last executing test programs:

360.377419ms ago: executing program 1 (id=3507):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x14)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x4}], 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

289.496276ms ago: executing program 2 (id=3509):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x18, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)

289.058332ms ago: executing program 2 (id=3511):
unshare(0x20400)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x2c020400)
openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)

216.18797ms ago: executing program 0 (id=3512):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)

215.594275ms ago: executing program 2 (id=3513):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r1=>0x0}, &(0x7f0000000040)=0x8)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000300)={r1, 0x1}, 0x8)

215.410446ms ago: executing program 0 (id=3514):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x10, 0x9}}, 0x18}, 0x1, 0x0, 0x0, 0x20000411}, 0x0)

161.044039ms ago: executing program 2 (id=3515):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0)

160.849163ms ago: executing program 0 (id=3516):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
unshare(0x2020480)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20)

160.534562ms ago: executing program 1 (id=3517):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xf96}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0)

109.07757ms ago: executing program 0 (id=3518):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x20000000)

108.871311ms ago: executing program 1 (id=3519):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x53}, 0x2, 0x33}, 0x0, @in=@remote, 0x0, 0x1, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

108.400976ms ago: executing program 0 (id=3520):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4620, 0x7, @private1, 0x9}}, 0x0, 0x0, 0x0, 0x0, "9e3619ea5dad28c61339fe3860c334983aad0f8bb294f2c98d28abd36e5e3738791efca84096bdc61579dc502b0efd595a0a4267f683c3cade7b9bc76e0eb553aa02885b72adea9d8697155f9b5000"}, 0xd8)
listen(r0, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x10c000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000002c0), 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r3=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}})
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
unshare(0x600)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f00000004"], 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

57.716066ms ago: executing program 2 (id=3521):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

57.538441ms ago: executing program 1 (id=3522):
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
close(r1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r1)

685.555µs ago: executing program 0 (id=3523):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004}, 0x20000800)

531.839µs ago: executing program 1 (id=3524):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x80}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

193.675µs ago: executing program 2 (id=3525):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4000050)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r3, 0x0, 0x42)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003010000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff0307600300d36d6b33428d20", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x6f6)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'none\x00', 0x30, 0x0, 0x3f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000300)={{0x2, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x2001, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='\a\x00@\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

