last executing test programs:

1.099110948s ago: executing program 1 (id=3265):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x151da000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xba}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r2 = socket(0x2c, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0)
ioctl(r0, 0x4574f538, &(0x7f0000001640)="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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(r2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x36, 0x0, &(0x7f0000000240)="f80204160000000000007f5386ddb44b501c817ea08344bd8700883df04a3be1e6c808b380f957d8f81905e3d0dd65598770cff05f58", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a3100000000080002400000000154000000030a010200000000000000000100ffff0900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310020000038000000050a4f010000000000000000010020000c00024000000000000000010900010073797a31000000000c000480080001400000000514000000110001000000"], 0xdc}}, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000280)=0x4000, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRES16=r9, @ANYRES16=r0, @ANYRES32=r10, @ANYRES8=r9], 0x2c}}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12}, 0xc)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

499.559919ms ago: executing program 2 (id=3277):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x40, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40280d5}, 0x8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0x0, 0x0)

485.835498ms ago: executing program 1 (id=3278):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)

409.188634ms ago: executing program 1 (id=3279):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8)

301.403156ms ago: executing program 0 (id=3282):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001840)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x2000040)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x20000044)

252.556456ms ago: executing program 0 (id=3283):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

240.117576ms ago: executing program 2 (id=3284):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

239.951436ms ago: executing program 1 (id=3285):
close(0xffffffffffffffff)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000400)={r3, 0x7ff, 0xfff, 0x3, 0xf1d5, 0xd, 0x6c, 0x6e1, {r3, @in6={{0xa, 0x4e23, 0x80f7, @private1, 0x3}}, 0x8, 0x9, 0x7, 0x4}}, &(0x7f00000004c0)=0xb0)

170.660089ms ago: executing program 0 (id=3286):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x64, 0x4, 0x320, 0x100000c, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @empty, 0x7f7fffff, 0xff, 'pim6reg\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0xff, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xe8, 0x158, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x4}, {{0x42}, 0x5a}, {{0x4}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x4, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380)

170.477138ms ago: executing program 0 (id=3287):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x70bd26, 0x4000, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x994}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x38}}, 0x80)

110.001833ms ago: executing program 2 (id=3288):
r0 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)=""/77, &(0x7f0000000000)=0x4d)

109.837506ms ago: executing program 2 (id=3289):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe6e, 0x1}}, 0x20)

109.630044ms ago: executing program 2 (id=3290):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x1})
vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000a80)="86", 0x1}], 0x1, 0x8)
write$cgroup_devices(r1, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9)

60.043776ms ago: executing program 0 (id=3291):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x44000)

59.88014ms ago: executing program 2 (id=3292):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
syz_genetlink_get_family_id$nfc(0x0, r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x7c}}, 0x20000000)

458.773µs ago: executing program 0 (id=3293):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}, 0x2}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

169.736µs ago: executing program 1 (id=3294):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x1}]}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x30, 0x0, 0x1, 0xf35}, 0x28)

