has an invalid length.
[  425.431193][T25414] netlink: 'syz.0.8609': attribute type 1 has an invalid length.
[  428.799315][T25455] syzkaller0: entered promiscuous mode
[  428.801341][T25455] syzkaller0: entered allmulticast mode
[  428.810718][T25455] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  429.125744][T25473] syzkaller0: entered promiscuous mode
[  429.127885][T25473] syzkaller0: entered allmulticast mode
[  429.137190][T25477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8633'.
[  429.320721][T25485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8637'.
[  429.347518][T25485] 8021q: adding VLAN 0 to HW filter on device bond10
[  429.788325][T25521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8651'.
[  429.803081][T25521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8651'.
[  429.927525][T25525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8653'.
[  431.177136][T25623] xfrm3: entered allmulticast mode
[  431.201415][T25627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8700'.
[  431.384427][T25645] bond0: Error: Cannot enslave bond to itself.
[  431.431116][T25649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.491591][T25706] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8738'.
[  432.907505][T25736] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  433.026757][T25744] netlink: 'syz.2.8757': attribute type 1 has an invalid length.
[  433.120090][T25750] vlan4: entered allmulticast mode
[  433.314509][T25762] : renamed from veth0_to_bond
[  433.610020][T25788] veth1_to_team: Caught tx_queue_len zero misconfig
[  433.613781][T25788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8777'.
[  433.844104][T25806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8785'.
[  433.848017][T25806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8785'.
[  433.855992][T25808] xt_nat: multiple ranges no longer supported
[  433.962173][T25818] syzkaller0: entered promiscuous mode
[  433.965312][T25818] syzkaller0: entered allmulticast mode
[  433.986688][T25818] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  434.167629][T25836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8801'.
[  434.610821][T25863] netlink: 'syz.0.8813': attribute type 8 has an invalid length.
[  434.705584][T25870] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.8817'.
[  435.071523][T25898] bond15 (unregistering): Released all slaves
[  435.224141][T25907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8834'.
[  435.318620][T25917] openvswitch: netlink: IPv4 tun info is not correct
[  435.499939][T25945] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8852'.
[  435.539544][T25951] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  435.541964][T25951] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  435.550744][T25948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8853'.
[  435.593359][T25953] syzkaller1: entered promiscuous mode
[  435.595589][T25953] syzkaller1: entered allmulticast mode
[  435.598323][T25953] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  435.610279][T25948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8853'.
[  435.735993][T25960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8858'.
[  436.011597][T25972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8863'.
[  436.014662][T25972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8863'.
[  436.024638][T25974] x_tables: duplicate entry at hook 2
[  436.084335][T25980] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  436.314556][T25990] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8872'.
[  436.842472][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.845986][T26064] netlink: 'syz.1.8908': attribute type 1 has an invalid length.
[  436.848483][T26064] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8908'.
[  436.851324][T26064] netlink: 'syz.1.8908': attribute type 1 has an invalid length.
[  436.854564][T26064] netlink: 638 bytes leftover after parsing attributes in process `syz.1.8908'.
[  436.963448][T26077] bond24: entered allmulticast mode
[  436.974794][T26077] macvlan0: entered promiscuous mode
[  436.976439][T26077] macvlan0: entered allmulticast mode
[  436.978816][T26077] bond24: entered promiscuous mode
[  436.980906][T26077] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  436.987068][T26077] bond24: left promiscuous mode
[  437.355559][T26099] xfrm4: entered promiscuous mode
[  437.357600][T26099] xfrm4: entered allmulticast mode
[  437.570539][T26112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.309919][T26149] netlink: 'syz.1.8946': attribute type 7 has an invalid length.
[  438.537595][T26155] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  439.546061][T26251] batadv_slave_1: Caught tx_queue_len zero misconfig
[  440.225709][T26310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.235783][T26310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.242916][T26310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.248266][T26310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.252169][T26310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.262651][T26310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.265773][T26310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.268787][T26310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.271130][T26310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.273999][T26310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.381596][T26313] __nla_validate_parse: 9 callbacks suppressed
[  440.381607][T26313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9025'.
[  440.391518][T26313] xt_TCPMSS: Only works on TCP SYN packets
[  440.725731][T26337] tap0: tun_chr_ioctl cmd 1074025677
[  440.727463][T26337] tap0: linktype set to 776
[  440.961957][T26354] netlink: 'syz.1.9043': attribute type 32 has an invalid length.
[  440.971252][T26354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9043'.
[  441.007858][T26354] bond25: Setting coupled_control to off (0)
[  441.186696][T26361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9047'.
[  441.588801][T26393] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9062'.
[  441.613634][T26397] sctp: [Deprecated]: syz.1.9064 (pid 26397) Use of int in max_burst socket option.
[  441.613634][T26397] Use struct sctp_assoc_value instead
[  441.643189][T26399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9067'.
[  441.645872][T26399] vlan0: entered promiscuous mode
[  441.647518][T26399] bond1: entered promiscuous mode
[  441.648943][T26399] ip6gretap1: entered promiscuous mode
[  442.271130][T26461] syzkaller0: entered promiscuous mode
[  442.273461][T26461] syzkaller0: entered allmulticast mode
[  442.490998][T26479] netlink: 'syz.0.9103': attribute type 1 has an invalid length.
[  442.519691][T26479] 8021q: adding VLAN 0 to HW filter on device bond15
[  442.547804][T26479] bond15: (slave geneve6): making interface the new active one
[  442.551005][T26479] bond15: (slave geneve6): Enslaving as an active interface with an up link
[  442.554017][ T5667] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.559734][ T5667] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.572802][ T5667] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.577000][ T5667] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.633705][T26486] syzkaller0: entered promiscuous mode
[  442.635406][T26486] syzkaller0: entered allmulticast mode
[  442.718587][T26494] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9110'.
[  443.011512][T26514] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9119'.
[  443.270151][T26527] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9125'.
[  443.283360][T26527] bridge7: port 1(bond0) entered disabled state
[  443.307811][T26527] bond0 (unregistering): left promiscuous mode
[  443.309829][T26527] bridge7: port 1(bond0) entered disabled state
[  443.328375][   T77] smc: removing ib device syz2
[  443.331588][T26527] bond0 (unregistering): Released all slaves
[  443.332145][T26534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9128'.
[  443.390911][T26532] syzkaller0: entered promiscuous mode
[  443.395169][T26532] syzkaller0: entered allmulticast mode
[  443.503251][T26544] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9132'.
[  443.994922][T26582] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  444.015478][T26583] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  444.365133][T26614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  445.583530][T26670] netlink: 'syz.1.9187': attribute type 7 has an invalid length.
[  445.588020][T26670] netlink: 'syz.1.9187': attribute type 8 has an invalid length.
[  448.117059][T26690] __nla_validate_parse: 1 callbacks suppressed
[  448.117075][T26690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9196'.
[  448.123149][T26690] net_ratelimit: 736 callbacks suppressed
[  448.123164][T26690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  448.277335][T26699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9200'.
[  448.320925][T26704] netlink: 'syz.0.9203': attribute type 12 has an invalid length.
[  448.369029][T26708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9204'.
[  448.398163][T26708] 8021q: adding VLAN 0 to HW filter on device bond26
[  448.593454][T26722] netlink: 'syz.0.9211': attribute type 16 has an invalid length.
[  449.084556][T26740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9219'.
[  449.218193][T26751] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9224'.
[  449.958241][T26801] netlink: 'syz.0.9247': attribute type 13 has an invalid length.
[  449.963121][T26801] netlink: 'syz.0.9247': attribute type 12 has an invalid length.
[  450.011911][T26806] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9249'.