0s ago: executing program 1 (id=3526):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r2, @ANYBLOB="c300050000000000300012800b000100697036746e6c0000200002800500090004000000140003000000000000000000000000ff"], 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28280' (ED25519) to the list of known hosts.
syzkaller login: [   48.780614][ T5736] cgroup: Unknown subsys name 'net'
[   48.863831][ T5736] cgroup: Unknown subsys name 'cpuset'
[   48.875701][ T5736] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.833294][ T5736] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.531767][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.535416][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.538890][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.543192][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.546733][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.585210][   T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.588552][   T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.592849][   T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.602529][ T5198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.606096][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.620474][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.627852][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.633691][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.637589][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.641035][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.876701][ T5805] chnl_net:caif_netlink_parms(): no params data found
[   55.908617][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   56.031902][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   56.070245][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.073216][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.076360][ T5805] bridge_slave_0: entered allmulticast mode
[   56.081200][ T5805] bridge_slave_0: entered promiscuous mode
[   56.107092][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.110342][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.113316][ T5805] bridge_slave_1: entered allmulticast mode
[   56.116909][ T5805] bridge_slave_1: entered promiscuous mode
[   56.121716][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.124112][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.126455][ T5810] bridge_slave_0: entered allmulticast mode
[   56.129242][ T5810] bridge_slave_0: entered promiscuous mode
[   56.148169][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.150907][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.153254][ T5810] bridge_slave_1: entered allmulticast mode
[   56.155838][ T5810] bridge_slave_1: entered promiscuous mode
[   56.205743][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.211490][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.215314][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.219068][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.222733][ T5812] bridge_slave_0: entered allmulticast mode
[   56.226474][ T5812] bridge_slave_0: entered promiscuous mode
[   56.232548][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.248348][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.263172][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.266059][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.268958][ T5812] bridge_slave_1: entered allmulticast mode
[   56.273412][ T5812] bridge_slave_1: entered promiscuous mode
[   56.307318][ T5805] team0: Port device team_slave_0 added
[   56.310883][ T5810] team0: Port device team_slave_0 added
[   56.314091][ T5805] team0: Port device team_slave_1 added
[   56.337893][ T5810] team0: Port device team_slave_1 added
[   56.352258][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.368522][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.383905][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.386505][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.395156][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.406025][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.408463][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.418937][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.423917][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.426625][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.435610][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.441141][ T5812] team0: Port device team_slave_0 added
[   56.443429][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.446238][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.457023][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.467742][ T5812] team0: Port device team_slave_1 added
[   56.514349][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.516742][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.525902][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.530183][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.532374][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.541095][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.560047][ T5805] hsr_slave_0: entered promiscuous mode
[   56.562665][ T5805] hsr_slave_1: entered promiscuous mode
[   56.577076][ T5810] hsr_slave_0: entered promiscuous mode
[   56.579790][ T5810] hsr_slave_1: entered promiscuous mode
[   56.582584][ T5810] debugfs: 'hsr0' already exists in 'hsr'
[   56.584447][ T5810] Cannot create hsr debugfs directory
[   56.645274][ T5812] hsr_slave_0: entered promiscuous mode
[   56.648046][ T5812] hsr_slave_1: entered promiscuous mode
[   56.650442][ T5812] debugfs: 'hsr0' already exists in 'hsr'
[   56.652254][ T5812] Cannot create hsr debugfs directory
[   56.872019][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.881903][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.887757][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.903142][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.960968][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.968371][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.979334][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.995693][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.061294][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.071220][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.079679][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.085560][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.124880][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.144828][ T5805] 8021q: adding VLAN 0 to HW filter on device team0
[   57.155006][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.157858][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.168947][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.174256][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.176457][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.222700][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   57.231145][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.233488][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.258799][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.264212][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.266413][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.281867][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   57.301993][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.304301][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.317121][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.319384][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.378761][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.411939][ T5805] veth0_vlan: entered promiscuous mode
[   57.423040][ T5805] veth1_vlan: entered promiscuous mode
[   57.458178][ T5805] veth0_macvtap: entered promiscuous mode
[   57.468052][ T5805] veth1_macvtap: entered promiscuous mode
[   57.477463][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.484732][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.494896][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.505188][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.516429][ T5864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.522352][ T5864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.528646][ T5864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.559580][ T5810] veth0_vlan: entered promiscuous mode
[   57.595396][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.600942][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.603880][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.612044][ T5810] veth1_vlan: entered promiscuous mode
[   57.621266][ T5814] Bluetooth: hci0: command tx timeout
[   57.631102][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.633512][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.664691][ T5810] veth0_macvtap: entered promiscuous mode
[   57.672141][ T5812] veth0_vlan: entered promiscuous mode
[   57.674239][ T5810] veth1_macvtap: entered promiscuous mode
[   57.682132][ T5805] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.694032][ T5812] veth1_vlan: entered promiscuous mode
[   57.700737][ T5814] Bluetooth: hci2: command tx timeout
[   57.700751][   T56] Bluetooth: hci1: command tx timeout
[   57.704962][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.712821][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.718419][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.739205][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.763696][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.766818][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.822934][ T5812] veth0_macvtap: entered promiscuous mode
[   57.833183][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.841768][ T5812] veth1_macvtap: entered promiscuous mode
[   57.842235][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.899738][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.904329][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.909487][ T5874] syzkaller0: entered promiscuous mode
[   57.912751][ T5874] syzkaller0: entered allmulticast mode
[   57.917264][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.937637][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.952706][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.971758][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.977927][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.981930][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.039187][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.048007][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.068450][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.072366][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.229121][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'.
[   59.374461][ T5914] sctp: [Deprecated]: syz.2.21 (pid 5914) Use of int in maxseg socket option.
[   59.374461][ T5914] Use struct sctp_assoc_value instead
[   59.669644][ T5928] netlink: 'syz.0.28': attribute type 1 has an invalid length.
[   59.671577][ T5926] netlink: 'syz.2.27': attribute type 1 has an invalid length.
[   59.672461][ T5928] netlink: 96 bytes leftover after parsing attributes in process `syz.0.28'.
[   59.675197][ T5926] netlink: 224 bytes leftover after parsing attributes in process `syz.2.27'.
[   59.694950][ T5928] netlink: 'syz.0.28': attribute type 1 has an invalid length.
[   59.697280][ T5928] netlink: 634 bytes leftover after parsing attributes in process `syz.0.28'.
[   59.702151][ T5928] netlink: 1 bytes leftover after parsing attributes in process `syz.0.28'.
[   59.710636][   T56] Bluetooth: hci0: command tx timeout
[   59.779321][ T5938] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.31'.
[   59.780190][   T56] Bluetooth: hci1: command tx timeout
[   59.784338][ T5814] Bluetooth: hci2: command tx timeout
[   59.945977][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.955190][ T5947] bridge_slave_0 (unregistering): left allmulticast mode
[   59.957453][ T5947] bridge_slave_0 (unregistering): left promiscuous mode
[   59.959698][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.972486][ T5949] 5: entered promiscuous mode
[   60.060982][ T5954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.780425][ T5814] Bluetooth: hci0: command tx timeout
[   61.820443][ T5974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.47'.
[   61.840854][ T5974] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   61.848150][ T5974] bond1 (unregistering): Released all slaves
[   61.860096][ T5814] Bluetooth: hci1: command tx timeout
[   61.870108][ T5814] Bluetooth: hci2: command tx timeout
[   61.904231][ T5974] Zero length message leads to an empty skb
[   61.929183][ T5977] netlink: 'syz.1.48': attribute type 22 has an invalid length.
[   61.931824][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[   61.935514][ T5977] netlink: 'syz.1.48': attribute type 22 has an invalid length.
[   61.937855][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[   62.737905][ T5932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   62.852714][ T5986] team0: entered promiscuous mode
[   62.854695][ T5986] team_slave_0: entered promiscuous mode
[   62.857217][ T5986] team_slave_1: entered promiscuous mode
[   62.903797][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'.
[   63.860147][ T5814] Bluetooth: hci0: command tx timeout
[   63.949241][ T5814] Bluetooth: hci2: command tx timeout
[   63.951592][ T5814] Bluetooth: hci1: command tx timeout
[   64.080285][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'.
[   64.092855][ T6045] netlink: 'syz.1.76': attribute type 16 has an invalid length.
[   64.095930][ T6045] netlink: 'syz.1.76': attribute type 17 has an invalid length.
[   64.150092][ T6045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.181385][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.80'.
[   64.373764][ T6040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.77'.
[   64.377327][ T6040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.77'.
[   64.389428][ T6040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.77'.
[   64.405593][ T6040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.77'.
[   64.486991][ T6059] netlink: 'syz.0.84': attribute type 1 has an invalid length.
[   64.784244][ T6076] xt_hashlimit: size too large, truncated to 1048576
[   64.826695][ T6084] warning: `syz.1.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.885524][ T6084] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   65.584222][ T6135] bridge0: entered allmulticast mode
[   65.586454][ T6135] bridge0: left allmulticast mode
[   66.195185][ T6149] SET target dimension over the limit!
[   66.762169][ T6188] batadv_slave_0: entered promiscuous mode
[   66.770507][ T6187] batadv_slave_0: left promiscuous mode
[   66.822695][ T6192] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   66.928189][ T6200] bridge_slave_0: left allmulticast mode