0s ago: executing program 1 (id=3295):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x46, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x19e, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc8}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31942' (ED25519) to the list of known hosts.
syzkaller login: [   49.059714][ T5730] cgroup: Unknown subsys name 'net'
[   49.121810][ T5730] cgroup: Unknown subsys name 'cpuset'
[   49.125405][ T5730] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.338426][ T5730] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.269499][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.272537][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.274764][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.277300][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.280861][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.445963][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.446357][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.454417][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.468785][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.471303][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.870378][ T5888] chnl_net:caif_netlink_parms(): no params data found
[   59.014714][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.017456][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.019808][ T5888] bridge_slave_0: entered allmulticast mode
[   59.022483][ T5888] bridge_slave_0: entered promiscuous mode
[   59.026219][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.032347][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.034649][ T5888] bridge_slave_1: entered allmulticast mode
[   59.041590][ T5888] bridge_slave_1: entered promiscuous mode
[   59.081100][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.095628][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.110245][ T5888] team0: Port device team_slave_0 added
[   59.113338][ T5888] team0: Port device team_slave_1 added
[   59.127002][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.129281][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.138399][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.148372][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.151037][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.161026][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.193974][ T5888] hsr_slave_0: entered promiscuous mode
[   59.196306][ T5888] hsr_slave_1: entered promiscuous mode
[   59.293390][ T5888] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.299492][ T5888] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.303878][ T5888] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.308820][ T5888] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.329544][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.332113][ T5888] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.334822][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.337093][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.366027][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.375408][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.381451][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.387000][ T5888] 8021q: adding VLAN 0 to HW filter on device team0
[   59.392793][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.394807][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.399891][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.401882][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.478828][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.511207][ T5888] veth0_vlan: entered promiscuous mode
[   59.518860][ T5888] veth1_vlan: entered promiscuous mode
[   59.539574][ T5888] veth0_macvtap: entered promiscuous mode
[   59.544200][ T5888] veth1_macvtap: entered promiscuous mode
[   59.552323][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.558122][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.564086][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.567438][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.570800][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.573695][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.954732][ T5195] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.959929][ T5195] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.977746][ T5195] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.980786][ T5195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.983594][ T5195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.023156][ T5195] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.026887][ T5195] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.029619][ T5195] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.032292][ T5195] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.035018][ T5195] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.071089][ T5876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.098283][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.101368][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.129377][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.132862][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.136001][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.162877][ T5876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.229708][ T5876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.379154][ T5919] chnl_net:caif_netlink_parms(): no params data found
[   60.383834][ T5917] chnl_net:caif_netlink_parms(): no params data found
[   60.453493][ T5921] chnl_net:caif_netlink_parms(): no params data found
[   60.486130][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.488555][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.490968][ T5919] bridge_slave_0: entered allmulticast mode
[   60.493615][ T5919] bridge_slave_0: entered promiscuous mode
[   60.509328][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.511724][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.514015][ T5919] bridge_slave_1: entered allmulticast mode
[   60.517934][ T5919] bridge_slave_1: entered promiscuous mode
[   60.541401][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.543835][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.546482][ T5917] bridge_slave_0: entered allmulticast mode
[   60.550510][ T5917] bridge_slave_0: entered promiscuous mode
[   60.554821][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.557936][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.560733][ T5917] bridge_slave_1: entered allmulticast mode
[   60.564202][ T5917] bridge_slave_1: entered promiscuous mode
[   60.575821][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.609803][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.630507][ T5917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.639864][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.641947][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.644318][ T5921] bridge_slave_0: entered allmulticast mode
[   60.647354][ T5921] bridge_slave_0: entered promiscuous mode
[   60.652352][ T5917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.657033][ T5919] team0: Port device team_slave_0 added
[   60.659034][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.661175][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.663576][ T5921] bridge_slave_1: entered allmulticast mode
[   60.667952][ T5921] bridge_slave_1: entered promiscuous mode
[   60.683199][ T5919] team0: Port device team_slave_1 added
[   60.709876][ T5917] team0: Port device team_slave_0 added
[   60.720259][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.725231][ T5917] team0: Port device team_slave_1 added
[   60.727989][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.730377][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.739056][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.743784][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.756673][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.759013][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.769180][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.802364][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.805078][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.815362][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.821306][ T5921] team0: Port device team_slave_0 added
[   60.823751][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.826470][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.836943][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.842889][ T5921] team0: Port device team_slave_1 added
[   60.875007][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.877147][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.884924][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.891229][ T5919] hsr_slave_0: entered promiscuous mode
[   60.893427][ T5919] hsr_slave_1: entered promiscuous mode
[   60.895669][ T5919] debugfs: 'hsr0' already exists in 'hsr'
[   60.897479][ T5919] Cannot create hsr debugfs directory
[   60.918827][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.921486][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   60.931599][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.959666][ T5917] hsr_slave_0: entered promiscuous mode
[   60.961768][ T5917] hsr_slave_1: entered promiscuous mode
[   60.963748][ T5917] debugfs: 'hsr0' already exists in 'hsr'
[   60.965683][ T5917] Cannot create hsr debugfs directory
[   61.069715][ T5921] hsr_slave_0: entered promiscuous mode
[   61.072028][ T5921] hsr_slave_1: entered promiscuous mode
[   61.074039][ T5921] debugfs: 'hsr0' already exists in 'hsr'
[   61.075769][ T5921] Cannot create hsr debugfs directory
[   61.469553][ T5876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.028826][   T55] Bluetooth: hci0: command tx timeout
[   62.118100][   T55] Bluetooth: hci1: command tx timeout
[   62.187884][   T55] Bluetooth: hci2: command tx timeout
[   62.910419][ T5876] bridge_slave_1: left allmulticast mode
[   62.912750][ T5876] bridge_slave_1: left promiscuous mode
[   62.915484][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.933707][ T5876] bridge_slave_0: left allmulticast mode
[   62.936069][ T5876] bridge_slave_0: left promiscuous mode
[   62.938653][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.077318][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.082896][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.087374][ T5876] bond0 (unregistering): Released all slaves
[   63.181839][ T5876] hsr_slave_0: left promiscuous mode
[   63.184373][ T5876] hsr_slave_1: left promiscuous mode
[   63.186813][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.191704][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.196502][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.199548][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.207032][ T5876] veth1_macvtap: left promiscuous mode
[   63.210552][ T5876] veth0_macvtap: left promiscuous mode
[   63.212728][ T5876] veth1_vlan: left promiscuous mode
[   63.214843][ T5876] veth0_vlan: left promiscuous mode
[   63.369024][ T5876] team0 (unregistering): Port device team_slave_1 removed
[   63.378556][ T5876] team0 (unregistering): Port device team_slave_0 removed
[   63.728957][ T5919] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.740154][ T5919] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.744688][ T5919] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.750022][ T5919] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.809441][ T5917] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.833218][ T5917] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.854417][ T5917] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.886748][ T5917] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.925561][ T5921] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.935735][ T5921] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.949565][ T5921] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.000937][ T5921] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.009905][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.055433][ T5919] 8021q: adding VLAN 0 to HW filter on device team0
[   64.090950][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.093851][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.108500][   T55] Bluetooth: hci0: command tx timeout
[   64.114613][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.117479][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.130761][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.163198][ T5917] 8021q: adding VLAN 0 to HW filter on device team0
[   64.188984][   T55] Bluetooth: hci1: command tx timeout
[   64.199851][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.202055][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.205312][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.207659][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.217074][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.241668][ T5921] 8021q: adding VLAN 0 to HW filter on device team0
[   64.250238][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.253286][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.267785][   T55] Bluetooth: hci2: command tx timeout
[   64.270547][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.272756][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.340280][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.395554][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.410163][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.428081][ T5919] veth0_vlan: entered promiscuous mode
[   64.449895][ T5919] veth1_vlan: entered promiscuous mode
[   64.454914][ T5917] veth0_vlan: entered promiscuous mode
[   64.474323][ T5919] veth0_macvtap: entered promiscuous mode
[   64.486326][ T5917] veth1_vlan: entered promiscuous mode
[   64.491227][ T5921] veth0_vlan: entered promiscuous mode
[   64.495579][ T5919] veth1_macvtap: entered promiscuous mode
[   64.507468][ T5921] veth1_vlan: entered promiscuous mode
[   64.514906][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.529771][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.537424][ T5917] veth0_macvtap: entered promiscuous mode
[   64.548256][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.551282][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.553984][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.556694][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.561983][ T5921] veth0_macvtap: entered promiscuous mode
[   64.565606][ T5917] veth1_macvtap: entered promiscuous mode
[   64.579780][ T5921] veth1_macvtap: entered promiscuous mode
[   64.605065][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.621355][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.631236][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.636046][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.643708][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.646434][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.670215][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.678055][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.692017][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.695176][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.699730][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.713167][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.722535][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.740069][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.744361][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.747332][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.774301][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.780860][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.809616][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.812031][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.833494][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.835993][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.853276][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.855828][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.041263][ T6019] Bluetooth: MGMT ver 1.23
[   65.057210][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'.
[   65.082184][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'.