[  450.198403][T26812] bond16 (unregistering): Released all slaves
[  450.365889][T12956] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  450.368801][T12956] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  450.373367][T12956] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  450.378184][T12956] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  450.837869][T26853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.900484][T26857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9273'.
[  451.216299][T26870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9279'.
[  451.301233][   T13] tipc: Subscription rejected, illegal request
[  451.466035][T26881] netlink: 'syz.2.9282': attribute type 1 has an invalid length.
[  451.468385][T26881] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9282'.
[  453.921541][T26914] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.928287][T26914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  453.998202][T26924] syzkaller0: entered promiscuous mode
[  454.002575][T26924] syzkaller0: entered allmulticast mode
[  454.014313][T26926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9299'.
[  454.285152][T26937] 8021q: adding VLAN 0 to HW filter on device team0
[  454.295639][T26937] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  454.301381][T26940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.308796][T26940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.315940][T26940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.433832][T26937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.437727][T26937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.614653][T26933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.925579][T26970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9320'.
[  455.143561][T26983] netlink: 'syz.2.9326': attribute type 64 has an invalid length.
[  455.235440][T26987] batadv_slave_0: entered promiscuous mode
[  455.239068][T26986] batadv_slave_0: left promiscuous mode
[  456.334752][T27040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.406736][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9353'.
[  457.414309][T27074] netlink: 'syz.1.9368': attribute type 21 has an invalid length.
[  457.416920][T27074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9368'.
[  457.472760][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.780502][T27144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9402'.
[  458.816873][T27144] bond0: option primary_reselect: invalid value (133)
[  458.821147][T27144] bond0 (unregistering): Released all slaves
[  458.828136][T27153] GUP no longer grows the stack in syz.1.9405 (27153): 200000003000-20000000a000 (200000001000)
[  458.837411][T27153] CPU: 1 UID: 0 PID: 27153 Comm: syz.1.9405 Not tainted syzkaller #0 PREEMPT(full) 
[  458.837426][T27153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  458.837432][T27153] Call Trace:
[  458.837436][T27153]  <TASK>
[  458.837442][T27153]  dump_stack_lvl+0xe8/0x150
[  458.837462][T27153]  __get_user_pages+0x2453/0x29d0
[  458.837486][T27153]  ? __gup_longterm_locked+0xc4e/0x1630
[  458.837499][T27153]  ? down_read_killable+0x1bb/0x340
[  458.837513][T27153]  ? try_get_folio+0xec/0x650
[  458.837527][T27153]  __gup_longterm_locked+0xdcf/0x1630
[  458.837548][T27153]  gup_fast_fallback+0x1d82/0x22e0
[  458.837575][T27153]  ? __pfx_gup_fast_fallback+0x10/0x10
[  458.837588][T27153]  ? is_valid_gup_args+0x11f/0x200
[  458.837599][T27153]  ? get_user_pages_fast+0x4d/0xb0
[  458.837611][T27153]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  458.837624][T27153]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  458.837640][T27153]  iov_iter_get_pages2+0x5e/0xa0
[  458.837650][T27153]  __se_sys_vmsplice+0x7b3/0x1490
[  458.837671][T27153]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  458.837683][T27153]  ? __pfx_futex_wait+0x10/0x10
[  458.837698][T27153]  ? lockdep_hardirqs_on+0x7a/0x110
[  458.837753][T27153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.837765][T27153]  do_syscall_64+0x15f/0xf80
[  458.837777][T27153]  ? clear_bhb_loop+0x40/0x90
[  458.837788][T27153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.837797][T27153] RIP: 0033:0x7f37ba59cdd9
[  458.837808][T27153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.837816][T27153] RSP: 002b:00007f37bb384028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  458.837827][T27153] RAX: ffffffffffffffda RBX: 00007f37ba815fa0 RCX: 00007f37ba59cdd9
[  458.837833][T27153] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[  458.837839][T27153] RBP: 00007f37ba632d69 R08: 0000000000000000 R09: 0000000000000000
[  458.837844][T27153] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  458.837850][T27153] R13: 00007f37ba816038 R14: 00007f37ba815fa0 R15: 00007ffc2a8cdb08
[  458.837864][T27153]  </TASK>
[  459.073277][T27168] sock: sock_timestamping_bind_phc: sock not bind to device
[  459.181398][T27178] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9418'.
[  460.401708][T27272] netlink: 'syz.1.9461': attribute type 1 has an invalid length.
[  460.773702][T27312] syzkaller1: entered promiscuous mode
[  460.780849][T27312] syzkaller1: entered allmulticast mode
[  460.958040][T27334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9490'.
[  461.036303][T27342] netlink: 'syz.1.9494': attribute type 21 has an invalid length.
[  461.038713][T27342] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9494'.
[  461.128577][T27352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9499'.
[  461.132211][T27352] net_ratelimit: 2 callbacks suppressed
[  461.134639][T27352] openvswitch: netlink: Unknown nsh attribute 0
[  461.362893][T27375] netlink: 'syz.1.9511': attribute type 11 has an invalid length.
[  461.450038][T27382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9513'.
[  461.466108][T27382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9513'.
[  461.567557][T27392] netlink: 'syz.2.9518': attribute type 1 has an invalid length.
[  461.770971][T27413] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.9529'.
[  461.920567][T27417] lo speed is unknown, defaulting to 1000
[  461.949479][T27425] xt_hashlimit: size too large, truncated to 1048576
[  462.143642][T27417] wg1 speed is unknown, defaulting to 1000
[  462.246204][T27436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9538'.
[  462.254658][T27436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9538'.
[  462.399049][T27452] netlink: 'syz.2.9545': attribute type 1 has an invalid length.
[  463.539413][T27490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9562'.
[  464.165009][T27538] bond0: Removing last arp target with arp_interval on
[  464.205176][T27536] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  464.208675][T27536] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  464.226815][T27541] ip6t_rpfilter: unknown options
[  464.300116][T27549] __nla_validate_parse: 2 callbacks suppressed
[  464.300131][T27549] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.9589'.
[  464.316470][T27550] netlink: 165 bytes leftover after parsing attributes in process `syz.0.9588'.
[  465.504737][T27591] netlink: 'syz.1.9608': attribute type 6 has an invalid length.
[  465.507171][T27591] netlink: 'syz.1.9608': attribute type 23 has an invalid length.
[  465.706703][T27615] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9616'.
[  465.710166][T27615] netlink: 'syz.2.9616': attribute type 2 has an invalid length.
[  466.049611][T27645] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.9631'.
[  466.080231][T27647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9632'.
[  466.100190][T27649] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9633'.
[  466.139613][T27649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9633'.
[  466.177620][T27649] sctp: [Deprecated]: syz.1.9633 (pid 27649) Use of struct sctp_assoc_value in delayed_ack socket option.
[  466.177620][T27649] Use struct sctp_sack_info instead
[  466.375900][T27672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9644'.
[  467.739390][T27762] netlink: 'syz.0.9680': attribute type 1 has an invalid length.
[  467.747447][T27762] netlink: 'syz.0.9680': attribute type 11 has an invalid length.
[  467.755394][T27762] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9680'.
[  467.923585][T27781] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  467.936503][T27781] syzkaller0: entered promiscuous mode
[  467.945210][T27781] syzkaller0: entered allmulticast mode
[  468.359695][T27829] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9701'.
[  468.767474][T27865] netlink: 'syz.0.9717': attribute type 13 has an invalid length.
[  468.773373][T27865] netlink: 'syz.0.9717': attribute type 17 has an invalid length.
[  468.790083][T27865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  469.421478][T27920] __nla_validate_parse: 4 callbacks suppressed
[  469.421490][T27920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9743'.