[   66.930421][ T6200] bridge_slave_0: left promiscuous mode
[   66.932612][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.937057][ T6200] bridge_slave_1: left allmulticast mode
[   66.939265][ T6200] bridge_slave_1: left promiscuous mode
[   66.942745][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.948801][ T6200] bond0: (slave bond_slave_0): Releasing backup interface
[   66.958255][ T6200] bond0: (slave bond_slave_1): Releasing backup interface
[   66.963341][ T6200] team_slave_0: left promiscuous mode
[   66.968267][ T6200] team0: Port device team_slave_0 removed
[   66.972663][ T6200] team_slave_1: left promiscuous mode
[   66.977999][ T6200] team0: Port device team_slave_1 removed
[   66.981235][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.983806][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.988306][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.997063][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.003110][ T6200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   68.022769][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'.
[   68.103768][ T6222] syzkaller0: entered promiscuous mode
[   68.105463][ T6222] syzkaller0: entered allmulticast mode
[   68.147910][ T6097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   68.267813][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.156'.
[   68.748889][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'.
[   69.357547][ T6351] netlink: 'syz.0.179': attribute type 12 has an invalid length.
[   69.364549][ T6351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.179'.
[   69.415243][ T6357] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.181'.
[   69.419295][ T6357] ksmbd: Unknown IPC event: 1, ignore.
[   69.447229][ T6355] syzkaller1: entered promiscuous mode
[   69.450748][ T6355] syzkaller1: entered allmulticast mode
[   70.124329][ T6404] bridge_slave_0: left allmulticast mode
[   70.126543][ T6404] bridge_slave_0: left promiscuous mode
[   70.128907][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.136506][ T6404] bridge_slave_1: left allmulticast mode
[   70.138822][ T6404] bridge_slave_1: left promiscuous mode
[   70.144201][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.152238][ T6404] bond0: (slave bond_slave_0): Releasing backup interface
[   70.162635][ T6404] bond0: (slave bond_slave_1): Releasing backup interface
[   70.181304][ T6404] team0: Port device team_slave_0 removed
[   70.198891][ T6404] team0: Port device team_slave_1 removed
[   70.204743][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.207877][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.212563][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.215668][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.220743][ T6404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   70.455756][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.198'.
[   70.696944][ T6434] netlink: 277 bytes leftover after parsing attributes in process `syz.1.205'.
[   70.862587][ T6445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.208'.
[   70.991756][ T6448] Illegal XDP return value 4294967274 on prog  (id 26) dev N/A, expect packet loss!
[   71.088146][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'.
[   71.626397][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'.
[   71.731384][ T6469] IPVS: ip_vs_add_dest(): server weight less than zero
[   71.735121][ T6469] IPVS: rr: FWM 3 0x00000003 - no destination available
[   71.748057][ T5275] IPVS: starting estimator thread 0...
[   71.758894][ T6475] tipc: Started in network mode
[   71.765784][ T6475] tipc: Node identity ac14140f, cluster identity 4711
[   71.768896][ T6475] tipc: New replicast peer: 255.255.255.255
[   71.776847][ T6475] tipc: Enabled bearer <udp:syz2>, priority 10
[   71.844605][ T6478] syzkaller0: entered promiscuous mode
[   71.846916][ T6478] syzkaller0: entered allmulticast mode
[   71.851513][ T6476] IPVS: using max 47 ests per chain, 112800 per kthread
[   71.960875][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'.
[   72.125889][ T6501] netlink: 'syz.0.230': attribute type 21 has an invalid length.
[   72.128634][ T6501] netlink: 128 bytes leftover after parsing attributes in process `syz.0.230'.
[   72.132116][ T6501] netlink: 'syz.0.230': attribute type 4 has an invalid length.
[   72.148644][ T6501] netlink: 3 bytes leftover after parsing attributes in process `syz.0.230'.
[   72.436077][ T6520] netlink: 'syz.0.238': attribute type 3 has an invalid length.
[   72.465142][ T6520] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.474479][ T6520] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   72.891108][    T9] tipc: Node number set to 2886997007
[   72.955203][ T6533] syz.0.244 uses obsolete (PF_INET,SOCK_PACKET)
[   73.381830][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   73.543945][ T6579] netlink: 'syz.0.265': attribute type 3 has an invalid length.
[   73.547535][ T6579] netlink: 'syz.0.265': attribute type 3 has an invalid length.
[   73.579744][ T6582] netlink: 'syz.2.266': attribute type 12 has an invalid length.
[   73.615915][ T5864] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.619627][ T5864] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.627128][ T6582] netlink: 'syz.2.266': attribute type 12 has an invalid length.
[   73.627267][ T5864] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.636536][ T5864] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.887390][ T6612] netlink: 'syz.1.279': attribute type 3 has an invalid length.
[   73.891363][ T6612] netlink: 'syz.1.279': attribute type 2 has an invalid length.
[   73.898721][ T6610] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   73.919524][ T6610] ip6gre2: entered allmulticast mode
[   73.925991][ T6610] ip6gre2: entered promiscuous mode
[   73.928321][ T6610] team0: Port device ip6gre2 added
[   74.430968][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   74.438257][ T6653] syzkaller1: entered promiscuous mode
[   74.441869][ T6653] syzkaller1: entered allmulticast mode
[   74.687779][ T6672] sctp: [Deprecated]: syz.2.307 (pid 6672) Use of struct sctp_assoc_value in delayed_ack socket option.
[   74.687779][ T6672] Use struct sctp_sack_info instead
[   74.873713][ T6687] sctp: [Deprecated]: syz.0.312 (pid 6687) Use of int in max_burst socket option deprecated.
[   74.873713][ T6687] Use struct sctp_assoc_value instead
[   74.876202][ T6686] __nla_validate_parse: 9 callbacks suppressed
[   74.876215][ T6686] netlink: 256 bytes leftover after parsing attributes in process `syz.1.315'.
[   75.044023][ T6697] netlink: 128 bytes leftover after parsing attributes in process `syz.1.320'.
[   75.305995][ T6719] tc_dump_action: action bad kind
[   75.355560][ T6723] syzkaller0: entered promiscuous mode
[   75.357463][ T6723] syzkaller0: entered allmulticast mode
[   75.477779][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.538540][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'.
[   75.543825][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'.
[   75.547825][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'.
[   75.555616][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'.
[   75.630225][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'.
[   75.838684][ T6763] validate_nla: 2 callbacks suppressed
[   75.838695][ T6763] netlink: 'syz.1.351': attribute type 7 has an invalid length.
[   75.847244][ T6764] netlink: 'syz.2.349': attribute type 1 has an invalid length.
[   75.999348][ T6780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.002224][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.100535][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.159325][ T6794] syzkaller0: entered promiscuous mode
[   76.162151][ T6794] syzkaller0: entered allmulticast mode
[   76.434656][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   76.437577][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   76.500400][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.279753][ T6844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.386'.
[   77.296231][ T6846] netlink: 'syz.2.388': attribute type 1 has an invalid length.
[   77.346982][ T6846] bond1: entered promiscuous mode
[   77.349222][ T6846] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.384900][ T6846] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.387887][ T6846] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   77.399680][ T6846] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   77.406457][ T6846] bond1: (slave ip6gre1): making interface the new active one
[   77.410059][ T6846] ip6gre1: entered promiscuous mode
[   77.413324][ T6846] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[   77.489509][ T6868] xt_TPROXY: Can be used only with -p tcp or -p udp
[   77.551514][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.749057][ T6895] syzkaller1: entered promiscuous mode
[   77.767297][ T6895] syzkaller1: entered allmulticast mode
[   77.894038][ T6909] sctp: [Deprecated]: syz.0.407 (pid 6909) Use of struct sctp_assoc_value in delayed_ack socket option.
[   77.894038][ T6909] Use struct sctp_sack_info instead
[   77.903816][ T6909] sctp: [Deprecated]: syz.0.407 (pid 6909) Use of struct sctp_assoc_value in delayed_ack socket option.
[   77.903816][ T6909] Use struct sctp_sack_info instead
[   78.179710][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'.
[   78.206061][   T34] audit: type=1804 audit(1778574272.664:2): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.415" name="/newroot/175/cgroup.controllers" dev="tmpfs" ino=905 res=1 errno=0
[   78.217485][   T34] audit: type=1800 audit(1778574272.664:3): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.415" name="cgroup.controllers" dev="tmpfs" ino=905 res=0 errno=0
[   78.258993][   T34] audit: type=1804 audit(1778574272.714:4): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.415" name="/newroot/175/cgroup.controllers" dev="tmpfs" ino=905 res=1 errno=0
[   78.522257][ T6971] netlink: 'syz.0.423': attribute type 1 has an invalid length.
[   78.550092][ T6971] netlink: 92 bytes leftover after parsing attributes in process `syz.0.423'.
[   78.553574][ T6971] netlink: 'syz.0.423': attribute type 1 has an invalid length.
[   78.580790][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.625642][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.629163][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.143357][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.620202][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.196958][ T7095] __nla_validate_parse: 4 callbacks suppressed
[   80.196973][ T7095] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.469'.
[   80.262429][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.660259][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.900457][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.540718][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.700299][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.321057][ T7052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   82.435967][ T7110] syzkaller0: entered promiscuous mode
[   82.437914][ T7110] syzkaller0: entered allmulticast mode
[   82.570131][ T7118] netlink: 'syz.2.480': attribute type 9 has an invalid length.
[   82.573566][ T7118] netlink: 'syz.2.480': attribute type 7 has an invalid length.
[   82.580990][ T7118] netlink: 'syz.2.480': attribute type 8 has an invalid length.
[   82.646216][ T7123] netlink: 104 bytes leftover after parsing attributes in process `syz.2.482'.
[   82.837219][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'.
[   83.012442][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'.
[   83.258587][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.506'.
[   83.329551][ T7178] netlink: 'syz.2.509': attribute type 1 has an invalid length.
[   83.332812][ T7178] netlink: 'syz.2.509': attribute type 1 has an invalid length.
[   83.453290][ T7190] netlink: 'syz.0.515': attribute type 1 has an invalid length.
[   83.458667][ T7190] netlink: 76 bytes leftover after parsing attributes in process `syz.0.515'.
[   83.505761][ T7195] Bluetooth: MGMT ver 1.23
[   83.524694][ T7198] netlink: 'syz.1.519': attribute type 4 has an invalid length.
[   83.544270][ T7198] netlink: 'syz.1.519': attribute type 4 has an invalid length.
[   83.638147][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'.
[   83.679507][ T7216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.528'.
[   83.760428][ T7220] net_ratelimit: 2 callbacks suppressed
[   83.760440][ T7220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.769269][ T7220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.773411][ T7220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.776849][ T7220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.786155][ T7220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.789907][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.793620][ T7220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.798036][ T7220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.801326][ T7220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   83.804526][ T7220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.189741][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'.
[   84.593466][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'.
[   85.762732][ T7312] syzkaller1: entered promiscuous mode
[   85.764788][ T7312] syzkaller1: entered allmulticast mode
[   86.208194][ T7352] __nla_validate_parse: 2 callbacks suppressed
[   86.208205][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'.
[   86.220974][ T7352] gretap0: entered promiscuous mode
[   86.241589][ T7357] pim6reg: entered allmulticast mode
[   86.260238][ T7357] pim6reg: left allmulticast mode
[   86.325914][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.578'.
[   86.329510][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.578'.
[   86.568809][   T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[   86.663848][  T110] cfg80211: failed to load regulatory.db
[   87.690358][ T7506] sctp: [Deprecated]: syz.2.619 (pid 7506) Use of int in max_burst socket option.
[   87.690358][ T7506] Use struct sctp_assoc_value instead
[   87.906128][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[   87.909767][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[   87.925727][   T58] block nbd0: Receive control failed (result -32)
[   88.308273][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[   88.363934][ T7557] netlink: 168 bytes leftover after parsing attributes in process `syz.1.642'.
[   88.981628][ T5936] net_ratelimit: 37 callbacks suppressed
[   88.981643][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.092633][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'.