[   65.119371][ T6022] netlink: 'syz.0.67': attribute type 3 has an invalid length.
[   65.122895][ T6022] netlink: 3 bytes leftover after parsing attributes in process `syz.0.67'.
[   65.238571][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'.
[   65.292921][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'.
[   65.693272][ T6036] tap0: tun_chr_ioctl cmd 1074025676
[   65.695359][ T6036] tap0: owner set to 0
[   65.826866][ T6042] syz.1.79 uses obsolete (PF_INET,SOCK_PACKET)
[   66.051282][ T6053] xt_CT: You must specify a L4 protocol and not use inversions on it
[   66.188545][   T55] Bluetooth: hci0: command tx timeout
[   66.199586][ T6066] Illegal XDP return value 65535 on prog  (id 5) dev N/A, expect packet loss!
[   66.268646][   T55] Bluetooth: hci1: command tx timeout
[   66.347867][   T55] Bluetooth: hci2: command tx timeout
[   66.773920][ T6105] xt_bpf: check failed: parse error
[   67.297858][ T5998] IPVS: starting estimator thread 0...
[   67.420646][ T6132] IPVS: using max 83 ests per chain, 199200 per kthread
[   67.659633][ T6160] syzkaller1: entered promiscuous mode
[   67.663777][ T6160] syzkaller1: entered allmulticast mode
[   67.870160][ T6180] openvswitch: netlink: Key type 319 is out of range max 32
[   67.871063][ T6175] syzkaller1: entered promiscuous mode
[   67.875161][ T6175] syzkaller1: entered allmulticast mode
[   68.267629][   T55] Bluetooth: hci0: command tx timeout
[   68.314786][ T6206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.150'.
[   68.318941][ T6206] Zero length message leads to an empty skb
[   68.348700][   T55] Bluetooth: hci1: command tx timeout
[   68.380830][ T6210] pim6reg1: entered promiscuous mode
[   68.383043][ T6210] pim6reg1: entered allmulticast mode
[   68.427818][   T55] Bluetooth: hci2: command tx timeout
[   68.461652][ T6214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.153'.
[   68.552125][ T6210] tipc: Trying to set illegal importance in message
[   68.569591][ T6210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.149'.
[   68.710142][ T6231] gtp0: entered promiscuous mode
[   68.711913][ T6231] gtp0: entered allmulticast mode
[   68.777872][ T6237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.933791][ T6253] syzkaller0: entered promiscuous mode
[   68.935558][ T6253] syzkaller0: entered allmulticast mode
[   69.458482][ T6298] ipt_ECN: cannot use operation on non-tcp rule
[   69.860903][ T6314] netlink: 'syz.0.200': attribute type 1 has an invalid length.
[   69.913104][ T6314] bridge_slave_0: left allmulticast mode
[   69.915052][ T6314] bridge_slave_0: left promiscuous mode
[   69.916886][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.921623][ T6314] bridge_slave_1: left allmulticast mode
[   69.929380][ T6314] bridge_slave_1: left promiscuous mode
[   69.933761][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.941116][ T6314] bond0: (slave bond_slave_0): Releasing backup interface
[   69.946187][ T6314] bond0: (slave bond_slave_1): Releasing backup interface
[   69.953337][ T6314] team0: Port device team_slave_0 removed
[   69.962745][ T6314] team0: Port device team_slave_1 removed
[   69.965541][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.971335][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.976243][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.985351][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.988937][ T6314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   70.083656][ T6342] netlink: 'syz.2.212': attribute type 1 has an invalid length.
[   70.086264][ T6342] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.212'.
[   70.580690][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'.
[   70.690404][ T6395] netlink: 'syz.2.236': attribute type 1 has an invalid length.
[   70.806141][ T6405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.241'.
[   71.319417][ T6408] xt_hashlimit: size too large, truncated to 1048576
[   71.323558][ T6408] xt_hashlimit: max too large, truncated to 1048576
[   71.557159][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'.
[   71.576231][ T6418] bond1: option ad_actor_sys_prio: invalid value (0)
[   71.581077][ T6418] bond1: option ad_actor_sys_prio: allowed values 1 - 65535
[   71.593583][ T6418] bond1 (unregistering): Released all slaves
[   71.840453][ T6437] netlink: 83 bytes leftover after parsing attributes in process `syz.1.255'.
[   72.236784][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'.
[   72.239843][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'.
[   72.242554][ T6472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.416403][ T6494] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   72.471479][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.474261][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.543509][ T6504] sctp: [Deprecated]: syz.1.286 (pid 6504) Use of struct sctp_assoc_value in delayed_ack socket option.
[   72.543509][ T6504] Use struct sctp_sack_info instead
[   72.554199][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.561097][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.647401][ T6500] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   72.655332][ T6500] bond2 (unregistering): Released all slaves
[   72.665945][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.672635][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.676298][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.683680][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.835643][   T55] Bluetooth: hci2: command tx timeout
[   72.879238][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'.
[   72.953227][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[   73.022865][ T6547] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   73.390910][ T6571] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.316'.
[   73.889544][ T6597] netlink: 'syz.1.325': attribute type 1 has an invalid length.
[   73.905499][ T6597] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.335405][ T6621] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.346172][ T6621] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   74.797382][ T6664] smc: net device hsr0 applied user defined pnetid SYZ2
[   74.819379][ T6666] netlink: 'syz.2.358': attribute type 4 has an invalid length.
[   74.829678][ T6666] netlink: 'syz.2.358': attribute type 4 has an invalid length.
[   74.938852][ T6683] tap0: tun_chr_ioctl cmd 1074025677
[   74.940986][ T6683] tap0: linktype set to 773
[   75.412923][ T6731] __nla_validate_parse: 3 callbacks suppressed
[   75.412932][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'.
[   75.471370][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'.
[   75.867880][ T6771] netlink: 'syz.2.394': attribute type 1 has an invalid length.
[   75.872463][ T6771] netlink: 228 bytes leftover after parsing attributes in process `syz.2.394'.
[   75.890160][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'.
[   75.933739][ T6775] netlink: 124 bytes leftover after parsing attributes in process `syz.2.397'.
[   76.093828][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'.
[   76.751954][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   76.756673][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   76.953446][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'.
[   76.972040][ T6847] hsr_slave_1 (unregistering): left promiscuous mode
[   77.367650][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'.
[   78.270349][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'.
[   78.307908][ T6894] openvswitch: netlink: Actions may not be safe on all matching packets
[   78.930284][ T6956] xfrm0: entered allmulticast mode
[   78.942294][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'.
[   79.217374][ T6977] syzkaller0: entered promiscuous mode
[   79.221950][ T6977] syzkaller0: entered allmulticast mode
[   79.227448][ T6977] tipc: Started in network mode
[   79.230638][ T6977] tipc: Node identity , cluster identity 4711
[   79.235767][ T6977] tipc: Failed to obtain node identity
[   79.238433][ T6977] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   79.358800][ T6986] nbd: must specify a device to reconfigure
[   79.567920][ T7002] warning: `syz.0.505' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.655058][ T7010] netlink: 'syz.0.509': attribute type 2 has an invalid length.
[   79.703255][ T7016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.975757][ T7042] netlink: 'syz.0.523': attribute type 1 has an invalid length.
[   80.355854][ T7083] bridge_slave_1: left allmulticast mode
[   80.369952][ T7083] bridge_slave_1: left promiscuous mode
[   80.372787][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.381176][ T7083] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   81.603849][ T7183] __nla_validate_parse: 7 callbacks suppressed
[   81.603865][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'.
[   81.861666][ T7198] bridge2: entered promiscuous mode
[   81.863848][ T7198] bridge2: entered allmulticast mode
[   81.872314][ T7198] team0: Port device bridge2 added
[   81.881384][ T7198] bridge0: port 1(team0) entered blocking state
[   81.885153][ T7198] bridge0: port 1(team0) entered disabled state
[   81.888323][ T7198] team0: entered allmulticast mode
[   81.892289][ T7198] team0: entered promiscuous mode
[   82.046531][ T7202] netlink: 'syz.0.580': attribute type 1 has an invalid length.
[   82.070630][ T7202] bond1: (slave ip6gretap0): Enslaving as a backup interface with an up link
[   82.086789][ T7202] veth5: entered promiscuous mode
[   82.091078][ T7202] bond1: (slave veth5): Enslaving as a backup interface with a down link
[   82.095315][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.580'.
[   82.100087][ T7202] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.100460][ T5876] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   82.208615][ T5876] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   83.611524][ T7109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.542932][ T7217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.644456][ T7245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.712871][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'.
[   85.057713][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.062310][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.069300][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.077163][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.138670][ T7278] netlink: 'syz.2.608': attribute type 10 has an invalid length.
[   85.141910][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'.
[   87.009043][   T31] cfg80211: failed to load regulatory.db
[   87.147800][ T5195] Bluetooth: hci0: command 0x0c1a tx timeout
[   87.150611][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   87.586255][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'.
[   87.892332][ T7307] netlink: 'syz.2.621': attribute type 8 has an invalid length.
[   87.917108][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'.
[   88.022982][ T7318] netlink: 104 bytes leftover after parsing attributes in process `syz.1.626'.
[   88.199139][ T7329] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.631'.
[   88.373562][ T5921] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   88.377271][ T5921] CPU: 0 UID: 0 PID: 5921 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   88.377281][ T5921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.377286][ T5921] Call Trace:
[   88.377290][ T5921]  <TASK>
[   88.377294][ T5921]  dump_stack_lvl+0xe8/0x150
[   88.377309][ T5921]  dump_header+0xd3/0x4c0
[   88.377320][ T5921]  oom_kill_process+0x3ab/0x970
[   88.377330][ T5921]  out_of_memory+0x106c/0x1410
[   88.377338][ T5921]  ? __pfx___mutex_lock+0x10/0x10
[   88.377349][ T5921]  ? __pfx_out_of_memory+0x10/0x10
[   88.377355][ T5921]  ? do_raw_spin_unlock+0x4d/0x210
[   88.377367][ T5921]  try_charge_memcg+0xc53/0x1560
[   88.377377][ T5921]  ? __lock_acquire+0x6b5/0x2cf0
[   88.377390][ T5921]  ? __pfx_try_charge_memcg+0x10/0x10
[   88.377397][ T5921]  ? xa_load+0x60/0x210
[   88.377407][ T5921]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[   88.377417][ T5921]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[   88.377425][ T5921]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[   88.377434][ T5921]  __swap_cache_prepare_and_add+0x52a/0x700
[   88.377451][ T5921]  swap_cache_alloc_folio+0xf1/0x240
[   88.377461][ T5921]  swap_cluster_readahead+0x369/0x690
[   88.377473][ T5921]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   88.377487][ T5921]  ? get_vma_policy+0x27b/0x3c0
[   88.377500][ T5921]  swapin_readahead+0x196/0xc50
[   88.377514][ T5921]  ? __pfx_swapin_readahead+0x10/0x10
[   88.377524][ T5921]  ? swap_table_get+0x1e/0x260
[   88.377550][ T5921]  ? swap_table_get+0x1e/0x260
[   88.377559][ T5921]  ? swap_table_get+0x1e/0x260
[   88.377567][ T5921]  ? swap_table_get+0x216/0x260
[   88.377577][ T5921]  ? swap_cache_get_folio+0x513/0x520
[   88.377588][ T5921]  do_swap_page+0x54f/0x58d0
[   88.377598][ T5921]  ? __lock_acquire+0x6b5/0x2cf0
[   88.377613][ T5921]  ? do_swap_page+0x12c/0x58d0
[   88.377622][ T5921]  ? __pfx_do_swap_page+0x10/0x10
[   88.377630][ T5921]  ? __pte_offset_map+0x1ae/0x240
[   88.377642][ T5921]  ? pte_offset_map_rw_nolock+0xea/0x160
[   88.377652][ T5921]  handle_mm_fault+0x12d2/0x3310
[   88.377667][ T5921]  ? handle_mm_fault+0xee/0x3310
[   88.377679][ T5921]  ? __pfx_handle_mm_fault+0x10/0x10
[   88.377688][ T5921]  ? lock_vma_under_rcu+0x45a/0x500
[   88.377704][ T5921]  do_user_addr_fault+0xa73/0x1340
[   88.377716][ T5921]  ? rcu_is_watching+0x15/0xb0
[   88.377726][ T5921]  ? trace_page_fault_user+0x84/0x210
[   88.377736][ T5921]  exc_page_fault+0x6a/0xc0
[   88.377753][ T5921]  asm_exc_page_fault+0x26/0x30
[   88.377761][ T5921] RIP: 0033:0x7f9ce795d60e
[   88.377770][ T5921] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   88.377776][ T5921] RSP: 002b:00007ffe9be865f8 EFLAGS: 00010246
[   88.377783][ T5921] RAX: 0000000000000000 RBX: 000055555f004500 RCX: 00007f9ce795d60e
[   88.377788][ T5921] RDX: 00007ffe9be86650 RSI: 0000000000000000 RDI: 0000000000000000
[   88.377792][ T5921] RBP: 00007ffe9be866bc R08: 0000000000000000 R09: 0000000000000000
[   88.377796][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[   88.377800][ T5921] R13: 00000000000927c0 R14: 0000000000015754 R15: 00007ffe9be86710
[   88.377812][ T5921]  </TASK>
[   88.579059][ T5921] memory: usage 303820kB, limit 307200kB, failcnt 244
[   88.581848][ T5921] memory+swap: usage 302624kB, limit 9007199254740988kB, failcnt 0
[   88.584665][ T5921] kmem: usage 301332kB, limit 9007199254740988kB, failcnt 0
[   88.598700][ T5921] Memory cgroup stats for /syz2:
[   88.598946][ T5921] cache 0
[   88.603728][ T5921] rss 0
[   88.605628][ T5921] rss_huge 0
[   88.611560][ T5921] shmem 0
[   88.614411][ T5921] mapped_file 0
[   88.618268][ T5921] dirty 0
[   88.620753][ T5921] writeback 0
[   88.623836][ T5921] workingset_refault_anon 2
[   88.630505][ T5921] workingset_refault_file 0
[   88.634886][ T5921] swap 106496
[   88.637454][ T5921] swapcached 114688
[   88.641543][ T5921] pgpgin 13389
[   88.643867][ T5921] pgpgout 13387
[   88.646176][ T5921] pgfault 33221
[   88.648497][ T5921] pgmajfault 3
[   88.650779][ T5921] inactive_anon 0
[   88.654260][ T5921] active_anon 8192
[   88.656273][ T5921] inactive_file 0
[   88.659770][ T5921] active_file 0
[   88.662325][ T5921] unevictable 0
[   88.664632][ T5921] hierarchical_memory_limit 314572800
[   88.670302][ T5921] hierarchical_memsw_limit 9223372036854771712
[   88.674538][ T5921] total_cache 0
[   88.676861][ T5921] total_rss 0
[   88.679050][ T5921] total_rss_huge 0
[   88.681968][ T5921] total_shmem 0
[   88.685389][ T5921] total_mapped_file 0
[   88.688376][ T5921] total_dirty 0
[   88.690736][ T5921] total_writeback 0
[   88.693172][ T5921] total_workingset_refault_anon 2
[   88.696877][ T5921] total_workingset_refault_file 0
[   88.701517][ T5921] total_swap 106496
[   88.704845][ T5921] total_swapcached 114688
[   88.708214][ T5921] total_pgpgin 13389
[   88.715600][ T5921] total_pgpgout 13387
[   88.717013][ T5921] total_pgfault 33221
[   88.720015][ T5921] total_pgmajfault 3
[   88.722078][ T5921] total_inactive_anon 0
[   88.725690][ T5921] total_active_anon 8192