[  469.525789][T27932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9750'.
[  469.538798][T27932] bond16: Invalid ad_actor_system MAC address.
[  469.540596][T27932] bond16: option ad_actor_system: invalid value (7)
[  469.545483][T27932] bond16 (unregistering): Released all slaves
[  469.652167][T27940] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  469.814418][T27952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9758'.
[  469.830407][T27952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9758'.
[  469.846604][T11341] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  469.846752][T27952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9758'.
[  469.849299][T11341] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  469.852997][T27952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9758'.
[  469.856369][T11341] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  469.861485][T11341] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  469.919041][T27958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9761'.
[  469.950644][T27960] syzkaller0: entered promiscuous mode
[  469.952577][T27960] syzkaller0: entered allmulticast mode
[  470.084528][T27968] netlink: 'syz.0.9766': attribute type 11 has an invalid length.
[  470.089180][T27968] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.9766'.
[  470.148570][T27973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9768'.
[  470.180140][T27973] bridge11: port 1(veth19) entered blocking state
[  470.182152][T27973] bridge11: port 1(veth19) entered disabled state
[  470.185516][T27973] veth19: entered allmulticast mode
[  470.188335][T27973] veth19: entered promiscuous mode
[  470.318032][T27988] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9776'.
[  470.371493][T27990] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  470.668534][T28014] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  471.378434][T28071] openvswitch: netlink: Duplicate or invalid key (type 0).
[  471.387496][T28071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  471.945974][T28106] netlink: 'syz.1.9823': attribute type 1 has an invalid length.
[  472.289945][T28149] team0: entered allmulticast mode
[  472.481427][T28168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.091014][T28218] syzkaller0: entered promiscuous mode
[  473.093445][T28218] syzkaller0: entered allmulticast mode
[  474.151423][T28281] IPv6: NLM_F_CREATE should be specified when creating new route
[  474.154697][T28281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  474.159059][T28281] IPv6: NLM_F_CREATE should be set when creating new route
[  474.161821][T28281] IPv6: NLM_F_CREATE should be set when creating new route
[  474.164603][T28281] IPv6: NLM_F_CREATE should be set when creating new route
[  474.466253][T28316] IPVS: set_ctl: invalid protocol: 136 172.30.0.3:20005
[  474.546276][T28323] __nla_validate_parse: 8 callbacks suppressed
[  474.546311][T28323] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.9927'.
[  474.704890][T28337] netlink: 'syz.2.9935': attribute type 1 has an invalid length.
[  474.927956][T28362] netlink: 'syz.2.9947': attribute type 9 has an invalid length.
[  474.930288][T28362] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.9947'.
[  475.056145][T28374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9953'.
[  475.059578][T28374] netlink: 'syz.0.9953': attribute type 7 has an invalid length.
[  475.063534][T28374] netlink: 'syz.0.9953': attribute type 8 has an invalid length.
[  475.066727][T28374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9953'.
[  475.231008][T28393] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9960'.
[  475.234771][T28393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9960'.
[  475.335163][T28397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9962'.
[  475.404189][T28401] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  475.406566][T28401] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  475.415721][T28401] ip6tnl3: left allmulticast mode
[  475.417725][T28401] bond9: left allmulticast mode
[  475.445708][ T5667] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  475.448940][ T5667] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  475.452668][ T5667] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  475.460816][ T5667] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.041507][T28442] netlink: 'syz.0.9978': attribute type 3 has an invalid length.
[  476.077137][T28444] nftables ruleset with unbound chain
[  476.089260][T28446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9980'.
[  476.092089][T28446] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9980'.
[  476.174358][T28457] openvswitch: netlink: IP tunnel dst address not specified
[  476.470346][T28489] xt_connbytes: Forcing CT accounting to be enabled
[  476.474323][T28489] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  476.654664][T28501] lo speed is unknown, defaulting to 1000
[  476.764888][T28501] wg1 speed is unknown, defaulting to 1000
[  477.008811][T28510] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20001
[  477.468707][T28529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10015'.
[  477.996080][T28569] bond16: invalid ARP target 0.0.0.0 specified for addition
[  477.998200][T28569] bond16: option arp_ip_target: invalid value (0)
[  478.001138][T28569] bond16 (unregistering): Released all slaves
[  478.396961][T28611] netlink: 'syz.1.10054': attribute type 1 has an invalid length.
[  478.399410][T28611] netlink: 'syz.1.10054': attribute type 2 has an invalid length.
[  478.989126][T28666] lo speed is unknown, defaulting to 1000
[  479.098723][T28666] wg1 speed is unknown, defaulting to 1000
[  479.904574][T28714] __nla_validate_parse: 4 callbacks suppressed
[  479.904587][T28714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10100'.
[  480.145006][T28730] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10105'.
[  480.383117][T28743] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  480.387594][T28743] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  480.393001][T28743] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  480.477314][T28751] syzkaller0: entered promiscuous mode
[  480.479406][T28751] syzkaller0: entered allmulticast mode
[  481.221360][T28807] ip6gre5: entered promiscuous mode
[  481.224892][T28807] ip6gre5: entered allmulticast mode
[  481.512919][ T8536] lo speed is unknown, defaulting to 1000
[  481.513025][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  481.514926][ T8536] sqz0: Port: 1 Link DOWN
[  481.519048][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  481.528579][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  481.532002][ T8536] lo speed is unknown, defaulting to 1000
[  481.532038][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  481.616985][T28827] netlink: 'syz.1.10150': attribute type 11 has an invalid length.
[  482.096730][T28847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10159'.
[  482.122137][T28847] netlink: 'syz.0.10159': attribute type 5 has an invalid length.
[  482.126798][T28847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10159'.
[  482.615921][T28870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10169'.
[  482.869030][T28898] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10184'.
[  482.875650][T28900] netlink: 'syz.1.10183': attribute type 21 has an invalid length.
[  482.878786][T28900] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10183'.
[  482.882761][T28900] netlink: 'syz.1.10183': attribute type 5 has an invalid length.
[  482.885695][T28900] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10183'.
[  482.916427][T28904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10185'.
[  482.965405][T28909] netlink: 'syz.1.10189': attribute type 1 has an invalid length.
[  483.177975][T28934] netlink: 'syz.1.10198': attribute type 3 has an invalid length.
[  483.184318][T28935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10200'.
[  483.273032][T28941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  483.659224][T28974] lo: entered allmulticast mode
[  483.661032][T28974] lo: left allmulticast mode
[  483.924181][T28999] xt_ipcomp: unknown flags 1D
[  484.518305][T29066] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  484.744001][T29084] netlink: 'syz.0.10272': attribute type 1 has an invalid length.
[  485.167415][T29126] IPVS: ip_vs_edit_dest(): server weight less than zero
[  485.276863][T29138] xt_TCPMSS: Only works on TCP SYN packets
[  485.344620][T29144] netlink: 'syz.2.10299': attribute type 1 has an invalid length.
[  485.370707][T29144] bond11: entered promiscuous mode
[  485.373937][T29144] 8021q: adding VLAN 0 to HW filter on device bond11
[  485.396306][T29144] bond11: (slave veth25): making interface the new active one
[  485.399083][T29144] veth25: entered promiscuous mode
[  485.402064][T29144] bond11: (slave veth25): Enslaving as an active interface with an up link
[  485.445791][T29150] IPVS: Unknown mcast interface: vcan0
[  485.737376][T29173] __nla_validate_parse: 7 callbacks suppressed
[  485.737387][T29173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10309'.
[  485.859489][T29185] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.10315'.
[  486.020300][T29205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10325'.
[  486.649300][T29247] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  486.763102][T29244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10343'.