[   89.120483][ T7618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.196224][ T7624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'.
[   89.323672][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'.
[   89.385603][ T7644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.413316][    C0] IPv4: Oversized IP packet from 172.20.20.170
[   89.479031][ T7651] IPv6: NLM_F_CREATE should be specified when creating new route
[   89.700090][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.862601][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.020072][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.370349][ T7726] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   90.379800][ T7726] bond2 (unregistering): Released all slaves
[   91.061533][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.100293][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.319370][ T7775] netlink: 'syz.1.737': attribute type 1 has an invalid length.
[   92.335930][ T7775] netlink: 'syz.1.737': attribute type 4 has an invalid length.
[   92.338686][ T7775] __nla_validate_parse: 2 callbacks suppressed
[   92.338695][ T7775] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.737'.
[   92.354557][ T7775] netlink: 'syz.1.737': attribute type 1 has an invalid length.
[   92.356883][ T7775] netlink: 'syz.1.737': attribute type 4 has an invalid length.
[   92.359468][ T7775] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.737'.
[   92.499386][ T7800] netlink: 'syz.2.746': attribute type 4 has an invalid length.
[   92.517996][ T7800] netlink: 'syz.2.746': attribute type 4 has an invalid length.
[   92.663800][ T7819] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   92.707734][ T7826] bridge0: entered promiscuous mode
[   92.709730][ T7825] IPVS: Scheduler module ip_vs_sip not found
[   92.742694][ T7829] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.759'.
[   92.784634][ T7834] netlink: 'syz.2.762': attribute type 58 has an invalid length.
[   92.787787][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'.
[   92.789985][ T7834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.762'.
[   92.877522][  T110] IPVS: starting estimator thread 0...
[   92.990446][ T7846] IPVS: using max 86 ests per chain, 206400 per kthread
[   93.558558][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'.
[   93.635371][ T7905] netlink: 'syz.0.790': attribute type 2 has an invalid length.
[   93.912057][ T7912] syzkaller0: entered promiscuous mode
[   93.913918][ T7912] syzkaller0: entered allmulticast mode
[   94.007807][ T7920] net_ratelimit: 653 callbacks suppressed
[   94.007822][ T7920] openvswitch: netlink: IP tunnel dst address not specified
[   94.186031][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.969095][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.827'.
[   94.973725][ T7984] netlink: 68 bytes leftover after parsing attributes in process `syz.2.827'.
[   94.976539][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.827'.
[   94.979700][ T7984] netlink: 68 bytes leftover after parsing attributes in process `syz.2.827'.
[   95.187965][ T8003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.220942][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.226522][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.229265][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.233087][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.237048][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.239945][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.247925][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.250832][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.285631][ T8003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.337599][ T8003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.395403][ T8003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.459668][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.470851][ T8024] netlink: 'syz.1.841': attribute type 7 has an invalid length.
[   95.477017][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.483107][ T8024] netlink: 'syz.1.841': attribute type 7 has an invalid length.
[   95.489592][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.504856][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.931528][ T8057] ip6gretap0: entered promiscuous mode
[   96.257912][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.262720][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.266166][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.276187][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.252126][ T8142] bond2: entered promiscuous mode
[   97.254347][ T8142] 8021q: adding VLAN 0 to HW filter on device bond2
[   97.265468][ T8142] macvtap1: entered allmulticast mode
[   97.275817][ T8142] bond2: (slave bridge1): making interface the new active one
[   97.278490][ T8142] bridge1: entered promiscuous mode
[   97.281404][ T8142] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   97.481757][ T8161] validate_nla: 3 callbacks suppressed
[   97.481768][ T8161] netlink: 'syz.0.893': attribute type 13 has an invalid length.
[   97.493544][ T8161] netlink: 'syz.0.893': attribute type 17 has an invalid length.
[   97.572215][ T8161] gretap0: left promiscuous mode
[   97.600603][ T8161] ip6gretap0: left promiscuous mode
[   97.609174][ T8161] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.611934][ T8161] team0: left promiscuous mode
[   97.613534][ T8161] ip6gre2: left promiscuous mode
[   97.615466][ T8161] 8021q: adding VLAN 0 to HW filter on device team0
[   97.623693][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.628239][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.637414][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.641677][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.688038][ T8175] __nla_validate_parse: 3 callbacks suppressed
[   97.688052][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'.
[   97.829594][ T8191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.910'.
[   97.967689][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'.
[   98.148872][ T8227] netlink: 'syz.0.927': attribute type 4 has an invalid length.
[   98.324975][ T8231] netlink: 'syz.0.929': attribute type 1 has an invalid length.
[   98.512153][ T8257] netlink: 51 bytes leftover after parsing attributes in process `syz.1.942'.
[   98.829146][ T8280] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   98.975117][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.958'.
[   99.094869][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'.
[   99.102127][ T8296] sctp: [Deprecated]: syz.1.960 (pid 8296) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.102127][ T8296] Use struct sctp_sack_info instead
[   99.159972][ T8297] netlink: 'syz.1.960': attribute type 1 has an invalid length.
[   99.162878][ T8297] netlink: 224 bytes leftover after parsing attributes in process `syz.1.960'.
[   99.954900][ T8317] xt_hashlimit: size too large, truncated to 1048576
[  100.282804][ T8323] net_ratelimit: 15 callbacks suppressed
[  100.282822][ T8323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.411447][ T8330] tipc: Started in network mode
[  100.413527][ T8330] tipc: Node identity 1e76d02963bd, cluster identity 4711
[  100.416615][ T8330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.420480][ T8330] syzkaller0: entered promiscuous mode
[  100.422711][ T8330] syzkaller0: entered allmulticast mode
[  100.451238][ T8330] netlink: 44 bytes leftover after parsing attributes in process `syz.0.971'.
[  100.456926][ T8330] tipc: Resetting bearer <eth:syzkaller0>
[  100.501751][ T8329] tipc: Resetting bearer <eth:syzkaller0>
[  100.515942][ T8329] tipc: Disabling bearer <eth:syzkaller0>
[  100.556783][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'.
[  100.596839][ T8337] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.974'.
[  100.958482][ T8361] sctp: [Deprecated]: syz.1.986 (pid 8361) Use of int in max_burst socket option deprecated.
[  100.958482][ T8361] Use struct sctp_assoc_value instead
[  100.999079][ T8364] netlink: 'syz.1.988': attribute type 6 has an invalid length.
[  101.108827][ T8377] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  104.221914][ T8388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.570760][ T8461] __nla_validate_parse: 3 callbacks suppressed
[  104.570773][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1026'.
[  107.516743][ T8454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  107.726562][ T8504] netlink: 'syz.2.1041': attribute type 39 has an invalid length.
[  108.417201][ T8512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  108.502719][ T8525] netlink: 'syz.2.1046': attribute type 83 has an invalid length.
[  108.565347][ T8532] netlink: 'syz.1.1050': attribute type 1 has an invalid length.
[  108.612179][ T8532] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address
[  108.620918][ T8532] bond2: (slave vxcan5): Error -95 calling set_mac_address
[  108.624344][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'.
[  108.674472][ T8538] bond2: (slave gretap1): making interface the new active one
[  108.678467][ T8538] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  108.684365][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'.
[  108.761431][ T8532] bond2: (slave bridge3): Enslaving as an active interface with a down link
[  108.793380][ T8532] macvlan2: entered promiscuous mode
[  108.809766][ T8532] macvlan2: entered allmulticast mode
[  108.817251][ T8532] bond2: entered promiscuous mode
[  108.819318][ T8532] gretap1: entered promiscuous mode
[  108.823944][ T8532] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  108.832330][ T8532] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  108.840410][ T8532] bond2: left promiscuous mode
[  108.842361][ T8532] gretap1: left promiscuous mode
[  108.932589][ T8532] syz.1.1050 (8532) used greatest stack depth: 19232 bytes left
[  108.948281][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'.
[  108.957970][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1061'.
[  109.606039][ T8606] netlink: 'syz.1.1081': attribute type 8 has an invalid length.
[  109.727262][ T8619] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1085'.
[  109.730461][ T8619] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1085'.
[  109.766912][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1087'.
[  109.770980][ T8621] netlink: 94 bytes leftover after parsing attributes in process `syz.0.1087'.
[  109.774260][ T8621] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1087'.
[  112.597895][ T8607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  113.365760][ T8681] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1113'.
[  113.542593][ T8707] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  113.547527][ T8707] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  113.817987][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'.
[  113.821388][ T8729] netlink: 94 bytes leftover after parsing attributes in process `syz.2.1132'.
[  113.828299][ T8729] netlink: 'syz.2.1132': attribute type 1 has an invalid length.
[  113.832881][ T8729] netlink: 568 bytes leftover after parsing attributes in process `syz.2.1132'.
[  113.929742][ T8743] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  114.055383][ T8751] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  114.100553][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'.
[  114.206099][ T8765] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  114.209213][ T8765] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  114.215037][ T8765] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  115.033294][ T8829] __nla_validate_parse: 4 callbacks suppressed
[  115.033310][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'.
[  115.099053][ T8838] netlink: 'syz.1.1183': attribute type 1 has an invalid length.
[  115.117500][ T8838] bond3: (slave geneve2): making interface the new active one
[  115.123396][ T8838] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  115.126208][ T5864] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  115.137207][ T5864] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  115.141294][ T5864] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  115.144652][ T5864] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  115.833716][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'.
[  115.909224][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[  116.596248][ T8953] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.602112][ T8953] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.606364][ T8953] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  116.691155][ T8953] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.698154][ T8953] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.703202][ T8953] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  116.783636][ T8953] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.788558][ T8953] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.792676][ T8953] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  116.846787][ T8953] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.861051][ T8953] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.864931][ T8953] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  116.986416][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.992308][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  116.998084][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  117.013934][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.016703][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  117.019323][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  117.032094][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.034941][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  117.037882][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  117.042182][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.050146][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  117.053358][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  117.115630][ T8975] GUP no longer grows the stack in syz.2.1242 (8975): 200000003000-20000000a000 (200000001000)
[  117.120539][ T8975] CPU: 0 UID: 0 PID: 8975 Comm: syz.2.1242 Not tainted syzkaller #0 PREEMPT(full) 
[  117.120558][ T8975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.120567][ T8975] Call Trace:
[  117.120573][ T8975]  <TASK>
[  117.120579][ T8975]  dump_stack_lvl+0xe8/0x150
[  117.120604][ T8975]  __get_user_pages+0x2453/0x29d0
[  117.120626][ T8975]  ? __lock_acquire+0x6b5/0x2cf0
[  117.120655][ T8975]  ? __gup_longterm_locked+0xc4e/0x1630
[  117.120699][ T8975]  ? down_read_killable+0x1bb/0x340
[  117.120723][ T8975]  __gup_longterm_locked+0xdcf/0x1630
[  117.120762][ T8975]  gup_fast_fallback+0x1d82/0x22e0
[  117.120804][ T8975]  ? __pfx_gup_fast_fallback+0x10/0x10