[   88.729438][ T5921] total_inactive_file 0
[   88.731985][ T5921] total_active_file 0
[   88.735831][ T5921] total_unevictable 0
[   88.738357][ T5921] anon_cost 0
[   88.740619][ T5921] file_cost 0
[   88.742933][ T5921] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.625,pid=7315,uid=0
[   88.754174][ T5921] Memory cgroup out of memory: Killed process 7315 (syz.2.625) total-vm:102160kB, anon-rss:1244kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[   88.768313][ T7348] syzkaller0: entered promiscuous mode
[   88.770027][ T7348] syzkaller0: entered allmulticast mode
[   88.788375][ T7348] tipc: Started in network mode
[   88.789997][ T7348] tipc: Node identity 7eea5be9ce7c, cluster identity 4711
[   88.792553][ T7348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.820594][ T7348] tipc: Resetting bearer <eth:syzkaller0>
[   88.823526][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.826679][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.862054][ T7347] tipc: Resetting bearer <eth:syzkaller0>
[   88.925962][ T7347] tipc: Disabling bearer <eth:syzkaller0>
[   89.262853][ T5942] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.266238][ T5942] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.284932][ T5942] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.290258][ T5942] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.292556][ T7373] xt_CT: You must specify a L4 protocol and not use inversions on it
[   89.479729][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.659'.
[   89.485513][ T7391] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   89.604278][ T7399] openvswitch: netlink: IP tunnel dst address not specified
[   89.752415][ T7411] syzkaller0: entered promiscuous mode
[   89.756968][ T7411] syzkaller0: entered allmulticast mode
[   89.775757][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'.
[   89.803185][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'.
[   89.806167][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'.
[   89.809447][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'.
[   89.876856][ T7422] netlink: 80 bytes leftover after parsing attributes in process `syz.0.675'.
[   90.010787][ T7432] tipc: Started in network mode
[   90.012449][ T7432] tipc: Node identity ac14140f, cluster identity 4711
[   90.015415][ T7432] tipc: New replicast peer: 255.255.255.255
[   90.034392][ T7432] tipc: Enabled bearer <udp:syz2>, priority 10
[   90.204726][ T7445] syzkaller0: entered promiscuous mode
[   90.206648][ T7445] syzkaller0: entered allmulticast mode
[   90.625221][ T7463] gretap0: entered promiscuous mode
[   91.038930][   T31] tipc: Node number set to 2886997007
[   91.058836][ T7501] syzkaller1: entered promiscuous mode
[   91.061230][ T7501] syzkaller1: entered allmulticast mode
[   91.263242][ T7509] netlink: 'syz.1.711': attribute type 22 has an invalid length.
[   91.419990][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.517011][ T7511] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.530763][ T7511] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.642137][ T7511] gtp0: left promiscuous mode
[   91.648550][ T7511] gtp0: left allmulticast mode
[   91.672587][ T5942] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.684898][ T5942] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.708762][ T5942] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.727676][ T5942] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.766600][ T7548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.597691][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   92.600297][ T5195] Bluetooth: hci0: command 0x0c1a tx timeout
[   92.658561][ T5942] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.669676][ T5942] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.673802][ T5942] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.684422][ T5942] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.900825][ T7652] __nla_validate_parse: 8 callbacks suppressed
[   92.900840][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'.
[   92.906912][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'.
[   93.096822][ T7660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.765'.
[   93.190502][ T7666] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   93.246512][ T7671] netlink: 'syz.2.770': attribute type 3 has an invalid length.
[   93.387206][ T7679] xt_hashlimit: size too large, truncated to 1048576
[   93.736606][ T7702] atomic_op ffff888114c59998 conn xmit_atomic 0000000000000000
[   93.781824][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'.
[   93.851352][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.790'.
[   93.961619][ T7720] netlink: 'syz.1.793': attribute type 8 has an invalid length.
[   93.964116][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'.
[   93.988245][ T7720] veth1_to_team: entered promiscuous mode
[   93.995184][ T7720] veth1_to_team: left promiscuous mode
[   94.231044][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'.
[   94.397506][ T7746] netlink: 292 bytes leftover after parsing attributes in process `syz.1.803'.
[   94.530029][ T7750] netlink: 64 bytes leftover after parsing attributes in process `syz.1.804'.
[   94.533719][ T7750] netlink: 64 bytes leftover after parsing attributes in process `syz.1.804'.
[   94.680448][ T7758] sit1: entered allmulticast mode
[   94.808772][ T7767] IPv6: NLM_F_CREATE should be specified when creating new route
[   95.630135][ T7822] geneve2: entered promiscuous mode
[   95.637213][ T5942] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.643869][ T5942] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.649267][ T5942] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.655488][ T5942] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.911100][ T7837] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.925054][ T7837] 8021q: adding VLAN 0 to HW filter on device team0
[   95.938284][ T7837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.635557][ T7867] bridge_slave_0: left allmulticast mode
[   96.638292][ T7867] bridge_slave_0: left promiscuous mode
[   96.640694][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.647390][ T7867] bond0: (slave bond_slave_0): Releasing backup interface
[   96.652749][ T7867] bond0: (slave bond_slave_1): Releasing backup interface
[   96.662492][ T7867] team0: Port device team_slave_0 removed
[   96.667203][ T7867] team0: Port device team_slave_1 removed
[   96.670429][ T7867] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.676785][ T7867] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.682300][ T7867] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   97.509445][ T7901] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[   97.513548][ T7901] syzkaller0: entered promiscuous mode
[   97.515968][ T7901] syzkaller0: entered allmulticast mode
[   97.533331][ T7901] tipc: Started in network mode
[   97.535541][ T7901] tipc: Node identity 5a12401d542c, cluster identity 4711
[   97.540316][ T7901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.545625][ T7900] tipc: Resetting bearer <eth:syzkaller0>
[   97.574545][ T7900] tipc: Disabling bearer <eth:syzkaller0>
[   98.299325][ T7948] netlink: 'syz.2.886': attribute type 1 has an invalid length.
[   98.593749][ T7961] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma?
[   98.637574][    C1] hrtimer: interrupt took 42392 ns
[  100.713183][ T8027] __nla_validate_parse: 6 callbacks suppressed
[  100.713198][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'.
[  100.852094][ T8030] syzkaller0: entered promiscuous mode
[  100.854215][ T8030] syzkaller0: entered allmulticast mode
[  101.662310][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.670442][ T8069] 8021q: adding VLAN 0 to HW filter on device team0
[  101.682322][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.941'.
[  101.685773][ T8075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.941'.
[  101.698676][ T8069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.932221][ T8089] netlink: 52 bytes leftover after parsing attributes in process `syz.2.948'.
[  101.935474][ T8089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.004006][ T8094] netlink: 'syz.2.950': attribute type 1 has an invalid length.
[  102.007156][ T8094] netlink: 'syz.2.950': attribute type 3 has an invalid length.
[  102.180616][ T8105] netlink: 144 bytes leftover after parsing attributes in process `syz.2.956'.
[  102.185900][ T8105] xt_hashlimit: invalid rate
[  102.439636][ T8115] vlan0: entered allmulticast mode
[  102.441942][ T8115] bond0: entered allmulticast mode
[  102.584378][ T8122] netlink: 'syz.0.964': attribute type 1 has an invalid length.
[  102.629051][ T8125] netlink: 32 bytes leftover after parsing attributes in process `syz.0.965'.
[  102.761919][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'.
[  102.819579][ T8133] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.969'.
[  103.222844][ T8147] syzkaller0: entered promiscuous mode
[  103.224652][ T8147] syzkaller0: entered allmulticast mode
[  104.616455][ T8189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.991'.
[  104.783225][ T8199] ip6gre1: entered promiscuous mode
[  104.815825][ T8201] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4062909823/4062909825
[  104.835281][ T8201] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4062909823/4062909824
[  104.847012][ T8201] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4062909823/4062909825
[  104.857995][ T8201] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4062909823/4062909824
[  104.905119][ T8204] netlink: 72 bytes leftover after parsing attributes in process `syz.2.999'.
[  105.383414][ T8225] netlink: 'syz.0.1007': attribute type 10 has an invalid length.
[  105.389900][ T8225] hsr_slave_0: left promiscuous mode
[  105.399380][ T8225] hsr_slave_1: left promiscuous mode
[  105.403037][ T8225] smc: removing net device hsr0 with user defined pnetid SYZ2
[  105.720259][ T8244] xt_hashlimit: size too large, truncated to 1048576
[  105.792821][ T8249] syzkaller1: entered promiscuous mode
[  105.797233][ T8249] syzkaller1: entered allmulticast mode
[  105.805557][ T8249] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96
[  106.018793][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'.
[  106.035517][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'.
[  106.035972][ T5942] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.042588][ T5942] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.046270][ T5942] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.067785][ T5942] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.638225][ T8297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1039'.
[  106.851354][ T8306] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  106.888014][ T8310] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1044'.
[  106.982454][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'.
[  107.047896][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'.
[  107.052035][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'.
[  107.056345][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'.
[  107.060765][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'.
[  108.162302][ T8358] syzkaller1: entered promiscuous mode
[  108.164601][ T8358] syzkaller1: entered allmulticast mode
[  108.393327][ T8366] geneve2: left promiscuous mode
[  108.442321][ T5942] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.445369][ T5942] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.468554][ T5942] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.472213][ T5942] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.575384][ T8377] geneve3: entered allmulticast mode
[  108.673213][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'.
[  109.294011][ T8420] netlink: 'syz.2.1088': attribute type 1 has an invalid length.
[  110.213338][ T8483] netlink: 'syz.1.1118': attribute type 1 has an invalid length.
[  110.215940][ T8483] netlink: 'syz.1.1118': attribute type 1 has an invalid length.
[  110.479679][ T8508] syzkaller0: entered promiscuous mode
[  110.481680][ T8508] syzkaller0: entered allmulticast mode
[  111.291402][ T8547] __nla_validate_parse: 8 callbacks suppressed
[  111.291417][ T8547] netlink: 876 bytes leftover after parsing attributes in process `syz.2.1131'.
[  111.297956][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'.
[  111.805015][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1141'.
[  111.820276][ T8570] bond2: (slave bond_slave_1): Device is not bonding slave
[  111.823130][ T8570] bond2: option active_slave: invalid value (bond_slave_1)
[  111.831094][ T8570] bond2 (unregistering): Released all slaves
[  112.008813][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'.
[  112.104858][ T8584] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1143'.
[  112.111844][ T8584] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1143'.
[  112.329992][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'.
[  112.482392][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'.
[  112.662987][ T8620] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  112.669106][ T8620] batman_adv: batadv0: Adding interface: ip6gretap1
[  112.671786][ T8620] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.684670][ T8620] batman_adv: batadv0: Interface activated: ip6gretap1
[  112.688915][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'.
[  112.962253][ T8637] xt_hashlimit: max too large, truncated to 1048576
[  112.968037][ T8637] xt_hashlimit: overflow, try lower: 2/0
[  114.018215][ T8681] xt_policy: neither incoming nor outgoing policy selected
[  114.077964][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1194'.
[  114.081498][ T8685] netlink: 'syz.2.1194': attribute type 7 has an invalid length.
[  114.084557][ T8685] netlink: 'syz.2.1194': attribute type 8 has an invalid length.
[  114.459389][ T8707] veth1_to_batadv: entered allmulticast mode
[  115.088259][ T8725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.094471][ T8737] xfrm1: entered allmulticast mode
[  115.214247][ T8746] syzkaller0: entered promiscuous mode
[  115.216001][ T8746] syzkaller0: entered allmulticast mode
[  115.230217][ T8746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.237503][ T8745] tipc: Resetting bearer <eth:syzkaller0>
[  115.259264][ T8745] tipc: Disabling bearer <eth:syzkaller0>
[  115.319497][ T8750] openvswitch: netlink: IP tunnel dst address not specified
[  115.561330][ T8757] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  115.568181][ T5942] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.571621][ T5942] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.575004][ T5942] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.579220][ T5942] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.973677][ T8767] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  116.162187][ T8777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.785509][ T8816] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.668819][ T8832] lo: entered allmulticast mode
[  117.676726][ T8833] lo: left allmulticast mode
[  118.047067][ T8853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.054560][ T8853] syzkaller0: entered promiscuous mode
[  118.057250][ T8853] syzkaller0: entered allmulticast mode
[  118.074807][ T8853] tipc: Resetting bearer <eth:syzkaller0>
[  118.081540][ T8851] tipc: Resetting bearer <eth:syzkaller0>
[  118.092489][ T8851] tipc: Disabling bearer <eth:syzkaller0>
[  118.099237][ T8854] __nla_validate_parse: 5 callbacks suppressed
[  118.099248][ T8854] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1266'.
[  118.343096][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'.
[  118.378997][ T8874] x_tables: duplicate entry at hook 2
[  118.456539][ T8883] ieee802154 phy0 wpan0: encryption failed: -22
[  119.160349][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'.
[  119.210813][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'.
[  119.425552][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1297'.
[  119.429588][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1297'.
[  119.541682][ T8893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.584957][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1301'.