[  486.765885][T29244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10343'.
[  486.945984][T29261] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10350'.
[  486.951593][T29261] xt_hashlimit: invalid rate
[  487.163437][T29263] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig
[  487.191572][T29265] netlink: 'syz.2.10352': attribute type 1 has an invalid length.
[  487.194435][T29265] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10352'.
[  487.197084][T29265] netlink: 658 bytes leftover after parsing attributes in process `syz.2.10352'.
[  487.199745][T29265] netlink: 'syz.2.10352': attribute type 1 has an invalid length.
[  487.379709][T29283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10359'.
[  487.471689][T29290] netlink: 'syz.1.10363': attribute type 1 has an invalid length.
[  487.597787][T29299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10367'.
[  487.726389][T29309] m1Ie5n: entered promiscuous mode
[  487.991709][T29331] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  488.329704][T29353] lo speed is unknown, defaulting to 1000
[  488.499295][T29353] wg1 speed is unknown, defaulting to 1000
[  489.209304][T29399] syzkaller0: entered promiscuous mode
[  489.211305][T29399] syzkaller0: entered allmulticast mode
[  489.546030][T29418] netlink: 'syz.0.10416': attribute type 11 has an invalid length.
[  490.247319][T29479] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  490.266122][T29476] lo speed is unknown, defaulting to 1000
[  490.379316][T29476] wg1 speed is unknown, defaulting to 1000
[  491.139398][T29527] lo speed is unknown, defaulting to 1000
[  491.274261][T29527] wg1 speed is unknown, defaulting to 1000
[  491.517937][T29543] netlink: 'syz.2.10472': attribute type 1 has an invalid length.
[  491.530030][T29543] __nla_validate_parse: 5 callbacks suppressed
[  491.530047][T29543] netlink: 476 bytes leftover after parsing attributes in process `syz.2.10472'.
[  491.539033][T29543] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.10472'.
[  491.605631][T29547] netlink: 'syz.0.10474': attribute type 1 has an invalid length.
[  491.646864][T29547] 8021q: adding VLAN 0 to HW filter on device bond16
[  491.705857][T29547] vlan1: entered allmulticast mode
[  491.708051][T29547] bond16: entered allmulticast mode
[  491.816632][T29554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10477'.
[  491.893127][T29560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10480'.
[  492.037154][T29566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10484'.
[  492.041139][T29566] netlink: 'syz.0.10484': attribute type 14 has an invalid length.
[  492.044566][T29566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10484'.
[  492.249387][T29582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10490'.
[  492.630818][T29617] x_tables: duplicate underflow at hook 1
[  492.899412][T29638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10513'.
[  492.903175][T29638] netlink: 'syz.0.10513': attribute type 29 has an invalid length.
[  492.906130][T29638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10513'.
[  492.971526][T29642] netlink: 149 bytes leftover after parsing attributes in process `syz.0.10515'.
[  493.565257][T29676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  493.698773][T29682] ip6_vti0: entered allmulticast mode
[  493.701693][T29680] ip6_vti0: left allmulticast mode
[  494.099287][T29700] openvswitch: netlink: EtherType 50a is less than min 600
[  495.228828][T29793] netlink: 'syz.0.10587': attribute type 83 has an invalid length.
[  495.283015][T29800] netlink: 'syz.0.10590': attribute type 2 has an invalid length.
[  495.286217][T29800] netlink: 'syz.0.10590': attribute type 9 has an invalid length.
[  495.398555][T29806] sock: sock_set_timeout: `syz.0.10593' (pid 29806) tries to set negative timeout
[  495.429077][T29808] netlink: 'syz.2.10595': attribute type 1 has an invalid length.
[  495.589250][T29819] bond12: Removing last arp target with arp_interval on
[  495.900600][T29850] sctp: [Deprecated]: syz.0.10614 (pid 29850) Use of int in max_burst socket option deprecated.
[  495.900600][T29850] Use struct sctp_assoc_value instead
[  496.033336][T29861] Unsupported ieee802154 address type: 0
[  496.118513][T29868] x_tables: unsorted entry at hook 3
[  496.474787][T29896] bridge_slave_0: entered promiscuous mode
[  496.562086][T29903] __nla_validate_parse: 20 callbacks suppressed
[  496.562097][T29903] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10638'.
[  496.566978][T29903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10638'.
[  496.569592][T29903] netlink: 'syz.0.10638': attribute type 1 has an invalid length.
[  496.977474][T29907] lo speed is unknown, defaulting to 1000
[  497.014719][T29910] netlink: 'syz.1.10640': attribute type 1 has an invalid length.
[  497.084609][T29907] wg1 speed is unknown, defaulting to 1000
[  499.467663][T29917] tipc: Can't bind to reserved service type 2
[  500.183924][T29952] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10658'.
[  500.308302][T29956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  500.789335][T29996] nbd: must specify at least one socket
[  500.838445][T30001] netlink: 'syz.2.10680': attribute type 1 has an invalid length.
[  500.868710][T30001] 8021q: adding VLAN 0 to HW filter on device bond13
[  500.890316][T30005] netlink: 'syz.0.10681': attribute type 62 has an invalid length.
[  500.893030][T30001] vlan0: entered allmulticast mode
[  500.894921][T30001] bond13: entered allmulticast mode
[  501.438995][T30061] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10706'.
[  501.689162][T30085] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10717'.
[  501.728678][T30090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10719'.
[  501.962773][T30115] netlink: 'syz.0.10731': attribute type 21 has an invalid length.
[  501.966951][T30115] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10731'.
[  501.970575][T30115] netlink: 'syz.0.10731': attribute type 4 has an invalid length.
[  501.974252][T30115] netlink: 'syz.0.10731': attribute type 5 has an invalid length.
[  501.976499][T30115] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10731'.
[  502.120549][T30132] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.10740'.
[  502.125259][T30132] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  502.201143][T30144] : entered promiscuous mode
[  502.225826][   T56] block nbd1: Receive control failed (result -32)
[  502.760226][T30195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10769'.
[  502.799973][T30199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10771'.
[  502.804636][T30199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10771'.
[  503.295071][T30229] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10784'.
[  503.356243][T30231] netlink: 'syz.2.10785': attribute type 2 has an invalid length.
[  503.644738][T30246] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  503.854877][T30250] netlink: 844 bytes leftover after parsing attributes in process `syz.0.10794'.
[  504.630842][T30278] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  504.706761][T30286] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  504.706761][T30286] Please contact the netfilter-devel mailing list or update your nftables rules.
[  504.770996][T30292] netlink: 'syz.0.10812': attribute type 1 has an invalid length.
[  505.756272][ T5667] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.764271][ T5667] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.774309][ T5667] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.783217][ T5667] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  505.813158][T30311] netlink: 'syz.0.10817': attribute type 1 has an invalid length.
[  505.820270][T30311] sctp: [Deprecated]: syz.0.10817 (pid 30311) Use of struct sctp_assoc_value in delayed_ack socket option.
[  505.820270][T30311] Use struct sctp_sack_info instead
[  506.384943][T30354] lo speed is unknown, defaulting to 1000
[  506.556128][T30354] wg1 speed is unknown, defaulting to 1000
[  506.745136][T30365] __nla_validate_parse: 6 callbacks suppressed
[  506.745152][T30365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10842'.
[  506.849033][T30372] netlink: 'syz.2.10845': attribute type 6 has an invalid length.
[  506.859429][T30372] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10845'.
[  506.937394][T30375] netlink: 'syz.0.10846': attribute type 1 has an invalid length.
[  507.209730][T30386] netlink: 'syz.1.10852': attribute type 1 has an invalid length.