[  117.120822][ T8975]  ? futex_unqueue+0x22/0x240
[  117.120836][ T8975]  ? futex_unqueue+0x22/0x240
[  117.120850][ T8975]  ? is_valid_gup_args+0x11f/0x200
[  117.120871][ T8975]  ? get_user_pages_fast+0x4d/0xb0
[  117.120899][ T8975]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  117.120920][ T8975]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  117.120938][ T8975]  iov_iter_get_pages2+0x5e/0xa0
[  117.120957][ T8975]  __se_sys_vmsplice+0x7b3/0x1490
[  117.121009][ T8975]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  117.121024][ T8975]  ? __pfx_futex_wait+0x10/0x10
[  117.121052][ T8975]  ? lockdep_hardirqs_on+0x7a/0x110
[  117.121109][ T8975]  do_syscall_64+0x14d/0xf80
[  117.121126][ T8975]  ? trace_irq_disable+0x3b/0x150
[  117.121137][ T8975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.121153][ T8975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.121166][ T8975] RIP: 0033:0x7fec20f9cdd9
[  117.121179][ T8975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.121189][ T8975] RSP: 002b:00007fec21df2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  117.121203][ T8975] RAX: ffffffffffffffda RBX: 00007fec21215fa0 RCX: 00007fec20f9cdd9
[  117.121211][ T8975] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[  117.121219][ T8975] RBP: 00007fec21032d69 R08: 0000000000000000 R09: 0000000000000000
[  117.121226][ T8975] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  117.121233][ T8975] R13: 00007fec21216038 R14: 00007fec21215fa0 R15: 00007fffc9837848
[  117.121254][ T8975]  </TASK>
[  117.142806][ T8971] netlink: 'syz.0.1239': attribute type 10 has an invalid length.
[  117.224892][   T56] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  117.228143][ T8971] macvlan1: entered allmulticast mode
[  117.231038][ T8971] veth1_vlan: entered allmulticast mode
[  117.234829][ T8971] team0: Device macvlan1 is of different type
[  117.250268][ T8971] veth1_vlan: left allmulticast mode
[  117.293070][ T8981] syzkaller0: entered promiscuous mode
[  117.295212][ T8981] syzkaller0: entered allmulticast mode
[  117.301313][ T8981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1245'.
[  117.358138][ T8985] bond3: Removing last ns target with arp_interval on
[  117.505854][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'.
[  118.042264][ T9016] IPVS: persistence engine module ip_vs_pe_ not found
[  118.048790][ T9020] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  118.169113][ T9030] af_packet: tpacket_rcv: packet too big, clamped from 128 to 4294967286. macoff=82
[  118.332123][ T9037] netlink: 'syz.0.1271': attribute type 10 has an invalid length.
[  119.068012][ T9037] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.074541][ T9037] 8021q: adding VLAN 0 to HW filter on device team0
[  119.080048][ T9037] bond0: (slave team0): Enslaving as an active interface with an up link
[  119.616555][ T9071] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1286'.
[  119.744895][ T9081] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  119.917556][ T9094] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1298'.
[  120.762163][ T9144] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  121.769964][  T110] tipc: Node number set to 2110509097
[  123.887539][ T9154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  124.096132][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'.
[  124.206816][ T9188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1329'.
[  124.736602][ T9226] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  124.772221][ T9226] bond4 (unregistering): Released all slaves
[  124.986266][ T9243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1353'.
[  125.153764][ T9257] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1360'.
[  125.174483][ T9259] syzkaller1: entered promiscuous mode
[  125.176612][ T9259] syzkaller1: entered allmulticast mode
[  125.454025][ T9259] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  125.511355][ T9259] syzkaller1: left promiscuous mode
[  125.513683][ T9259] syzkaller1: left allmulticast mode
[  125.526327][ T9264] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  125.542676][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.545870][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  125.549330][   T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  125.577035][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.585943][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  125.589389][   T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  125.597013][ T9280] Bluetooth: MGMT ver 1.23
[  125.618512][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.636816][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  125.641522][   T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  125.676928][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.682129][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  125.685618][   T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  125.862030][   T34] audit: type=1800 audit(1778574320.324:5): pid=9284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1365" name="memory.events" dev="tmpfs" ino=2374 res=0 errno=0
[  125.897520][ T9293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1370'.
[  125.902287][ T9293] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1370'.
[  125.905997][ T9293] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1370'.
[  126.002430][ T9295] bond1: option miimon: invalid value (18446744073709551607)
[  126.005625][ T9295] bond1: option miimon: allowed values 0 - 2147483647
[  126.009740][ T9295] bond1 (unregistering): Released all slaves
[  126.070825][ T9300] syzkaller0: entered promiscuous mode
[  126.072997][ T9300] syzkaller0: entered allmulticast mode
[  126.143815][ T9302] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1374'.
[  126.221376][ T9306] netlink: 'syz.2.1376': attribute type 4 has an invalid length.
[  126.223933][ T9306] netlink: 'syz.2.1376': attribute type 8 has an invalid length.
[  126.226294][ T9306] netlink: 'syz.2.1376': attribute type 1 has an invalid length.
[  126.228800][ T9306] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1376'.
[  126.232721][ T9306] NCSI netlink: No device for ifindex 0
[  127.170937][ T9342] syzkaller1: entered promiscuous mode
[  127.172844][ T9342] syzkaller1: entered allmulticast mode
[  127.591322][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'.
[  127.628999][ T9368] xt_addrtype: ipv6 does not support BROADCAST matching
[  127.732458][ T9380] netlink: 'syz.0.1409': attribute type 1 has an invalid length.
[  127.748353][ T9380] 8021q: adding VLAN 0 to HW filter on device bond1
[  127.766080][ T9380] bond1: (slave ip6gretap1): making interface the new active one
[  127.769267][ T9380] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  128.389391][ T9426] syzkaller1: entered promiscuous mode
[  128.393964][ T9426] syzkaller1: entered allmulticast mode
[  128.507024][ T9432] bond4: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  128.514815][ T9432] bond4 (unregistering): Released all slaves
[  128.734014][ T9445] xt_HMARK: spi-set and port-set can't be combined
[  129.026327][ T9464] netlink: 'syz.1.1445': attribute type 4 has an invalid length.
[  129.052086][ T5840] IPVS: starting estimator thread 0...
[  129.140056][ T9469] IPVS: using max 85 ests per chain, 204000 per kthread
[  129.419508][ T9502] xfrm1: entered allmulticast mode
[  129.466530][ T9511] __nla_validate_parse: 5 callbacks suppressed
[  129.466544][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'.
[  130.561322][ T9551] xt_TCPMSS: Only works on TCP SYN packets
[  130.753388][ T9561] xt_CONNSECMARK: invalid mode: 254
[  130.937072][ T9572] bond2: option updelay: invalid value (18446744073709518847)
[  130.941399][ T9572] bond2: option updelay: allowed values 0 - 2147483647
[  130.948090][ T9572] bond2 (unregistering): Released all slaves
[  131.348039][ T9607] netlink: 'syz.1.1507': attribute type 1 has an invalid length.
[  131.351284][ T9607] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1507'.
[  131.697056][ T5864] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x42
[  131.784662][ T9626] netlink: 'syz.2.1514': attribute type 2 has an invalid length.
[  132.294382][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'.
[  132.298076][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'.
[  132.301891][ T9664] netlink: 'syz.1.1533': attribute type 14 has an invalid length.
[  132.305230][ T9664] netlink: 'syz.1.1533': attribute type 11 has an invalid length.
[  132.583642][ T9685] syzkaller1: entered promiscuous mode
[  132.585784][ T9685] syzkaller1: entered allmulticast mode
[  132.714436][ T9695] netlink: 'syz.1.1548': attribute type 16 has an invalid length.
[  132.762667][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'.
[  133.017965][ T9733] openvswitch: netlink: IPv6 tunnel dst address is zero
[  133.360388][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'.
[  133.397739][ T9765] vlan3: entered promiscuous mode
[  133.399474][ T9765] dummy0: entered promiscuous mode
[  133.401767][ T9765] vlan3: entered allmulticast mode
[  133.403718][ T9765] dummy0: entered allmulticast mode
[  133.536330][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'.
[  133.684959][ T9804] syzkaller0: entered promiscuous mode
[  133.686818][ T9804] syzkaller0: entered allmulticast mode
[  133.815075][ T9819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1607'.
[  133.817869][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'.
[  133.908777][ T9831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.105976][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'.
[  134.108614][ T9853] netlink: 'syz.2.1623': attribute type 5 has an invalid length.
[  134.118405][ T9853] geneve2: entered promiscuous mode
[  134.120469][ T9853] geneve2: entered allmulticast mode
[  134.128414][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  134.131610][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  134.135922][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  134.139377][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  134.440721][ T9890] netlink: 'syz.0.1642': attribute type 8 has an invalid length.
[  134.443726][ T9890] sch_fq: defrate 0 ignored.
[  135.345768][ T9902] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  137.862698][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  137.865302][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  137.926705][ T9926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  138.060673][ T9960] __nla_validate_parse: 3 callbacks suppressed
[  138.060690][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1670'.
[  138.238444][ T9976] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1678'.
[  138.419030][ T9992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1686'.
[  138.476061][T10001] netlink: 'syz.0.1689': attribute type 2 has an invalid length.
[  138.495214][ T9997] netlink: 'syz.1.1687': attribute type 16 has an invalid length.
[  138.497663][ T9997] netlink: 'syz.1.1687': attribute type 17 has an invalid length.
[  138.518933][ T9997] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.522900][ T9997] 8021q: adding VLAN 0 to HW filter on device team0
[  138.526559][T10005] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1691'.
[  138.529389][T10005] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1691'.
[  138.533492][ T9997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.937581][T10048] x_tables: duplicate underflow at hook 4
[  138.999104][T10058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'.
[  139.126280][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'.
[  139.253381][T10076] TC_ACT_REPEAT abuse ?
[  139.395152][T10089] ipt_REJECT: TCP_RESET invalid for non-tcp
[  139.415492][T10092] openvswitch: netlink: IP tunnel dst address not specified
[  139.417855][T10092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.982113][T10144] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.044388][T10144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.049306][T10144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.192937][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.195828][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.198631][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  140.201930][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.210179][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.213423][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  140.220147][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.229301][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.233008][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  140.238235][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.246703][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.269635][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  140.386545][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1772'.
[  140.456410][T10186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1775'.
[  142.625423][T10115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  142.694906][T10236] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1795'.
[  142.779143][T10243] syzkaller1: entered promiscuous mode
[  142.781805][T10243] syzkaller1: entered allmulticast mode
[  143.139005][T10275] __nla_validate_parse: 3 callbacks suppressed
[  143.139020][T10275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1813'.
[  143.166892][T10275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1813'.
[  143.169795][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1813'.
[  143.760229][T10321] netlink: 'syz.0.1835': attribute type 7 has an invalid length.
[  143.962033][T10345] tipc: Started in network mode
[  143.963720][T10345] tipc: Node identity fe9fddb0fd84, cluster identity 4711
[  143.966193][T10345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.001920][T10345] syzkaller0: entered promiscuous mode
[  144.004198][T10345] syzkaller0: entered allmulticast mode
[  144.006989][T10345] tipc: Resetting bearer <eth:syzkaller0>
[  144.035513][T10343] tipc: Resetting bearer <eth:syzkaller0>
[  144.217458][T10361] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1850'.
[  145.084093][T10343] tipc: Disabling bearer <eth:syzkaller0>
[  145.101924][   T10] tipc: Node number set to 52157872
[  145.227250][T10373] batadv_slave_0: entered promiscuous mode
[  145.229442][T10373] batadv_slave_0: entered allmulticast mode
[  145.298729][T10384] openvswitch: netlink: Message has 4 unknown bytes.
[  145.301975][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.341949][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'.
[  145.345029][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'.
[  145.853870][T10427] netlink: 'syz.2.1883': attribute type 1 has an invalid length.
