last executing test programs:

1.363254128s ago: executing program 0 (id=24878):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xf00000000000000)

1.284116733s ago: executing program 0 (id=24880):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r0=>0x0, 0x0, 0x40, 0x80000000, 0x7, {{0x2d, 0x4, 0x1, 0x1, 0xb4, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x14, 0x81, 0x0, 0x5, [0x2, 0x1, 0x2, 0xffffffff]}, @end, @timestamp_addr={0x44, 0x1c, 0xe0, 0x1, 0x6, [{@broadcast, 0xd4e}, {@local, 0xa}, {@multicast1, 0x7ff}]}, @cipso={0x86, 0x6c, 0x1, [{0x5, 0x9, "56d5d098728732"}, {0x5, 0x9, "998068d6f46f9f"}, {0x6, 0x10, "d271b750e5dcd5b817d03549469e"}, {0x6, 0xc, "3404387150c471b384b9"}, {0x5, 0xf, "53e2538b089ee954fd8e11962a"}, {0x5, 0x6, "3d3a791c"}, {0x0, 0x12, "63f026b38216f1cac6f1034a0db0eaba"}, {0x7, 0x11, "e5078b7d2d2a6cadfc82282b5c71fd"}]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0}, 0x94)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x28, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'veth1_vlan\x00', 0x4000})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)

1.28374249s ago: executing program 1 (id=24881):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x78}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0x12, 0x10000000000001}]}, 0x30}}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

998.985766ms ago: executing program 0 (id=24886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001c00", @ANYRES32=r1, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x3000000, 0x48815}, 0xc000)

921.269472ms ago: executing program 0 (id=24887):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x4f}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2000cc0, r5}, 0x38)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x4008881}, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r4, 0x1, 0x12, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000004740)={0x0, @in6={{0xa, 0x4e23, 0xcc7, @remote, 0x13b9}}}, 0x84)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x198, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4010}, 0x8811)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000100fefffffffddbdf25810a000000000000080001"], 0x20}}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r10}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES8=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="df25ff090001010000007fec75cd"], 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)

817.680019ms ago: executing program 0 (id=24890):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00'})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={<r2=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x10, 0x80000000, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000000000003000000000000000300000004000000030000000000000000000002000000000000005f4f"], 0x0, 0x5e, 0x0, 0x1}, 0x28)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xa02}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0x8f, "c6146721fddcb048cbe29af0a27436600f131260f7021d3e675dae2f22f7b182b4110ec5be1faa12bde01f3cc54dc04b01727c8d42fd37607800259cf7e1bd71986d5004577fe7df5c6302c22a9d4df4abd5e24272d11e0cea82abbab405713da0d1b3eca55a533f894d8947a73f54cd415fd034e095b69e5f8fc137d0c8f899d25ad6b28e2a569d61328353c11302"}, &(0x7f00000003c0)=0x97)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)={r2}, &(0x7f0000000440)=0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r7 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000180)={r7})
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000)
socket(0x11, 0x1, 0x3)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000042c0), 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r8, 0x4004af61, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000000000)={{0x5, 0xf31}, 0x100, './file0\x00'})

704.759541ms ago: executing program 0 (id=24892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080006400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000010900010073797a3000"], 0x10c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r2, &(0x7f0000000100)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r3, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10)
listen(r3, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
bind$inet(r4, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10)
connect$inet(r4, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10)
accept$inet(r3, 0x0, 0x0)
write(r4, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c)
write(r4, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={0x1c, 0x41, 0x107, 0x70bd2d, 0x25dbdbfe, {0x1, 0x7c}, [@nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc080)

443.205819ms ago: executing program 2 (id=24899):
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001780)={r0, &(0x7f0000000480)="58bf5938509058978fcd09e4bcd5ad26ee76799b285a5e509b6643e643a87b261c323f2cd19781deeda4ab428fa12c2808cbfc517c6fc81c25064cab435319c75a44b374c1a36bdeb7a2a013e564ed732f3967d981e5f8bca18c6fa16e3af384a9e17b6744c66123c8720580f6e7c3e03b4902fc", &(0x7f0000001700)=""/92}, 0x20) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000100000f1ff0f0000007d00"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000300)={0x1040, 0x4000000, 0x20000000, 0x0, 0x65}) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async, rerun: 64)
r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000240)='\tH', 0x2, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) (async)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0x8}, 0x28) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000004) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f00000002c0)="0503222ed3fc14f9fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9febf87d2b8c3d815e010018000000000000000082be559f0000000400000000000000"], 0x0, 0x1c, 0x0, 0x1, 0x100}, 0x28) (async)
socket$nl_generic(0x10, 0x3, 0x10)

358.583948ms ago: executing program 1 (id=24900):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv6_getnetconf={0x14, 0x52, 0xa3d4ba35220a95bf, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc8}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000b80))
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={<r6=>0x0, 0x3d, 0x962e, 0x2, 0x5, 0xff, 0x1, 0x7, {0x0, @in6={{0xa, 0x4e21, 0xf, @dev={0xfe, 0x80, '\x00', 0xc}, 0xa9fc}}, 0x40, 0x38, 0xe9c0, 0x3, 0x7fffffff}}, &(0x7f0000000340)=0xb0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000380)={r6, 0x3}, &(0x7f00000003c0)=0x8)
sendmmsg$inet6(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
shutdown(r5, 0x1)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r8, 0x3d}, 0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r8, &(0x7f0000000100)=0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001c00", @ANYRES32=r9, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

274.442301ms ago: executing program 1 (id=24901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

273.657501ms ago: executing program 1 (id=24902):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x78}}, 0x8800)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000004e0001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
socket$packet(0x11, 0x2, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r7, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c80)="b763c662", 0x4}], 0x1, &(0x7f0000000f80)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x800, 0x7, 0x200, 0x101, 0x1, 0x8, 0x113, 0xffff}}], 0x48, 0x24000000}], 0x1, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x10200}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x36, 0x0, 0x0)

223.591119ms ago: executing program 2 (id=24903):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x128, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="bb5bbedc986f238966f182dd77eb441e418304179130aacc8885c160dd1c5b8b892e730210a571739fdd5395e393717a75b42d4a6f14e99dec443eddf25b4b50ad5236c6bd0b89a66ba56e1fa8dd273b70169c8b67bdda19a942856091ebd171473ccf35079a4ef5e66b42154f3a8c69a14cee7a96621e8b74914b13ba8f02f7ea68725a1dfe444c0f3b440a4ee999cdd72d25a4bf3a6e9bc301762e208e7649b0e76bef4ea57b1655f79c2ca5739fc81327de0ca09ca2bc890c5a4cf4716b0841f08946232e8b2d61ecb8", @typed={0x4, 0x3}, @generic="ddfbfd2c6cc1755ec1482a7f6f8ed20bf4e86f2a50d93a3bbd618b34000b99a0d1b8134cd6cddfb766655898772b616700"]}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x128}, 0x1, 0x3000000, 0x0, 0x400c801}, 0x200080c4)

219.636385ms ago: executing program 2 (id=24904):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000410007012cbd7000fadbdf25037c00000401cb80100001800c00108008000b8004"], 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) (async, rerun: 32)
r1 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32)
sendmsg$xdp(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="2bf32d3685d49565f49f5eb1318e3ef523dace871b085579f5be4cee7c2927d272ca8fb146d950d1ca63c7caf122b6f2a546a96e7e5c7a190c7406d4f6dd1b89db7f3280847d06bda274334b4a5c60af61ef00f8fd568dd77e0cb100cbf607526b7858bc1d25d9c14056fcb5d315ad483791df4ef3", 0x75}, {&(0x7f0000000200)="6a538e3c6b760485db2e08f81b4455626d42443335b8da99b5316d2a1babae82981d8cc742c7ee61041d534e2c87ec59a5b966cdc914aa2399459c00bb4db263420cdf0d196ff566358978a577e1ca8f1a49685cab5334f0d78da1a9", 0x5c}, {&(0x7f0000000280)="ca4e801bd9093193ee52a8678b2420aad3f23da2c83e9996ed1e5f80deb0266cf21d02911d30d408ec6fb21fde7cc828b3f48389d182166a30fe0d0426573e52c88fee0c1a0b95b20c9af485e17bff95784542329facebe0c4c38faa2cbdf82524558ae4e8761127965656d6c2b483f9b8a74765f6881e998497f62e851176dff1f3d40885d7da38682ced4b13bd3736c15529eda5e164a4", 0x98}, {&(0x7f0000000340)="8d2f9fc90e810bd1a522036494f1881b7eaad1b43b8d519f", 0x18}, {&(0x7f0000000380)="b61f4a147333f4d01ddfdfbbc441648d8b823c04a99038d17df4d8b12922dc1ba04a4b15dbb06cfbeb22c44cc5bae5937a3a3adf33c20307fd0735971d7e3ac1c88d6ab6acfe3900d7fd24904280604d24801d52234bde9407e479cd78931ca0a550e8b28e5c8061d2aba2a7bb6527e4dd507446f19f3b58c3cf497d94cda0e6450bf0eedd5be6ec710ef5465ac8c17a673f009e929503458a2445437190b4a20353c58a8696b98e4a63e2388eb13a819e6b41a0b0f073288815e5bfb5fa44d46e", 0xc1}, {&(0x7f0000000480)="91dc4a3084a57e99a4e2d3331f94c477c42db35aa7dcd3905185391416cf5b42fa74671b12b02c7fa21769cf093716b482c9d408f09bd8e4d39c9744ba563a37328afd074bcd47025773b43edc3ffaca47f3b772d6da8253ee108cc0ee3be32b04a28d8e5e5573e4622aeed222f2b6c46e97ce92d4ac621b497b8dfb41c272ccbf82b5b4d75a7189265aeab0c64e6998bfa41a7e56396b66d576b51828bd364fc04e678943897d975a3fd5e38f06550605dd89084e2b515c0d882f3c8f00eab9e2f25a890b2712555ca1e710dbab417a6782d2c7b701293eaf", 0xd9}, {&(0x7f0000000580)="af57178d3f3c5fc1dd5573c55e4b9ae535f2a56df1", 0x15}, {&(0x7f00000005c0)="381e5520db57f0d4178c8aa1208ea099947b32e851d22a19dd5b4cf8f870581258379902227665ea9e4f92d27ceb84f2ac6f6cc19d6b90cfc722694fc7dbef66b18af56eb242c455b0cefba55faf87cc2e15f063c9bb13a96b51ad910ef43e810003748f674efcd3d760d6f1f8cc052e52c7ce565b74e766f95767d0771760c5c520aa9cd1080b53760ce5ce519d3797a056b834c16b7ef190334b8e4a6a5369f065ab1147871ba0d01162dccbb474375d35f52fa83904419b64c2dfdff81fe47e1c3ba7b9365b752eda1b30b772d9742a13771616f31caa77", 0xd9}, {&(0x7f00000006c0)="7be6fa589040be2fd49763af9e4562ed78a183a9c5dc926cbf0f049895", 0x1d}], 0x9, 0x0, 0x0, 0x4000000}, 0x20048800)

104.171486ms ago: executing program 1 (id=24905):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x78, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x60000000, 0x4}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000)

103.923517ms ago: executing program 2 (id=24906):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_buf(r0, 0x29, 0x1f, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=@newlinkprop={0x20, 0x6c, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xc6ca, 0x308}}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x8810)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000a0000000900020073797a31000000000500010007000000050005000a0000001400078008001240fffffffa08000b0000000401050004000000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100))
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0xe, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_lifetime={0x4, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}, @sadb_lifetime={0x4, 0x3}]}, 0xc0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000000000000000003800"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fc}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0xaf01, 0x0)
ioctl$XFS_IOC_START_COMMIT(r4, 0x4008af03, &(0x7f0000000000))

102.635184ms ago: executing program 1 (id=24907):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0)
close(r1)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x54, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r10, {0xfff1, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40054}, 0x4804)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000041000708000000ff00000000017c0000040042802c00018010000400cab1893a20b8d2a9a795c26355f06b3314000300fe800000000000000000000000000032fd000280"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r13, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r13, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})

3.666654ms ago: executing program 2 (id=24908):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000300002c00048008000100000000012000ff800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0)

0s ago: executing program 2 (id=24909):
unshare(0x22020600)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x502e}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000001b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000980)={0x114c, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1064, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "f392762a369367af0f72bcd7c8e52013fd0af81b674e85ac3f375ed378ab7c1a62"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10000, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xeb93}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x114c}, 0x1, 0x0, 0x0, 0x50894}, 0x40000)
r7 = socket$inet(0x2, 0x3, 0x2)
getsockopt(r7, 0xff, 0x1, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x38, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x2d, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@nested={0x11, 0x99, 0x0, 0x1, [@generic="32881935c6d6e2c0dea5ea75b6"]}]}]}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)

kernel console output (not intermixed with test programs):