[  507.276393][T30393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10852'.
[  507.288074][T30386] bond27: entered promiscuous mode
[  507.293050][T30386] 8021q: adding VLAN 0 to HW filter on device bond27
[  507.310266][T30393] bond27: entered allmulticast mode
[  507.390224][T30386] bond27: (slave bridge23): making interface the new active one
[  507.422978][T30386] bridge23: entered promiscuous mode
[  507.429589][T30386] bridge23: entered allmulticast mode
[  507.437704][T30386] bond27: (slave bridge23): Enslaving as an active interface with an up link
[  508.111252][T30455] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10871'.
[  508.459038][T30471] netlink: 41 bytes leftover after parsing attributes in process `syz.2.10877'.
[  508.463307][T30471] netlink: 140 bytes leftover after parsing attributes in process `syz.2.10877'.
[  508.466843][T30471] netlink: 41 bytes leftover after parsing attributes in process `syz.2.10877'.
[  508.661176][T30484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10882'.
[  508.665254][T30484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10882'.
[  508.668622][T30484] netlink: 6 bytes leftover after parsing attributes in process `syz.1.10882'.
[  509.243905][T30542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  510.198234][T30616] netlink: 'syz.2.10944': attribute type 3 has an invalid length.
[  510.616729][T30654] ip6_vti0: entered allmulticast mode
[  511.029651][T30687] netlink: 'syz.1.10978': attribute type 6 has an invalid length.
[  511.033799][T30687] netlink: 'syz.1.10978': attribute type 5 has an invalid length.
[  511.434269][T30729] netlink: 'syz.1.10998': attribute type 32 has an invalid length.
[  511.453790][T30729] bond28: option coupled_control: invalid value (12)
[  511.463491][T30729] bond28 (unregistering): Released all slaves
[  511.821345][T30762] __nla_validate_parse: 16 callbacks suppressed
[  511.821359][T30762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11012'.
[  511.907999][T30772] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11019'.
[  511.913736][T30772] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11019'.
[  512.051784][T30788] netlink: 'syz.2.11026': attribute type 1 has an invalid length.
[  512.706787][T30837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11049'.
[  512.787427][T30851] ipvlan1: entered promiscuous mode
[  512.878159][T30860] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  513.258649][T30881] netlink: 27 bytes leftover after parsing attributes in process `syz.1.11068'.
[  513.576500][T30905] syzkaller0: entered promiscuous mode
[  513.578007][T30905] syzkaller0: entered allmulticast mode
[  513.695447][T30910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11082'.
[  514.013828][T30934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11093'.
[  514.229685][T30951] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11101'.
[  514.364329][T30971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11110'.
[  514.452131][T30980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11113'.
[  515.420508][T31011] netlink: 'syz.1.11128': attribute type 83 has an invalid length.
[  515.456065][T31013] netlink: 'syz.1.11129': attribute type 1 has an invalid length.
[  515.765532][T31039] xt_l2tp: invalid flags combination: 8
[  516.181043][T31068] netlink: 'syz.0.11156': attribute type 1 has an invalid length.
[  517.191686][T31101] xt_cgroup: invalid path, errno=-2
[  517.579886][T31124] sock: sock_set_timeout: `syz.1.11181' (pid 31124) tries to set negative timeout
[  517.771232][T31140] __nla_validate_parse: 3 callbacks suppressed
[  517.771244][T31140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11189'.
[  518.332847][T31204] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.11219'.
[  518.394459][T31214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11224'.
[  518.397112][T31214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11224'.
[  518.405872][T31214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11224'.
[  518.408571][T31214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11224'.
[  518.506664][T31227] netlink: 'syz.1.11230': attribute type 3 has an invalid length.
[  518.509327][T31227] netlink: 772 bytes leftover after parsing attributes in process `syz.1.11230'.
[  518.512595][T31227] netlink: 'syz.1.11230': attribute type 3 has an invalid length.
[  518.515004][T31227] netlink: 772 bytes leftover after parsing attributes in process `syz.1.11230'.
[  518.735910][T31235] batman_adv: batadv0: Removing interface: veth13
[  518.799716][T31254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11232'.
[  518.840810][T31258] netlink: 'syz.1.11241': attribute type 4 has an invalid length.
[  518.944494][T31266] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  518.947315][T31266] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  519.055397][T31276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11247'.
[  519.108745][T31282] netlink: 'syz.0.11251': attribute type 1 has an invalid length.
[  519.236658][T31294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  522.874699][T31467] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.022023][T31482] netlink: 'syz.0.11336': attribute type 1 has an invalid length.
[  523.044570][T31487] __nla_validate_parse: 6 callbacks suppressed
[  523.044581][T31487] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11340'.
[  523.074218][T31482] 8021q: adding VLAN 0 to HW filter on device bond17
[  523.117631][T31475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11336'.
[  523.126836][T31495] netlink: 'syz.2.11344': attribute type 10 has an invalid length.
[  523.130473][T31495] team0 (unregistering): left allmulticast mode
[  523.140924][T31497] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  523.363832][T31519] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11356'.
[  523.408235][T31524] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11359'.
[  523.481843][T31533] SET target dimension over the limit!
[  523.657470][T31547] netlink: 116 bytes leftover after parsing attributes in process `syz.2.11370'.
[  523.769172][T31563] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11377'.
[  523.774130][T31560] xt_policy: too many policy elements
[  523.829727][T31567] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  523.836626][T31567] syzkaller0: entered promiscuous mode
[  523.839491][T31567] syzkaller0: entered allmulticast mode
[  523.971529][T31574] netlink: 'syz.2.11384': attribute type 4 has an invalid length.
[  524.025661][T31582] openvswitch: netlink: Multiple metadata blocks provided
[  524.182020][T31600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11396'.
[  524.228490][T31604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11398'.
[  524.231754][T31604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11398'.
[  524.376136][T31612] xt_nfacct: accounting object `syz0' does not exist
[  524.690325][T31647] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  524.798745][T31653] syzkaller0: entered promiscuous mode
[  524.801108][T31653] syzkaller0: entered allmulticast mode
[  524.937343][T31660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11423'.
[  525.525107][T31697] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  525.548174][T31701] netlink: 'syz.2.11443': attribute type 5 has an invalid length.
[  525.870986][T31727] netlink: 'syz.0.11454': attribute type 10 has an invalid length.
[  525.877183][T31729] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  526.002290][T31737] nbd: must specify at least one socket
[  526.531289][T31770] hsr_slave_1 (unregistering): left promiscuous mode
[  526.981718][T31791] xt_hashlimit: size too large, truncated to 1048576
[  526.984561][T31791] xt_hashlimit: invalid interval
[  527.727568][T31861] netlink: 'syz.2.11516': attribute type 3 has an invalid length.
[  527.730174][T31861] netlink: 'syz.2.11516': attribute type 3 has an invalid length.
[  527.813715][T31869] xt_CT: You must specify a L4 protocol and not use inversions on it
[  528.418390][T31926] openvswitch: netlink: IP tunnel dst address not specified
[  528.550276][T31934] dummy0: entered promiscuous mode
[  528.558204][T31933] dummy0: left promiscuous mode
[  528.884585][T31960] __nla_validate_parse: 5 callbacks suppressed
[  528.884601][T31960] netlink: 240 bytes leftover after parsing attributes in process `syz.2.11550'.
[  528.901511][T31950] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  528.911307][T31950] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  529.510852][T32004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11577'.
[  529.594266][T32011] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11581'.
[  529.602964][T32011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  530.645212][T32062] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11605'.
[  531.196700][T32092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11617'.