[  145.924759][T10431] bond4: (slave bridge3): Enslaving as a backup interface with an up link
[  145.955443][T10427] macvlan2: entered promiscuous mode
[  145.957657][T10427] macvlan2: entered allmulticast mode
[  145.962949][T10427] bond4: entered promiscuous mode
[  145.965069][T10427] bridge3: entered promiscuous mode
[  145.967781][T10427] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  145.972159][T10427] bond4: left promiscuous mode
[  145.974178][T10427] bridge3: left promiscuous mode
[  146.231355][T10462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1899'.
[  146.253765][T10462] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  146.372609][T10464] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  146.388154][T10464] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  146.495493][T10487] nbd: nbd0 already in use
[  146.570736][T10493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1911'.
[  146.577448][T10493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1911'.
[  146.586856][T10495] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1912'.
[  150.891807][T10536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  151.038025][T10562] __nla_validate_parse: 4 callbacks suppressed
[  151.038036][T10562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1940'.
[  151.140781][T10580] syzkaller1: entered promiscuous mode
[  151.142580][T10580] syzkaller1: entered allmulticast mode
[  151.211572][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'.
[  151.214727][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1952'.
[  151.522238][T10613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1965'.
[  151.552564][T10615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1966'.
[  151.558739][T10615] ip6gre3: entered promiscuous mode
[  151.561721][T10615] ip6gre3: entered allmulticast mode
[  151.564248][   T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  151.567468][   T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  151.582878][T10617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1968'.
[  151.590003][   T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  151.628955][T10621] tipc: Failed to remove unknown binding: 66,1,1/2110509097:2256353752/2256353754
[  151.637252][T10621] tipc: Failed to remove unknown binding: 66,1,1/2110509097:2256353752/2256353754
[  151.643722][T10621] tipc: Failed to remove unknown binding: 66,1,1/2110509097:2256353752/2256353754
[  151.713809][T10628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1972'.
[  151.781892][T10635] syzkaller0: entered promiscuous mode
[  151.784145][T10635] syzkaller0: entered allmulticast mode
[  151.789342][T10635] 0: reclassify loop, rule prio 0, protocol 700
[  152.079777][T10662] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1989'.
[  152.140820][   T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  152.166317][T10674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1994'.
[  152.173509][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'.
[  152.177278][T10673] netlink: 'syz.2.1995': attribute type 19 has an invalid length.
[  152.187322][T10673] netlink: 'syz.2.1995': attribute type 20 has an invalid length.
[  152.248390][T10683] netlink: 'syz.2.1999': attribute type 22 has an invalid length.
[  152.261030][T10683] netlink: 'syz.2.1999': attribute type 22 has an invalid length.
[  152.340130][   T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  152.730396][T10708] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  152.733524][T10708] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  153.769073][T10752] xt_hashlimit: size too large, truncated to 1048576
[  155.540138][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  156.901680][T10757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  156.996493][T10815] __nla_validate_parse: 5 callbacks suppressed
[  156.996508][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2047'.
[  157.120110][T10820] v: renamed from ip6_vti0 (while UP)
[  157.452744][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2068'.
[  157.574229][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2075'.
[  157.580013][T10874] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  157.632629][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2079'.
[  157.663274][T10882] bond5: entered promiscuous mode
[  157.665195][T10882] bond5: entered allmulticast mode
[  157.684908][T10885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2080'.
[  157.705283][T10887] syzkaller0: entered promiscuous mode
[  157.708155][T10887] syzkaller0: entered allmulticast mode
[  158.419965][T10954] tipc: New replicast peer: 255.255.255.255
[  158.422968][T10954] tipc: Enabled bearer <udp:syz2>, priority 10
[  159.008210][T10973] Cannot find set identified by id 65534 to match
[  159.183793][T10973] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2118'.
[  159.187292][T10973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2118'.
[  159.318822][T10984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.372923][T10984] syzkaller0: entered promiscuous mode
[  159.375198][T10984] syzkaller0: entered allmulticast mode
[  159.378895][T10984] tipc: Resetting bearer <eth:syzkaller0>
[  159.398289][ T6320] tipc: Resetting bearer <eth:syzkaller0>
[  159.410918][T10983] tipc: Resetting bearer <eth:syzkaller0>
[  159.442201][ T5676] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  160.252203][T10983] tipc: Disabling bearer <eth:syzkaller0>
[  160.735564][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'.
[  160.751127][T11050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2149'.
[  160.753949][T11050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2149'.
[  161.662936][T11099] netlink: 'syz.0.2167': attribute type 13 has an invalid length.
[  161.668610][T11101] netlink: 'syz.1.2168': attribute type 1 has an invalid length.
[  161.720207][ T9265] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  161.734984][T11102] vti0: entered promiscuous mode
[  161.739291][T11099] syzkaller0: entered promiscuous mode
[  161.741666][T11099] syzkaller0: entered allmulticast mode
[  161.853088][T11108] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  161.856627][T11108] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  161.861147][T11108] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  162.121076][T11135] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  162.130763][ T9265] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  162.246278][T11149] netlink: 'syz.1.2191': attribute type 1 has an invalid length.
[  162.504113][T11164] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[  162.757107][T11177] xt_CT: You must specify a L4 protocol and not use inversions on it
[  162.872756][T11190] netlink: zone id is out of range
[  162.874389][T11190] netlink: zone id is out of range
[  162.876023][T11190] netlink: zone id is out of range
[  162.878144][T11190] netlink: zone id is out of range
[  162.880338][T11190] netlink: zone id is out of range
[  162.882330][T11190] netlink: zone id is out of range
[  162.884844][T11190] netlink: zone id is out of range
[  162.886714][T11190] netlink: zone id is out of range
[  162.923752][T11197] __nla_validate_parse: 2 callbacks suppressed
[  162.923767][T11197] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2215'.
[  162.931277][T11195] netlink: 'syz.1.2213': attribute type 1 has an invalid length.
[  162.933767][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'.
[  162.934293][T11197] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2215'.
[  162.972793][T11202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2217'.
[  163.151194][T11211] ip6erspan0: entered allmulticast mode
[  163.470025][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  163.517787][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'.
[  163.553379][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2236'.
[  163.556228][T11243] netlink: 'syz.1.2236': attribute type 4 has an invalid length.
[  163.583979][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2238'.
[  164.161954][T11290] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2257'.
[  164.165645][T11290] bridge: RTM_NEWNEIGH with invalid state 0x1
[  164.938782][T11281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  164.977055][T11310] netlink: 'syz.0.2264': attribute type 29 has an invalid length.
[  164.980686][T11310] netlink: 'syz.0.2264': attribute type 29 has an invalid length.
[  164.983844][T11310] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2264'.
[  165.078820][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'.
[  165.138563][T11326] ip6gre4: entered promiscuous mode
[  165.140893][T11326] ip6gre4: entered allmulticast mode
[  165.293105][ T6320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.297197][ T6320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.307360][T11340] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  165.327735][T11338] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  165.461288][T11352] netlink: 'syz.0.2279': attribute type 1 has an invalid length.
[  165.927199][T11406] netlink: 'syz.2.2303': attribute type 13 has an invalid length.
[  166.155007][T11437] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  166.206778][T11442] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.209335][T11442] syzkaller0: entered promiscuous mode
[  166.215021][T11442] syzkaller0: entered allmulticast mode
[  166.254083][T11442] tipc: Resetting bearer <eth:syzkaller0>
[  166.263863][T11441] tipc: Resetting bearer <eth:syzkaller0>
[  166.272971][T11441] tipc: Disabling bearer <eth:syzkaller0>
[  166.557047][T11487] netlink: 'syz.0.2342': attribute type 2 has an invalid length.
[  166.674599][T11498] gre3: entered allmulticast mode
[  166.707494][T11500] syzkaller0: entered promiscuous mode
[  166.721507][T11500] syzkaller0: entered allmulticast mode
[  166.985651][T11520] netlink: 'syz.0.2357': attribute type 39 has an invalid length.
[  167.219083][T11535] ip6tnl0: Caught tx_queue_len zero misconfig
[  167.927625][T11599] Bluetooth: MGMT ver 1.23
[  168.543608][T11665] __nla_validate_parse: 19 callbacks suppressed
[  168.543619][T11665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2414'.
[  168.814667][T11691] syzkaller0: entered promiscuous mode
[  168.816995][T11691] syzkaller0: entered allmulticast mode
[  168.839456][T11699] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2431'.
[  168.869023][T11701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2432'.
[  168.922820][T11704] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2433'.
[  169.881242][T11719] bond0: Caught tx_queue_len zero misconfig
[  170.072208][T11741] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2447'.
[  170.156298][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'.
[  170.196352][T11752] syzkaller0: entered promiscuous mode
[  170.198791][T11752] syzkaller0: entered allmulticast mode
[  170.203714][T11754] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2453'.
[  170.250165][T11756] veth1: entered promiscuous mode
[  170.252694][T11756] veth1: entered allmulticast mode
[  170.291968][T11762] syzkaller0: entered promiscuous mode
[  170.293780][T11762] syzkaller0: entered allmulticast mode
[  170.433436][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'.
[  170.491503][T11784] netlink: 'syz.1.2468': attribute type 83 has an invalid length.
[  170.643447][T11799] veth0_macvtap: Caught tx_queue_len zero misconfig
[  170.805073][T11817] netlink: 'syz.0.2484': attribute type 10 has an invalid length.
[  170.807602][T11817] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2484'.
[  170.855440][T11821] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2486'.
[  171.558112][T11858] netlink: 'syz.0.2503': attribute type 15 has an invalid length.
[  171.981002][T11882] syzkaller1: entered promiscuous mode
[  171.982966][T11882] syzkaller1: entered allmulticast mode
[  172.054365][T11890] netlink: 'syz.0.2517': attribute type 13 has an invalid length.
[  172.056920][T11890] netlink: 'syz.0.2517': attribute type 17 has an invalid length.
[  172.101197][T11890] net_ratelimit: 348 callbacks suppressed
[  172.101203][T11890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.201820][T11934] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  173.238796][T11939] hsr_slave_0: left promiscuous mode
[  173.244460][T11939] hsr_slave_1: left promiscuous mode
[  173.531346][T11967] netlink: Unknown conntrack attr (0)
[  173.632925][T11974] bond4: entered promiscuous mode
[  173.634740][T11974] 8021q: adding VLAN 0 to HW filter on device bond4
[  173.637012][T11974] bridge0: port 1(bond4) entered blocking state
[  173.638986][T11974] bridge0: port 1(bond4) entered disabled state
[  173.644333][T11974] bond4: entered allmulticast mode
[  173.649250][T11974] bridge0: port 1(bond4) entered blocking state
[  173.651936][T11974] bridge0: port 1(bond4) entered forwarding state
[  173.663898][ T6323] bridge0: port 1(bond4) entered disabled state
[  173.884323][T11997] ieee802154 phy1 wpan1: encryption failed: -22
[  173.938095][T12002] netlink: 'syz.2.2564': attribute type 1 has an invalid length.
[  173.942935][T12002] netlink: 'syz.2.2564': attribute type 7 has an invalid length.
[  173.945943][T12002] netlink: 'syz.2.2564': attribute type 8 has an invalid length.
[  173.948847][T12002] __nla_validate_parse: 8 callbacks suppressed
[  173.948855][T12002] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2564'.
[  173.954949][T12002] NCSI netlink: No device for ifindex 1073545264
[  174.091520][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2572'.
[  174.094257][T12018] nbd: couldn't find a device at index 65546
[  174.120706][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2574'.
[  174.216311][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2578'.
[  174.219184][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'.
[  174.223500][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2578'.
[  174.226826][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'.
[  174.450517][T12045] raw_sendmsg: syz.1.2582 forgot to set AF_INET. Fix it!
[  174.554532][T12058] xt_TPROXY: Can be used only with -p tcp or -p udp
[  174.596668][T12064] netlink: 'syz.0.2592': attribute type 83 has an invalid length.
[  174.761540][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'.
[  174.782601][T12092] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2605'.
[  174.828709][T12096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.831229][T12096] IPv6: NLM_F_CREATE should be set when creating new route
[  174.833642][T12096] IPv6: NLM_F_CREATE should be set when creating new route
[  177.702022][T12100] tap0: tun_chr_ioctl cmd 2148553947
[  177.763929][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2611'.