sim3 syzkaller1: left allmulticast mode
[  959.746418][T23021] 8021q: adding VLAN 0 to HW filter on device bond43
[  959.991942][T23033] netlink: 128 bytes leftover after parsing attributes in process `syz.2.21431'.
[  960.137173][T23045] netlink: 'syz.0.21437': attribute type 3 has an invalid length.
[  960.721326][T23079] sctp: [Deprecated]: syz.2.21451 (pid 23079) Use of int in max_burst socket option.
[  960.721326][T23079] Use struct sctp_assoc_value instead
[  960.774795][T23086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21454'.
[  960.912879][T23093] netlink: 10 bytes leftover after parsing attributes in process `syz.1.21458'.
[  961.020366][T23097] netlink: 'syz.1.21460': attribute type 62 has an invalid length.
[  962.068820][T23164] netlink: 'syz.0.21493': attribute type 22 has an invalid length.
[  962.154514][T23172] vlan0: entered promiscuous mode
[  962.771017][T23227] lo speed is unknown, defaulting to 1000
[  962.998273][T23248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21533'.
[  963.001754][T23248] netlink: 80 bytes leftover after parsing attributes in process `syz.0.21533'.
[  963.037357][T23254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21535'.
[  963.441074][T23282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21546'.
[  964.508257][T23309] netlink: 'syz.2.21555': attribute type 9 has an invalid length.
[  964.982571][T23331] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21566'.
[  965.452188][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21580'.
[  965.735742][T23396] bridge24: entered allmulticast mode
[  967.083223][T23494] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  967.132810][T23498] geneve9: entered promiscuous mode
[  967.159620][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  967.163217][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  967.166593][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  967.170463][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  967.224896][T23511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21645'.
[  967.282910][T23515] bond32: entered allmulticast mode
[  967.285263][T23515] ip6gre4: entered allmulticast mode
[  967.291962][T23514] bond32: left allmulticast mode
[  967.296458][T23514] ip6gre4: left allmulticast mode
[  967.495243][T23532] ipvlan0: Caught tx_queue_len zero misconfig
[  968.526772][T23604] netlink: 224 bytes leftover after parsing attributes in process `syz.2.21686'.
[  968.772016][T23633] netlink: 48 bytes leftover after parsing attributes in process `syz.0.21697'.
[  968.778846][T23633] netlink: 48 bytes leftover after parsing attributes in process `syz.0.21697'.
[  968.900942][T23643] xt_CT: No such helper "netbios-ns"
[  970.028006][T23715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21728'.
[  970.583202][T23760] lo speed is unknown, defaulting to 1000
[  970.630616][T23762] netlink: 'syz.1.21750': attribute type 5 has an invalid length.
[  970.637627][T23762] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.21750'.
[  971.376527][T23797] netlink: 'syz.0.21764': attribute type 1 has an invalid length.
[  971.382874][T23797] netlink: 'syz.0.21764': attribute type 4 has an invalid length.
[  971.386041][T23797] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.21764'.
[  971.394548][T23797] netlink: 'syz.0.21764': attribute type 1 has an invalid length.
[  971.399387][T23797] netlink: 'syz.0.21764': attribute type 4 has an invalid length.
[  971.402495][T23797] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.21764'.
[  971.840693][T23827] netlink: 64 bytes leftover after parsing attributes in process `syz.0.21777'.
[  972.534587][T23882] bridge28: entered promiscuous mode
[  972.689836][T23897] netlink: 'syz.1.21807': attribute type 12 has an invalid length.
[  972.696803][T23897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21807'.
[  972.856318][T23911] pim6reg1: entered promiscuous mode
[  972.858600][T23911] pim6reg1: entered allmulticast mode
[  972.926158][T23917] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  973.443713][T23953] netlink: ct family unspecified
[  973.445607][T23953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  973.608643][T23972] netlink: del zone limit has 8 unknown bytes
[  973.689591][T23980] netlink: 'syz.0.21846': attribute type 2 has an invalid length.
[  973.793954][T23990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21851'.
[  973.798558][T23990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21851'.
[  973.955126][T24003] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  974.001578][T24007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21858'.
[  974.086085][T24013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21861'.
[  974.549607][T24054] nbd: socks must be embedded in a SOCK_ITEM attr
[  974.551793][T24054] block nbd12: shutting down sockets
[  974.662786][T24067] bond0: (slave veth1_to_bond): Device is not bonding slave
[  974.665830][T24067] bond0: option active_slave: invalid value (veth1_to_bond)
[  974.952535][T24089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21895'.
[  974.985482][T24089] 8021q: adding VLAN 0 to HW filter on device bond44
[  974.991865][T24089] bond44: option mode: unable to set because the bond device is up
[  975.533786][T24139] netlink: 'syz.0.21918': attribute type 1 has an invalid length.
[  975.549023][T24139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  975.690948][T24157] __nla_validate_parse: 2 callbacks suppressed
[  975.690966][T24157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21930'.
[  975.728643][T24157] bond45: (slave bridge25): Enslaving as an active interface with an up link
[  975.732946][T24157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21930'.
[  975.737507][T24157] bond45: entered promiscuous mode
[  975.739512][T24157] bridge25: entered promiscuous mode
[  975.744837][T24157] bond45: entered allmulticast mode
[  975.749171][T24157] bridge25: entered allmulticast mode
[  975.753032][T24157] 8021q: adding VLAN 0 to HW filter on device bond45
[  975.758836][T24165] syzkaller0: left promiscuous mode
[  975.763551][T24165] syzkaller0: left allmulticast mode
[  975.768068][T24165] tipc: Resetting bearer <eth:syzkaller0>
[  976.084543][T24202] !: renamed from virt_wifi0
[  976.122696][T24206] netlink: 128 bytes leftover after parsing attributes in process `syz.2.21951'.
[  976.125793][T24206] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  976.471671][T24242] netlink: 'syz.1.21969': attribute type 21 has an invalid length.
[  976.483600][T24242] netlink: 128 bytes leftover after parsing attributes in process `syz.1.21969'.
[  976.495432][T24242] netlink: 'syz.1.21969': attribute type 5 has an invalid length.
[  976.498581][T24242] netlink: 'syz.1.21969': attribute type 6 has an invalid length.
[  976.502617][T24242] netlink: 3 bytes leftover after parsing attributes in process `syz.1.21969'.
[  976.812536][T24272] netlink: 'syz.1.21982': attribute type 15 has an invalid length.
[  977.086973][T24303] netlink: 'syz.1.21997': attribute type 13 has an invalid length.
[  977.145593][T24311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21997'.
[  977.237915][T24322] netlink: 204 bytes leftover after parsing attributes in process `syz.2.22004'.
[  977.243133][T24322] netlink: 84 bytes leftover after parsing attributes in process `syz.2.22004'.
[  977.463671][T24338] syzkaller1: entered promiscuous mode
[  977.465941][T24338] syzkaller1: entered allmulticast mode
[  977.473868][T24338] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 5
[  977.555897][T24340] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  977.912181][T24375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22026'.
[  977.916653][T24375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22026'.
[  978.402885][T24409] nbd12: detected capacity change from 0 to 63
[  978.414479][   T55] block nbd12: Receive control failed (result -104)
[  978.420088][T24421] macvtap0: entered promiscuous mode
[  978.422045][T24421] batadv0: entered promiscuous mode
[  978.423903][T24421] macvtap0: entered allmulticast mode
[  978.425944][T24421] batadv0: entered allmulticast mode
[  978.428346][T24421] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  978.436897][T24421] batadv0: left allmulticast mode
[  978.442337][T24421] batadv0: left promiscuous mode
[  979.152873][T24476] syzkaller1: entered promiscuous mode
[  979.154715][T24476] syzkaller1: entered allmulticast mode
[  979.353958][T24484] syzkaller0: left promiscuous mode
[  979.355782][T24484] syzkaller0: left allmulticast mode
[  979.357727][T24484] tipc: Resetting bearer <eth:syzkaller0>
[  979.897687][T24521] xt_NFQUEUE: number of total queues is 0
[  980.307997][T24540] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  980.383531][T24545] bond46: option tlb_dynamic_lb: invalid value (128)
[  980.386763][T24545] bond46 (unregistering): Released all slaves
[  980.607413][T24564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  980.651687][T24567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  980.801575][T24572] __nla_validate_parse: 5 callbacks suppressed
[  980.801594][T24572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22108'.
[  980.996491][T24587] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  981.115284][T24592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22113'.
[  981.118624][T24592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22113'.
[  981.122993][T24592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22113'.
[  981.126564][T24592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22113'.
[  981.130922][T24592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22113'.
[  981.134817][T24589] netlink: 'syz.0.22113': attribute type 1 has an invalid length.
[  981.137979][T24589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  981.192640][T24594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  981.311435][T24596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  981.355356][T24603] netlink: 'syz.0.22117': attribute type 1 has an invalid length.
[  981.358036][T24603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  981.373314][T24605] openvswitch: netlink: IP tunnel dst address not specified
[  981.377163][T24606] openvswitch: netlink: IP tunnel dst address not specified
[  981.572620][T24621] netlink: 'syz.1.22122': attribute type 13 has an invalid length.
[  981.591870][T24621] syzkaller0: entered promiscuous mode
[  981.595969][T24621] syzkaller0: entered allmulticast mode
[  981.598297][T24621] tipc: Resetting bearer <eth:syzkaller0>
[  981.888131][T24646] netlink: 'syz.1.22130': attribute type 2 has an invalid length.
[  981.890308][T24645] netlink: 'syz.1.22130': attribute type 2 has an invalid length.
[  982.035370][T24657] netlink: 'syz.0.22133': attribute type 2 has an invalid length.
[  982.048396][T24657] : entered promiscuous mode
[  982.069455][T24648] block nbd13: server does not support multiple connections per device.
[  982.073815][T24648] block nbd13: shutting down sockets
[  982.132057][T24665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22135'.
[  982.157979][T24667] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  982.303480][T24677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.22137'.
[  982.312515][T24677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.22137'.
[  982.317522][T24677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22137'.
[  982.349333][ T5675] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  982.352823][ T5675] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  982.358664][ T5675] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  982.367508][ T5675] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  982.826912][T24699] mac80211_hwsim hwsim5 wlan1: Caught tx_queue_len zero misconfig
[  983.168884][T24731] xt_time: unknown flags 0xf4
[  983.811667][T24770] netlink: 'syz.2.22167': attribute type 1 has an invalid length.
[  983.830675][T24770] bond46: entered promiscuous mode
[  983.832780][T24770] 8021q: adding VLAN 0 to HW filter on device bond46
[  983.972437][T24783] : renamed from bond_slave_0
[  984.869478][T24857] lo speed is unknown, defaulting to 1000
[  985.377628][T24895] netlink: 'syz.2.22202': attribute type 7 has an invalid length.
[  985.381759][T24895] net_ratelimit: 46 callbacks suppressed
[  985.381773][T24895] openvswitch: netlink: Flow actions attr not present in new flow.
[  985.547364][T24908] team_slave_1: Caught tx_queue_len zero misconfig
[  985.827630][T24926] __nla_validate_parse: 22 callbacks suppressed
[  985.827641][T24926] netlink: 460 bytes leftover after parsing attributes in process `syz.0.22204'.
[  986.000016][T24938] openvswitch: netlink: Key type 309 is out of range max 32
[  986.046394][T24942] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  986.067786][T24946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  986.110825][T24952] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.22210'.
[  986.118077][T24952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22210'.
[  986.130428][T24952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22210'.
[  986.140302][T24952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22210'.
[  986.150273][T24952] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  986.213164][T24963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22212'.
[  986.221838][T24963] openvswitch: netlink: Flow actions attr not present in new flow.
[  986.287714][T24945] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  986.297235][T24945] netlink: 'syz.0.22209': attribute type 49 has an invalid length.
[  986.364826][T24972] netlink: 'syz.2.22215': attribute type 2 has an invalid length.
[  986.412216][T24976] openvswitch: netlink: Unknown key attributes 2
[  986.494371][T24981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  986.536999][T24982] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  987.345782][T24990] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  987.408516][T24999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22226'.
[  987.420737][T25001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22226'.
[  987.505643][T25011] netlink: 200 bytes leftover after parsing attributes in process `syz.0.22231'.
[  987.614204][T25025] netlink: 'syz.1.22235': attribute type 1 has an invalid length.
[  988.702287][T25052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22245'.
[  989.505051][T25100] netlink: 'syz.0.22262': attribute type 2 has an invalid length.
[  989.518575][T25101] netlink: 'syz.2.22261': attribute type 1 has an invalid length.
[  989.852408][T25115] 8021q: VLANs not supported on wg2
[  989.857198][T25116] 8021q: VLANs not supported on wg2
[  989.932253][T25124] smc: adding net device wlan0 with user defined pnetid SYZ0
[  990.125799][T25137] lo: entered allmulticast mode
[  990.137514][T25137] lo: left allmulticast mode
[  990.365337][T25157] netlink: 'syz.1.22283': attribute type 2 has an invalid length.
[  990.419454][T25165] net_ratelimit: 30 callbacks suppressed
[  990.419465][T25165] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  990.432846][T25167] openvswitch: netlink: Duplicate key (type 6).
[  990.472387][T25171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  990.531339][T25175] netlink: 'syz.2.22293': attribute type 62 has an invalid length.
[  990.538890][T25170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  990.557224][T25174] bond29: Removing last ns target with arp_interval on
[  990.574408][T25174] openvswitch: netlink: nsh attr 251 is out of range max 3
[  990.585265][T25179] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  990.636430][T25188] openvswitch: netlink: Duplicate or invalid key (type 0).
[  990.643072][T25188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  990.728536][T25181] openvswitch: netlink: Flow actions attr not present in new flow.
[  990.926125][T25210] openvswitch: netlink: IP tunnel dst address not specified
[  991.039544][T25220] x_tables: duplicate underflow at hook 2
[  991.167850][T25238] nft_compat: unsupported protocol 5
[  991.213391][T25242] __nla_validate_parse: 15 callbacks suppressed
[  991.213404][T25242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22318'.
[  991.760210][T25285] netlink: 56 bytes leftover after parsing attributes in process `syz.2.22337'.
[  991.820371][T25290] syzkaller0: entered promiscuous mode
[  991.822820][T25290] syzkaller0: entered allmulticast mode
[  991.825052][T25290] tipc: Resetting bearer <eth:syzkaller0>
[  991.864528][T25293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22340'.
[  991.956270][T25306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22344'.
[  992.363528][T25334] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  992.538836][T25353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22362'.
[  992.595881][T25360] netlink: 64 bytes leftover after parsing attributes in process `syz.0.22365'.
[  992.599468][T25360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22365'.
[  992.724712][T25367] lo speed is unknown, defaulting to 1000
[  993.275102][T25376] ip6gre6: entered allmulticast mode
[  993.278068][   T12] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  993.316929][T25378] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22370'.
[  993.706117][T25393] netlink: 'syz.2.22377': attribute type 11 has an invalid length.
[  993.711126][T25393] netlink: 'syz.2.22377': attribute type 4 has an invalid length.
[  993.713600][T25393] netlink: 224 bytes leftover after parsing attributes in process `syz.2.22377'.
[  993.905594][T25413] xt_CT: You must specify a L4 protocol and not use inversions on it
[  993.912018][T25413] netlink: 'syz.0.22380': attribute type 4 has an invalid length.
[  993.921225][T25413] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22380'.