[  119.642811][ T8931] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1301'.
[  119.657688][ T8931] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1301'.
[  119.661134][ T8931] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1301'.
[  120.836547][ T8981] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  121.177275][ T9000] netlink: 'syz.0.1332': attribute type 1 has an invalid length.
[  121.180224][ T9000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.404363][ T9016] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  121.723259][ T9040] netlink: zone id is out of range
[  121.768401][ T9042] syzkaller0: entered promiscuous mode
[  121.771089][ T9042] syzkaller0: entered allmulticast mode
[  121.803412][ T9046] netlink: 'syz.2.1355': attribute type 4 has an invalid length.
[  121.875759][ T9048] syzkaller0: entered promiscuous mode
[  121.877635][ T9048] syzkaller0: entered allmulticast mode
[  122.038524][ T9055] tls_set_device_offload: netdev not found
[  122.259346][ T9068] netlink: 'syz.0.1367': attribute type 1 has an invalid length.
[  122.920080][ T9120] syz_tun: entered allmulticast mode
[  122.923455][ T9115] syz_tun: left allmulticast mode
[  123.088559][ T9130] sctp: [Deprecated]: syz.2.1394 (pid 9130) Use of struct sctp_assoc_value in delayed_ack socket option.
[  123.088559][ T9130] Use struct sctp_sack_info instead
[  123.695225][ T9153] __nla_validate_parse: 9 callbacks suppressed
[  123.695245][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'.
[  123.722840][ T9153] 8021q: adding VLAN 0 to HW filter on device bond2
[  125.482075][ T9221] netlink: 'syz.1.1425': attribute type 1 has an invalid length.
[  125.484423][ T9221] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1425'.
[  125.493760][ T9221] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1425'.
[  125.618252][ T9229] netlink: 'syz.1.1426': attribute type 3 has an invalid length.
[  125.713985][ T9240] netlink: 'syz.2.1430': attribute type 1 has an invalid length.
[  125.718406][ T9240] netlink: 'syz.2.1430': attribute type 2 has an invalid length.
[  125.723526][ T9240] netlink: 'syz.2.1430': attribute type 1 has an invalid length.
[  125.726329][ T9240] netlink: 'syz.2.1430': attribute type 3 has an invalid length.
[  125.731595][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'.
[  125.740374][ T9234] syzkaller1: tun_chr_ioctl cmd 1074025677
[  125.743426][ T9234] syzkaller1: linktype set to 270
[  126.127438][ T9282] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1438'.
[  126.169912][ T9285] netlink: 'syz.2.1439': attribute type 1 has an invalid length.
[  126.223068][   T34] audit: type=1804 audit(1778424316.007:2): pid=9288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1441" name="/newroot/446/cgroup.controllers" dev="tmpfs" ino=2263 res=1 errno=0
[  126.242023][   T34] audit: type=1800 audit(1778424316.007:3): pid=9288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1441" name="cgroup.controllers" dev="tmpfs" ino=2263 res=0 errno=0
[  126.582173][ T9292] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1443'.
[  127.224622][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'.
[  127.382165][ T9363] netlink: 'syz.2.1475': attribute type 8 has an invalid length.
[  127.548857][ T9369] syzkaller0: entered promiscuous mode
[  127.551868][ T9369] syzkaller0: entered allmulticast mode
[  127.619921][   T56] block nbd0: Receive control failed (result -32)
[  127.833900][ T9387] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  127.894150][ T9390] netlink: 'syz.1.1486': attribute type 89 has an invalid length.
[  128.038947][ T9397] IPVS: Error connecting to the multicast addr
[  128.257833][ T9414] netlink: 'syz.2.1495': attribute type 2 has an invalid length.
[  128.260489][ T9414] netlink: 'syz.2.1495': attribute type 9 has an invalid length.
[  128.274902][ T9414] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1495'.
[  128.385753][ T9424] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  129.170238][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'.
[  129.299723][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'.
[  129.302974][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'.
[  129.305901][ T9479] netlink: 'syz.0.1519': attribute type 6 has an invalid length.
[  129.315643][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'.
[  129.317834][ T5876] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.322745][ T5942] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.325570][ T5942] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.333381][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'.
[  129.336235][ T9479] netlink: 'syz.0.1519': attribute type 6 has an invalid length.
[  129.340357][ T5942] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.147892][ T9510] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  130.151772][ T9510] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma?
[  130.316623][ T9527] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  130.321550][ T9527] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  130.627706][ T9542] netlink: 'syz.2.1542': attribute type 1 has an invalid length.
[  130.630296][ T9542] netlink: 'syz.2.1542': attribute type 1 has an invalid length.
[  130.632686][ T9542] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1542'.
[  130.635488][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'.
[  130.647757][ T9542] netlink: 'syz.2.1542': attribute type 1 has an invalid length.
[  130.652567][ T9542] netlink: 'syz.2.1542': attribute type 1 has an invalid length.
[  130.655379][ T9542] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1542'.
[  130.669624][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'.
[  130.782173][ T9554] sctp: [Deprecated]: syz.1.1547 (pid 9554) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.782173][ T9554] Use struct sctp_sack_info instead
[  131.353610][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1558'.
[  131.497418][ T9584] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  131.503266][ T9584] bond3 (unregistering): Released all slaves
[  131.871594][ T9596] nbd1: detected capacity change from 0 to 127
[  131.880109][   T56] block nbd1: Receive control failed (result -104)
[  131.885615][ T9428] block nbd1: Send control failed (result -32)
[  131.893009][ T9428] block nbd1: Request send failed, requeueing
[  131.899900][ T9428] block nbd1: Dead connection, failed to find a fallback
[  131.902107][ T9428] block nbd1: shutting down sockets
[  131.903912][ T9428] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  131.908872][  T439] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  131.911910][  T439] Buffer I/O error on dev nbd1, logical block 2, async page read
[  131.929571][ T9428] Buffer I/O error on dev nbd1, logical block 3, async page read
[  132.134330][ T9612] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  132.371489][ T9626] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  132.508366][ T9637] netlink: 'syz.1.1578': attribute type 10 has an invalid length.
[  132.863893][ T9673] netlink: 'syz.2.1597': attribute type 6 has an invalid length.
[  133.370536][ T9698] bond3: Unable to set up delay as MII monitoring is disabled
[  133.376894][ T9698] bond3 (unregistering): Released all slaves
[  134.195108][ T9730] netlink: 'syz.1.1621': attribute type 1 has an invalid length.
[  134.197928][ T9730] __nla_validate_parse: 4 callbacks suppressed
[  134.197936][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'.
[  134.350007][ T9739] netlink: 762 bytes leftover after parsing attributes in process `syz.1.1624'.
[  134.596116][ T9752] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1631'.
[  134.605752][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'.
[  134.950883][ T9770] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1637'.
[  135.229886][  T439] block nbd1: Connection timed out, retrying (0/1 alive)
[  135.233305][  T439] block nbd1: Connection timed out, retrying (0/1 alive)
[  135.236157][  T439] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  135.241872][  T439] Buffer I/O error on dev nbd1, logical block 1, async page read
[  135.244460][  T439] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  135.247417][  T439] Buffer I/O error on dev nbd1, logical block 0, async page read
[  135.251163][ T9428] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  135.254463][ T9428] Buffer I/O error on dev nbd1, logical block 0, async page read
[  135.257276][ T9428] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  135.262832][ T9428] Buffer I/O error on dev nbd1, logical block 1, async page read
[  135.266016][ T9428] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  135.271949][ T9428] Buffer I/O error on dev nbd1, logical block 2, async page read
[  135.275148][ T9428] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  135.280309][ T9428] Buffer I/O error on dev nbd1, logical block 3, async page read
[  135.285666][ T9428] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  135.289735][ T9428] Buffer I/O error on dev nbd1, logical block 0, async page read
[  135.292284][ T9428] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  135.295666][ T9428] Buffer I/O error on dev nbd1, logical block 1, async page read
[  135.299197][ T9428] ldm_validate_partition_table(): Disk read failed.
[  135.302411][ T9428] Dev nbd1: unable to read RDB block 0
[  135.304599][ T9428]  nbd1: unable to read partition table
[  135.312384][ T9428] ldm_validate_partition_table(): Disk read failed.
[  135.315035][ T9428] Dev nbd1: unable to read RDB block 0
[  135.317387][ T9428]  nbd1: unable to read partition table
[  135.431369][ T9786] netlink: 'syz.2.1645': attribute type 3 has an invalid length.
[  135.761617][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'.
[  135.771135][ T9802] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  135.799777][ T9802] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  136.148315][ T9820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1660'.
[  136.436174][ T9834] 5n: entered promiscuous mode
[  136.724631][   T31] IPVS: starting estimator thread 0...
[  136.796596][ T9862] syzkaller0: entered promiscuous mode
[  136.801028][ T9862] syzkaller0: entered allmulticast mode
[  136.808532][ T9856] IPVS: using max 84 ests per chain, 201600 per kthread
[  137.126539][ T9885] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1687'.
[  138.191710][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  138.195165][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  138.324093][ T9921] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1705'.
[  139.014466][ T9943] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  139.021091][ T9944] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.024594][ T9944] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.158847][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'.
[  139.886307][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'.
[  140.073537][   T34] audit: type=1804 audit(1778424329.857:4): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1731" name="/newroot/549/cgroup.controllers" dev="tmpfs" ino=2784 res=1 errno=0
[  140.100649][   T34] audit: type=1800 audit(1778424329.857:5): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1731" name="cgroup.controllers" dev="tmpfs" ino=2784 res=0 errno=0
[  140.174562][ T9988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  140.287135][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'.
[  140.343152][T10003] netlink: 'syz.0.1742': attribute type 1 has an invalid length.
[  140.345736][T10003] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1742'.
[  140.626988][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'.
[  140.797373][T10043] netlink: 'syz.2.1761': attribute type 1 has an invalid length.
[  140.800206][T10043] netlink: 'syz.2.1761': attribute type 2 has an invalid length.
[  140.901646][T10047] tipc: Cannot configure node identity twice
[  140.904334][T10047] tipc: Cannot configure node identity twice
[  141.008499][T10051] netlink: 'syz.2.1765': attribute type 3 has an invalid length.
[  141.012841][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'.
[  141.136266][T10057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1768'.
[  144.283295][T10063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  144.397775][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'.
[  144.423165][T10097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1783'.
[  144.850762][T10124] netlink: 'syz.2.1795': attribute type 29 has an invalid length.
[  144.855607][T10124] netlink: 'syz.2.1795': attribute type 29 has an invalid length.
[  144.860365][T10124] netlink: 'syz.2.1795': attribute type 32 has an invalid length.
[  144.863766][T10124] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1795'.
[  145.011112][T10122] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1793'.
[  145.269860][T10143] netlink: 'syz.2.1803': attribute type 4 has an invalid length.
[  145.274184][T10143] netlink: 'syz.2.1803': attribute type 4 has an invalid length.
[  145.282250][T10143] netlink: 'syz.2.1803': attribute type 4 has an invalid length.
[  145.601120][T10155] syzkaller0: entered promiscuous mode
[  145.603019][T10155] syzkaller0: entered allmulticast mode
[  145.832555][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1815'.
[  146.018647][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'.
[  146.185607][T10186] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1823'.
[  146.198005][T10186] netlink: 'syz.2.1823': attribute type 9 has an invalid length.
[  146.200566][T10186] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1823'.
[  146.218224][T10186] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1823'.
[  146.482076][T10194] erspan1: entered promiscuous mode
[  146.484107][T10194] erspan1: entered allmulticast mode
[  148.265340][T10257] tipc: Cannot configure node identity twice
[  148.748818][T10288] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  148.991552][T10299] netlink: 'syz.2.1871': attribute type 20 has an invalid length.
[  149.541203][T10329] syzkaller0: entered promiscuous mode
[  149.543058][T10329] syzkaller0: entered allmulticast mode
[  149.613840][T10334] ieee802154 phy0 wpan0: encryption failed: -22
[  149.693028][T10340] netlink: 'syz.2.1891': attribute type 12 has an invalid length.
[  149.744873][T10344] netlink: 'syz.0.1893': attribute type 29 has an invalid length.
[  149.954695][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'.
[  150.164774][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'.
[  150.181729][T10368] netlink: 'syz.2.1904': attribute type 1 has an invalid length.
[  150.184158][T10368] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1904'.
[  150.212162][T10368] netlink: 'syz.2.1904': attribute type 1 has an invalid length.
[  150.214800][T10368] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1904'.
[  150.580540][T10401] x_tables: ip_tables: time.0 match: invalid size 24 (kernel) != (user) 40
[  150.944381][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'.
[  150.947221][T10424] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  151.077680][T10437] netlink: 'syz.0.1938': attribute type 11 has an invalid length.
[  151.091884][T10437] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1938'.
[  151.136596][T10442] netlink: 'syz.2.1940': attribute type 1 has an invalid length.
[  151.161228][T10443] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1941'.
[  151.169999][T10442] bond3: (slave bridge3): making interface the new active one
[  151.172790][T10442] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  151.482029][T10465] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1952'.
[  151.967767][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1969'.
[  152.050491][T10507] sctp: [Deprecated]: syz.2.1970 (pid 10507) Use of struct sctp_assoc_value in delayed_ack socket option.
[  152.050491][T10507] Use struct sctp_sack_info instead
[  152.179027][T10511] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  152.186575][T10511] bond2: (slave lo): Enslaving as an active interface with an up link
[  152.191370][T10511] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  152.302811][T10524] bridge8: entered promiscuous mode