[  177.937503][ T5676] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  178.647897][T12113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  178.789080][T12148] netlink: 'syz.1.2627': attribute type 83 has an invalid length.
[  178.830136][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  178.933667][T12164] v: renamed from dummy0
[  179.087725][T12191] syzkaller0: entered promiscuous mode
[  179.095274][T12191] syzkaller0: entered allmulticast mode
[  179.356955][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2651'.
[  179.361875][T12213] netlink: 'syz.1.2651': attribute type 1 has an invalid length.
[  179.442538][T12220] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2656'.
[  179.723969][T12237] syzkaller0: entered allmulticast mode
[  180.531780][T12291] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  180.534866][T12291] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  180.722669][T12299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2695'.
[  180.902261][ T5814] Bluetooth: hci1: command 0x0406 tx timeout
[  180.907415][T12204] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  180.910326][T12204] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  180.921903][T12204] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  180.924680][T12204] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  181.377273][T12324] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2706'.
[  182.193856][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2745'.
[  182.196491][T12409] netlink: 580 bytes leftover after parsing attributes in process `syz.1.2745'.
[  182.892930][T12458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2767'.
[  183.022718][T12472] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  183.032031][T12472] bond5 (unregistering): Released all slaves
[  183.139423][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2781'.
[  183.345617][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2789'.
[  183.542163][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2799'.
[  183.673193][T12542] netlink: 'syz.0.2807': attribute type 1 has an invalid length.
[  183.708144][T12544] veth1_to_team: Caught tx_queue_len zero misconfig
[  183.811903][T12548] block nbd0: NBD_DISCONNECT
[  183.813921][T12548] block nbd0: Send disconnect failed -32
[  183.816294][T12548] block nbd0: shutting down sockets
[  184.024110][   T34] audit: type=1107 audit(1778574378.484:6): pid=12559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  184.331020][T12572] --map-set only usable from mangle table
[  184.911723][T12610] __nla_validate_parse: 3 callbacks suppressed
[  184.911733][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2839'.
[  185.011091][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2845'.
[  185.015914][T12620] netlink: 'syz.1.2844': attribute type 64 has an invalid length.
[  185.132682][T12538] Set syz1 is full, maxelem 65536 reached
[  185.334224][T12657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2862'.
[  185.472054][T12675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2871'.
[  185.484530][T12676] ipt_ECN: cannot use operation on non-tcp rule
[  185.717777][T12702] netlink: 'syz.0.2885': attribute type 1 has an invalid length.
[  185.752722][T12702] 8021q: adding VLAN 0 to HW filter on device bond2
[  186.246566][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2912'.
[  186.998487][T12833] syzkaller0: entered promiscuous mode
[  187.000547][T12833] syzkaller0: entered allmulticast mode
[  187.153153][T12831] bond0: (slave team0): Releasing backup interface
[  187.159298][T12831] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  187.354539][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'.
[  187.366962][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'.
[  187.518611][T12862] netlink: 'syz.2.2958': attribute type 4 has an invalid length.
[  187.693740][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'.
[  187.697170][T12878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2966'.
[  188.034407][T12903] netlink: 'syz.0.2977': attribute type 1 has an invalid length.
[  188.157729][T12907] syzkaller1: entered promiscuous mode
[  188.159589][T12907] syzkaller1: entered allmulticast mode
[  189.107421][T12967] unsupported nlmsg_type 40
[  189.189644][T12973] dvmrp0: entered allmulticast mode
[  189.346059][T12989] trusted_key: syz.2.3014 sent an empty control message without MSG_MORE.
[  189.604742][T13013] netlink: 'syz.2.3025': attribute type 1 has an invalid length.
[  189.628706][T13013] 8021q: adding VLAN 0 to HW filter on device bond6
[  189.753948][T13013] 8021q: adding VLAN 0 to HW filter on device bond6
[  189.756439][T13013] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[  189.762432][T13013] bond6: (slave vcan1): Error -95 calling set_mac_address
[  189.969616][T13034] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  189.979097][T13034] bond7 (unregistering): Released all slaves
[  190.105245][T13044] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3038'.
[  190.346050][T13065] bond3: option resend_igmp: invalid value (2878)
[  190.348412][T13065] bond3: option resend_igmp: allowed values 0 - 255
[  190.352421][T13065] bond3 (unregistering): Released all slaves
[  190.578298][T13096] netlink: 'syz.1.3058': attribute type 1 has an invalid length.
[  190.578622][T13095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3059'.
[  191.178850][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3067'.
[  191.181984][T13117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3067'.
[  191.536235][T13134] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  191.678238][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3079'.
[  191.910709][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3088'.
[  192.049576][T13178] netlink: 'syz.0.3093': attribute type 1 has an invalid length.
[  192.072936][T13178] 8021q: adding VLAN 0 to HW filter on device bond4
[  192.213202][T13178] bond4: (slave geneve3): making interface the new active one
[  192.216547][T13178] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  192.219494][ T5864] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.223032][ T5864] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.231104][ T5864] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.242394][ T5864] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.325723][T13182] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.3094'.
[  192.332402][T13184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.409086][T13190] IPv6: Can't replace route, no match found
[  192.437488][T13192] netlink: 'syz.2.3099': attribute type 22 has an invalid length.
[  192.443424][T13192] netlink: 'syz.2.3099': attribute type 1 has an invalid length.
[  192.446660][T13192] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3099'.
[  192.528018][T13202] syzkaller1: entered promiscuous mode
[  192.531655][T13202] syzkaller1: entered allmulticast mode
[  192.931819][T13245] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3125'.
[  192.934715][T13245] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3125'.
[  193.273908][T13274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.148504][T13277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  194.218558][T13294] xt_limit: Overflow, try lower: 324382443/0
[  194.885965][T13357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.967948][T13364] syzkaller0: entered promiscuous mode
[  194.970996][T13364] syzkaller0: entered allmulticast mode
[  195.121248][T13384] __nla_validate_parse: 4 callbacks suppressed
[  195.121258][T13384] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3183'.
[  195.127051][T13384] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  195.475683][T13434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.552734][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'.
[  195.835952][T13471] netlink: 'syz.0.3217': attribute type 8 has an invalid length.
[  195.839056][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3217'.
[  195.851503][T13471] veth1_to_team: entered promiscuous mode
[  195.854832][T13471] gretap0: entered promiscuous mode
[  195.858049][T13471] gretap0: left promiscuous mode
[  195.861365][T13471] veth1_to_team: left promiscuous mode
[  195.943583][T13479] xt_hashlimit: size too large, truncated to 1048576
[  195.946460][T13479] xt_hashlimit: invalid interval
[  195.973995][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3220'.
[  196.041686][T13487] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) !
[  196.135701][T13495] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3227'.
[  196.139216][T13495] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3227'.
[  197.296417][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3249'.
[  197.332679][   T58] block nbd0: Receive control failed (result -1)
[  197.886555][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'.
[  197.898693][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'.
[  198.923834][T13669] netlink: 'syz.0.3301': attribute type 1 has an invalid length.
[  198.952730][T13680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3305'.
[  199.302587][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  199.900304][T13714] netlink: 'syz.2.3321': attribute type 3 has an invalid length.
[  200.003686][T13722] syzkaller0: entered promiscuous mode
[  200.006600][T13722] syzkaller0: entered allmulticast mode
[  200.183557][T13739] __nla_validate_parse: 3 callbacks suppressed
[  200.183567][T13739] netlink: 566 bytes leftover after parsing attributes in process `syz.2.3332'.
[  200.257848][T13741] syzkaller0: entered promiscuous mode
[  200.260486][T13741] syzkaller0: entered allmulticast mode
[  201.271037][T13762] syzkaller1: entered promiscuous mode
[  201.273967][T13762] syzkaller1: entered allmulticast mode
[  201.496483][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3348'.
[  201.611196][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3351'.
[  201.669208][T13786] bond5: option lacp_active: invalid value (8)
[  201.672858][T13786] bond5 (unregistering): Released all slaves
[  203.257600][T13747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  203.735630][T13826] IPVS: Scheduler module ip_vs_sip not found
[  203.745251][T13833] netlink: 'syz.2.3374': attribute type 3 has an invalid length.
[  203.845389][T13833] bridge0: left promiscuous mode
[  203.848477][T13833] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.852007][T13833] 8021q: adding VLAN 0 to HW filter on device team0
[  203.862957][T13833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.888528][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3380'.
[  203.891961][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3380'.
[  203.897864][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3380'.
[  203.901802][ T5864] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  203.904528][ T5864] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  203.910029][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3380'.
[  203.913180][ T5864] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  203.925464][ T5864] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  204.275407][T13880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3394'.
[  204.324784][T13894] netlink: 'syz.2.3400': attribute type 2 has an invalid length.
[  204.526587][T13908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3406'.
[  204.603524][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3406'.
[  204.617586][T13918] netlink: 'syz.1.3412': attribute type 1 has an invalid length.
[  204.680154][T13924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  204.699095][T13924] team0: Mode changed to "broadcast"
[  205.349143][T13995] netlink: 'syz.1.3445': attribute type 1 has an invalid length.
[  205.353951][T13995] __nla_validate_parse: 3 callbacks suppressed
[  205.353966][T13995] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3445'.
[  205.358841][T13995] netlink: 'syz.1.3445': attribute type 1 has an invalid length.
[  205.362656][T13992] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3444'.
[  205.366384][T13995] netlink: 'syz.1.3445': attribute type 8 has an invalid length.
[  205.369325][T13995] netlink: 606 bytes leftover after parsing attributes in process `syz.1.3445'.
[  205.527646][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3450'.
[  205.540255][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3450'.
[  205.580628][T14009] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3451'.
[  205.924210][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3467'.
[  205.957174][T14039] netlink: 'syz.0.3467': attribute type 1 has an invalid length.
[  206.092994][T14055] team_slave_1: Caught tx_queue_len zero misconfig
[  206.170299][T14043] nbd1: detected capacity change from 0 to 63
[  206.176988][   T57] block nbd1: Receive control failed (result -104)
[  206.181156][T14058] block nbd1: Receive control failed (result -32)
[  206.239069][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3481'.
[  206.272643][T14077] netlink: zone id is out of range
[  206.274314][T14077] netlink: zone id is out of range
[  206.275883][T14077] netlink: zone id is out of range
[  206.277460][T14077] netlink: zone id is out of range
[  206.278981][T14077] netlink: zone id is out of range
[  206.288742][T14077] netlink: zone id is out of range
[  206.290790][T14077] netlink: zone id is out of range
[  206.292530][T14077] netlink: zone id is out of range
[  206.326276][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'.
[  206.329751][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'.
[  206.365446][   T34] audit: type=1800 audit(1778574400.824:7): pid=14086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3488" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=6128 res=0 errno=0
[  206.531617][T14103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.547298][T14103] syzkaller0: entered promiscuous mode
[  206.548943][T14103] syzkaller0: entered allmulticast mode
[  206.551951][T14109] tipc: Failed to remove unknown binding: 66,0,0/52157872:387533669/387533671
[  206.554712][T14109] tipc: Failed to remove unknown binding: 66,0,0/52157872:387533669/387533670
[  206.557694][T14109] tipc: Failed to remove unknown binding: 66,0,0/52157872:387533669/387533671
[  206.560986][T14109] tipc: Failed to remove unknown binding: 66,0,0/52157872:387533669/387533670
[  206.566288][T14103] tipc: Resetting bearer <eth:syzkaller0>
[  206.583273][T14102] tipc: Resetting bearer <eth:syzkaller0>
[  206.599181][T14102] tipc: Disabling bearer <eth:syzkaller0>
[  207.046620][ T9265] 
[  207.047627][ T9265] ======================================================
[  207.050349][ T9265] WARNING: possible circular locking dependency detected
[  207.053352][ T9265] syzkaller #0 Not tainted
[  207.055100][ T9265] ------------------------------------------------------