[  993.932392][T25423] netlink: 'syz.2.22383': attribute type 13 has an invalid length.
[  994.453798][T25423] tipc: Resetting bearer <eth:syzkaller0>
[  994.671275][ T5675] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  994.677323][ T5675] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  994.689775][ T5675] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  994.703149][ T5675] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  994.814115][T25450] netlink: 'syz.2.22391': attribute type 1 has an invalid length.
[  995.441825][T25497] nftables ruleset with unbound set
[  995.531688][T25502] netlink: 'syz.1.22412': attribute type 2 has an invalid length.
[  995.740007][T25517] net_ratelimit: 54 callbacks suppressed
[  995.740026][T25517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  995.816413][T25526] openvswitch: netlink: Key 6 has unexpected len 51 expected 2
[  995.885722][T25530] openvswitch: netlink: Message has -2 unknown bytes.
[  995.888145][T25530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  995.945632][T25539] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8
[  995.946010][T25540] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8
[  996.083652][T25544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  996.203948][T25551] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  996.284734][T25555] __nla_validate_parse: 5 callbacks suppressed
[  996.284751][T25555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22431'.
[  996.386130][T25558] tc_dump_action: action bad kind
[  996.726495][T25564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  997.179251][    C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  997.205904][T25585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  997.264263][T25584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  997.282727][T25584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  997.294678][T25584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  997.300206][T25591] openvswitch: netlink: Flow actions attr not present in new flow.
[  997.378816][T25600] netlink: 'syz.1.22447': attribute type 2 has an invalid length.
[  997.413632][T25603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22448'.
[  997.438975][T25603] team0: Port device macvlan0 removed
[  997.451789][T25605] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  997.457547][T25605] netlink: 112 bytes leftover after parsing attributes in process `syz.0.22449'.
[  997.465888][T25605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22449'.
[  997.545211][T25611] 8021q: VLANs not supported on gre0
[  997.993302][T25637] 8021q: VLANs not supported on gre0
[  998.117728][T25645] lo speed is unknown, defaulting to 1000
[  998.755479][T25667] xt_bpf: check failed: parse error
[  999.230894][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22479'.
[  999.383598][T25703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22483'.
[  999.467502][T25707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22485'.
[  999.585716][T25717] netlink: 156 bytes leftover after parsing attributes in process `syz.0.22490'.
[  999.601564][   T33] audit: type=1800 audit(1785288041.244:24): pid=25717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.22490" name="memory.events" dev="tmpfs" ino=38822 res=0 errno=0
[  999.612494][   T33] audit: type=1804 audit(1785288041.254:25): pid=25717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.22490" name="/newroot/7701/memory.events" dev="tmpfs" ino=38822 res=1 errno=0
[  999.654547][T25721] lo speed is unknown, defaulting to 1000
[  999.841437][T25734] netlink: 'syz.0.22496': attribute type 10 has an invalid length.
[  999.846952][T25734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22496'.
[  999.872371][T25734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22496'.
[  999.923784][T25734] bridge0: entered allmulticast mode
[ 1000.310903][T25756] lo speed is unknown, defaulting to 1000
[ 1000.706416][T25782] sctp: [Deprecated]: syz.0.22511 (pid 25782) Use of int in max_burst socket option.
[ 1000.706416][T25782] Use struct sctp_assoc_value instead
[ 1000.721190][T25785] sctp: [Deprecated]: syz.0.22511 (pid 25785) Use of int in max_burst socket option.
[ 1000.721190][T25785] Use struct sctp_assoc_value instead
[ 1000.858978][T25797] syzkaller0: left promiscuous mode
[ 1000.863350][T25797] syzkaller0: left allmulticast mode
[ 1000.867612][T25797] tipc: Resetting bearer <eth:syzkaller0>
[ 1000.874095][T25799] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1000.903396][T25804] net_ratelimit: 30 callbacks suppressed
[ 1000.903412][T25804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1000.944219][T25808] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1001.114908][T25818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1001.166855][T25817] lo speed is unknown, defaulting to 1000
[ 1001.507998][T25849] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1001.568120][T25854] __nla_validate_parse: 9 callbacks suppressed
[ 1001.568136][T25854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22534'.
[ 1001.584977][T25854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22534'.
[ 1001.596409][T25854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22534'.
[ 1001.608195][T25854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22534'.
[ 1001.730927][T25860] openvswitch: netlink: nsh attr 251 is out of range max 3
[ 1001.767883][T25863] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1001.820086][T25865] ipt_REJECT: ECHOREPLY no longer supported.
[ 1001.950832][T25876] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1002.012321][T25879] openvswitch: netlink: Missing key (keys=c0, expected=480)
[ 1002.042057][T25882] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[ 1002.147151][T25891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22547'.
[ 1002.194460][T25891] openvswitch: netlink: Geneve option length err (len 384, max 255).
[ 1002.442468][T25929] netlink: 'syz.1.22560': attribute type 13 has an invalid length.
[ 1002.445059][T25929] netlink: 136 bytes leftover after parsing attributes in process `syz.1.22560'.
[ 1002.453274][T25929] syz_tun: refused to change device tx_queue_len
[ 1002.614027][T25947] netlink: 'syz.1.22569': attribute type 1 has an invalid length.
[ 1002.748833][T25960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22571'.
[ 1002.856719][T25968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.22575'.
[ 1002.864501][T25968] netlink: 160 bytes leftover after parsing attributes in process `syz.2.22575'.
[ 1002.868043][T25968] tc_dump_action: action bad kind
[ 1002.951629][T25973] syzkaller0: left promiscuous mode
[ 1002.953404][T25973] syzkaller0: left allmulticast mode
[ 1002.955374][T25973] tipc: Resetting bearer <eth:syzkaller0>
[ 1003.015302][T25983] netlink: 'syz.2.22577': attribute type 2 has an invalid length.
[ 1003.039012][T25986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22580'.
[ 1003.223382][T25994] lo speed is unknown, defaulting to 1000
[ 1003.659593][T26025] bond47: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1003.663991][T26025] bond47 (unregistering): Released all slaves
[ 1003.906084][T26044] netlink: 'syz.0.22596': attribute type 2 has an invalid length.
[ 1004.404689][T26092] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[ 1004.407083][T26092] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[ 1005.162402][T26163] netlink: 'syz.1.22628': attribute type 1 has an invalid length.
[ 1005.192582][T26163] bond30: entered promiscuous mode
[ 1005.194509][T26163] 8021q: adding VLAN 0 to HW filter on device bond30
[ 1005.237565][T26163] bond30: (slave bridge29): making interface the new active one
[ 1005.240100][T26163] bridge29: entered promiscuous mode
[ 1005.243863][T26163] bond30: (slave bridge29): Enslaving as an active interface with an up link
[ 1005.422536][T26183] lo speed is unknown, defaulting to 1000
[ 1005.649460][    C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[ 1005.887236][T26207] 8021q: adding VLAN 0 to HW filter on device 60X
[ 1005.933774][T26207] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1005.945108][T26207] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1005.953547][T26207] net_ratelimit: 73 callbacks suppressed
[ 1005.953564][T26207] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1005.978931][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1006.062207][ T5668] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1006.068230][ T5668] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1006.077169][ T5668] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1006.260853][T26225] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1006.335244][T26213] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1006.354682][T26227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1006.517699][T26243] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1006.558526][T26251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1006.575312][T26253] __nla_validate_parse: 22 callbacks suppressed
[ 1006.575325][T26253] netlink: 220 bytes leftover after parsing attributes in process `syz.0.22661'.
[ 1006.584447][T26253] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1006.603027][T26257] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1006.611422][T26257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1006.615743][T26260] netlink: 'syz.0.22663': attribute type 9 has an invalid length.
[ 1006.690158][T26274] openvswitch: netlink: ct_state flags 806d0004 unsupported
[ 1006.759669][T26280] syzkaller0: entered promiscuous mode
[ 1006.761569][T26280] syzkaller0: entered allmulticast mode
[ 1006.763616][T26280] tipc: Resetting bearer <eth:syzkaller0>
[ 1006.846963][T26289] xt_CT: No such helper "netbios-ns"
[ 1006.856282][T26289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22674'.
[ 1006.908146][T26295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22676'.
[ 1006.950600][T26297] netlink: 'syz.1.22677': attribute type 2 has an invalid length.
[ 1006.958439][T26297] : entered promiscuous mode
[ 1007.050241][T26305] netlink: 'syz.0.22680': attribute type 1 has an invalid length.
[ 1007.059304][T26302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22679'.
[ 1007.254141][T26331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22685'.
[ 1007.316406][T26338] netlink: 156 bytes leftover after parsing attributes in process `syz.0.22689'.
[ 1007.319726][T26338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22689'.
[ 1007.492801][T26354] netlink: 220 bytes leftover after parsing attributes in process `syz.1.22691'.
[ 1007.618335][T26367] xt_CT: No such helper "netbios-ns"
[ 1007.620451][T26367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22696'.
[ 1007.800060][T26384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22702'.
[ 1008.388799][T26434] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1008.452237][T26442] netlink: 'syz.0.22719': attribute type 32 has an invalid length.
[ 1008.493775][T26446] netlink: 'syz.2.22721': attribute type 16 has an invalid length.
[ 1008.766764][T26480] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[ 1008.771101][T26480] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[ 1008.856988][ T1256] block nbd12: Possible stuck request ffff88810ad10000: control (read@0,4096B). Runtime 30 seconds
[ 1008.997253][T26502] lo speed is unknown, defaulting to 1000
[ 1009.475154][T26542] netlink: 'syz.1.22755': attribute type 21 has an invalid length.
[ 1009.478129][T26542] netlink: 'syz.1.22755': attribute type 5 has an invalid length.
[ 1009.484228][T26542] netlink: 'syz.1.22755': attribute type 6 has an invalid length.
[ 1009.577093][T26549] netlink: 'syz.1.22758': attribute type 10 has an invalid length.
[ 1011.081874][T26603] netlink: 'syz.0.22776': attribute type 5 has an invalid length.
[ 1011.181407][T26615] net_ratelimit: 46 callbacks suppressed
[ 1011.181424][T26615] openvswitch: netlink: Duplicate key (type 6).
[ 1011.297800][T26625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1011.369875][T26629] openvswitch: netlink: Missing key (keys=c0, expected=480)
[ 1011.482623][T26637] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1011.609975][T26644] openvswitch: netlink: Message has -2 unknown bytes.
[ 1011.612322][T26644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1012.216262][T26686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1012.263427][T26691] __nla_validate_parse: 21 callbacks suppressed
[ 1012.263438][T26691] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.22796'.
[ 1012.274689][T26691] netlink: 'syz.1.22796': attribute type 1 has an invalid length.
[ 1012.284512][T26691] netlink: 256 bytes leftover after parsing attributes in process `syz.1.22796'.
[ 1012.411919][T26697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22798'.
[ 1012.446574][T26697] bond0: option arp_validate: invalid value (55553)
[ 1012.501318][T26701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1012.506879][T26701] A link change request failed with some changes committed already. Interface ! may have been left with an inconsistent configuration, please check.
[ 1012.527457][T26705] tipc: Resetting bearer <eth:batadv0>
[ 1012.541207][T26705] tipc: Resetting bearer <eth:syzkaller0>
[ 1012.614908][ T5021] lo speed is unknown, defaulting to 1000
[ 1012.687055][T26712] openvswitch: netlink: Multiple metadata blocks provided
[ 1012.714648][T26714] netlink: 104 bytes leftover after parsing attributes in process `syz.1.22805'.
[ 1012.774346][T26717] openvswitch: netlink: IPv4 tunnel dst address is zero
[ 1013.068922][T26736] syzkaller1: entered allmulticast mode
[ 1013.131343][T26742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22815'.
[ 1013.300883][T26751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22819'.
[ 1013.479579][T26754] sctp: [Deprecated]: syz.0.22820 (pid 26754) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1013.479579][T26754] Use struct sctp_sack_info instead
[ 1013.488496][T26754] sctp: [Deprecated]: syz.0.22820 (pid 26754) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1013.488496][T26754] Use struct sctp_sack_info instead
[ 1013.897296][T26770] lo speed is unknown, defaulting to 1000
[ 1014.402555][T26787] netlink: 'syz.2.22833': attribute type 1 has an invalid length.
[ 1014.410490][T26787] netlink: 236 bytes leftover after parsing attributes in process `syz.2.22833'.
[ 1014.776457][T26817] netlink: 44 bytes leftover after parsing attributes in process `syz.1.22841'.
[ 1014.825939][T26825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22844'.
[ 1015.042254][T26843] syzkaller0: entered promiscuous mode
[ 1015.044069][T26843] syzkaller0: entered allmulticast mode
[ 1015.046884][T26843] tipc: Resetting bearer <eth:syzkaller0>
[ 1015.053746][T26843] 8021q: VLANs not supported on gre0
[ 1015.112863][T26850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22853'.
[ 1015.286230][T26861] tipc: Resetting bearer <eth:syzkaller0>
[ 1015.303801][ T5675] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1015.306419][ T5675] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1015.308980][ T5675] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1015.311758][ T5675] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1015.437256][T26878] lo speed is unknown, defaulting to 1000
[ 1015.898040][T26902] netlink: 'syz.1.22871': attribute type 3 has an invalid length.
[ 1015.907603][T26902] netlink: 'syz.1.22871': attribute type 3 has an invalid length.
[ 1015.916671][T26897] netlink: 'syz.0.22869': attribute type 1 has an invalid length.
[ 1015.980789][T26897] bond46: entered promiscuous mode
[ 1015.989471][T26897] bond46: entered allmulticast mode
[ 1015.995343][T26897] 8021q: adding VLAN 0 to HW filter on device bond46
[ 1016.035479][T26892] erspan2: entered allmulticast mode
[ 1016.162993][T26917] SET target dimension over the limit!
[ 1016.212263][T26920] net_ratelimit: 33 callbacks suppressed
[ 1016.212283][T26920] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[ 1016.216935][T26920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1016.301719][T26922] lo speed is unknown, defaulting to 1000
[ 1016.450679][T26926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1016.561263][T26934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1016.571754][T26931] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[ 1016.731601][T26939] netlink: 'syz.2.22884': attribute type 1 has an invalid length.
[ 1016.818960][T26939] 8021q: adding VLAN 0 to HW filter on device bond47
[ 1016.974079][T26942] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1017.445892][T26952] openvswitch: netlink: Multiple metadata blocks provided
[ 1017.475026][T26954] netlink: 'syz.0.22889': attribute type 1 has an invalid length.
[ 1017.477423][T26954] __nla_validate_parse: 1 callbacks suppressed
[ 1017.477433][T26954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22889'.
[ 1017.612159][T26964] openvswitch: netlink: Geneve option length err (len 384, max 255).
[ 1017.651718][T26970] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[ 1017.691006][T26972] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[ 1017.743944][T26975] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1017.749953][T26975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1017.971692][T26988] tipc: Disabling bearer <eth:syzkaller0>
[ 1018.092151][T26990] syzkaller0: left promiscuous mode
[ 1018.094404][T26990] syzkaller0: left allmulticast mode
[ 1018.805828][T27020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22911'.
[ 1018.809262][T27020] netlink: 'syz.1.22911': attribute type 1 has an invalid length.
[ 1019.130740][T27040] netlink: 220 bytes leftover after parsing attributes in process `syz.1.22919'.
[ 1019.181167][T27047] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22921'.
[ 1019.456902][T27068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22930'.