[  152.660504][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1992'.
[  152.971437][T10563] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  153.138812][T10572] hm3): entered promiscuous mode
[  153.507378][T10596] netlink: 'syz.0.2015': attribute type 1 has an invalid length.
[  153.513201][T10596] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.2015'.
[  153.720705][T10607] netlink: 'syz.1.2020': attribute type 2 has an invalid length.
[  153.802859][T10611] netlink: 'syz.1.2021': attribute type 21 has an invalid length.
[  153.805462][T10611] netlink: 'syz.1.2021': attribute type 6 has an invalid length.
[  154.004495][T10615] syzkaller1: entered promiscuous mode
[  154.006403][T10615] syzkaller1: entered allmulticast mode
[  156.407073][T10686] __nla_validate_parse: 5 callbacks suppressed
[  156.407083][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'.
[  156.426081][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'.
[  156.496354][T10690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2056'.
[  156.531101][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'.
[  156.587668][ T5195] Bluetooth: hci2: command 0x0405 tx timeout
[  157.063805][T10703] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.2063'.
[  157.069930][T10703] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  157.122736][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2064'.
[  158.180012][T10747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2083'.
[  158.542207][T10761] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2090'.
[  158.792508][T10771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2094'.
[  159.092097][T10782] pimreg0: tun_chr_ioctl cmd 1074025681
[  159.280685][T10798] netlink: 'syz.0.2108': attribute type 83 has an invalid length.
[  159.588096][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'.
[  160.108555][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.115177][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.121675][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.129060][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.660041][T10889] syzkaller0: entered promiscuous mode
[  160.662382][T10889] syzkaller0: entered allmulticast mode
[  161.157977][T10911] netlink: 'syz.0.2161': attribute type 1 has an invalid length.
[  161.179762][T10911] 8021q: adding VLAN 0 to HW filter on device bond3
[  161.209955][T10911] bond3: (slave veth7): Enslaving as an active interface with a down link
[  161.395495][T10921] syzkaller0: entered promiscuous mode
[  161.397267][T10921] syzkaller0: entered allmulticast mode
[  161.739792][T10936] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  161.743402][T10936] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  161.746353][T10936] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  162.600827][T10954] __nla_validate_parse: 5 callbacks suppressed
[  162.600838][T10954] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2182'.
[  162.606355][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2182'.
[  162.921506][T10967] ieee802154 phy0 wpan0: encryption failed: -22
[  163.189600][T10989] sctp: [Deprecated]: syz.0.2194 (pid 10989) Use of int in max_burst socket option deprecated.
[  163.189600][T10989] Use struct sctp_assoc_value instead
[  163.377267][T11006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2205'.
[  163.783253][T11033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.278592][T11063] netlink: 'syz.1.2225': attribute type 1 has an invalid length.
[  164.281706][T11063] netlink: 'syz.1.2225': attribute type 4 has an invalid length.
[  164.284851][T11063] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2225'.
[  164.514443][T11072] syzkaller1: entered promiscuous mode
[  164.516896][T11072] syzkaller1: entered allmulticast mode
[  164.718592][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'.
[  164.721422][T11070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2229'.
[  164.724638][T11079] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2233'.
[  164.801039][T11083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2235'.
[  164.804521][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2235'.
[  165.223740][T11103] netlink: 'syz.1.2244': attribute type 39 has an invalid length.
[  165.575429][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2253'.
[  165.590411][T11126] nbd: couldn't find a device at index 65546
[  165.764850][T11121] gretap0: entered promiscuous mode
[  165.766896][T11121] vlan2: entered promiscuous mode
[  166.073570][T11140] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.095914][T11140] 8021q: adding VLAN 0 to HW filter on device team0
[  166.121667][T11140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.316278][T11153] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  167.458005][T11200] gtp1: entered promiscuous mode
[  167.459569][T11200] gtp1: entered allmulticast mode
[  167.795985][T11229] xt_HMARK: spi-set and port-set can't be combined
[  168.028124][T11240] __nla_validate_parse: 5 callbacks suppressed
[  168.028134][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2306'.
[  168.034021][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2306'.
[  168.097323][T11246] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2308'.
[  168.115246][T11246] netlink: 'syz.1.2308': attribute type 13 has an invalid length.
[  168.120006][T11246] netlink: 'syz.1.2308': attribute type 17 has an invalid length.
[  168.139128][T11246] gretap0: left promiscuous mode
[  168.143459][T11246] gretap0: refused to change device tx_queue_len
[  168.146531][T11246] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  169.053419][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2320'.
[  169.294710][T11296] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  169.297215][T11296] CPU: 0 UID: 0 PID: 11296 Comm: syz.1.2325 Not tainted syzkaller #0 PREEMPT(full) 
[  169.297226][T11296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.297230][T11296] Call Trace:
[  169.297234][T11296]  <TASK>
[  169.297238][T11296]  dump_stack_lvl+0xe8/0x150
[  169.297253][T11296]  sysfs_warn_dup+0x8e/0xa0
[  169.297263][T11296]  sysfs_do_create_link_sd+0xc0/0x110
[  169.297273][T11296]  device_add_class_symlinks+0x1cf/0x240
[  169.297286][T11296]  device_add+0x475/0xb70
[  169.297297][T11296]  wiphy_register+0x1d73/0x2d50
[  169.297313][T11296]  ? __pfx_wiphy_register+0x10/0x10
[  169.297322][T11296]  ? __pfx_netdev_run_todo+0x10/0x10
[  169.297329][T11296]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  169.297339][T11296]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  169.297352][T11296]  ieee80211_register_hw+0x3571/0x4220
[  169.297365][T11296]  ? ieee80211_register_hw+0x14c1/0x4220
[  169.297376][T11296]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  169.297389][T11296]  ? __hrtimer_setup+0x181/0x200
[  169.297399][T11296]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  169.297409][T11296]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  169.297431][T11296]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  169.297440][T11296]  ? kstrndup+0xbf/0x160
[  169.297452][T11296]  hwsim_new_radio_nl+0xf35/0x1bd0
[  169.297469][T11296]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  169.297483][T11296]  ? rcu_is_watching+0x15/0xb0
[  169.297493][T11296]  ? trace_kmalloc+0x2a/0x110
[  169.297503][T11296]  ? __nla_parse+0x40/0x60
[  169.297513][T11296]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  169.297544][T11296]  genl_family_rcv_msg_doit+0x22a/0x330
[  169.297558][T11296]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  169.297573][T11296]  ? bpf_lsm_capable+0x9/0x20
[  169.297582][T11296]  ? security_capable+0x7e/0x2c0
[  169.297593][T11296]  genl_rcv_msg+0x61c/0x7a0
[  169.297606][T11296]  ? __pfx_genl_rcv_msg+0x10/0x10
[  169.297616][T11296]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  169.297632][T11296]  ? __lock_acquire+0x6b5/0x2cf0
[  169.297646][T11296]  netlink_rcv_skb+0x232/0x4b0
[  169.297654][T11296]  ? __pfx_genl_rcv_msg+0x10/0x10
[  169.297664][T11296]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  169.297679][T11296]  ? down_read+0x272/0x2e0
[  169.297687][T11296]  ? genl_rcv+0xd/0x40
[  169.297698][T11296]  genl_rcv+0x28/0x40
[  169.297707][T11296]  netlink_unicast+0x80f/0x9b0
[  169.297719][T11296]  ? __pfx_netlink_unicast+0x10/0x10
[  169.297728][T11296]  ? netlink_sendmsg+0x650/0xb40
[  169.297736][T11296]  ? skb_put+0x11b/0x210
[  169.297747][T11296]  netlink_sendmsg+0x813/0xb40
[  169.297760][T11296]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.297770][T11296]  ? aa_sock_msg_perm+0xf1/0x1b0
[  169.297779][T11296]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  169.297787][T11296]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.297795][T11296]  ____sys_sendmsg+0xa68/0xad0
[  169.297804][T11296]  ? futex_unqueue+0x211/0x240
[  169.297815][T11296]  ? __pfx_____sys_sendmsg+0x10/0x10
[  169.297828][T11296]  ? import_iovec+0x73/0xa0
[  169.297839][T11296]  ___sys_sendmsg+0x2a5/0x360
[  169.297851][T11296]  ? __pfx____sys_sendmsg+0x10/0x10
[  169.297863][T11296]  ? futex_wait+0x29a/0x380
[  169.297883][T11296]  ? __fget_files+0x2a/0x420
[  169.297892][T11296]  ? __fget_files+0x3a0/0x420
[  169.297905][T11296]  __x64_sys_sendmsg+0x1bd/0x2a0
[  169.297916][T11296]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  169.297929][T11296]  ? rcu_is_watching+0x15/0xb0
[  169.297943][T11296]  do_syscall_64+0x14d/0xf80
[  169.297953][T11296]  ? trace_irq_disable+0x3b/0x150
[  169.297963][T11296]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.297972][T11296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.297979][T11296] RIP: 0033:0x7ff68719cdd9
[  169.297986][T11296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.297992][T11296] RSP: 002b:00007ff688053028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.298000][T11296] RAX: ffffffffffffffda RBX: 00007ff687416180 RCX: 00007ff68719cdd9
[  169.298005][T11296] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  169.298009][T11296] RBP: 00007ff687232d69 R08: 0000000000000000 R09: 0000000000000000
[  169.298013][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.298017][T11296] R13: 00007ff687416218 R14: 00007ff687416180 R15: 00007fffff98b178
[  169.298028][T11296]  </TASK>
[  170.334017][T11347] bridge0: entered promiscuous mode
[  170.336261][T11347] macsec1: entered promiscuous mode
[  170.357515][T11353] syzkaller0: entered promiscuous mode
[  170.359671][T11353] syzkaller0: entered allmulticast mode
[  170.446653][T11356] syzkaller1: entered promiscuous mode
[  170.448882][T11356] syzkaller1: entered allmulticast mode
[  170.584038][T11356] veth1_to_batadv: left allmulticast mode
[  170.591092][T11356] geneve3: left allmulticast mode
[  170.600826][T11365] x_tables: duplicate underflow at hook 1
[  170.627210][T11356] macsec1: left promiscuous mode
[  170.639796][T11356] syzkaller1: left promiscuous mode
[  170.644052][T11356] syzkaller1: left allmulticast mode
[  170.655884][T11363] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  171.367009][T11406] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2370'.
[  171.614117][T11418] netlink: 'syz.1.2375': attribute type 61 has an invalid length.
[  172.576656][T11469] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2400'.
[  173.113855][T11497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2413'.
[  173.380248][T11519] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  173.384315][T11519] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  173.530167][  T944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.532689][  T944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.544812][T11520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.939410][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2433'.
[  173.942928][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2433'.
[  174.252995][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2439'.
[  174.292664][T11562] netlink: 'syz.2.2440': attribute type 2 has an invalid length.
[  174.295633][T11562] tipc: Cannot configure node identity twice
[  174.336659][T11564] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1280) !
[  174.687251][T11587] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2452'.
[  176.312211][T11662] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  176.611525][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2496'.
[  176.783866][T11693] ipip1: entered promiscuous mode
[  179.741715][T11690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  179.746904][T11707] netlink: 'syz.1.2505': attribute type 1 has an invalid length.
[  180.143728][T11727] netlink: 'syz.1.2515': attribute type 1 has an invalid length.
[  180.164628][T11727] bond3: entered promiscuous mode
[  180.166800][T11727] bond3: entered allmulticast mode
[  180.181757][T11727] 8021q: adding VLAN 0 to HW filter on device bond3
[  180.196207][T11727] macvlan1: entered promiscuous mode
[  180.198589][T11727] macvlan1: entered allmulticast mode
[  180.202906][T11727] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  180.643105][T11736] syzkaller1: entered promiscuous mode
[  180.645157][T11736] syzkaller1: entered allmulticast mode
[  180.793956][T11736] sit1: left allmulticast mode
[  180.796315][T11736] vlan0: left allmulticast mode
[  180.798936][T11736] bond0: left allmulticast mode
[  180.801337][T11736] ip6gre1: left promiscuous mode
[  180.804316][T11736] xfrm1: left allmulticast mode
[  180.858502][T11736] gtp1: left promiscuous mode
[  180.860317][T11736] gtp1: left allmulticast mode
[  180.919459][T11736] ipip1: left promiscuous mode
[  180.942630][T11736] bond3: left promiscuous mode
[  180.944598][T11736] bond3: left allmulticast mode
[  180.966710][T11736] syzkaller1: left promiscuous mode
[  180.969233][T11736] syzkaller1: left allmulticast mode
[  181.016484][T11741] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  181.044632][ T5876] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.049748][ T5876] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.052521][ T5876] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.055188][ T5876] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.223152][  T976] IPVS: starting estimator thread 0...
[  181.226961][T11749] netlink: 'syz.1.2524': attribute type 29 has an invalid length.
[  181.239929][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  181.248587][T11749] netlink: 'syz.1.2524': attribute type 29 has an invalid length.
[  181.251830][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  181.258173][T11749] netlink: 'syz.1.2524': attribute type 29 has an invalid length.
[  181.261362][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  181.278280][T11749] netlink: 'syz.1.2524': attribute type 29 has an invalid length.
[  181.281458][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  181.285174][T11749] netlink: 'syz.1.2524': attribute type 29 has an invalid length.
[  181.294798][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  181.306678][T11754] hsr0: entered promiscuous mode
[  181.309432][T11751] IPVS: using max 42 ests per chain, 100800 per kthread
[  181.313446][T11749] netlink: 'syz.1.2524': attribute type 29 has an invalid length.
[  181.316971][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  181.321728][T11749] netlink: 'syz.1.2524': attribute type 29 has an invalid length.
[  181.327466][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  181.331955][T11749] netlink: 'syz.1.2524': attribute type 29 has an invalid length.
[  181.335021][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  181.347972][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  181.352355][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'.
[  181.362504][T11748] hsr0: left promiscuous mode
[  182.435321][T11765] : entered promiscuous mode
[  183.252023][T11776] bond4: option lacp_active: invalid value (8)
[  183.270768][T11776] bond4 (unregistering): Released all slaves
[  185.933253][T11891] geneve3: entered promiscuous mode
[  185.937244][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 58728 - 0
[  185.941004][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 58728 - 0
[  185.951840][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 58728 - 0
[  185.967062][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 58728 - 0