[  531.746289][T32133] nbd: nbd0 already in use
[  531.748363][T32133] block nbd0: NBD_DISCONNECT
[  531.750065][T32133] block nbd0: Send disconnect failed -32
[  531.752076][T32133] block nbd0: Send disconnect failed -32
[  531.754359][T32133] block nbd0: shutting down sockets
[  531.959559][T32142] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11640'.
[  531.963875][T32143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11639'.
[  531.968003][T32143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11639'.
[  532.435278][T32160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11648'.
[  532.438605][T32160] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11648'.
[  532.924932][T32116] Set syz1 is full, maxelem 65536 reached
[  533.797025][   T55] block nbd0: Receive control failed (result -1)
[  533.835920][T32253] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  533.948418][T32259] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  534.050191][T32263] bond28: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  534.059827][T32263] bond28 (unregistering): Released all slaves
[  534.295871][T32283] Unknown options in mask 6
[  534.340929][T32287] __nla_validate_parse: 3 callbacks suppressed
[  534.340946][T32287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11705'.
[  534.466857][T32294] bond28: entered promiscuous mode
[  534.584909][T32309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11716'.
[  534.606727][T32313] netlink: 'syz.1.11718': attribute type 1 has an invalid length.
[  534.716872][T32328] bond6: entered allmulticast mode
[  534.724131][T32328] wireguard0: entered allmulticast mode
[  534.730594][T32326] bond6: left allmulticast mode
[  534.734175][T32326] wireguard0: left allmulticast mode
[  534.806123][T32336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11727'.
[  534.809407][T32336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11727'.
[  534.957689][T32354] netlink: 27 bytes leftover after parsing attributes in process `syz.1.11737'.
[  535.100596][T32374] netlink: 'syz.2.11747': attribute type 21 has an invalid length.
[  535.226495][T32390] netlink: 'syz.2.11755': attribute type 3 has an invalid length.
[  535.260420][T32398] netlink: 'syz.0.11759': attribute type 1 has an invalid length.
[  535.264262][T32398] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11759'.
[  535.310394][T32398] 
[  535.311276][T32398] ======================================================
[  535.313468][T32398] WARNING: possible circular locking dependency detected
[  535.315679][T32398] syzkaller #0 Not tainted
[  535.317292][T32398] ------------------------------------------------------
[  535.319627][T32398] syz.0.11759/32398 is trying to acquire lock:
[  535.321727][T32398] ffff8881012a5180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[  535.325381][T32398] 
[  535.325381][T32398] but task is already holding lock:
[  535.327459][T32398] ffff8881012a52a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  535.330972][T32398] 
[  535.330972][T32398] which lock already depends on the new lock.
[  535.330972][T32398] 
[  535.333968][T32398] 
[  535.333968][T32398] the existing dependency chain (in reverse order) is:
[  535.336689][T32398] 
[  535.336689][T32398] -> #11 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  535.339179][T32398]        down_read+0x47/0x2e0
[  535.340727][T32398]        kernfs_remove_by_name_ns+0x3f/0x140
[  535.342730][T32398]        internal_create_group+0x587/0x1180
[  535.344492][T32398]        sysfs_update_groups+0x60/0x130
[  535.346195][T32398]        pmu_dev_alloc+0x29b/0x300
[  535.347908][T32398]        perf_event_sysfs_init+0x76/0x100
[  535.349488][T32398]        do_one_initcall+0x250/0x870
[  535.351087][T32398]        do_initcall_level+0x104/0x190
[  535.352735][T32398]        do_initcalls+0x59/0xa0
[  535.354353][T32398]        kernel_init_freeable+0x2a6/0x3e0
[  535.356149][T32398]        kernel_init+0x1d/0x1d0
[  535.357719][T32398]        ret_from_fork+0x514/0xb70
[  535.359435][T32398]        ret_from_fork_asm+0x1a/0x30
[  535.360923][T32398] 
[  535.360923][T32398] -> #10 (pmus_lock){+.+.}-{4:4}:
[  535.362830][T32398]        __mutex_lock+0x1a3/0x1550
[  535.364422][T32398]        perf_event_init_cpu+0x1df/0x7c0
[  535.366185][T32398]        cpuhp_invoke_callback+0x445/0x860
[  535.368130][T32398]        cpuhp_thread_fun+0x36b/0x780
[  535.369781][T32398]        smpboot_thread_fn+0x541/0xa50
[  535.371493][T32398]        kthread+0x388/0x470
[  535.372968][T32398]        ret_from_fork+0x514/0xb70
[  535.374428][T32398]        ret_from_fork_asm+0x1a/0x30
[  535.376054][T32398] 
[  535.376054][T32398] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  535.378417][T32398]        cpuhp_thread_fun+0x127/0x780
[  535.379949][T32398]        smpboot_thread_fn+0x541/0xa50
[  535.381389][T32398]        kthread+0x388/0x470
[  535.382639][T32398]        ret_from_fork+0x514/0xb70
[  535.384039][T32398]        ret_from_fork_asm+0x1a/0x30
[  535.385534][T32398] 
[  535.385534][T32398] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  535.387775][T32398]        cpus_read_lock+0x42/0x160
[  535.389281][T32398]        static_key_slow_inc+0x12/0x30
[  535.390935][T32398]        setup_udp_tunnel_sock+0x2fd/0x510
[  535.392634][T32398]        l2tp_tunnel_register+0xde2/0x1490
[  535.394257][T32398]        pppol2tp_connect+0x8b7/0x17c0
[  535.395789][T32398]        __sys_connect+0x312/0x450
[  535.397332][T32398]        __x64_sys_connect+0x7a/0x90
[  535.398813][T32398]        do_syscall_64+0x15f/0xf80
[  535.400318][T32398]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.402491][T32398] 
[  535.402491][T32398] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  535.405135][T32398]        lock_sock_nested+0x41/0x100
[  535.407030][T32398]        inet_shutdown+0x6a/0x390
[  535.408785][T32398]        nbd_mark_nsock_dead+0x2e9/0x560
[  535.410789][T32398]        recv_work+0x1c2e/0x1d40
[  535.412530][T32398]        process_scheduled_works+0xb5d/0x1860
[  535.414695][T32398]        worker_thread+0xa53/0xfc0
[  535.416505][T32398]        kthread+0x388/0x470
[  535.418125][T32398]        ret_from_fork+0x514/0xb70
[  535.419922][T32398]        ret_from_fork_asm+0x1a/0x30
[  535.421791][T32398] 
[  535.421791][T32398] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  535.424478][T32398]        __mutex_lock+0x1a3/0x1550
[  535.426302][T32398]        nbd_queue_rq+0x37b/0x1100
[  535.428103][T32398]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  535.430220][T32398]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  535.432583][T32398]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  535.434838][T32398]        blk_mq_run_hw_queue+0x348/0x4f0
[  535.436795][T32398]        blk_mq_dispatch_list+0xd16/0xe10