[ 1019.538759][T27069] netlink: 164 bytes leftover after parsing attributes in process `syz.0.22929'.
[ 1019.557494][T27069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22929'.
[ 1019.590965][T27071] netlink: 68 bytes leftover after parsing attributes in process `syz.1.22931'.
[ 1019.605342][T27071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22931'.
[ 1019.610304][T27071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22931'.
[ 1020.757701][T27124] syzkaller1: entered promiscuous mode
[ 1020.760700][T27124] syzkaller1: entered allmulticast mode
[ 1020.832292][T27126] netlink: 'syz.2.22954': attribute type 3 has an invalid length.
[ 1020.906288][T27133] ip6t_srh: unknown srh match flags  4000
[ 1021.009313][    C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[ 1021.173671][T27160] netlink: 'syz.0.22965': attribute type 7 has an invalid length.
[ 1021.179702][T27160] netlink: 'syz.0.22965': attribute type 7 has an invalid length.
[ 1021.291027][T27175] syzkaller0: entered promiscuous mode
[ 1021.292787][T27175] syzkaller0: entered allmulticast mode
[ 1021.298692][T27175] net_ratelimit: 30 callbacks suppressed
[ 1021.298702][T27175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1021.341234][T27178] openvswitch: netlink: IP tunnel dst address not specified
[ 1021.487648][T27182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1021.605553][T27188] netlink: 'syz.1.22976': attribute type 10 has an invalid length.
[ 1021.646895][T27190] openvswitch: netlink: IP tunnel TTL not specified.
[ 1021.704500][T27192] bond31: entered allmulticast mode
[ 1021.713459][T27193] macvlan0: entered promiscuous mode
[ 1021.715925][T27193] macvlan0: entered allmulticast mode
[ 1021.721845][T27193] bond31: (slave macvlan0): Opening slave failed
[ 1021.798889][T27200] sctp: [Deprecated]: syz.1.22980 (pid 27200) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1021.798889][T27200] Use struct sctp_sack_info instead
[ 1021.804017][T27200] sctp: [Deprecated]: syz.1.22980 (pid 27200) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1021.804017][T27200] Use struct sctp_sack_info instead
[ 1021.806338][T27202] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1021.976711][T27215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1022.007255][T27217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1022.026476][T27220] netlink: 'syz.1.22987': attribute type 1 has an invalid length.
[ 1022.036912][T27220] netlink: 'syz.1.22987': attribute type 1 has an invalid length.
[ 1022.041820][T27220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1022.082548][T27224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1022.254054][T27222] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1022.413470][T27242] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1022.418949][T27230] netlink: 'syz.1.22990': attribute type 1 has an invalid length.
[ 1022.605305][T27257] lo speed is unknown, defaulting to 1000
[ 1022.645840][T27261] __nla_validate_parse: 24 callbacks suppressed
[ 1022.645853][T27261] netlink: 4424 bytes leftover after parsing attributes in process `syz.2.23001'.
[ 1022.796594][T27275] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[ 1023.280906][T27298] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.23011'.
[ 1023.283928][T27298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23011'.
[ 1023.286764][T27298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23011'.
[ 1023.290023][T27298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23011'.
[ 1023.293631][T27298] netlink: 'syz.0.23011': attribute type 4 has an invalid length.
[ 1023.296484][T27298] netlink: 17 bytes leftover after parsing attributes in process `syz.0.23011'.
[ 1023.301046][T27298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23011'.
[ 1023.497082][T27301] netlink: 104 bytes leftover after parsing attributes in process `syz.1.23012'.
[ 1024.254221][T27333] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[ 1024.256940][T27333] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[ 1024.292895][T27338] netlink: 68 bytes leftover after parsing attributes in process `syz.2.23028'.
[ 1024.295927][T27339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23027'.
[ 1024.476769][T27354] bridge0: entered promiscuous mode
[ 1024.478524][T27354] bridge0: entered allmulticast mode
[ 1024.752190][T27390] sit0: Caught tx_queue_len zero misconfig
[ 1025.885347][T27446] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode
[ 1025.888329][T27446] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode
[ 1026.024700][T27453] netlink: 'syz.1.23072': attribute type 1 has an invalid length.
[ 1026.407517][T27458] xt_AUDIT: Audit type out of range (valid range: 0..2)
[ 1026.506757][T27465] SET target dimension over the limit!
[ 1026.511459][T27465] net_ratelimit: 34 callbacks suppressed
[ 1026.511476][T27465] openvswitch: netlink: Multiple metadata blocks provided
[ 1026.598611][T27469] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[ 1026.628306][T27471] openvswitch: netlink: ct_state flags 806d0004 unsupported
[ 1026.683346][T27473] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[ 1026.726967][T27475] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 1026.959358][T27485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1026.991183][T27487] netlink: 'syz.0.23088': attribute type 2 has an invalid length.
[ 1027.181741][T27497] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[ 1027.229500][T27512] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[ 1027.233797][T27512] CPU: 1 UID: 0 PID: 27512 Comm: syz.0.23095 Not tainted syzkaller #0 PREEMPT(full) 
[ 1027.233812][T27512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1027.233820][T27512] Call Trace:
[ 1027.233824][T27512]  <TASK>
[ 1027.233829][T27512]  dump_stack_lvl+0xe8/0x150
[ 1027.233849][T27512]  sysfs_warn_dup+0x8e/0xa0
[ 1027.233863][T27512]  sysfs_do_create_link_sd+0xc0/0x110
[ 1027.233879][T27512]  device_add_class_symlinks+0x1cf/0x240
[ 1027.233893][T27512]  device_add+0x467/0xb80
[ 1027.233904][T27512]  wiphy_register+0x1fc8/0x2ff0
[ 1027.233924][T27512]  ? __pfx_wiphy_register+0x10/0x10
[ 1027.233933][T27512]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1027.233946][T27512]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 1027.233965][T27512]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 1027.233977][T27512]  ieee80211_register_hw+0x3d3d/0x4a50
[ 1027.233994][T27512]  ? ieee80211_register_hw+0x19a1/0x4a50
[ 1027.234046][T27512]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1027.234061][T27512]  ? __asan_memset+0x22/0x50
[ 1027.234074][T27512]  ? __hrtimer_setup+0x1b7/0x260
[ 1027.234085][T27512]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1027.234101][T27512]  mac80211_hwsim_new_radio+0x3238/0x5680
[ 1027.234129][T27512]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1027.234142][T27512]  ? kstrndup+0xbd/0x160
[ 1027.234158][T27512]  ? kstrndup+0xbd/0x160
[ 1027.234172][T27512]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1027.234193][T27512]  genl_family_rcv_msg_doit+0x233/0x340
[ 1027.234209][T27512]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1027.234228][T27512]  ? bpf_lsm_capable+0x9/0x20
[ 1027.234240][T27512]  ? security_capable+0x7e/0x2c0
[ 1027.234253][T27512]  genl_rcv_msg+0x614/0x7a0
[ 1027.234268][T27512]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1027.234281][T27512]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1027.234300][T27512]  netlink_rcv_skb+0x226/0x4a0
[ 1027.234311][T27512]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1027.234324][T27512]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1027.234341][T27512]  ? down_read+0x2be/0x330
[ 1027.234355][T27512]  genl_rcv+0x28/0x40
[ 1027.234366][T27512]  netlink_unicast+0x7bb/0x940
[ 1027.234381][T27512]  netlink_sendmsg+0x813/0xb40
[ 1027.234396][T27512]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1027.234409][T27512]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1027.234422][T27512]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1027.234431][T27512]  sock_sendmsg_nosec+0x13a/0x180
[ 1027.234445][T27512]  ____sys_sendmsg+0x54e/0x850
[ 1027.234464][T27512]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1027.234479][T27512]  ? import_iovec+0x73/0xa0
[ 1027.234497][T27512]  ___sys_sendmsg+0x2a5/0x360
[ 1027.234507][T27512]  ? __lock_acquire+0x683/0x2cf0
[ 1027.234523][T27512]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1027.234535][T27512]  ? futex_wait+0x2a2/0x390
[ 1027.234561][T27512]  ? __fget_files+0x2a/0x420
[ 1027.234573][T27512]  ? __fget_files+0x3a2/0x420
[ 1027.234590][T27512]  __x64_sys_sendmsg+0x1b1/0x290
[ 1027.234601][T27512]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1027.234620][T27512]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1027.234631][T27512]  do_syscall_64+0x174/0x580
[ 1027.234641][T27512]  ? trace_irq_disable+0x3b/0x140
[ 1027.234655][T27512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1027.234664][T27512] RIP: 0033:0x7fc04119de99
[ 1027.234693][T27512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1027.234702][T27512] RSP: 002b:00007fc042129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1027.234713][T27512] RAX: ffffffffffffffda RBX: 00007fc041425fa0 RCX: 00007fc04119de99
[ 1027.234720][T27512] RDX: 0000000000000e00 RSI: 0000200000000100 RDI: 0000000000000003
[ 1027.234726][T27512] RBP: 00007fc041233eaf R08: 0000000000000000 R09: 0000000000000000
[ 1027.234733][T27512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1027.234738][T27512] R13: 00007fc041426038 R14: 00007fc041425fa0 R15: 00007ffe84f55368
[ 1027.234755][T27512]  </TASK>
[ 1027.414754][T27514] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1027.503159][T27525] lo speed is unknown, defaulting to 1000
[ 1027.507611][T27527] netlink: 'syz.0.23095': attribute type 1 has an invalid length.
[ 1027.524049][T27527] NCSI netlink: No device for ifindex 328707
[ 1027.536971][T27512] netlink: 'syz.0.23095': attribute type 2 has an invalid length.
[ 1027.557615][T27512] : entered promiscuous mode
[ 1027.608647][T27532] syzkaller1: entered promiscuous mode
[ 1027.613731][T27532] syzkaller1: entered allmulticast mode
[ 1027.641915][T27534] netlink: 'syz.1.23101': attribute type 1 has an invalid length.
[ 1027.644850][T27534] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[ 1027.795925][T27545] __nla_validate_parse: 18 callbacks suppressed
[ 1027.795936][T27545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23105'.
[ 1027.801608][T27545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1027.812868][T27544] 8021q: VLANs not supported on gre0
[ 1027.956750][T27555] netlink: 'syz.0.23108': attribute type 1 has an invalid length.
[ 1027.962395][T27555] netlink: 224 bytes leftover after parsing attributes in process `syz.0.23108'.
[ 1028.121619][T27565] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1028.191467][T27569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23114'.
[ 1028.288555][T27577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1028.308959][T27577] tipc: Disabling bearer <eth:syzkaller0>
[ 1028.462751][T27598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23124'.
[ 1028.467832][T27600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23125'.
[ 1028.607563][T27622] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode
[ 1028.610292][T27622] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode
[ 1028.642029][T27622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23132'.
[ 1028.731547][T27631] 8021q: VLANs not supported on gre0
[ 1028.812686][T27638] netlink: 'syz.1.23139': attribute type 2 has an invalid length.
[ 1028.854035][T27642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23141'.
[ 1028.897250][T27650] netlink: 136 bytes leftover after parsing attributes in process `syz.2.23144'.
[ 1028.901171][T27651] erspan0: entered promiscuous mode
[ 1028.903364][T27651] erspan0: entered allmulticast mode
[ 1029.062257][T27673] netlink: 56 bytes leftover after parsing attributes in process `syz.0.23151'.
[ 1029.255729][T27691] netlink: 'syz.1.23157': attribute type 40 has an invalid length.
[ 1029.268021][T27693] netlink: 9 bytes leftover after parsing attributes in process `syz.0.23158'.
[ 1029.300838][T27693] syzkaller1: entered promiscuous mode
[ 1029.304115][T27693] syzkaller1: entered allmulticast mode
[ 1030.428722][T27779] netlink: 'syz.2.23185': attribute type 1 has an invalid length.
[ 1030.431512][T27779] netlink: 'syz.2.23185': attribute type 5 has an invalid length.
[ 1030.507732][T27781] netlink: 'syz.1.23186': attribute type 1 has an invalid length.
[ 1030.756068][T27804] netlink: 'syz.1.23197': attribute type 2 has an invalid length.
[ 1030.765377][T27805] syzkaller1: entered promiscuous mode
[ 1030.767490][T27805] syzkaller1: entered allmulticast mode
[ 1031.186814][T27851] bond32: (slave ip6tnl13): The slave device specified does not support setting the MAC address
[ 1031.191825][T27851] bond32: (slave ip6tnl13): Error -95 calling set_mac_address
[ 1031.325592][T27869] pimreg9: entered allmulticast mode
[ 1031.548096][T27892] net_ratelimit: 134 callbacks suppressed
[ 1031.548107][T27892] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[ 1031.551255][T27896] openvswitch: netlink: VXLAN extension 317 out of range max 1
[ 1031.600411][T27901] openvswitch: netlink: Key 6 has unexpected len 51 expected 2
[ 1031.604473][T27899] syzkaller1: entered allmulticast mode
[ 1031.658139][T27911] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1031.701579][T27913] openvswitch: netlink: Geneve option length err (len 384, max 255).
[ 1031.762974][T27919] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode
[ 1031.765403][T27919] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode
[ 1031.843020][T27925] PKCS7: Unknown OID: [4] (bad)
[ 1031.845168][T27925] PKCS7: Only support pkcs7_signedData type
[ 1031.848776][T27925] openvswitch: netlink: IP tunnel dst address not specified
[ 1031.859997][T27927] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[ 1031.912363][T27931] openvswitch: netlink: Tunnel attr 68 out of range max 16
[ 1031.918045][T27933] openvswitch: netlink: Multiple metadata blocks provided
[ 1031.974752][T27937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1032.034522][T27942] netlink: 'syz.2.23244': attribute type 11 has an invalid length.
[ 1032.151699][T27953] syzkaller0: entered promiscuous mode
[ 1032.153678][T27953] syzkaller0: entered allmulticast mode
[ 1032.305785][T27967] lo speed is unknown, defaulting to 1000
[ 1032.576726][T27983] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1032.807528][T28000] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1032.818223][T28000] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1032.837500][T28002] __nla_validate_parse: 29 callbacks suppressed
[ 1032.837512][T28002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23265'.
[ 1032.844267][T28002] validate_nla: 1 callbacks suppressed
[ 1032.844277][T28002] netlink: 'syz.1.23265': attribute type 1 has an invalid length.
[ 1032.937769][T28008] netlink: 27 bytes leftover after parsing attributes in process `syz.0.23267'.
[ 1033.078844][T28014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23268'.
[ 1033.084716][T28014] netlink: 64 bytes leftover after parsing attributes in process `syz.0.23268'.
[ 1033.094385][T28014] netlink: 'syz.0.23268': attribute type 1 has an invalid length.
[ 1033.230330][T28018] netlink: 56 bytes leftover after parsing attributes in process `syz.1.23269'.
[ 1033.321871][T28021] netlink: 'syz.1.23271': attribute type 2 has an invalid length.
[ 1033.390142][T28024] netlink: 'syz.0.23270': attribute type 1 has an invalid length.
[ 1033.407398][T28024] 8021q: adding VLAN 0 to HW filter on device bond47
[ 1033.556446][T28029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23273'.
[ 1033.984440][T28051] lo speed is unknown, defaulting to 1000
[ 1034.474260][T28060] netlink: 164 bytes leftover after parsing attributes in process `syz.1.23281'.
[ 1034.969748][T28071] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1034.973888][T28071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23285'.
[ 1035.112116][T28073] netlink: 64 bytes leftover after parsing attributes in process `syz.2.23285'.
[ 1035.473278][T28091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23292'.
[ 1035.476231][T28091] netlink: 'syz.1.23292': attribute type 7 has an invalid length.
[ 1035.479046][T28091] netlink: 'syz.1.23292': attribute type 8 has an invalid length.
[ 1035.483325][T28091] netlink: 'syz.1.23292': attribute type 1 has an invalid length.
[ 1035.645883][T28098] mac80211_hwsim hwsim2 netpci0: Caught tx_queue_len zero misconfig
[ 1035.938798][T28135] netlink: 'syz.2.23305': attribute type 2 has an invalid length.
[ 1035.942372][T28135] netlink: 'syz.2.23305': attribute type 2 has an invalid length.
[ 1036.156592][T28158] syzkaller1: entered promiscuous mode
[ 1036.158757][T28158] syzkaller1: entered allmulticast mode
[ 1036.672919][T28178] net_ratelimit: 31 callbacks suppressed
[ 1036.672930][T28178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1036.959748][T28195] netlink: ct family unspecified
[ 1036.961526][T28195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1037.011765][T28201] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1037.051326][T28202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1037.152029][T28208] openvswitch: netlink: IPv4 tun info is not correct
[ 1037.215528][T28209] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[ 1037.391762][T28226] xt_addrtype: ipv6 does not support BROADCAST matching
[ 1037.407407][T28225] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1037.441650][T28229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1037.488748][T28231] openvswitch: netlink: Flow key attr not present in new flow.
[ 1038.317952][T28296] netlink: 'syz.0.23355': attribute type 2 has an invalid length.