[  186.291975][T11897] tun0: tun_chr_ioctl cmd 1074025672
[  186.294124][T11897] tun0: ignored: set checksum disabled
[  186.351436][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  186.629599][T11901] validate_nla: 15 callbacks suppressed
[  186.629609][T11901] netlink: 'syz.1.2586': attribute type 4 has an invalid length.
[  186.654504][T11901] netlink: 'syz.1.2586': attribute type 4 has an invalid length.
[  186.813630][T11914] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  186.818662][T11914] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  186.974584][  T976] hid-generic 0005:04F3:0A11.0001: item fetching failed at offset 0/1
[  186.977987][  T976] hid-generic 0005:04F3:0A11.0001: probe with driver hid-generic failed with error -22
[  187.166823][T11935] __nla_validate_parse: 18 callbacks suppressed
[  187.166833][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2604'.
[  187.845709][T11990] netlink: 'syz.2.2628': attribute type 1 has an invalid length.
[  187.861789][T11990] 8021q: adding VLAN 0 to HW filter on device bond4
[  187.873686][T11990] vlan2: entered allmulticast mode
[  187.875431][T11990] bond4: entered allmulticast mode
[  187.889787][T11990] bond4: (slave geneve4): making interface the new active one
[  187.892437][T11990] geneve4: entered allmulticast mode
[  187.896341][T11990] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  187.900409][ T5876] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.905741][ T5876] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.915716][ T5876] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.919430][ T5876] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.618884][T12014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2636'.
[  188.622564][T12014] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2636'.
[  188.629754][T12014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2636'.
[  188.634591][T12014] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2636'.
[  188.849143][T12029] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2642'.
[  188.853494][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'.
[  188.857424][T12029] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2642'.
[  188.891832][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'.
[  188.895596][T12029] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2642'.
[  189.483791][T12054] lo speed is unknown, defaulting to 1000
[  189.487322][T12054] lo speed is unknown, defaulting to 1000
[  189.490858][T12054] lo speed is unknown, defaulting to 1000
[  189.635106][T12054] infiniband sqz0: set active
[  189.637887][  T976] lo speed is unknown, defaulting to 1000
[  189.647829][T12054] infiniband sqz0: added lo
[  189.695147][T12054] RDS/IB: sqz0: added
[  189.701549][T12054] smc: adding ib device sqz0 with port count 1
[  189.705954][T12054] smc:    ib device sqz0 port 1 has no pnetid
[  189.711904][  T976] lo speed is unknown, defaulting to 1000
[  189.715255][T12054] lo speed is unknown, defaulting to 1000
[  190.015189][T12054] lo speed is unknown, defaulting to 1000
[  190.182277][T12054] lo speed is unknown, defaulting to 1000
[  190.358340][T12060] lo speed is unknown, defaulting to 1000
[  190.852691][T12079] netlink: 'syz.0.2663': attribute type 11 has an invalid length.
[  190.912655][T12082] vlan2: entered promiscuous mode
[  190.914308][T12082] geneve1: entered promiscuous mode
[  190.916054][T12082] vlan2: entered allmulticast mode
[  190.925203][T12082] geneve1: entered allmulticast mode
[  191.117146][T12090] bond5: entered promiscuous mode
[  191.120169][T12090] bond5: entered allmulticast mode
[  194.357156][T12118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  194.461730][T12148] __nla_validate_parse: 4 callbacks suppressed
[  194.461744][T12148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2690'.
[  194.472444][T12148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2690'.
[  194.582888][T12157] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2695'.
[  195.135713][T12203] batman_adv: batadv0: Adding interface: dummy0
[  195.140612][T12203] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  195.155461][T12203] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  196.921896][T12232] lo speed is unknown, defaulting to 1000
[  197.185550][T12243] ieee802154 phy0 wpan0: encryption failed: -22
[  199.630336][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  199.632478][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  200.083669][T12239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  200.349981][T12298] bond0: entered promiscuous mode
[  200.352338][T12298] bond_slave_0: entered promiscuous mode
[  200.355805][T12298] bond_slave_1: entered promiscuous mode
[  200.570484][T12320] netlink: 'syz.2.2764': attribute type 13 has an invalid length.
[  200.617264][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2764'.
[  200.746412][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2766'.
[  201.400339][T12340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2773'.
[  201.603813][T12348] 8021q: adding VLAN 0 to HW filter on device bond4
[  201.753580][T12352] gre1: entered promiscuous mode
[  202.267154][T12384] netlink: 'syz.2.2794': attribute type 3 has an invalid length.
[  202.286525][T12384] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2794'.
[  204.594287][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'.
[  204.603099][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'.
[  205.126382][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2833'.
[  205.130467][T12498] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2833'.
[  205.483425][T12506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.501775][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 58728 - 0
[  205.524825][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 58728 - 0
[  205.538346][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 58728 - 0
[  205.548670][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 58728 - 0
[  205.878701][T12516] block nbd2: server does not support multiple connections per device.
[  205.883190][T12516] block nbd2: shutting down sockets
[  205.904454][T12525] team0: left promiscuous mode
[  205.910892][T12525] bridge0: port 2(vlan3) entered blocking state
[  205.913682][T12525] bridge0: port 2(vlan3) entered disabled state
[  205.916242][T12525] vlan3: entered allmulticast mode
[  205.919698][T12525] geneve0: entered allmulticast mode
[  205.922283][T12525] vlan3: entered promiscuous mode
[  205.923991][T12525] geneve0: entered promiscuous mode
[  205.926177][T12525] team0: entered promiscuous mode
[  206.326827][T12554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.556607][T12568] syz_tun: entered allmulticast mode
[  206.562692][T12568] dvmrp1: entered allmulticast mode
[  206.567309][T12567] syz_tun: left allmulticast mode
[  207.023743][T12598] openvswitch: netlink: ufid size 32 bytes exceeds the range (1, 16)
[  207.026955][T12598] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  207.059279][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2878'.
[  207.201968][T12610] netlink: 'syz.1.2885': attribute type 2 has an invalid length.
[  207.254658][T12614] lo speed is unknown, defaulting to 1000
[  207.669225][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2894'.
[  207.742206][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2892'.
[  207.784670][T12633] netlink: 'syz.1.2895': attribute type 1 has an invalid length.
[  208.081859][T12647] rdma_op ffff88816cb9d1f0 conn xmit_rdma 0000000000000000
[  208.283739][T12653] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2905'.
[  208.287449][T12653] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2905'.
[  208.292675][T12653] netlink: 'syz.1.2905': attribute type 5 has an invalid length.
[  208.297806][T12653] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2905'.
[  208.647039][T12667] lo: Caught tx_queue_len zero misconfig
[  208.933790][T12680] ieee802154 phy0 wpan0: encryption failed: -22
[  209.001851][T12687] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2920'.
[  209.005535][T12687] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2920'.
[  209.008398][T12687] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2920'.
[  209.011806][T12687] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2920'.
[  209.589146][T12729] gretap0: entered promiscuous mode
[  209.605079][T12729] 0{X: renamed from gretap0
[  209.608725][T12729] 0{X: left promiscuous mode
[  209.610346][T12729] 0{X: entered allmulticast mode
[  209.613690][T12729] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  209.642699][T12725] lo speed is unknown, defaulting to 1000
[  210.389253][T12756] xt_TPROXY: Can be used only with -p tcp or -p udp
[  211.023499][T12791] syzkaller0: entered promiscuous mode
[  211.025294][T12791] syzkaller0: entered allmulticast mode
[  212.327300][T12807] __nla_validate_parse: 198 callbacks suppressed
[  212.327314][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'.
[  213.825576][T12868] netlink: 'syz.0.2999': attribute type 15 has an invalid length.
[  214.022250][T12880] syzkaller0: entered promiscuous mode
[  214.024703][T12880] syzkaller0: entered allmulticast mode
[  214.120065][ T5941] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.128867][ T5941] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.131688][ T5941] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.134418][ T5941] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.407137][T12904] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3015'.
[  214.504638][T12894] "syz.2.3011" (12894) uses obsolete ecb(arc4) skcipher
[  214.570441][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3020'.
[  214.680998][T12924] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3024'.
[  214.759421][T12931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.821572][T12931] netlink: 'syz.1.3028': attribute type 1 has an invalid length.
[  214.828809][T12931] netlink: 'syz.1.3028': attribute type 2 has an invalid length.
[  214.833529][T12931] netlink: 'syz.1.3028': attribute type 2 has an invalid length.
[  214.840873][T12931] netlink: 'syz.1.3028': attribute type 2 has an invalid length.
[  214.843320][T12931] netlink: 'syz.1.3028': attribute type 1 has an invalid length.
[  214.845722][T12931] netlink: 'syz.1.3028': attribute type 2 has an invalid length.
[  215.085353][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3037'.
[  215.088548][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3037'.
[  215.114229][T12954] netlink: 'syz.2.3038': attribute type 30 has an invalid length.
[  215.162006][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3040'.
[  215.751993][T12992] sit0: entered promiscuous mode
[  215.776640][T12992] netlink: 'syz.0.3052': attribute type 1 has an invalid length.
[  215.780108][T12992] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3052'.
[  215.877748][  T976] tipc: Node number set to 2962643945
[  218.442848][T12977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  220.069586][T13055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3080'.
[  220.152134][T13059] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3082'.
[  220.243503][T13066] SET target dimension over the limit!
[  220.363471][T13075] x_tables: duplicate entry at hook 2
[  222.126366][T13169] netlink: 'syz.1.3136': attribute type 30 has an invalid length.
[  222.175078][T13170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3135'.
[  222.183325][T13170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3135'.
[  222.509553][T13189] block nbd2: server does not support multiple connections per device.
[  222.512907][T13189] block nbd2: shutting down sockets
[  222.605587][T13204] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3153'.
[  222.693157][T13210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3156'.
[  222.842377][T13218] netlink: 'syz.0.3159': attribute type 1 has an invalid length.
[  222.895501][T13218] 8021q: adding VLAN 0 to HW filter on device bond5
[  222.901428][T13218] bond4: (slave bond5): making interface the new active one
[  222.904794][T13218] bond4: (slave bond5): Enslaving as an active interface with an up link
[  222.931660][T13218] bond4: (slave gretap1): Enslaving as a backup interface with an up link
[  222.967925][T13218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3159'.
[  222.973057][T13218] 8021q: adding VLAN 0 to HW filter on device bond4
[  223.070012][T13228] lo speed is unknown, defaulting to 1000
[  223.328383][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3166'.
[  223.523200][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3169'.
[  224.331251][T13285] netlink: 'syz.2.3187': attribute type 1 has an invalid length.
[  224.706789][T13313] veth1_to_team: Caught tx_queue_len zero misconfig
[  224.709220][T13313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3201'.
[  226.011619][T13374] netlink: 'syz.0.3226': attribute type 11 has an invalid length.
[  226.321315][T13394] __nla_validate_parse: 1 callbacks suppressed
[  226.321459][T13394] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3238'.
[  226.552252][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'.
[  226.556012][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3245'.
[  226.560102][T13408] netlink: 'syz.2.3245': attribute type 13 has an invalid length.
[  226.685717][T13413] ip6tnl2: entered allmulticast mode
[  226.690576][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  226.697197][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  226.720288][ T7540] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  227.358282][ T7540] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  227.470666][ T7540] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  227.896453][T13481] lo speed is unknown, defaulting to 1000
[  227.904175][T13481] lo speed is unknown, defaulting to 1000
[  227.930574][T13481] lo speed is unknown, defaulting to 1000
[  227.942644][T13481] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  227.956077][T13489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3277'.
[  227.982230][T13481] lo speed is unknown, defaulting to 1000
[  227.984943][T13481] lo speed is unknown, defaulting to 1000
[  228.012659][T13481] lo speed is unknown, defaulting to 1000
[  228.045799][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'.
[  228.062047][T13494] netlink: 'syz.0.3283': attribute type 21 has an invalid length.
[  228.110204][T13498] x_tables: ip_tables: icmp match: only valid for protocol 1
[  228.312099][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3295'.
[  228.348823][T13510] 
[  228.349614][T13510] ======================================================
[  228.351958][T13510] WARNING: possible circular locking dependency detected
[  228.354908][T13510] syzkaller #0 Not tainted
[  228.356636][T13510] ------------------------------------------------------
[  228.359288][T13510] syz.2.3292/13510 is trying to acquire lock:
[  228.361747][T13510] ffff88816d8db548 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  228.365517][T13510] 
[  228.365517][T13510] but task is already holding lock:
[  228.368513][T13510] ffff88816d8db008 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x198/0x450
[  228.372704][T13510] 
[  228.372704][T13510] which lock already depends on the new lock.
[  228.372704][T13510] 
[  228.376876][T13510] 
[  228.376876][T13510] the existing dependency chain (in reverse order) is:
[  228.380549][T13510] 
[  228.380549][T13510] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  228.384065][T13510]        blk_alloc_queue+0x546/0x680
[  228.386283][T13510]        __blk_mq_alloc_disk+0x197/0x390
[  228.388517][T13510]        nbd_dev_add+0x499/0xb50
[  228.390478][T13510]        nbd_init+0x168/0x1f0
[  228.392366][T13510]        do_one_initcall+0x250/0x8d0
[  228.394540][T13510]        do_initcall_level+0x104/0x190
[  228.396809][T13510]        do_initcalls+0x59/0xa0
[  228.398843][T13510]        kernel_init_freeable+0x2a6/0x3e0
[  228.401201][T13510]        kernel_init+0x1d/0x1d0
[  228.403235][T13510]        ret_from_fork+0x51e/0xb90
[  228.405347][T13510]        ret_from_fork_asm+0x1a/0x30
[  228.407451][T13510] 
[  228.407451][T13510] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  228.410399][T13510]        fs_reclaim_acquire+0x71/0x100