[  207.057559][ T9265] kworker/1:5/9265 is trying to acquire lock:
[  207.059660][ T9265] ffff8881af295360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_pm_send_ack+0x39/0x50
[  207.062976][ T9265] 
[  207.062976][ T9265] but task is already holding lock:
[  207.065363][ T9265] ffff88816ec34360 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_worker+0x35/0x1430
[  207.068835][ T9265] 
[  207.068835][ T9265] which lock already depends on the new lock.
[  207.068835][ T9265] 
[  207.072766][ T9265] 
[  207.072766][ T9265] the existing dependency chain (in reverse order) is:
[  207.075562][ T9265] 
[  207.075562][ T9265] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  207.078110][ T9265]        lock_sock_nested+0x48/0x100
[  207.080130][ T9265]        inet_shutdown+0x6a/0x390
[  207.082058][ T9265]        nbd_mark_nsock_dead+0x2e9/0x560
[  207.084133][ T9265]        recv_work+0x1c7f/0x1d90
[  207.086075][ T9265]        process_scheduled_works+0xb6e/0x18c0
[  207.088426][ T9265]        worker_thread+0xa53/0xfc0
[  207.090412][ T9265]        kthread+0x388/0x470
[  207.092188][ T9265]        ret_from_fork+0x51e/0xb90
[  207.094111][ T9265]        ret_from_fork_asm+0x1a/0x30
[  207.095996][ T9265] 
[  207.095996][ T9265] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  207.098841][ T9265]        __mutex_lock+0x19f/0x1300
[  207.100615][ T9265]        nbd_queue_rq+0x37b/0x1100
[  207.102265][ T9265]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  207.104208][ T9265]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  207.106288][ T9265]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  207.108381][ T9265]        blk_mq_run_hw_queue+0x348/0x4f0
[  207.110117][ T9265]        blk_mq_dispatch_list+0xd16/0xe10
[  207.111881][ T9265]        blk_mq_flush_plug_list+0x48d/0x570
[  207.113702][ T9265]        __blk_flush_plug+0x3ed/0x4d0
[  207.115474][ T9265]        __submit_bio+0x28d/0x580
[  207.117078][ T9265]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  207.119079][ T9265]        block_read_full_folio+0x599/0x830
[  207.120952][ T9265]        filemap_read_folio+0x137/0x3b0
[  207.122750][ T9265]        do_read_cache_folio+0x358/0x590
[  207.124509][ T9265]        read_part_sector+0xb6/0x2b0
[  207.126227][ T9265]        adfspart_check_ICS+0xa5/0xa40
[  207.127943][ T9265]        bdev_disk_changed+0x7ba/0x1550
[  207.129666][ T9265]        blkdev_get_whole+0x380/0x510
[  207.131467][ T9265]        bdev_open+0x31e/0xd30
[  207.132966][ T9265]        blkdev_open+0x470/0x610
[  207.134515][ T9265]        do_dentry_open+0x785/0x14e0
[  207.136155][ T9265]        vfs_open+0x3b/0x340
[  207.137582][ T9265]        path_openat+0x2e08/0x3860
[  207.139313][ T9265]        do_file_open+0x23e/0x4a0
[  207.141230][ T9265]        do_sys_openat2+0x113/0x200
[  207.142868][ T9265]        __x64_sys_openat+0x138/0x170
[  207.144510][ T9265]        do_syscall_64+0x14d/0xf80
[  207.146186][ T9265]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.148184][ T9265] 
[  207.148184][ T9265] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  207.150428][ T9265]        __mutex_lock+0x19f/0x1300
[  207.152077][ T9265]        nbd_queue_rq+0xc6/0x1100
[  207.153732][ T9265]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  207.155648][ T9265]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  207.157723][ T9265]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  207.159652][ T9265]        blk_mq_run_hw_queue+0x348/0x4f0
[  207.161368][ T9265]        blk_mq_dispatch_list+0xd16/0xe10
[  207.163129][ T9265]        blk_mq_flush_plug_list+0x48d/0x570
[  207.164932][ T9265]        __blk_flush_plug+0x3ed/0x4d0
[  207.166554][ T9265]        __submit_bio+0x28d/0x580
[  207.168120][ T9265]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  207.170113][ T9265]        block_read_full_folio+0x599/0x830
[  207.172127][ T9265]        filemap_read_folio+0x137/0x3b0
[  207.173844][ T9265]        do_read_cache_folio+0x358/0x590
[  207.175624][ T9265]        read_part_sector+0xb6/0x2b0
[  207.177280][ T9265]        adfspart_check_ICS+0xa5/0xa40
[  207.178969][ T9265]        bdev_disk_changed+0x7ba/0x1550
[  207.180684][ T9265]        blkdev_get_whole+0x380/0x510
[  207.182351][ T9265]        bdev_open+0x31e/0xd30
[  207.183835][ T9265]        blkdev_open+0x470/0x610
[  207.185389][ T9265]        do_dentry_open+0x785/0x14e0
[  207.187107][ T9265]        vfs_open+0x3b/0x340
[  207.188590][ T9265]        path_openat+0x2e08/0x3860
[  207.190222][ T9265]        do_file_open+0x23e/0x4a0
[  207.191800][ T9265]        do_sys_openat2+0x113/0x200
[  207.193469][ T9265]        __x64_sys_openat+0x138/0x170
[  207.195138][ T9265]        do_syscall_64+0x14d/0xf80
[  207.196786][ T9265]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.198725][ T9265] 
[  207.198725][ T9265] -> #4 (set->srcu){.+.+}-{0:0}:
[  207.200898][ T9265]        __synchronize_srcu+0xca/0x300
[  207.202752][ T9265]        elevator_switch+0x1e8/0x7a0
[  207.204402][ T9265]        elevator_change+0x2cc/0x450
[  207.206068][ T9265]        elevator_set_default+0x36c/0x430
[  207.207838][ T9265]        blk_register_queue+0x366/0x430
[  207.209562][ T9265]        __add_disk+0x677/0xd50
[  207.211104][ T9265]        add_disk_fwnode+0xfb/0x480
[  207.212791][ T9265]        nbd_dev_add+0x72c/0xb50
[  207.214544][ T9265]        nbd_init+0x168/0x1f0
[  207.216088][ T9265]        do_one_initcall+0x250/0x8d0
[  207.217887][ T9265]        do_initcall_level+0x104/0x190
[  207.219601][ T9265]        do_initcalls+0x59/0xa0
[  207.221263][ T9265]        kernel_init_freeable+0x2a6/0x3e0
[  207.223134][ T9265]        kernel_init+0x1d/0x1d0
[  207.224635][ T9265]        ret_from_fork+0x51e/0xb90
[  207.226225][ T9265]        ret_from_fork_asm+0x1a/0x30
[  207.227936][ T9265] 
[  207.227936][ T9265] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  207.230834][ T9265]        __mutex_lock+0x19f/0x1300
[  207.232546][ T9265]        elevator_change+0x1b3/0x450
[  207.234202][ T9265]        elevator_set_none+0xb5/0x140
[  207.235849][ T9265]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  207.237795][ T9265]        nbd_start_device+0x17f/0xb10
[  207.239433][ T9265]        nbd_genl_connect+0x165b/0x1cf0
[  207.241087][ T9265]        genl_family_rcv_msg_doit+0x22a/0x330
[  207.242986][ T9265]        genl_rcv_msg+0x61c/0x7a0
[  207.244550][ T9265]        netlink_rcv_skb+0x232/0x4b0
[  207.246234][ T9265]        genl_rcv+0x28/0x40
[  207.247691][ T9265]        netlink_unicast+0x80f/0x9b0
[  207.249570][ T9265]        netlink_sendmsg+0x813/0xb40
[  207.251345][ T9265]        ____sys_sendmsg+0x972/0x9f0
[  207.253055][ T9265]        ___sys_sendmsg+0x2a5/0x360
[  207.254655][ T9265]        __x64_sys_sendmsg+0x1bd/0x2a0
[  207.256214][ T9265]        do_syscall_64+0x14d/0xf80
[  207.257637][ T9265]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.259574][ T9265] 
[  207.259574][ T9265] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  207.262395][ T9265]        blk_alloc_queue+0x546/0x680
[  207.264073][ T9265]        __blk_mq_alloc_disk+0x197/0x390
[  207.265853][ T9265]        nbd_dev_add+0x499/0xb50
[  207.267578][ T9265]        nbd_init+0x168/0x1f0
[  207.269110][ T9265]        do_one_initcall+0x250/0x8d0
[  207.271189][ T9265]        do_initcall_level+0x104/0x190
[  207.273223][ T9265]        do_initcalls+0x59/0xa0
[  207.275134][ T9265]        kernel_init_freeable+0x2a6/0x3e0
[  207.277355][ T9265]        kernel_init+0x1d/0x1d0
[  207.279160][ T9265]        ret_from_fork+0x51e/0xb90
[  207.280750][ T9265]        ret_from_fork_asm+0x1a/0x30
[  207.282437][ T9265] 
[  207.282437][ T9265] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  207.284660][ T9265]        fs_reclaim_acquire+0x71/0x100
[  207.286365][ T9265]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  207.288330][ T9265]        __alloc_skb+0x1d0/0x7d0
[  207.289897][ T9265]        tcp_stream_alloc_skb+0x3f/0x580
[  207.291668][ T9265]        tcp_connect+0x1527/0x5370
[  207.293297][ T9265]        tcp_v4_connect+0x10f6/0x19b0
[  207.294960][ T9265]        tcp_v6_connect+0xbbb/0x1b10
[  207.296618][ T9265]        __inet_stream_connect+0x25a/0xdd0
[  207.298439][ T9265]        inet_stream_connect+0x66/0xa0
[  207.300144][ T9265]        kernel_connect+0x141/0x1c0
[  207.301788][ T9265]        smc_connect+0x7a5/0xd90
[  207.303532][ T9265]        __sys_connect+0x312/0x450
[  207.305287][ T9265]        __x64_sys_connect+0x7a/0x90
[  207.307029][ T9265]        do_syscall_64+0x14d/0xf80
[  207.308562][ T9265]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.310556][ T9265] 
[  207.310556][ T9265] -> #0 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  207.312935][ T9265]        __lock_acquire+0x15a5/0x2cf0
[  207.314620][ T9265]        lock_acquire+0xf0/0x2e0
[  207.316157][ T9265]        __mptcp_pm_send_ack+0x76/0x200
[  207.317827][ T9265]        mptcp_pm_send_ack+0x39/0x50
[  207.319462][ T9265]        mptcp_mpc_endpoint_setup+0x452/0x530
[  207.321359][ T9265]        mptcp_pm_create_subflow_or_signal_addr+0x1e5/0x1860
[  207.323760][ T9265]        __mptcp_pm_kernel_worker+0x198a/0x2100
[  207.325712][ T9265]        mptcp_pm_worker+0x1bb/0x300
[  207.327368][ T9265]        mptcp_worker+0xd2/0x1430
[  207.328938][ T9265]        process_scheduled_works+0xb6e/0x18c0
[  207.330838][ T9265]        worker_thread+0xa53/0xfc0
[  207.332479][ T9265]        kthread+0x388/0x470
[  207.333925][ T9265]        ret_from_fork+0x51e/0xb90
[  207.335519][ T9265]        ret_from_fork_asm+0x1a/0x30
[  207.337158][ T9265] 
[  207.337158][ T9265] other info that might help us debug this:
[  207.337158][ T9265] 
[  207.340296][ T9265] Chain exists of:
[  207.340296][ T9265]   k-sk_lock-AF_INET6 --> &nsock->tx_lock --> sk_lock-AF_INET6
[  207.340296][ T9265] 
[  207.344911][ T9265]  Possible unsafe locking scenario:
[  207.344911][ T9265] 
[  207.347177][ T9265]        CPU0                    CPU1
[  207.348816][ T9265]        ----                    ----
[  207.350602][ T9265]   lock(sk_lock-AF_INET6);
[  207.352100][ T9265]                                lock(&nsock->tx_lock);
[  207.354247][ T9265]                                lock(sk_lock-AF_INET6);
[  207.356411][ T9265]   lock(k-sk_lock-AF_INET6);
[  207.357881][ T9265] 
[  207.357881][ T9265]  *** DEADLOCK ***
[  207.357881][ T9265] 
[  207.360380][ T9265] 3 locks held by kworker/1:5/9265:
[  207.361987][ T9265]  #0: ffff88810006b148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  207.365369][ T9265]  #1: ffffc90004447c40 ((work_completion)(&msk->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  207.368958][ T9265]  #2: ffff88816ec34360 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_worker+0x35/0x1430
[  207.371863][ T9265] 
[  207.371863][ T9265] stack backtrace:
[  207.373723][ T9265] CPU: 1 UID: 0 PID: 9265 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) 
[  207.373733][ T9265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  207.373739][ T9265] Workqueue: events mptcp_worker
[  207.373750][ T9265] Call Trace:
[  207.373754][ T9265]  <TASK>
[  207.373759][ T9265]  dump_stack_lvl+0xe8/0x150
[  207.373770][ T9265]  print_circular_bug+0x2e1/0x300
[  207.373787][ T9265]  check_noncircular+0x12e/0x150
[  207.373804][ T9265]  __lock_acquire+0x15a5/0x2cf0
[  207.373816][ T9265]  ? __lock_acquire+0x6b5/0x2cf0
[  207.373826][ T9265]  lock_acquire+0xf0/0x2e0
[  207.373835][ T9265]  ? mptcp_pm_send_ack+0x39/0x50
[  207.373845][ T9265]  ? mptcp_pm_send_ack+0x39/0x50
[  207.373854][ T9265]  __mptcp_pm_send_ack+0x76/0x200
[  207.373863][ T9265]  ? mptcp_pm_send_ack+0x39/0x50
[  207.373878][ T9265]  mptcp_pm_send_ack+0x39/0x50
[  207.373887][ T9265]  mptcp_mpc_endpoint_setup+0x452/0x530
[  207.373898][ T9265]  ? __pfx_mptcp_mpc_endpoint_setup+0x10/0x10
[  207.373908][ T9265]  ? pm_nl_get_pernet+0x23/0x240
[  207.373917][ T9265]  ? pm_nl_get_pernet+0x23/0x240
[  207.373926][ T9265]  mptcp_pm_create_subflow_or_signal_addr+0x1e5/0x1860
[  207.373937][ T9265]  ? unwind_next_frame+0xa5/0x23c0
[  207.373948][ T9265]  ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10
[  207.373958][ T9265]  ? unwind_next_frame+0xa5/0x23c0
[  207.373968][ T9265]  ? unwind_next_frame+0x1aaf/0x23c0
[  207.373978][ T9265]  ? arch_stack_walk+0xe3/0x150
[  207.373989][ T9265]  ? unwind_next_frame+0xa5/0x23c0
[  207.373999][ T9265]  ? rcu_is_watching+0x15/0xb0
[  207.374036][ T9265]  ? unwind_next_frame+0xa5/0x23c0
[  207.374050][ T9265]  ? lock_release+0x4b/0x3d0
[  207.374060][ T9265]  ? ret_from_fork_asm+0x1a/0x30
[  207.374070][ T9265]  ? unwind_next_frame+0xa5/0x23c0
[  207.374080][ T9265]  ? rcu_is_watching+0x15/0xb0
[  207.374089][ T9265]  ? unwind_next_frame+0xa5/0x23c0
[  207.374099][ T9265]  ? lock_release+0x4b/0x3d0
[  207.374106][ T9265]  ? unwind_next_frame+0x1aaf/0x23c0
[  207.374116][ T9265]  ? deref_stack_reg+0x19f/0x230
[  207.374127][ T9265]  ? unwind_next_frame+0xa5/0x23c0
[  207.374136][ T9265]  ? unwind_next_frame+0x1aaf/0x23c0
[  207.374147][ T9265]  ? unwind_next_frame+0xa5/0x23c0
[  207.374157][ T9265]  ? ret_from_fork_asm+0x1a/0x30
[  207.374167][ T9265]  ? ret_from_fork_asm+0x1a/0x30
[  207.374177][ T9265]  __mptcp_pm_kernel_worker+0x198a/0x2100
[  207.374187][ T9265]  ? arch_stack_walk+0x11b/0x150
[  207.374197][ T9265]  ? ret_from_fork_asm+0x1a/0x30
[  207.374207][ T9265]  ? __pfx_hlock_conflict+0x10/0x10
[  207.374217][ T9265]  ? __bfs+0x153/0x290
[  207.374226][ T9265]  ? __pfx___mptcp_pm_kernel_worker+0x10/0x10
[  207.374235][ T9265]  ? check_path+0x21/0x40
[  207.374245][ T9265]  ? check_noncircular+0xda/0x150
[  207.374256][ T9265]  ? lockdep_unlock+0x5d/0xd0
[  207.374263][ T9265]  ? __lock_acquire+0x146e/0x2cf0
[  207.374275][ T9265]  ? do_raw_spin_lock+0x12b/0x2f0
[  207.374282][ T9265]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  207.374289][ T9265]  ? mptcp_pm_worker+0xe2/0x300
[  207.374299][ T9265]  mptcp_pm_worker+0x1bb/0x300
[  207.374310][ T9265]  mptcp_worker+0xd2/0x1430
[  207.374319][ T9265]  ? process_scheduled_works+0xa8d/0x18c0
[  207.374327][ T9265]  ? process_scheduled_works+0xa8d/0x18c0
[  207.374336][ T9265]  process_scheduled_works+0xb6e/0x18c0
[  207.374349][ T9265]  ? __pfx_process_scheduled_works+0x10/0x10
[  207.374358][ T9265]  ? assign_work+0x3d5/0x5e0
[  207.374367][ T9265]  worker_thread+0xa53/0xfc0
[  207.374380][ T9265]  kthread+0x388/0x470
[  207.374387][ T9265]  ? __pfx_worker_thread+0x10/0x10
[  207.374396][ T9265]  ? __pfx_kthread+0x10/0x10
[  207.374402][ T9265]  ret_from_fork+0x51e/0xb90
[  207.374412][ T9265]  ? __pfx_ret_from_fork+0x10/0x10
[  207.374421][ T9265]  ? __switch_to+0xc7d/0x1450
[  207.374429][ T9265]  ? __pfx_kthread+0x10/0x10
[  207.374435][ T9265]  ret_from_fork_asm+0x1a/0x30
[  207.374447][ T9265]  </TASK>
[  207.495825][T14161] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20001
[  208.910016][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