[  535.438773][T32398]        blk_mq_flush_plug_list+0x48d/0x570
[  535.440950][T32398]        __blk_flush_plug+0x3ed/0x4d0
[  535.442918][T32398]        __submit_bio+0x28d/0x580
[  535.444780][T32398]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  535.447027][T32398]        block_read_full_folio+0x599/0x830
[  535.449141][T32398]        filemap_read_folio+0x137/0x3b0
[  535.451059][T32398]        do_read_cache_folio+0x358/0x590
[  535.453031][T32398]        read_part_sector+0xb6/0x2b0
[  535.454873][T32398]        adfspart_check_ICS+0xb1/0x960
[  535.456755][T32398]        bdev_disk_changed+0x817/0x1770
[  535.458684][T32398]        blkdev_get_whole+0x380/0x510
[  535.460558][T32398]        bdev_open+0x31e/0xd30
[  535.462215][T32398]        blkdev_open+0x470/0x610
[  535.463962][T32398]        do_dentry_open+0x785/0x14e0
[  535.465816][T32398]        vfs_open+0x3b/0x340
[  535.467494][T32398]        path_openat+0x2e08/0x3860
[  535.469294][T32398]        do_file_open+0x23e/0x4a0
[  535.471150][T32398]        do_sys_openat2+0x113/0x200
[  535.472965][T32398]        __x64_sys_openat+0x138/0x170
[  535.474942][T32398]        do_syscall_64+0x15f/0xf80
[  535.476730][T32398]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.479026][T32398] 
[  535.479026][T32398] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  535.481591][T32398]        __mutex_lock+0x1a3/0x1550
[  535.483398][T32398]        nbd_queue_rq+0xc6/0x1100
[  535.485128][T32398]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  535.487213][T32398]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  535.489529][T32398]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  535.491901][T32398]        blk_mq_run_hw_queue+0x348/0x4f0
[  535.493936][T32398]        blk_mq_dispatch_list+0xd16/0xe10
[  535.495951][T32398]        blk_mq_flush_plug_list+0x48d/0x570
[  535.498057][T32398]        __blk_flush_plug+0x3ed/0x4d0
[  535.499955][T32398]        __submit_bio+0x28d/0x580
[  535.501730][T32398]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  535.504020][T32398]        block_read_full_folio+0x599/0x830
[  535.506103][T32398]        filemap_read_folio+0x137/0x3b0
[  535.508043][T32398]        do_read_cache_folio+0x358/0x590
[  535.510016][T32398]        read_part_sector+0xb6/0x2b0
[  535.511955][T32398]        adfspart_check_ICS+0xb1/0x960
[  535.513932][T32398]        bdev_disk_changed+0x817/0x1770
[  535.515836][T32398]        blkdev_get_whole+0x380/0x510
[  535.517714][T32398]        bdev_open+0x31e/0xd30
[  535.519471][T32398]        blkdev_open+0x470/0x610
[  535.521289][T32398]        do_dentry_open+0x785/0x14e0
[  535.523142][T32398]        vfs_open+0x3b/0x340
[  535.524831][T32398]        path_openat+0x2e08/0x3860
[  535.526704][T32398]        do_file_open+0x23e/0x4a0
[  535.528555][T32398]        do_sys_openat2+0x113/0x200
[  535.530428][T32398]        __x64_sys_openat+0x138/0x170
[  535.532335][T32398]        do_syscall_64+0x15f/0xf80
[  535.534147][T32398]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.536395][T32398] 
[  535.536395][T32398] -> #4 (set->srcu){.+.+}-{0:0}:
[  535.538821][T32398]        __synchronize_srcu+0xca/0x300
[  535.540740][T32398]        elevator_switch+0x1e8/0x7a0
[  535.542551][T32398]        elevator_change+0x2cc/0x450
[  535.544448][T32398]        elevator_set_default+0x36c/0x430
[  535.546536][T32398]        blk_register_queue+0x3e9/0x4e0
[  535.548537][T32398]        __add_disk+0x677/0xd50
[  535.550243][T32398]        add_disk_fwnode+0xfb/0x480
[  535.552086][T32398]        nbd_dev_add+0x72c/0xb50
[  535.553873][T32398]        nbd_init+0x168/0x1f0
[  535.555551][T32398]        do_one_initcall+0x250/0x870
[  535.557391][T32398]        do_initcall_level+0x104/0x190
[  535.559394][T32398]        do_initcalls+0x59/0xa0
[  535.561205][T32398]        kernel_init_freeable+0x2a6/0x3e0
[  535.563310][T32398]        kernel_init+0x1d/0x1d0
[  535.565060][T32398]        ret_from_fork+0x514/0xb70
[  535.566954][T32398]        ret_from_fork_asm+0x1a/0x30
[  535.568918][T32398] 
[  535.568918][T32398] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  535.571740][T32398]        __mutex_lock+0x1a3/0x1550
[  535.573630][T32398]        elevator_change+0x1b3/0x450
[  535.575560][T32398]        elevator_set_none+0xb5/0x140
[  535.577512][T32398]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  535.579806][T32398]        nbd_start_device+0x17f/0xb10
[  535.581744][T32398]        nbd_genl_connect+0x165b/0x1cf0
[  535.583755][T32398]        genl_family_rcv_msg_doit+0x22a/0x330
[  535.585956][T32398]        genl_rcv_msg+0x61c/0x7a0
[  535.587781][T32398]        netlink_rcv_skb+0x232/0x4b0
[  535.589711][T32398]        genl_rcv+0x28/0x40
[  535.591382][T32398]        netlink_unicast+0x75c/0x8e0
[  535.593343][T32398]        netlink_sendmsg+0x813/0xb40
[  535.595349][T32398]        ____sys_sendmsg+0x972/0x9f0
[  535.597294][T32398]        ___sys_sendmsg+0x2a5/0x360
[  535.599174][T32398]        __x64_sys_sendmsg+0x1bd/0x2a0
[  535.601174][T32398]        do_syscall_64+0x15f/0xf80
[  535.603011][T32398]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.605313][T32398] 
[  535.605313][T32398] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  535.608411][T32398]        blk_alloc_queue+0x546/0x680
[  535.610338][T32398]        __blk_mq_alloc_disk+0x197/0x390
[  535.612315][T32398]        nbd_dev_add+0x499/0xb50
[  535.614080][T32398]        nbd_init+0x168/0x1f0
[  535.615813][T32398]        do_one_initcall+0x250/0x870
[  535.617747][T32398]        do_initcall_level+0x104/0x190
[  535.619724][T32398]        do_initcalls+0x59/0xa0
[  535.621462][T32398]        kernel_init_freeable+0x2a6/0x3e0
[  535.623480][T32398]        kernel_init+0x1d/0x1d0
[  535.625297][T32398]        ret_from_fork+0x514/0xb70
[  535.626846][T32398]        ret_from_fork_asm+0x1a/0x30
[  535.628451][T32398] 
[  535.628451][T32398] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  535.630858][T32398]        fs_reclaim_acquire+0x71/0x100
[  535.632548][T32398]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  535.634550][T32398]        alloc_inode+0xb8/0x1b0
[  535.636117][T32398]        iget_locked+0x131/0x6a0
[  535.637567][T32398]        kernfs_get_inode+0x4f/0x780
[  535.639098][T32398]        kernfs_get_tree+0x5cd/0x980
[  535.640666][T32398]        sysfs_get_tree+0x46/0x110
[  535.642251][T32398]        vfs_get_tree+0x92/0x2a0
[  535.643756][T32398]        do_new_mount+0x341/0xd30
[  535.645209][T32398]        __se_sys_mount+0x31d/0x420
[  535.646702][T32398]        do_syscall_64+0x15f/0xf80
[  535.648165][T32398]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.650039][T32398] 
[  535.650039][T32398] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[  535.652299][T32398]        __lock_acquire+0x15a5/0x2cf0