[ 1038.321631][T28294] __nla_validate_parse: 7 callbacks suppressed
[ 1038.321643][T28294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23352'.
[ 1038.331280][T28296] netlink: 'syz.0.23355': attribute type 83 has an invalid length.
[ 1038.631978][T28322] sctp: [Deprecated]: syz.0.23362 (pid 28322) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1038.631978][T28322] Use struct sctp_sack_info instead
[ 1038.656065][T28322] netlink: 4628 bytes leftover after parsing attributes in process `syz.0.23362'.
[ 1038.931633][ T1256] block nbd12: Possible stuck request ffff88810ad10000: control (read@0,4096B). Runtime 60 seconds
[ 1038.992278][T28349] netlink: 'syz.0.23374': attribute type 2 has an invalid length.
[ 1039.110987][T28364] netlink: 220 bytes leftover after parsing attributes in process `syz.1.23379'.
[ 1039.116449][T28363] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1039.128307][T28363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23380'.
[ 1039.513420][T28403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23393'.
[ 1039.540777][T28403] netlink: 'syz.1.23393': attribute type 1 has an invalid length.
[ 1039.553839][T28403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23393'.
[ 1039.696627][T28418] netlink: 'syz.0.23400': attribute type 2 has an invalid length.
[ 1039.907160][T28434] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23405'.
[ 1039.913631][T28434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23405'.
[ 1039.953859][T28434] netlink: 48 bytes leftover after parsing attributes in process `syz.0.23405'.
[ 1040.604118][T28443] syzkaller0: entered promiscuous mode
[ 1040.606207][T28443] syzkaller0: entered allmulticast mode
[ 1040.615929][T28443] Cannot find del_set index 17 as target
[ 1040.773484][T28456] tipc: Enabling of bearer <utp:s> rejected, media not registered
[ 1040.782476][T28456] sit0: entered promiscuous mode
[ 1040.787706][T28456] netlink: 'syz.2.23413': attribute type 1 has an invalid length.
[ 1040.793820][T28456] netlink: 1 bytes leftover after parsing attributes in process `syz.2.23413'.
[ 1040.971261][T28475] can: request_module (can-proto-0) failed.
[ 1040.976075][T28476] can: request_module (can-proto-0) failed.
[ 1041.153355][T28506] netlink: 'syz.2.23432': attribute type 1 has an invalid length.
[ 1041.297378][T28522] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode
[ 1041.305034][T28522] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode
[ 1041.549074][T28543] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1041.746391][T28548] net_ratelimit: 39 callbacks suppressed
[ 1041.746401][T28548] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1041.830465][T28554] openvswitch: netlink: Multiple metadata blocks provided
[ 1041.867613][T28553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1042.097402][T28576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1042.193842][T28579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1042.207679][T28585] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[ 1042.304190][T28594] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes.
[ 1042.338504][T28599] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[ 1042.377614][T28610] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 1042.540081][T28638] openvswitch: netlink: IP tunnel dst address not specified
[ 1042.586572][T28643] bond0: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[ 1042.824558][T28671] veth0: entered promiscuous mode
[ 1042.836236][T28671] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1042.931532][T28669] veth0: left promiscuous mode
[ 1043.461842][T28684] __nla_validate_parse: 9 callbacks suppressed
[ 1043.461860][T28684] netlink: 296 bytes leftover after parsing attributes in process `syz.1.23486'.
[ 1043.703057][T28694] netlink: 'syz.0.23489': attribute type 1 has an invalid length.
[ 1043.725514][T28694] bond48: entered promiscuous mode
[ 1043.727733][T28694] 8021q: adding VLAN 0 to HW filter on device bond48
[ 1043.740114][T28694] ip6gre7: entered allmulticast mode
[ 1043.754752][T28694] bond48: (slave bridge0): making interface the new active one
[ 1043.757459][T28694] bridge0: entered promiscuous mode
[ 1043.760376][T28694] bond48: (slave bridge0): Enslaving as an active interface with an up link
[ 1043.870492][T28700] lo speed is unknown, defaulting to 1000
[ 1043.881838][T28699] lo speed is unknown, defaulting to 1000
[ 1044.512911][T28746] netlink: 76 bytes leftover after parsing attributes in process `syz.1.23505'.
[ 1044.517990][T28746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23505'.
[ 1044.639292][T28748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23506'.
[ 1044.642710][T28748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23506'.
[ 1044.645464][T28748] netlink: 'syz.2.23506': attribute type 6 has an invalid length.
[ 1044.704503][T28756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23509'.
[ 1044.872983][T28769] lo speed is unknown, defaulting to 1000
[ 1044.962546][T28777] 8021q: VLANs not supported on gre0
[ 1045.088515][T28784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23520'.
[ 1045.134221][T28782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23514'.
[ 1045.275859][T28798] bond49: option packets_per_slave: invalid value (17245958)
[ 1045.278185][T28798] bond49: option packets_per_slave: allowed values 0 - 65535
[ 1045.282168][T28798] bond49 (unregistering): Released all slaves
[ 1045.293941][T28800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23525'.
[ 1045.480003][T28810] netlink: 76 bytes leftover after parsing attributes in process `syz.1.23528'.
[ 1045.770070][T28837] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1045.906182][T28852] SET target dimension over the limit!
[ 1045.917837][ T5675] tipc: Subscription rejected, illegal request
[ 1045.925516][T28853] netlink: 'syz.2.23544': attribute type 1 has an invalid length.
[ 1046.383184][T28890] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1046.880958][T28912] net_ratelimit: 28 callbacks suppressed
[ 1046.880974][T28912] openvswitch: netlink: Tunnel attr 91 out of range max 16
[ 1046.887804][T28913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1046.958222][T28919] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1047.025296][T28923] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1047.102063][T28930] openvswitch: netlink: IP tunnel dst address not specified
[ 1047.108771][T28933] openvswitch: netlink: IP tunnel dst address not specified
[ 1047.181866][T28935] ip6gre5: entered promiscuous mode
[ 1047.184584][T28935] ip6gre5: entered allmulticast mode
[ 1047.275285][T28943] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1047.319529][T28950] openvswitch: netlink: Key type 315 is out of range max 32
[ 1047.356160][T28952] netlink: 'syz.1.23580': attribute type 1 has an invalid length.
[ 1047.427858][T28961] openvswitch: netlink: IP tunnel dst address not specified
[ 1047.431643][T28962] openvswitch: netlink: IP tunnel dst address not specified
[ 1047.467390][T28965] openvswitch: netlink: Geneve option length err (len 384, max 255).
[ 1047.528204][T28969] netlink: 'syz.1.23587': attribute type 1 has an invalid length.
[ 1047.670755][T28967] netlink: 'syz.0.23586': attribute type 2 has an invalid length.
[ 1048.021100][T29013] x_tables: duplicate underflow at hook 2
[ 1049.194941][T29100] netlink: 'syz.1.23617': attribute type 1 has an invalid length.
[ 1049.230197][T29100] 8021q: adding VLAN 0 to HW filter on device bond34
[ 1049.249105][T29100] __nla_validate_parse: 8 callbacks suppressed
[ 1049.251753][T29100] netlink: 165 bytes leftover after parsing attributes in process `syz.1.23617'.
[ 1049.358876][T29113] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1049.392388][T29113] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[ 1049.396091][T29113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23622'.
[ 1049.396426][T29111] netlink: 'syz.1.23621': attribute type 2 has an invalid length.
[ 1051.595835][T29115] lo speed is unknown, defaulting to 1000
[ 1051.891560][T29142] net_ratelimit: 83 callbacks suppressed
[ 1051.891577][T29142] openvswitch: netlink: nsh attr 251 is out of range max 3
[ 1052.048896][T29152] lo speed is unknown, defaulting to 1000
[ 1052.304026][T29158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23636'.
[ 1052.331028][T29170] openvswitch: netlink: Geneve option length err (len 384, max 255).
[ 1052.361727][T29172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23642'.
[ 1052.364735][T29172] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1052.369318][    C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[ 1052.375820][T29172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23642'.
[ 1052.378849][T29172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23642'.
[ 1052.421779][T29174] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1052.456830][T29178] openvswitch: netlink: Missing key (keys=c0, expected=480)
[ 1052.595631][T29188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23647'.
[ 1052.600745][T29191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1052.604969][T29191] syzkaller0: entered promiscuous mode
[ 1052.606911][T29191] syzkaller0: entered allmulticast mode
[ 1052.617601][T29191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23648'.
[ 1052.625879][T29191] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1052.735684][T29202] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[ 1052.955500][T29219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23652'.
[ 1052.958716][T29219] openvswitch: netlink: Flow key attr not present in new flow.
[ 1052.984563][T29190] tipc: Resetting bearer <eth:syzkaller0>
[ 1053.026650][T29190] tipc: Disabling bearer <eth:syzkaller0>
[ 1053.069858][T29226] lo speed is unknown, defaulting to 1000
[ 1053.126378][T29232] netlink: 'syz.1.23655': attribute type 15 has an invalid length.
[ 1053.159504][T29232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23655'.
[ 1053.358206][T29242] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[ 1053.400832][T29245] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1053.629607][ T5675] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.635206][ T5675] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.639497][ T5675] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.646578][ T5675] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.781286][T29259] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[ 1053.785320][T29262] netlink: 'syz.1.23660': attribute type 1 has an invalid length.
[ 1053.834464][T29262] 8021q: adding VLAN 0 to HW filter on device bond35
[ 1053.853502][T29262] netlink: 'syz.1.23660': attribute type 15 has an invalid length.
[ 1053.897731][T29262] netlink: 'syz.1.23660': attribute type 15 has an invalid length.
[ 1053.909250][ T5675] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[ 1053.913486][ T5675] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[ 1053.916734][ T5675] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[ 1053.920603][ T5675] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[ 1054.258748][T29305] veth0: entered promiscuous mode
[ 1054.261920][T29305] bond0: entered promiscuous mode
[ 1054.266351][T29304] bond0: left promiscuous mode
[ 1054.269631][T29304] veth0: left promiscuous mode
[ 1054.441553][T29326] __nla_validate_parse: 5 callbacks suppressed
[ 1054.441564][T29326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23683'.
[ 1054.522835][T29340] netlink: 352 bytes leftover after parsing attributes in process `syz.1.23688'.
[ 1054.527677][T29339] netlink: 352 bytes leftover after parsing attributes in process `syz.1.23688'.
[ 1054.668404][T29359] netlink: 68 bytes leftover after parsing attributes in process `syz.1.23694'.
[ 1054.672102][T29357] syzkaller1: entered promiscuous mode
[ 1054.674059][T29357] syzkaller1: entered allmulticast mode
[ 1054.683555][T29361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23695'.
[ 1054.922660][T29390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23707'.
[ 1054.965126][T29369] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode
[ 1054.968144][T29369] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode
[ 1055.175788][T29415] nbd: nbd0 already in use
[ 1055.177708][T29415] block nbd0: NBD_DISCONNECT
[ 1055.179508][T29415] block nbd0: Send disconnect failed -32
[ 1055.181491][T29415] block nbd0: shutting down sockets
[ 1055.197716][T29415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23714'.
[ 1055.224295][T29418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23715'.
[ 1055.268491][T29422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23717'.
[ 1055.274805][T29422] netlink: 1844 bytes leftover after parsing attributes in process `syz.2.23717'.
[ 1055.460536][T29440] netlink: 'syz.2.23724': attribute type 1 has an invalid length.
[ 1055.745980][T29460] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode
[ 1055.749524][T29460] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode
[ 1055.941467][T29479] lo speed is unknown, defaulting to 1000
[ 1056.190501][T29494] netlink: 'syz.1.23733': attribute type 15 has an invalid length.
[ 1056.613967][T29527] netlink: 'syz.1.23744': attribute type 15 has an invalid length.
[ 1056.740410][T29533] netlink: 'syz.1.23746': attribute type 21 has an invalid length.
[ 1056.743564][T29533] netlink: 'syz.1.23746': attribute type 4 has an invalid length.
[ 1056.777999][T29535] netlink: 'syz.0.23747': attribute type 2 has an invalid length.
[ 1056.969069][T29548] netlink: 'syz.1.23752': attribute type 15 has an invalid length.
[ 1057.029555][T29554] netlink: 'syz.0.23754': attribute type 1 has an invalid length.
[ 1057.033127][T29555] netlink: 'syz.0.23754': attribute type 1 has an invalid length.
[ 1057.176550][T29566] net_ratelimit: 40 callbacks suppressed
[ 1057.176561][T29566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1057.266441][T29572] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[ 1057.294243][T29577] openvswitch: netlink: Geneve option length err (len 384, max 255).
[ 1057.311516][T29574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1057.380336][T29581] openvswitch: netlink: Multiple metadata blocks provided
[ 1057.425566][T29583] openvswitch: netlink: Multiple metadata blocks provided
[ 1057.512673][T29596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1057.598421][T29605] lo speed is unknown, defaulting to 1000
[ 1057.619866][T29607] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[ 1057.632446][T29610] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[ 1057.674532][T29614] netlink: 'syz.1.23775': attribute type 15 has an invalid length.
[ 1057.714473][T29617] openvswitch: netlink: Key 6 has unexpected len 51 expected 2
[ 1058.219728][T29655] lo speed is unknown, defaulting to 1000
[ 1058.834715][T29696] syzkaller1: entered promiscuous mode
[ 1058.839267][T29696] syzkaller1: entered allmulticast mode
[ 1059.241884][T29728] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[ 1059.246170][T29728] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[ 1059.469275][T29740] nbd0: detected capacity change from 0 to 63
[ 1059.479629][T29742] block nbd0: NBD_DISCONNECT
[ 1059.481390][T29742] block nbd0: Disconnected due to user request.
[ 1059.486135][T29742] block nbd0: shutting down sockets
[ 1059.488258][ T1256] blk_print_req_error: 115 callbacks suppressed
[ 1059.488267][ T1256] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1059.493071][ T1256] buffer_io_error: 138 callbacks suppressed
[ 1059.493081][ T1256] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1059.498065][ T1256] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1059.501241][ T1256] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1059.504225][ T1256] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1059.507401][ T1256] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1059.511289][ T1256] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1059.514406][ T1256] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1059.517389][ T1256] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1059.520513][ T1256] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1059.523846][ T1256] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1059.527515][ T1256] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1059.533661][ T1256] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1059.539717][ T1256] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1059.551887][  T131] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1059.556009][ T1256] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1059.560255][ T1256] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[ 1059.565774][ T1256] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1059.569907][ T1256] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1059.573840][ T1256] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1059.578029][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1059.590019][T24652] Dev nbd0: unable to read RDB block 0
[ 1059.593047][T24652]  nbd0: unable to read partition table
[ 1059.603116][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1059.608183][T24652] Dev nbd0: unable to read RDB block 0
[ 1059.611767][T24652]  nbd0: unable to read partition table
[ 1059.633369][T29748] : entered promiscuous mode
[ 1059.709939][T29753] SET target dimension over the limit!
[ 1059.721393][T29753] __nla_validate_parse: 23 callbacks suppressed
[ 1059.721405][T29753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23825'.
[ 1059.784852][T29759] veth0: entered promiscuous mode
[ 1059.798972][T29758] veth0: left promiscuous mode
[ 1059.896214][T29765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23829'.
[ 1060.053838][T29774] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23832'.
[ 1060.253278][T29798] netlink: 1 bytes leftover after parsing attributes in process `syz.0.23841'.