[  228.412655][T13510]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  228.415264][T13510]        __alloc_skb+0x1d0/0x7d0
[  228.417233][T13510]        __ip6_append_data+0x2a44/0x3c50
[  228.419541][T13510]        ip6_append_data+0x10f/0x280
[  228.421656][T13510]        rawv6_sendmsg+0x12d3/0x18e0
[  228.423756][T13510]        ____sys_sendmsg+0x894/0xad0
[  228.425913][T13510]        ___sys_sendmsg+0x2a5/0x360
[  228.428068][T13510]        __x64_sys_sendmsg+0x1bd/0x2a0
[  228.430315][T13510]        do_syscall_64+0x14d/0xf80
[  228.432440][T13510]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.434991][T13510] 
[  228.434991][T13510] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  228.438164][T13510]        lock_sock_nested+0x48/0x100
[  228.440344][T13510]        inet_shutdown+0x6a/0x390
[  228.442450][T13510]        nbd_mark_nsock_dead+0x2e9/0x560
[  228.444778][T13510]        sock_shutdown+0x15e/0x260
[  228.446869][T13510]        nbd_clear_sock+0x24/0x170
[  228.448938][T13510]        nbd_config_put+0x2dd/0x580
[  228.451044][T13510]        nbd_genl_connect+0x19d5/0x1cf0
[  228.454067][T13510]        genl_family_rcv_msg_doit+0x22a/0x330
[  228.456476][T13510]        genl_rcv_msg+0x61c/0x7a0
[  228.458475][T13510]        netlink_rcv_skb+0x232/0x4b0
[  228.460591][T13510]        genl_rcv+0x28/0x40
[  228.462462][T13510]        netlink_unicast+0x80f/0x9b0
[  228.464649][T13510]        netlink_sendmsg+0x813/0xb40
[  228.466775][T13510]        ____sys_sendmsg+0xa68/0xad0
[  228.468874][T13510]        ___sys_sendmsg+0x2a5/0x360
[  228.470932][T13510]        __x64_sys_sendmsg+0x1bd/0x2a0
[  228.473164][T13510]        do_syscall_64+0x14d/0xf80
[  228.475273][T13510]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.477909][T13510] 
[  228.477909][T13510] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  228.481014][T13510]        __mutex_lock+0x19f/0x1300
[  228.482971][T13510]        nbd_queue_rq+0x37b/0x1100
[  228.485108][T13510]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  228.487608][T13510]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  228.490511][T13510]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  228.493181][T13510]        blk_mq_run_hw_queue+0x348/0x4f0
[  228.495482][T13510]        blk_mq_dispatch_list+0xd16/0xe10
[  228.497852][T13510]        blk_mq_flush_plug_list+0x48d/0x570
[  228.500299][T13510]        __blk_flush_plug+0x3ed/0x4d0
[  228.502515][T13510]        __submit_bio+0x28d/0x580
[  228.504522][T13510]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  228.507060][T13510]        block_read_full_folio+0x599/0x830
[  228.509447][T13510]        filemap_read_folio+0x137/0x3b0
[  228.511693][T13510]        do_read_cache_folio+0x358/0x590
[  228.514001][T13510]        read_part_sector+0xb6/0x2b0
[  228.516134][T13510]        adfspart_check_ICS+0xa5/0xa40
[  228.518272][T13510]        bdev_disk_changed+0x7ba/0x1550
[  228.520478][T13510]        blkdev_get_whole+0x380/0x510
[  228.522595][T13510]        bdev_open+0x31e/0xd30
[  228.524544][T13510]        blkdev_open+0x470/0x610
[  228.526644][T13510]        do_dentry_open+0x785/0x14e0
[  228.528867][T13510]        vfs_open+0x3b/0x340
[  228.530749][T13510]        path_openat+0x2e08/0x3860
[  228.532871][T13510]        do_file_open+0x23e/0x4a0
[  228.534960][T13510]        do_sys_openat2+0x113/0x200
[  228.537123][T13510]        __x64_sys_openat+0x138/0x170
[  228.539278][T13510]        do_syscall_64+0x14d/0xf80
[  228.541301][T13510]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.543874][T13510] 
[  228.543874][T13510] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  228.546837][T13510]        __mutex_lock+0x19f/0x1300
[  228.548932][T13510]        nbd_queue_rq+0xc6/0x1100
[  228.550975][T13510]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  228.553430][T13510]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  228.556202][T13510]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  228.558876][T13510]        blk_mq_run_hw_queue+0x348/0x4f0
[  228.561208][T13510]        blk_mq_dispatch_list+0xd16/0xe10
[  228.563483][T13510]        blk_mq_flush_plug_list+0x48d/0x570
[  228.565844][T13510]        __blk_flush_plug+0x3ed/0x4d0
[  228.568033][T13510]        __submit_bio+0x28d/0x580
[  228.570043][T13510]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  228.572588][T13510]        block_read_full_folio+0x599/0x830
[  228.574956][T13510]        filemap_read_folio+0x137/0x3b0
[  228.577202][T13510]        do_read_cache_folio+0x358/0x590
[  228.579520][T13510]        read_part_sector+0xb6/0x2b0
[  228.581700][T13510]        adfspart_check_ICS+0xa5/0xa40
[  228.583869][T13510]        bdev_disk_changed+0x7ba/0x1550
[  228.586153][T13510]        blkdev_get_whole+0x380/0x510
[  228.588378][T13510]        bdev_open+0x31e/0xd30
[  228.590353][T13510]        blkdev_open+0x470/0x610
[  228.592384][T13510]        do_dentry_open+0x785/0x14e0
[  228.594550][T13510]        vfs_open+0x3b/0x340
[  228.596458][T13510]        path_openat+0x2e08/0x3860
[  228.598573][T13510]        do_file_open+0x23e/0x4a0
[  228.600583][T13510]        do_sys_openat2+0x113/0x200
[  228.602752][T13510]        __x64_sys_openat+0x138/0x170
[  228.604934][T13510]        do_syscall_64+0x14d/0xf80
[  228.606994][T13510]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.609583][T13510] 
[  228.609583][T13510] -> #1 (set->srcu){.+.+}-{0:0}:
[  228.612505][T13510]        __synchronize_srcu+0xca/0x3e0
[  228.614708][T13510]        elevator_switch+0x1e8/0x7a0
[  228.616878][T13510]        elevator_change+0x2cc/0x450
[  228.619017][T13510]        elevator_set_default+0x36c/0x430
[  228.621266][T13510]        blk_register_queue+0x366/0x430
[  228.623439][T13510]        __add_disk+0x677/0xd50
[  228.625417][T13510]        add_disk_fwnode+0xfb/0x480
[  228.627584][T13510]        nbd_dev_add+0x72c/0xb50
[  228.629615][T13510]        nbd_init+0x168/0x1f0
[  228.631536][T13510]        do_one_initcall+0x250/0x8d0
[  228.633699][T13510]        do_initcall_level+0x104/0x190
[  228.635941][T13510]        do_initcalls+0x59/0xa0
[  228.637967][T13510]        kernel_init_freeable+0x2a6/0x3e0
[  228.640250][T13510]        kernel_init+0x1d/0x1d0
[  228.642205][T13510]        ret_from_fork+0x51e/0xb90
[  228.644267][T13510]        ret_from_fork_asm+0x1a/0x30
[  228.646376][T13510] 
[  228.646376][T13510] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  228.649543][T13510]        __lock_acquire+0x15a5/0x2cf0
[  228.651777][T13510]        lock_acquire+0xf0/0x2e0
[  228.653831][T13510]        __mutex_lock+0x19f/0x1300
[  228.655871][T13510]        elevator_change+0x1b3/0x450
[  228.658005][T13510]        elevator_set_none+0xb5/0x140
[  228.660146][T13510]        blk_mq_update_nr_hw_queues+0x5e7/0x1ae0
[  228.662696][T13510]        nbd_start_device+0x17f/0xb10
[  228.664904][T13510]        nbd_genl_connect+0x165b/0x1cf0
[  228.667195][T13510]        genl_family_rcv_msg_doit+0x22a/0x330
[  228.669703][T13510]        genl_rcv_msg+0x61c/0x7a0
[  228.671803][T13510]        netlink_rcv_skb+0x232/0x4b0
[  228.674003][T13510]        genl_rcv+0x28/0x40
[  228.675899][T13510]        netlink_unicast+0x80f/0x9b0
[  228.678029][T13510]        netlink_sendmsg+0x813/0xb40
[  228.680112][T13510]        ____sys_sendmsg+0xa68/0xad0
[  228.682179][T13510]        ___sys_sendmsg+0x2a5/0x360
[  228.684293][T13510]        __x64_sys_sendmsg+0x1bd/0x2a0
[  228.686551][T13510]        do_syscall_64+0x14d/0xf80
[  228.688704][T13510]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.691323][T13510] 
[  228.691323][T13510] other info that might help us debug this:
[  228.691323][T13510] 
[  228.695438][T13510] Chain exists of:
[  228.695438][T13510]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51
[  228.695438][T13510] 
[  228.701004][T13510]  Possible unsafe locking scenario:
[  228.701004][T13510] 
[  228.704068][T13510]        CPU0                    CPU1
[  228.706293][T13510]        ----                    ----
[  228.708488][T13510]   lock(&q->q_usage_counter(io)#51);
[  228.710717][T13510]                                lock(fs_reclaim);
[  228.713412][T13510]                                lock(&q->q_usage_counter(io)#51);
[  228.716636][T13510]   lock(&q->elevator_lock);
[  228.718557][T13510] 
[  228.718557][T13510]  *** DEADLOCK ***
[  228.718557][T13510] 
[  228.721877][T13510] 6 locks held by syz.2.3292/13510:
[  228.724007][T13510]  #0: ffffffff8fc39ff0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  228.727385][T13510]  #1: ffffffff8fc39e08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  228.731057][T13510]  #2: ffff88816d8ea9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0
[  228.735730][T13510]  #3: ffff88816d8ea8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0
[  228.740160][T13510]  #4: ffff88816d8db008 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x198/0x450
[  228.744488][T13510]  #5: ffff88816d8db040 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  228.748874][T13510] 
[  228.748874][T13510] stack backtrace:
[  228.751266][T13510] CPU: 0 UID: 0 PID: 13510 Comm: syz.2.3292 Not tainted syzkaller #0 PREEMPT(full) 
[  228.751282][T13510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  228.751291][T13510] Call Trace:
[  228.751300][T13510]  <TASK>
[  228.751307][T13510]  dump_stack_lvl+0xe8/0x150
[  228.751329][T13510]  print_circular_bug+0x2e1/0x300
[  228.751352][T13510]  check_noncircular+0x12e/0x150
[  228.751372][T13510]  __lock_acquire+0x15a5/0x2cf0
[  228.751393][T13510]  lock_acquire+0xf0/0x2e0
[  228.751407][T13510]  ? elevator_change+0x1b3/0x450
[  228.751426][T13510]  __mutex_lock+0x19f/0x1300
[  228.751438][T13510]  ? elevator_change+0x1b3/0x450
[  228.751451][T13510]  ? rcu_is_watching+0x15/0xb0
[  228.751469][T13510]  ? elevator_change+0x1b3/0x450
[  228.751488][T13510]  ? __pfx___mutex_lock+0x10/0x10
[  228.751500][T13510]  ? enable_work+0x17f/0x230
[  228.751519][T13510]  ? lockdep_hardirqs_on+0x7a/0x110
[  228.751541][T13510]  ? __cancel_work_sync+0xf7/0x110
[  228.751558][T13510]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  228.751571][T13510]  elevator_change+0x1b3/0x450
[  228.751590][T13510]  elevator_set_none+0xb5/0x140
[  228.751606][T13510]  ? __pfx_elevator_set_none+0x10/0x10
[  228.751624][T13510]  ? xa_load+0x1db/0x210
[  228.751636][T13510]  blk_mq_update_nr_hw_queues+0x5e7/0x1ae0
[  228.751653][T13510]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  228.751694][T13510]  ? kernfs_add_one+0x477/0x5c0
[  228.751715][T13510]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  228.751731][T13510]  ? sysfs_add_file_mode_ns+0x259/0x300
[  228.751747][T13510]  nbd_start_device+0x17f/0xb10
[  228.751770][T13510]  ? device_create_file+0xf4/0x1b0
[  228.751790][T13510]  nbd_genl_connect+0x165b/0x1cf0
[  228.751811][T13510]  ? __pfx_nbd_genl_connect+0x10/0x10
[  228.751828][T13510]  ? rcu_is_watching+0x15/0xb0
[  228.751845][T13510]  ? __nla_parse+0x40/0x60
[  228.751862][T13510]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  228.751882][T13510]  genl_family_rcv_msg_doit+0x22a/0x330
[  228.751901][T13510]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  228.751922][T13510]  ? __lock_acquire+0x6b5/0x2cf0
[  228.751938][T13510]  genl_rcv_msg+0x61c/0x7a0
[  228.751955][T13510]  ? __pfx_genl_rcv_msg+0x10/0x10
[  228.751971][T13510]  ? __pfx_nbd_genl_connect+0x10/0x10
[  228.751987][T13510]  ? __lock_acquire+0x6b5/0x2cf0
[  228.752002][T13510]  netlink_rcv_skb+0x232/0x4b0
[  228.752030][T13510]  ? __pfx_genl_rcv_msg+0x10/0x10
[  228.752047][T13510]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  228.752064][T13510]  ? down_read+0x272/0x2e0
[  228.752076][T13510]  ? genl_rcv+0xd/0x40
[  228.752094][T13510]  genl_rcv+0x28/0x40
[  228.752111][T13510]  netlink_unicast+0x80f/0x9b0
[  228.752128][T13510]  ? __pfx_netlink_unicast+0x10/0x10
[  228.752142][T13510]  ? netlink_sendmsg+0x650/0xb40
[  228.752163][T13510]  ? skb_put+0x11b/0x210
[  228.752179][T13510]  netlink_sendmsg+0x813/0xb40
[  228.752197][T13510]  ? __pfx_netlink_sendmsg+0x10/0x10
[  228.752213][T13510]  ? trace_sched_set_need_resched_tp+0x3e/0x160
[  228.752232][T13510]  ? aa_sock_msg_perm+0xf1/0x1b0
[  228.752249][T13510]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  228.752261][T13510]  ? __pfx_netlink_sendmsg+0x10/0x10
[  228.752274][T13510]  ____sys_sendmsg+0xa68/0xad0
[  228.752293][T13510]  ? __pfx_____sys_sendmsg+0x10/0x10
[  228.752311][T13510]  ? import_iovec+0x73/0xa0
[  228.752328][T13510]  ___sys_sendmsg+0x2a5/0x360
[  228.752346][T13510]  ? __pfx____sys_sendmsg+0x10/0x10
[  228.752363][T13510]  ? futex_wake+0x4ac/0x580
[  228.752386][T13510]  ? __fget_files+0x2a/0x420
[  228.752403][T13510]  ? __fget_files+0x3a0/0x420
[  228.752419][T13510]  __x64_sys_sendmsg+0x1bd/0x2a0
[  228.752436][T13510]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  228.752454][T13510]  ? rcu_is_watching+0x15/0xb0
[  228.752472][T13510]  do_syscall_64+0x14d/0xf80
[  228.752489][T13510]  ? trace_irq_disable+0x3b/0x150
[  228.752505][T13510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.752520][T13510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.752532][T13510] RIP: 0033:0x7f9ce799cdd9
[  228.752545][T13510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.752555][T13510] RSP: 002b:00007f9ce888a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  228.752568][T13510] RAX: ffffffffffffffda RBX: 00007f9ce7c15fa0 RCX: 00007f9ce799cdd9
[  228.752577][T13510] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004
[  228.752586][T13510] RBP: 00007f9ce7a32d69 R08: 0000000000000000 R09: 0000000000000000
[  228.752592][T13510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.752599][T13510] R13: 00007f9ce7c16038 R14: 00007f9ce7c15fa0 R15: 00007ffe9be86318
[  228.752612][T13510]  </TASK>
[  229.064287][   T56] block nbd2: Receive control failed (result -32)
[  229.067074][ T9377] block nbd2: Receive control failed (result -32)
[  229.070485][T13510] nbd2: detected capacity change from 0 to 63
[  229.082413][T12982] block nbd2: Dead connection, failed to find a fallback
[  229.085407][T12982] block nbd2: shutting down sockets
[  229.097651][T12982] blk_print_req_error: 138 callbacks suppressed
[  229.097663][T12982] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  229.104133][T12982] buffer_io_error: 138 callbacks suppressed
[  229.104140][T12982] Buffer I/O error on dev nbd2, logical block 0, async page read
[  229.110095][T12982] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  229.113775][T12982] Buffer I/O error on dev nbd2, logical block 1, async page read
[  229.116802][T12982] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  229.120428][T12982] Buffer I/O error on dev nbd2, logical block 2, async page read
[  229.124616][T12982] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  229.128582][T12982] Buffer I/O error on dev nbd2, logical block 3, async page read
[  229.131722][T12982] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  229.135615][T12982] Buffer I/O error on dev nbd2, logical block 0, async page read
[  229.139923][T12982] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  229.143872][T12982] Buffer I/O error on dev nbd2, logical block 1, async page read
[  229.147060][T12982] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  229.155492][T12982] Buffer I/O error on dev nbd2, logical block 2, async page read
[  229.159066][T12982] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  229.166104][T12982] Buffer I/O error on dev nbd2, logical block 3, async page read
[  229.170266][T12982] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  229.173126][T12982] Buffer I/O error on dev nbd2, logical block 0, async page read
[  229.175539][T12982] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  229.179017][T12982] Buffer I/O error on dev nbd2, logical block 1, async page read
[  229.182571][T12982] ldm_validate_partition_table(): Disk read failed.
[  229.185525][T12982] Dev nbd2: unable to read RDB block 0
[  229.188614][T12982]  nbd2: unable to read partition table
[  229.193150][T12982] ldm_validate_partition_table(): Disk read failed.
[  229.196093][T12982] Dev nbd2: unable to read RDB block 0
[  229.199628][T12982]  nbd2: unable to read partition table
[  230.987857][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