[  535.653851][T32398]        lock_acquire+0x106/0x350
[  535.655311][T32398]        down_write+0x96/0x200
[  535.656697][T32398]        kernfs_remove_by_name_ns+0x4e/0x140
[  535.658415][T32398]        sysfs_unmerge_group+0xd4/0x140
[  535.660019][T32398]        dpm_sysfs_remove+0x5f/0xd0
[  535.661695][T32398]        device_del+0x250/0x8f0
[  535.663385][T32398]        wpan_phy_unregister+0x2ed/0x370
[  535.665024][T32398]        hwsim_del+0x49c/0x500
[  535.666635][T32398]        hwsim_del_radio_nl+0x110/0x150
[  535.668659][T32398]        genl_family_rcv_msg_doit+0x22a/0x330
[  535.670434][T32398]        genl_rcv_msg+0x61c/0x7a0
[  535.671990][T32398]        netlink_rcv_skb+0x232/0x4b0
[  535.673554][T32398]        genl_rcv+0x28/0x40
[  535.674870][T32398]        netlink_unicast+0x75c/0x8e0
[  535.676602][T32398]        netlink_sendmsg+0x813/0xb40
[  535.678406][T32398]        ____sys_sendmsg+0x972/0x9f0
[  535.680047][T32398]        ___sys_sendmsg+0x2a5/0x360
[  535.681520][T32398]        __x64_sys_sendmsg+0x1bd/0x2a0
[  535.683215][T32398]        do_syscall_64+0x15f/0xf80
[  535.685017][T32398]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.687338][T32398] 
[  535.687338][T32398] other info that might help us debug this:
[  535.687338][T32398] 
[  535.690896][T32398] Chain exists of:
[  535.690896][T32398]   &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem
[  535.690896][T32398] 
[  535.695041][T32398]  Possible unsafe locking scenario:
[  535.695041][T32398] 
[  535.697067][T32398]        CPU0                    CPU1
[  535.698565][T32398]        ----                    ----
[  535.700515][T32398]   rlock(&root->kernfs_supers_rwsem);
[  535.702159][T32398]                                lock(pmus_lock);
[  535.704496][T32398]                                lock(&root->kernfs_supers_rwsem);
[  535.706807][T32398]   lock(&root->kernfs_rwsem);
[  535.708149][T32398] 
[  535.708149][T32398]  *** DEADLOCK ***
[  535.708149][T32398] 
[  535.710448][T32398] 5 locks held by syz.0.11759/32398:
[  535.711993][T32398]  #0: ffffffff8fe3de08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  535.714273][T32398]  #1: ffffffff8fe3dc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  535.716754][T32398]  #2: ffffffff8f60c100 (hwsim_phys_lock){+.+.}-{4:4}, at: hwsim_del_radio_nl+0x87/0x150
[  535.720029][T32398]  #3: ffffffff8fdceb00 (rtnl_mutex){+.+.}-{4:4}, at: wpan_phy_unregister+0x1ea/0x370
[  535.723360][T32398]  #4: ffff8881012a52a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  535.727359][T32398] 
[  535.727359][T32398] stack backtrace:
[  535.729550][T32398] CPU: 0 UID: 0 PID: 32398 Comm: syz.0.11759 Not tainted syzkaller #0 PREEMPT(full) 
[  535.729572][T32398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  535.729583][T32398] Call Trace:
[  535.729592][T32398]  <TASK>
[  535.729600][T32398]  dump_stack_lvl+0xe8/0x150
[  535.729629][T32398]  print_circular_bug+0x2e1/0x300
[  535.729657][T32398]  check_noncircular+0x12e/0x150
[  535.729694][T32398]  __lock_acquire+0x15a5/0x2cf0
[  535.729725][T32398]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  535.729740][T32398]  lock_acquire+0x106/0x350
[  535.729759][T32398]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  535.729780][T32398]  down_write+0x96/0x200
[  535.729802][T32398]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  535.729817][T32398]  ? __pfx_down_write+0x10/0x10
[  535.729841][T32398]  ? down_read+0x270/0x2e0
[  535.729863][T32398]  kernfs_remove_by_name_ns+0x4e/0x140
[  535.729879][T32398]  sysfs_unmerge_group+0xd4/0x140
[  535.729902][T32398]  dpm_sysfs_remove+0x5f/0xd0
[  535.729926][T32398]  device_del+0x250/0x8f0
[  535.729950][T32398]  ? __pfx_device_del+0x10/0x10
[  535.729972][T32398]  wpan_phy_unregister+0x2ed/0x370
[  535.729997][T32398]  ? __pfx_wpan_phy_unregister+0x10/0x10
[  535.730025][T32398]  ? __rcu_read_unlock+0x83/0xe0
[  535.730045][T32398]  hwsim_del+0x49c/0x500
[  535.730060][T32398]  ? hwsim_del+0x132/0x500
[  535.730076][T32398]  hwsim_del_radio_nl+0x110/0x150
[  535.730092][T32398]  genl_family_rcv_msg_doit+0x22a/0x330
[  535.730113][T32398]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  535.730136][T32398]  ? bpf_lsm_capable+0x9/0x20
[  535.730154][T32398]  ? security_capable+0x7e/0x2c0
[  535.730204][T32398]  genl_rcv_msg+0x61c/0x7a0
[  535.730224][T32398]  ? __pfx_genl_rcv_msg+0x10/0x10
[  535.730241][T32398]  ? __pfx_hwsim_del_radio_nl+0x10/0x10
[  535.730272][T32398]  netlink_rcv_skb+0x232/0x4b0
[  535.730295][T32398]  ? __pfx_genl_rcv_msg+0x10/0x10
[  535.730312][T32398]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  535.730340][T32398]  ? down_read+0x270/0x2e0
[  535.730360][T32398]  ? genl_rcv+0xd/0x40
[  535.730376][T32398]  genl_rcv+0x28/0x40
[  535.730391][T32398]  netlink_unicast+0x75c/0x8e0
[  535.730415][T32398]  netlink_sendmsg+0x813/0xb40
[  535.730441][T32398]  ? __pfx_netlink_sendmsg+0x10/0x10
[  535.730465][T32398]  ? aa_sock_msg_perm+0xf1/0x1b0
[  535.730486][T32398]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  535.730510][T32398]  ____sys_sendmsg+0x972/0x9f0
[  535.730532][T32398]  ? __might_fault+0xaf/0x130
[  535.730556][T32398]  ? __pfx_____sys_sendmsg+0x10/0x10
[  535.730583][T32398]  ? import_iovec+0x73/0xa0
[  535.730599][T32398]  ___sys_sendmsg+0x2a5/0x360
[  535.730622][T32398]  ? __lock_acquire+0x6b5/0x2cf0
[  535.730644][T32398]  ? __pfx____sys_sendmsg+0x10/0x10
[  535.730676][T32398]  ? futex_wake+0x4ac/0x580
[  535.730703][T32398]  ? __fget_files+0x2a/0x420
[  535.730722][T32398]  ? __fget_files+0x3a0/0x420
[  535.730746][T32398]  __x64_sys_sendmsg+0x1bd/0x2a0
[  535.730771][T32398]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  535.730799][T32398]  ? rcu_is_watching+0x15/0xb0
[  535.730823][T32398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.730840][T32398]  do_syscall_64+0x15f/0xf80
[  535.730859][T32398]  ? trace_irq_disable+0x3b/0x140
[  535.730876][T32398]  ? clear_bhb_loop+0x40/0x90
[  535.730892][T32398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.730908][T32398] RIP: 0033:0x7f764639cdd9
[  535.730922][T32398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.730938][T32398] RSP: 002b:00007f7647239028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  535.730954][T32398] RAX: ffffffffffffffda RBX: 00007f7646615fa0 RCX: 00007f764639cdd9
[  535.730964][T32398] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  535.730974][T32398] RBP: 00007f7646432d69 R08: 0000000000000000 R09: 0000000000000000
[  535.730984][T32398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  535.730992][T32398] R13: 00007f7646616038 R14: 00007f7646615fa0 R15: 00007fff2f542698
[  535.731009][T32398]  </TASK>
[  535.909563][T32404] syzkaller0: entered promiscuous mode
[  535.911527][T32404] syzkaller0: entered allmulticast mode