[ 1060.328879][T29808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23845'.
[ 1060.420829][T29814] netlink: 224 bytes leftover after parsing attributes in process `syz.0.23848'.
[ 1060.592355][T29831] x_tables: duplicate underflow at hook 1
[ 1060.626038][T29834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23853'.
[ 1060.846205][T29858] lo speed is unknown, defaulting to 1000
[ 1060.997012][T29866] lo speed is unknown, defaulting to 1000
[ 1061.233477][T29867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23865'.
[ 1061.564342][T29874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23866'.
[ 1061.647039][T29878] lo speed is unknown, defaulting to 1000
[ 1061.861906][T29878] dvmrp0: entered allmulticast mode
[ 1062.200881][T29913] net_ratelimit: 39 callbacks suppressed
[ 1062.200892][T29913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1062.237486][T29916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23880'.
[ 1062.395894][T29923] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[ 1062.514017][   T13] dvmrp0: left allmulticast mode
[ 1062.556854][T29936] openvswitch: netlink: Key 6 has unexpected len 51 expected 2
[ 1062.569441][T29938] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1062.632025][T29943] validate_nla: 7 callbacks suppressed
[ 1062.632043][T29943] netlink: 'syz.1.23889': attribute type 15 has an invalid length.
[ 1062.666013][T29944] bond50: entered allmulticast mode
[ 1062.673433][T29944] macvlan0: entered promiscuous mode
[ 1062.675271][T29944] macvlan0: entered allmulticast mode
[ 1062.678011][T29944] bond50: (slave macvlan0): Opening slave failed
[ 1062.746150][T29951] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[ 1062.770433][T29955] openvswitch: netlink: Unknown nsh attribute 0
[ 1062.851533][T29959] openvswitch: netlink: Key type 540 is out of range max 32
[ 1062.949598][T29976] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1062.951713][T29976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1063.028089][T29986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1063.112626][T29986] syzkaller0: left allmulticast mode
[ 1063.114914][T29986] tipc: Resetting bearer <eth:syzkaller0>
[ 1063.192905][T30000] netlink: 'syz.0.23907': attribute type 1 has an invalid length.
[ 1063.472629][T30026] atomic_op ffff888023bd2198 conn xmit_atomic 0000000000000000
[ 1063.684811][T30057] netlink: 'syz.2.23924': attribute type 3 has an invalid length.
[ 1063.789916][T30065] netlink: 'syz.0.23928': attribute type 1 has an invalid length.
[ 1064.013696][T30095] 8021q: VLANs not supported on gre0
[ 1064.079991][T30100] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1064.419335][T30114] netlink: 'syz.0.23941': attribute type 1 has an invalid length.
[ 1065.165421][T30152] __nla_validate_parse: 45 callbacks suppressed
[ 1065.165434][T30152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23956'.
[ 1065.192243][T30152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23956'.
[ 1065.515074][T30168] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.23961'.
[ 1065.523028][T30168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23961'.
[ 1066.002543][T30194] lo speed is unknown, defaulting to 1000
[ 1066.121678][T30199] netlink: 72 bytes leftover after parsing attributes in process `syz.1.23975'.
[ 1066.133194][T30199] netlink: 72 bytes leftover after parsing attributes in process `syz.1.23975'.
[ 1066.194286][T30207] netlink: 220 bytes leftover after parsing attributes in process `syz.1.23976'.
[ 1066.257277][T30202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23973'.
[ 1066.264659][T30211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23977'.
[ 1066.304461][T30215] netlink: 9940 bytes leftover after parsing attributes in process `syz.1.23979'.
[ 1066.487733][T30227] netlink: 'syz.2.23984': attribute type 1 has an invalid length.
[ 1066.977715][T30265] lo speed is unknown, defaulting to 1000
[ 1067.236185][T30286] net_ratelimit: 28 callbacks suppressed
[ 1067.236195][T30286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1067.271106][T30290] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1067.323467][T30294] openvswitch: netlink: Flow key attr not present in new flow.
[ 1067.469812][T30299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1067.500886][T30303] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[ 1067.548522][T30303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1067.637558][T30315] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[ 1067.691937][T30311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1067.706110][T30311] A link change request failed with some changes committed already. Interface ! may have been left with an inconsistent configuration, please check.
[ 1067.708763][T30322] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1067.738378][T30310] A link change request failed with some changes committed already. Interface ! may have been left with an inconsistent configuration, please check.
[ 1067.771751][T30325] xt_CT: No such helper "syz0"
[ 1068.044220][T30349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1068.191162][T30358] netlink: 'syz.0.24030': attribute type 7 has an invalid length.
[ 1068.281796][T30365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1068.566685][T30378] x_tables: duplicate underflow at hook 3
[ 1069.011480][ T1256] block nbd12: Possible stuck request ffff88810ad10000: control (read@0,4096B). Runtime 90 seconds
[ 1069.037055][T30393] 8021q: adding VLAN 0 to HW filter on device 
[ 1069.043465][T30393] tipc: Resetting bearer <eth:batadv0>
[ 1069.047463][T30393] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1069.061467][T30393] bridge_slave_0: entered promiscuous mode
[ 1069.086885][ T3472] lo speed is unknown, defaulting to 1000
[ 1069.091643][ T3472] syz2: Port: 1 Link ACTIVE
[ 1069.188649][T30398] --map-set only usable from mangle table
[ 1069.202291][T30398] netlink: 'syz.0.24045': attribute type 32 has an invalid length.
[ 1069.217114][T30398] netlink: 'syz.0.24045': attribute type 2 has an invalid length.
[ 1069.363367][T30411] lo speed is unknown, defaulting to 1000
[ 1069.522091][T30417] netlink: 'syz.0.24051': attribute type 2 has an invalid length.
[ 1070.008259][T30443] veth45: entered promiscuous mode
[ 1070.011332][T30443] veth45: entered allmulticast mode
[ 1070.014198][T30443] team0: Device veth45 is up. Set it down before adding it as a team port
[ 1070.137875][T30457] nbd: nbd2 already in use
[ 1070.140849][T30457] block nbd2: NBD_DISCONNECT
[ 1070.142355][T30457] block nbd2: Send disconnect failed -32
[ 1070.144564][T30457] block nbd2: Send disconnect failed -32
[ 1070.154095][T30457] block nbd2: shutting down sockets
[ 1070.187942][T30457] __nla_validate_parse: 18 callbacks suppressed
[ 1070.187995][T30457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24066'.
[ 1070.332168][T30469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24072'.
[ 1070.468289][T30482] bond36: option arp_interval: invalid value (18446744073709551615)
[ 1070.471075][T30482] bond36: option arp_interval: allowed values 0 - 2147483647
[ 1070.474635][T30482] bond36 (unregistering): Released all slaves
[ 1070.933097][T30509] dvmrp0: left allmulticast mode
[ 1071.099250][T30511] nbd1: detected capacity change from 0 to 63
[ 1071.102116][T30513] block nbd1: NBD_DISCONNECT
[ 1071.108347][T30513] block nbd1: Disconnected due to user request.
[ 1071.116090][T30513] block nbd1: shutting down sockets
[ 1071.120212][    C0] blk_print_req_error: 95 callbacks suppressed
[ 1071.120223][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1071.125322][    C0] buffer_io_error: 138 callbacks suppressed
[ 1071.125332][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1071.129737][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1071.133282][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[ 1071.133584][T30511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24086'.
[ 1071.135570][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1071.135652][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[ 1071.145266][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1071.148168][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[ 1071.151282][  T131] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1071.154531][  T131] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1071.157134][  T131] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1071.160575][  T131] Buffer I/O error on dev nbd1, logical block 1, async page read
[ 1071.163632][  T131] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1071.167291][  T131] Buffer I/O error on dev nbd1, logical block 2, async page read
[ 1071.171796][  T131] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1071.175038][  T131] Buffer I/O error on dev nbd1, logical block 3, async page read
[ 1071.177908][  T131] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1071.182186][  T131] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1071.185277][  T131] Buffer I/O error on dev nbd1, logical block 1, async page read
[ 1071.188857][  T131] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1071.194282][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1071.197994][T24652] Dev nbd1: unable to read RDB block 0
[ 1071.202530][T24652]  nbd1: unable to read partition table
[ 1071.209663][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1071.213423][T24652] Dev nbd1: unable to read RDB block 0
[ 1071.216521][T24652]  nbd1: unable to read partition table
[ 1071.274816][T30519] netlink: 244 bytes leftover after parsing attributes in process `syz.1.24088'.
[ 1071.316780][T30519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24088'.
[ 1071.320943][T30519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24088'.
[ 1071.385831][T30524] lo speed is unknown, defaulting to 1000
[ 1071.506898][T30533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24092'.
[ 1071.523207][T30533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24092'.
[ 1071.707397][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24090'.
[ 1072.120806][T30563] lo speed is unknown, defaulting to 1000
[ 1072.151037][T30558] nbd2: detected capacity change from 0 to 63
[ 1072.158507][T30564] block nbd2: NBD_DISCONNECT
[ 1072.170317][T30564] block nbd2: Disconnected due to user request.
[ 1072.175467][T30564] block nbd2: shutting down sockets
[ 1072.188892][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1072.189061][T30558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24100'.
[ 1072.200382][T24652] Dev nbd2: unable to read RDB block 0
[ 1072.207796][T24652]  nbd2: unable to read partition table
[ 1072.226220][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1072.237366][T24652] Dev nbd2: unable to read RDB block 0
[ 1072.244915][T24652]  nbd2: unable to read partition table
[ 1072.298547][T30571] netlink: 'syz.0.24104': attribute type 32 has an invalid length.
[ 1072.313425][T30571] net_ratelimit: 33 callbacks suppressed
[ 1072.313444][T30571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1072.375828][T30578] openvswitch: netlink: IP tunnel TTL not specified.
[ 1072.632777][T30597] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2
[ 1072.705902][T30595] nbd1: detected capacity change from 0 to 63
[ 1072.721980][T30601] block nbd1: NBD_DISCONNECT
[ 1072.725692][T30601] block nbd1: Disconnected due to user request.
[ 1072.734112][T30601] block nbd1: shutting down sockets
[ 1072.759856][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1072.765253][T24652] Dev nbd1: unable to read RDB block 0
[ 1072.770845][T24652]  nbd1: unable to read partition table
[ 1072.779942][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1072.782873][T24652] Dev nbd1: unable to read RDB block 0
[ 1072.785227][T24652]  nbd1: unable to read partition table
[ 1072.826294][T30601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1072.870269][T30613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1072.936039][T30628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1072.998353][T30637] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1073.072300][T30643] netlink: 'syz.2.24125': attribute type 1 has an invalid length.
[ 1073.117347][T30650] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 1073.256868][T30660] netlink: 'syz.1.24132': attribute type 2 has an invalid length.
[ 1073.482689][T30681] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1073.517099][T30684] lo speed is unknown, defaulting to 1000
[ 1073.526967][T30684] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[ 1073.670135][T30696] lo speed is unknown, defaulting to 1000
[ 1073.791951][T30707] netlink: 'syz.1.24151': attribute type 4 has an invalid length.
[ 1073.828264][T30707] lo speed is unknown, defaulting to 1000
[ 1074.559522][T30733] nbd1: detected capacity change from 0 to 63
[ 1074.563367][T30734] block nbd1: NBD_DISCONNECT
[ 1074.566052][T30734] block nbd1: Disconnected due to user request.
[ 1074.568675][T30734] block nbd1: shutting down sockets
[ 1074.584102][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1074.590957][T24652] Dev nbd1: unable to read RDB block 0
[ 1074.596930][T24652]  nbd1: unable to read partition table
[ 1074.605341][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1074.608681][T24652] Dev nbd1: unable to read RDB block 0
[ 1074.612622][T24652]  nbd1: unable to read partition table
[ 1074.763608][T30739] team0: Port device syz_tun removed
[ 1074.768728][ T3475] syz1: Port: 1 Link DOWN
[ 1074.830979][T30739] team0: Mode changed to "loadbalance"
[ 1075.113747][T30759] lo speed is unknown, defaulting to 1000
[ 1075.465579][T30759] __nla_validate_parse: 12 callbacks suppressed
[ 1075.465594][T30759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24168'.
[ 1075.467474][T30782] lo speed is unknown, defaulting to 1000
[ 1075.504847][T30785] sch_tbf: burst 0 is lower than device lo mtu (5390) !
[ 1076.476252][T30796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24180'.
[ 1078.555341][T30810] net_ratelimit: 17 callbacks suppressed
[ 1078.555357][T30810] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1078.611267][T30815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24187'.
[ 1078.615190][T30815] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1078.691344][ T5058] udevd[5058]: worker [24321] /devices/virtual/block/nbd12 is taking a long time
[ 1078.807451][T30820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24189'.
[ 1078.855724][T30823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1078.871676][T30825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24190'.
[ 1078.944483][T30828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24191'.
[ 1079.048129][T30833] 8021q: adding VLAN 0 to HW filter on device bond50
[ 1079.051404][T30833] bond49: (slave bond50): Enslaving as an active interface with an up link
[ 1079.063633][T30833] bond49: option all_slaves_active: invalid value (5)
[ 1079.070077][T30840] xt_policy: too many policy elements
[ 1079.072565][T30841] xt_policy: too many policy elements
[ 1079.140965][T30847] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1079.173758][T30851] netlink: 'syz.2.24198': attribute type 11 has an invalid length.
[ 1079.182600][T30851] netlink: 'syz.2.24198': attribute type 11 has an invalid length.
[ 1079.195650][T30854] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[ 1079.225758][T30851] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1079.250906][T30856] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1079.429333][T30864] nbd2: detected capacity change from 0 to 63
[ 1079.432284][T30867] block nbd2: NBD_DISCONNECT
[ 1079.434481][T30867] block nbd2: Disconnected due to user request.
[ 1079.437189][T30867] block nbd2: shutting down sockets
[ 1079.444129][    C1] blk_print_req_error: 466 callbacks suppressed
[ 1079.444169][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1079.449391][    C1] buffer_io_error: 582 callbacks suppressed
[ 1079.449400][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1079.453504][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1079.456572][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[ 1079.459591][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1079.462738][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[ 1079.465188][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1079.468192][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[ 1079.471349][ T1256] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1079.472242][T30864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24204'.
[ 1079.474277][ T1256] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1079.474290][ T1256] Buffer I/O error on dev nbd2, logical block 1, async page read
[ 1079.474298][ T1256] Buffer I/O error on dev nbd2, logical block 2, async page read
[ 1079.474306][ T1256] Buffer I/O error on dev nbd2, logical block 3, async page read
[ 1079.474427][ T1256] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1079.491513][ T1256] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1079.493940][ T1256] Buffer I/O error on dev nbd2, logical block 1, async page read
[ 1079.496476][ T1256] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1079.500487][ T1256] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1079.503749][ T1256] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1079.505563][T30864] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1079.507340][ T1256] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1079.514633][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1079.518026][T24652] Dev nbd2: unable to read RDB block 0
[ 1079.522338][T24652]  nbd2: unable to read partition table
[ 1079.532639][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1079.539276][T24652] Dev nbd2: unable to read RDB block 0
[ 1079.542233][T24652]  nbd2: unable to read partition table
[ 1079.577630][T30873] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1079.756416][T30885] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1080.010238][T30899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24216'.
[ 1080.013984][T30900] x_tables: duplicate entry at hook 2
[ 1080.047601][T30903] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode
[ 1080.050927][T30903] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode
[ 1080.127768][T30908] syzkaller0: entered allmulticast mode
[ 1080.131850][T30908] tipc: Resetting bearer <eth:syzkaller0>
[ 1080.284266][T30917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24222'.
[ 1080.370299][T30926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24226'.
[ 1080.378078][T30926] tipc: Resetting bearer <eth:syzkaller0>
[ 1080.482518][T30934] netlink: 'syz.0.24230': attribute type 13 has an invalid length.
[ 1080.485578][T30934] netlink: 'syz.0.24230': attribute type 17 has an invalid length.
[ 1080.491357][T30934] gretap0: left promiscuous mode
[ 1080.684443][T30946] __nla_validate_parse: 1 callbacks suppressed
[ 1080.684458][T30946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24235'.
[ 1080.867418][T30964] netlink: 9564 bytes leftover after parsing attributes in process `syz.2.24241'.
[ 1080.876254][T30965] netlink: 9564 bytes leftover after parsing attributes in process `syz.2.24241'.
[ 1080.881815][T30962] lo speed is unknown, defaulting to 1000
[ 1080.883455][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24239'.
[ 1080.988245][T30974] x_tables: duplicate underflow at hook 1
[ 1081.127759][   T33] audit: type=1804 audit(1785288122.764:26): pid=30969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.24242" name="/newroot/8022/cgroup.controllers" dev="tmpfs" ino=40489 res=1 errno=0
[ 1081.128763][T30969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24242'.
[ 1081.149702][   T33] audit: type=1800 audit(1785288122.764:27): pid=30969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.24242" name="cgroup.controllers" dev="tmpfs" ino=40489 res=0 errno=0
[ 1081.374185][T30989] netlink: 'syz.1.24251': attribute type 14 has an invalid length.
[ 1081.665117][T31003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24255'.
[ 1081.858843][T31017] netlink: 244 bytes leftover after parsing attributes in process `syz.2.24261'.
[ 1081.907428][T31019] lo speed is unknown, defaulting to 1000
[ 1081.967738][T31028] netlink: 84 bytes leftover after parsing attributes in process `syz.2.24265'.
[ 1082.132521][T31024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24262'.
[ 1082.297443][T31050] netlink: 84 bytes leftover after parsing attributes in process `syz.0.24274'.
[ 1082.708008][T31075] lo speed is unknown, defaulting to 1000
[ 1082.890894][T31093] netlink: 'syz.0.24285': attribute type 2 has an invalid length.
[ 1083.357719][T31112] netlink: 'syz.0.24293': attribute type 10 has an invalid length.
[ 1083.517912][T31122] lo speed is unknown, defaulting to 1000
[ 1083.583721][T31130] net_ratelimit: 43 callbacks suppressed
[ 1083.583737][T31130] openvswitch: netlink: Message has 12 unknown bytes.
[ 1083.598943][T31130] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1083.712177][T31134] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1083.824829][T31140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1083.895558][T31141] lo speed is unknown, defaulting to 1000
[ 1083.908966][T31144] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1084.039399][T31148] openvswitch: netlink: Duplicate key (type 6).
[ 1084.156599][T31156] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1084.210580][T31160] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1084.220333][T31152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1084.273630][T31164] openvswitch: netlink: Message has 8 unknown bytes.
[ 1084.878186][T31218] netlink: 'syz.2.24328': attribute type 9 has an invalid length.
[ 1085.051855][T31227] 8021q: VLANs not supported on lo
[ 1085.387992][T31256] lo speed is unknown, defaulting to 1000
[ 1085.974068][T31275] netlink: 'syz.1.24348': attribute type 2 has an invalid length.
[ 1086.056872][T31283] __nla_validate_parse: 10 callbacks suppressed
[ 1086.056884][T31283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24352'.
[ 1086.073171][T31287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24353'.
[ 1086.200839][T31302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24360'.
[ 1086.222827][T31302] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1086.225705][T31302] syzkaller1: Linktype set failed because interface is up
[ 1086.249415][ T5684] syzkaller1: tun_net_xmit 90
[ 1086.252218][T31306] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1086.339401][T16562] syzkaller1: tun_net_xmit 86
[ 1086.430225][ T5684] syzkaller1: tun_net_xmit 90
[ 1086.434199][T31321] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode
[ 1086.441941][T31321] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode
[ 1086.680491][T31339] lo speed is unknown, defaulting to 1000
[ 1086.983115][T31345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24372'.
[ 1087.034465][T31339] netlink: 'syz.2.24370': attribute type 13 has an invalid length.
[ 1087.041147][T31339] netlink: 'syz.2.24370': attribute type 17 has an invalid length.
[ 1087.161083][T31367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24379'.
[ 1087.406911][T31382] lo speed is unknown, defaulting to 1000
[ 1087.524447][T31387] netlink: 'syz.0.24386': attribute type 13 has an invalid length.
[ 1087.527534][T31387] netlink: 'syz.0.24386': attribute type 17 has an invalid length.
[ 1087.627789][T31396] netlink: 'syz.2.24391': attribute type 1 has an invalid length.
[ 1087.658477][T31396] 8021q: adding VLAN 0 to HW filter on device bond51
[ 1087.683865][T31396] bond51: (slave veth45): Enslaving as an active interface with a down link
[ 1087.698710][T31396] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1087.705391][T31396] bond51: (slave batadv0): making interface the new active one
[ 1087.709002][T31396] batadv0: entered promiscuous mode
[ 1087.711384][T31396] bond51: (slave batadv0): Enslaving as an active interface with an up link
[ 1087.740847][T31396] bond51: (slave veth47): Enslaving as an active interface with a down link
[ 1087.845372][T31403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24393'.
[ 1088.398744][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24402'.
[ 1088.451444][T31446] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode
[ 1088.453843][T31446] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode
[ 1088.457191][T31446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24403'.
[ 1088.629913][T31461] net_ratelimit: 48 callbacks suppressed
[ 1088.629926][T31461] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1088.803711][T31471] lo speed is unknown, defaulting to 1000
[ 1088.949878][T31476] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1089.038582][T31481] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1089.082579][T31471] netlink: 'syz.1.24412': attribute type 13 has an invalid length.
[ 1089.086999][T31471] netlink: 'syz.1.24412': attribute type 17 has an invalid length.
[ 1089.104816][T31471] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1089.104853][T31487] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1089.143768][T31489] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[ 1089.224541][T31493] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[ 1089.333935][T31498] openvswitch: netlink: Unknown nsh attribute 0
[ 1089.368697][T31503] openvswitch: netlink: Key 6 has unexpected len 51 expected 2
[ 1089.389919][T31506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1089.455248][T31508] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1089.679782][T31533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24436'.
[ 1089.709781][T31537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24437'.
[ 1089.751986][T31540] syzkaller0: entered promiscuous mode
[ 1089.753755][T31540] syzkaller0: entered allmulticast mode
[ 1089.845185][T31550] tipc: Enabling of bearer <eth:ipvln0> rejected, failed to enable media
[ 1089.997796][T31567] bridge_slave_1: default FDB implementation only supports local addresses
[ 1090.274093][T31604] netlink: 'syz.2.24463': attribute type 1 has an invalid length.
[ 1090.925983][T31669] netlink: 'syz.2.24491': attribute type 2 has an invalid length.
[ 1090.960961][T31672] syzkaller1: entered promiscuous mode
[ 1090.963331][T31672] syzkaller1: entered allmulticast mode
[ 1091.213365][T31689] siw: device registration error -23
[ 1091.351848][T31713] __nla_validate_parse: 7 callbacks suppressed
[ 1091.351860][T31713] netlink: 34 bytes leftover after parsing attributes in process `syz.2.24503'.
[ 1091.419449][T31714] nbd0: detected capacity change from 0 to 63
[ 1091.437934][T31714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24502'.
[ 1091.456527][T31720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24506'.
[ 1091.462019][T31724] lo speed is unknown, defaulting to 1000
[ 1091.465239][T31720] netlink: 224 bytes leftover after parsing attributes in process `syz.1.24506'.
[ 1091.472890][T31720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24506'.
[ 1091.477319][   T55] block nbd0: Receive control failed (result -104)
[ 1091.678343][T31744] netlink: 'syz.1.24511': attribute type 3 has an invalid length.
[ 1091.681317][T31744] netlink: 646 bytes leftover after parsing attributes in process `syz.1.24511'.
[ 1091.696409][T31724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24507'.
[ 1091.888864][T31759] netlink: 'syz.1.24514': attribute type 1 has an invalid length.
[ 1091.971407][T31757] nbd2: detected capacity change from 0 to 63
[ 1091.988908][T31757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24515'.
[ 1092.033274][   T56] block nbd2: Receive control failed (result -104)
[ 1092.065401][T31763] xt_CT: No such helper "syz0"
[ 1092.084344][T31764] xt_CT: No such helper "syz0"
[ 1092.318648][T31776] netlink: 272 bytes leftover after parsing attributes in process `syz.2.24519'.
[ 1092.625866][T31796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24526'.
[ 1093.168894][T31808] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1093.174564][T31808] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1093.642094][T31828] netlink: 'syz.0.24538': attribute type 2 has an invalid length.
[ 1093.728133][T31839] net_ratelimit: 123 callbacks suppressed
[ 1093.728147][T31839] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[ 1093.739407][T31839] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1093.798076][T31845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1093.861832][T31857] netlink: 'syz.2.24547': attribute type 21 has an invalid length.
[ 1093.865084][T31857] netlink: 'syz.2.24547': attribute type 4 has an invalid length.
[ 1093.911823][T31853] tipc: Disabling bearer <eth:syzkaller0>
[ 1093.920843][T31859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1094.069063][T31861] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1094.118706][T31870] openvswitch: netlink: IP tunnel dst address not specified
[ 1094.122539][T31871] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1094.147311][T31870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1094.175563][T31874] openvswitch: netlink: Key 6 has unexpected len 51 expected 2
[ 1094.200009][T31875] openvswitch: netlink: Message has 8 unknown bytes.
[ 1094.292301][T31888] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode
[ 1094.294759][T31888] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode
[ 1094.358006][T31892] netlink: 'syz.2.24561': attribute type 2 has an invalid length.
[ 1094.791465][T31948] syzkaller0: entered promiscuous mode
[ 1094.793226][T31948] syzkaller0: entered allmulticast mode
[ 1095.026195][T31969] netlink: 'syz.2.24593': attribute type 6 has an invalid length.
[ 1095.124660][T31978] lo speed is unknown, defaulting to 1000
[ 1095.467536][T31999] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[ 1095.577021][T32005] netlink: 'syz.1.24606': attribute type 1 has an invalid length.
[ 1095.617602][T32007] xt_cgroup: invalid path, errno=-2
[ 1095.961958][T32036] x_tables: duplicate underflow at hook 2
[ 1096.205500][T32062] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[ 1096.208224][T32062] tipc: Bearer <udp:syz0>: trying with adjusted priority
[ 1096.210837][T32062] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1096.280269][T32064] vlan4 (unregistering): left allmulticast mode
[ 1096.283348][T32064] geneve0 (unregistering): left allmulticast mode
[ 1096.286026][T32064] vlan4 (unregistering): left promiscuous mode
[ 1096.288459][T32064] geneve0 (unregistering): left promiscuous mode
[ 1096.294743][T32064] bridge0: port 2(vlan4) entered disabled state
[ 1096.304500][T32064] vlan1: left promiscuous mode
[ 1096.306562][T32064] : left promiscuous mode
[ 1096.323019][ T3475] : entered promiscuous mode
[ 1096.424648][T32075] __nla_validate_parse: 28 callbacks suppressed
[ 1096.424659][T32075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24632'.
[ 1096.430432][T32075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24632'.
[ 1096.434646][T32079] workqueue: Failed to create a rescuer kthread for wq "bond52": -EINTR
[ 1096.544294][T32093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24639'.
[ 1096.620547][T32103] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002
[ 1096.626273][T32103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24641'.
[ 1096.657735][T32075] netlink: 1568 bytes leftover after parsing attributes in process `syz.0.24632'.
[ 1096.774325][T32112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24645'.
[ 1096.782326][T32112] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24645'.
[ 1096.785898][T32112] netlink: 11 bytes leftover after parsing attributes in process `syz.2.24645'.
[ 1097.082163][T32141] lo speed is unknown, defaulting to 1000
[ 1097.482111][T32165] netlink: 196 bytes leftover after parsing attributes in process `syz.2.24665'.
[ 1097.553649][T32167] nbd1: detected capacity change from 0 to 63
[ 1097.563544][T32168] block nbd1: NBD_DISCONNECT
[ 1097.569841][T32168] block nbd1: Disconnected due to user request.
[ 1097.573728][T32168] block nbd1: shutting down sockets
[ 1097.577517][    C0] blk_print_req_error: 100 callbacks suppressed
[ 1097.577530][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1097.583100][    C0] buffer_io_error: 138 callbacks suppressed
[ 1097.583110][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1097.583265][T32167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24666'.
[ 1097.584903][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1097.584956][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[ 1097.598081][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1097.601919][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[ 1097.604930][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1097.608594][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[ 1097.612119][  T131] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1097.615765][  T131] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1097.619422][  T131] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1097.623152][  T131] Buffer I/O error on dev nbd1, logical block 1, async page read
[ 1097.626271][  T131] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1097.629954][  T131] Buffer I/O error on dev nbd1, logical block 2, async page read
[ 1097.634246][  T131] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1097.637433][  T131] Buffer I/O error on dev nbd1, logical block 3, async page read
[ 1097.640233][  T131] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1097.643301][  T131] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1097.646264][  T131] Buffer I/O error on dev nbd1, logical block 1, async page read
[ 1097.652090][  T131] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1097.657358][T31773] ldm_validate_partition_table(): Disk read failed.
[ 1097.661951][T31773] Dev nbd1: unable to read RDB block 0
[ 1097.666053][T31773]  nbd1: unable to read partition table
[ 1097.678636][T31773] ldm_validate_partition_table(): Disk read failed.
[ 1097.681419][T31773] Dev nbd1: unable to read RDB block 0
[ 1097.683831][T31773]  nbd1: unable to read partition table
[ 1097.848495][T32176] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[ 1097.866287][T32176] netlink: 'syz.2.24668': attribute type 10 has an invalid length.
[ 1098.039475][T32193] nbd1: detected capacity change from 0 to 63
[ 1098.042878][T32193] block nbd1: NBD_DISCONNECT
[ 1098.044802][T32193] block nbd1: Disconnected due to user request.
[ 1098.047059][T32193] block nbd1: shutting down sockets
[ 1098.054130][T31773] ldm_validate_partition_table(): Disk read failed.
[ 1098.064378][T31773] Dev nbd1: unable to read RDB block 0
[ 1098.070042][T31773]  nbd1: unable to read partition table
[ 1098.081811][T31773] ldm_validate_partition_table(): Disk read failed.
[ 1098.085385][T31773] Dev nbd1: unable to read RDB block 0
[ 1098.090281][T31773]  nbd1: unable to read partition table
[ 1098.512672][T32246] netlink: 'syz.2.24693': attribute type 3 has an invalid length.
[ 1098.566524][T32246] lo speed is unknown, defaulting to 1000
[ 1098.577390][T32243] lo speed is unknown, defaulting to 1000
[ 1098.799406][   T13] batadv0: left promiscuous mode
[ 1098.894451][T32261] net_ratelimit: 54 callbacks suppressed
[ 1098.894462][T32261] openvswitch: netlink: Unknown nsh attribute 0
[ 1098.905419][T32263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1099.092705][ T1256] block nbd12: Possible stuck request ffff88810ad10000: control (read@0,4096B). Runtime 120 seconds
[ 1099.138619][T32270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1099.343157][T32283] openvswitch: netlink: Unknown nsh attribute 0
[ 1099.426493][T32289] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1099.742061][T32298] lo speed is unknown, defaulting to 1000
[ 1099.789968][T32301] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 1100.012399][T32311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1100.028398][T32313] openvswitch: netlink: Tunnel attr 91 out of range max 16
[ 1100.072554][T32317] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1100.080303][T32318] openvswitch: netlink: Message has 12 unknown bytes.
[ 1100.323627][T32326] nbd1: detected capacity change from 0 to 63
[ 1100.330468][T32333] block nbd1: NBD_DISCONNECT
[ 1100.339702][T32333] block nbd1: Disconnected due to user request.
[ 1100.354518][T32333] block nbd1: shutting down sockets
[ 1100.373229][T31773] ldm_validate_partition_table(): Disk read failed.
[ 1100.377841][T31773] Dev nbd1: unable to read RDB block 0
[ 1100.381839][T31773]  nbd1: unable to read partition table
[ 1100.382695][T32338] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1100.397926][T31773] ldm_validate_partition_table(): Disk read failed.
[ 1100.408248][T31773] Dev nbd1: unable to read RDB block 0
[ 1100.417641][T31773]  nbd1: unable to read partition table
[ 1100.609928][T32359] syzkaller0: entered promiscuous mode
[ 1100.611681][T32359] syzkaller0: entered allmulticast mode
[ 1100.977377][T32386] bond53: entered promiscuous mode
[ 1100.981712][T32386] bond53: entered allmulticast mode
[ 1101.214997][T32416] mac80211_hwsim hwsim3 syzkaller1: Caught tx_queue_len zero misconfig
[ 1101.827252][T32439] tipc: Resetting bearer <eth:syzkaller0>
[ 1102.073756][T32450] syzkaller0: entered promiscuous mode
[ 1102.076012][T32450] syzkaller0: entered allmulticast mode
[ 1102.314976][T32456] __nla_validate_parse: 16 callbacks suppressed
[ 1102.314995][T32456] netlink: 184 bytes leftover after parsing attributes in process `syz.0.24771'.
[ 1102.977078][T32492] netlink: 'syz.2.24784': attribute type 1 has an invalid length.
[ 1102.979731][T32492] netlink: 'syz.2.24784': attribute type 2 has an invalid length.
[ 1103.202489][   T55] block nbd0: Receive control failed (result -107)
[ 1103.210235][T32510] block nbd0: reconnected socket
[ 1103.213561][T32510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24791'.
[ 1103.218406][T32510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1103.862962][T32526] lo speed is unknown, defaulting to 1000
[ 1103.871444][T32529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24797'.
[ 1103.971637][T32535] net_ratelimit: 24 callbacks suppressed
[ 1103.971649][T32535] openvswitch: netlink: Missing valid actions attribute.
[ 1103.985829][T32535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1104.068809][T32538] : renamed from bond0
[ 1104.190943][T32546] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1104.408853][T32565] openvswitch: netlink: Geneve option length err (len 384, max 255).
[ 1104.503259][T32571] openvswitch: netlink: Key 6 has unexpected len 51 expected 2
[ 1104.533000][T32574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1104.536985][T32576] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1104.652948][T32589] openvswitch: netlink: Unknown nsh attribute 0
[ 1104.664290][T32591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24821'.
[ 1104.706291][T32596] openvswitch: netlink: Key 6 has unexpected len 51 expected 2
[ 1104.732265][T32598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24824'.
[ 1104.742785][T32600] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1104.814996][T32607] netlink: 220 bytes leftover after parsing attributes in process `syz.2.24824'.
[ 1104.826809][T32607] NCSI netlink: No device for ifindex 566712438
[ 1105.075331][T32633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24837'.
[ 1105.234154][T32643] netlink: 'syz.2.24838': attribute type 22 has an invalid length.
[ 1105.236829][T32643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24838'.
[ 1105.240557][T32643] netlink: 'syz.2.24838': attribute type 22 has an invalid length.
[ 1105.243093][T32643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24838'.
[ 1105.306956][T32647] lo speed is unknown, defaulting to 1000
[ 1105.317561][T32646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24840'.
[ 1105.374534][T32654] pim6reg1: entered allmulticast mode
[ 1105.542389][T32660] syzkaller0: entered promiscuous mode
[ 1105.548081][T32660] syzkaller0: entered allmulticast mode
[ 1105.733147][T32664] lo speed is unknown, defaulting to 1000
[ 1106.392360][T32692] lo speed is unknown, defaulting to 1000
[ 1106.909498][T32710] syzkaller0: left promiscuous mode
[ 1106.914230][T32710] syzkaller0: left allmulticast mode
[ 1106.923112][T32710] tipc: Resetting bearer <eth:syzkaller0>
[ 1107.565370][T32742] __nla_validate_parse: 6 callbacks suppressed
[ 1107.565444][T32742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24872'.
[ 1107.605904][T32744] nbd: nbd0 already in use
[ 1107.614287][T32744] block nbd0: NBD_DISCONNECT
[ 1107.617177][T32744] block nbd0: Send disconnect failed -32
[ 1107.620618][T32744] block nbd0: shutting down sockets
[ 1107.631533][    C1] blk_print_req_error: 304 callbacks suppressed
[ 1107.631550][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1107.637784][    C1] buffer_io_error: 434 callbacks suppressed
[ 1107.637798][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1107.644866][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1107.647808][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1107.650189][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1107.653026][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1107.655373][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1107.658415][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1107.663221][T32744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24873'.
[ 1107.668710][ T1256] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1107.672314][ T1256] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1107.675184][ T1256] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1107.677799][ T1256] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1107.681106][ T1256] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1107.684108][ T1256] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1107.687629][ T1256] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1107.690661][ T1256] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1107.693800][ T1256] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1107.697323][ T1256] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1107.701295][ T1256] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1107.705593][ T1256] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1107.710170][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1107.713869][T24652] Dev nbd0: unable to read RDB block 0
[ 1107.718230][T24652]  nbd0: unable to read partition table
[ 1107.728625][T24652] ldm_validate_partition_table(): Disk read failed.
[ 1107.734596][T24652] Dev nbd0: unable to read RDB block 0
[ 1107.738139][T24652]  nbd0: unable to read partition table
[ 1107.751545][T32752] netlink: 'syz.1.24875': attribute type 21 has an invalid length.
[ 1107.759617][T32752] netlink: 128 bytes leftover after parsing attributes in process `syz.1.24875'.
[ 1107.767792][T32752] netlink: 'syz.1.24875': attribute type 5 has an invalid length.
[ 1107.772967][T32752] netlink: 'syz.1.24875': attribute type 6 has an invalid length.
[ 1107.775818][T32752] netlink: 3 bytes leftover after parsing attributes in process `syz.1.24875'.
[ 1107.798692][T32758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24878'.
[ 1107.851193][T32761] netlink: 'syz.2.24877': attribute type 2 has an invalid length.
[ 1107.880886][T32761] : entered promiscuous mode
[ 1108.138251][  T311] nbd: nbd2 already in use
[ 1108.140265][  T311] block nbd2: NBD_DISCONNECT
[ 1108.142063][  T311] block nbd2: Send disconnect failed -32
[ 1108.144013][  T311] block nbd2: shutting down sockets
[ 1108.151941][T24901] ldm_validate_partition_table(): Disk read failed.
[ 1108.154819][T24901] Dev nbd2: unable to read RDB block 0
[ 1108.157970][T24901]  nbd2: unable to read partition table
[ 1108.168452][  T311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24885'.
[ 1108.179757][T24901] ldm_validate_partition_table(): Disk read failed.
[ 1108.182440][T24901] Dev nbd2: unable to read RDB block 0
[ 1108.189465][T24901]  nbd2: unable to read partition table
[ 1108.445595][  T328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24891'.
[ 1108.783461][  T348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24899'.
[ 1108.797712][  T348] syzkaller0: entered promiscuous mode
[ 1108.800038][  T348] syzkaller0: entered allmulticast mode
[ 1108.802093][  T348] tipc: Resetting bearer <eth:syzkaller0>
[ 1108.807485][  T351] sctp: [Deprecated]: syz.1.24900 (pid 351) Use of int in maxseg socket option.
[ 1108.807485][  T351] Use struct sctp_assoc_value instead
[ 1108.918554][  T355] netlink: 56 bytes leftover after parsing attributes in process `syz.1.24902'.
[ 1108.981606][  T359] net_ratelimit: 41 callbacks suppressed
[ 1108.981624][  T359] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1108.987245][  T359] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1108.991634][  T359] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1108.994957][  T359] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1108.998273][  T359] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1109.001531][  T359] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1109.004885][  T359] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1109.008086][  T359] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1109.012520][  T359] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1109.015987][  T359] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1109.115355][  T366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24907'.
[ 1109.143942][  T366] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1109.146659][  T366] syzkaller0: entered promiscuous mode
[ 1109.148496][  T366] syzkaller0: entered allmulticast mode
[ 1109.198672][  T371] netlink: 'syz.2.24909': attribute type 1 has an invalid length.
[ 1109.227700][  T371] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1109.253800][  T371] bond0: (slave gretap5): making interface the new active one
[ 1109.258658][  T371] bond0: (slave gretap5): Enslaving as an active interface with an up link
[ 1109.304474][ T5675] 
[ 1109.305419][ T5675] ======================================================
[ 1109.307871][ T5675] WARNING: possible circular locking dependency detected
[ 1109.310366][ T5675] syzkaller #0 Not tainted
[ 1109.312088][ T5675] ------------------------------------------------------
[ 1109.314701][ T5675] kworker/u8:4/5675 is trying to acquire lock:
[ 1109.317027][ T5675] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xbc/0x730
[ 1109.320918][ T5675] 
[ 1109.320918][ T5675] but task is already holding lock:
[ 1109.323677][ T5675] ffff8881aeaf7530 (&idev->mc_lock){+.+.}-{4:4}, at: ipv6_mc_netdev_event+0xe1/0x5a0
[ 1109.327235][ T5675] 
[ 1109.327235][ T5675] which lock already depends on the new lock.
[ 1109.327235][ T5675] 
[ 1109.331329][ T5675] 
[ 1109.331329][ T5675] the existing dependency chain (in reverse order) is:
[ 1109.334676][ T5675] 
[ 1109.334676][ T5675] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[ 1109.337540][ T5675]        __mutex_lock+0x19d/0x1550
[ 1109.339522][ T5675]        __ipv6_dev_mc_inc+0x4e/0xa40
[ 1109.341589][ T5675]        __ipv6_sock_mc_join+0x4f7/0x740
[ 1109.343668][ T5675]        ipv6_mcast_join_leave+0x1a2/0x240
[ 1109.345933][ T5675]        do_ipv6_setsockopt+0x1990/0x3180
[ 1109.348110][ T5675]        ipv6_setsockopt+0x59/0x170
[ 1109.350185][ T5675]        do_sock_setsockopt+0x17c/0x1b0
[ 1109.352313][ T5675]        __x64_sys_setsockopt+0x13d/0x1b0
[ 1109.354457][ T5675]        do_syscall_64+0x174/0x580
[ 1109.356380][ T5675]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1109.358862][ T5675] 
[ 1109.358862][ T5675] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1109.361775][ T5675]        lock_sock_nested+0x41/0x100
[ 1109.364089][ T5675]        inet_shutdown+0x6a/0x390
[ 1109.366046][ T5675]        nbd_mark_nsock_dead+0x2cb/0x550
[ 1109.368149][ T5675]        recv_work+0x1cee/0x1e10
[ 1109.370080][ T5675]        process_scheduled_works+0xa8e/0x14e0
[ 1109.372416][ T5675]        worker_thread+0xa47/0xfb0
[ 1109.374389][ T5675]        kthread+0x388/0x470
[ 1109.376231][ T5675]        ret_from_fork+0x514/0xb70
[ 1109.378256][ T5675]        ret_from_fork_asm+0x1a/0x30
[ 1109.380215][ T5675] 
[ 1109.380215][ T5675] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1109.383044][ T5675]        __mutex_lock+0x19d/0x1550
[ 1109.385020][ T5675]        nbd_queue_rq+0x373/0x1150
[ 1109.386976][ T5675]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1109.389290][ T5675]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1109.391774][ T5675]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1109.394081][ T5675]        blk_mq_run_work_fn+0x16c/0x300
[ 1109.395966][ T5675]        process_scheduled_works+0xa8e/0x14e0
[ 1109.398039][ T5675]        worker_thread+0xa47/0xfb0
[ 1109.399865][ T5675]        kthread+0x388/0x470
[ 1109.401441][ T5675]        ret_from_fork+0x514/0xb70
[ 1109.403247][ T5675]        ret_from_fork_asm+0x1a/0x30
[ 1109.405231][ T5675] 
[ 1109.405231][ T5675] -> #4 (&cmd->lock){+.+.}-{4:4}:
[ 1109.407945][ T5675]        __mutex_lock+0x19d/0x1550
[ 1109.409890][ T5675]        nbd_queue_rq+0xc1/0x1150
[ 1109.411820][ T5675]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1109.414033][ T5675]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1109.416600][ T5675]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1109.419015][ T5675]        blk_mq_run_work_fn+0x16c/0x300
[ 1109.421113][ T5675]        process_scheduled_works+0xa8e/0x14e0
[ 1109.423407][ T5675]        worker_thread+0xa47/0xfb0
[ 1109.425343][ T5675]        kthread+0x388/0x470
[ 1109.427054][ T5675]        ret_from_fork+0x514/0xb70
[ 1109.428950][ T5675]        ret_from_fork_asm+0x1a/0x30
[ 1109.430897][ T5675] 
[ 1109.430897][ T5675] -> #3 (set->srcu){.+.+}-{0:0}:
[ 1109.433561][ T5675]        __synchronize_srcu+0xc9/0x2f0
[ 1109.435651][ T5675]        elevator_switch+0x1e8/0x7b0
[ 1109.437663][ T5675]        elevator_change+0x2fa/0x480
[ 1109.439746][ T5675]        elevator_set_default+0x375/0x440
[ 1109.441851][ T5675]        blk_register_queue+0x3f3/0x4e0
[ 1109.443928][ T5675]        __add_disk+0x6cb/0xe30
[ 1109.445688][ T5675]        add_disk_fwnode+0x100/0x3a0
[ 1109.447676][ T5675]        nbd_dev_add+0x733/0xb60
[ 1109.449546][ T5675]        nbd_init+0x15f/0x1e0
[ 1109.451295][ T5675]        do_one_initcall+0x250/0x870
[ 1109.453122][ T5675]        do_initcall_level+0x10a/0x1a0
[ 1109.455120][ T5675]        do_initcalls+0x59/0xa0
[ 1109.456918][ T5675]        kernel_init_freeable+0x29d/0x3e0
[ 1109.459066][ T5675]        kernel_init+0x1d/0x1d0
[ 1109.460894][ T5675]        ret_from_fork+0x514/0xb70
[ 1109.462771][ T5675]        ret_from_fork_asm+0x1a/0x30
[ 1109.464787][ T5675] 
[ 1109.464787][ T5675] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[ 1109.467880][ T5675]        __mutex_lock+0x19d/0x1550
[ 1109.470052][ T5675]        elevator_change+0x1af/0x480
[ 1109.472243][ T5675]        elevator_set_none+0xb5/0x140
[ 1109.474350][ T5675]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1109.476563][ T5675]        nbd_start_device+0x189/0xb30
[ 1109.478311][ T5675]        nbd_genl_connect+0x1597/0x1c10
[ 1109.480104][ T5675]        genl_family_rcv_msg_doit+0x233/0x340
[ 1109.482431][ T5675]        genl_rcv_msg+0x614/0x7a0
[ 1109.484382][ T5675]        netlink_rcv_skb+0x226/0x4a0
[ 1109.486208][ T5675]        genl_rcv+0x28/0x40
[ 1109.487536][ T5675]        netlink_unicast+0x7bb/0x940
[ 1109.489034][ T5675]        netlink_sendmsg+0x813/0xb40
[ 1109.490886][ T5675]        sock_sendmsg_nosec+0x13a/0x180
[ 1109.493094][ T5675]        ____sys_sendmsg+0x54e/0x850
[ 1109.495228][ T5675]        ___sys_sendmsg+0x2a5/0x360
[ 1109.496909][ T5675]        __x64_sys_sendmsg+0x1b1/0x290
[ 1109.498997][ T5675]        do_syscall_64+0x174/0x580
[ 1109.500951][ T5675]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1109.503543][ T5675] 
[ 1109.503543][ T5675] -> #1 (&q->q_usage_counter(io)#57){++++}-{0:0}:
[ 1109.507034][ T5675]        blk_alloc_queue+0x544/0x690
[ 1109.509035][ T5675]        __blk_mq_alloc_disk+0x194/0x390
[ 1109.511252][ T5675]        nbd_dev_add+0x494/0xb60
[ 1109.513208][ T5675]        nbd_init+0x15f/0x1e0
[ 1109.515083][ T5675]        do_one_initcall+0x250/0x870
[ 1109.517114][ T5675]        do_initcall_level+0x10a/0x1a0
[ 1109.519118][ T5675]        do_initcalls+0x59/0xa0
[ 1109.521015][ T5675]        kernel_init_freeable+0x29d/0x3e0
[ 1109.523132][ T5675]        kernel_init+0x1d/0x1d0
[ 1109.525000][ T5675]        ret_from_fork+0x514/0xb70
[ 1109.526957][ T5675]        ret_from_fork_asm+0x1a/0x30
[ 1109.528933][ T5675] 
[ 1109.528933][ T5675] -> #0 (fs_reclaim){+.+.}-{0:0}:
[ 1109.531616][ T5675]        __lock_acquire+0x1520/0x2cf0
[ 1109.533570][ T5675]        lock_acquire+0x106/0x350
[ 1109.535535][ T5675]        fs_reclaim_acquire+0x71/0x100
[ 1109.537577][ T5675]        __kmalloc_node_track_caller_noprof+0xbc/0x730
[ 1109.540160][ T5675]        __alloc_skb+0x2bd/0x7a0
[ 1109.542096][ T5675]        mld_newpack+0x165/0xcb0
[ 1109.543967][ T5675]        add_grec+0x119f/0x19d0
[ 1109.545846][ T5675]        mld_send_report+0x1ed/0x380
[ 1109.547843][ T5675]        ipv6_mc_netdev_event+0x1b7/0x5a0
[ 1109.550037][ T5675]        notifier_call_chain+0x1a5/0x3d0
[ 1109.552199][ T5675]        call_netdevice_notifiers+0x90/0xd0
[ 1109.554477][ T5675]        bond_resend_igmp_join_requests_delayed+0x61/0x170
[ 1109.557221][ T5675]        process_scheduled_works+0xa8e/0x14e0
[ 1109.559551][ T5675]        worker_thread+0xa47/0xfb0
[ 1109.561547][ T5675]        kthread+0x388/0x470
[ 1109.563300][ T5675]        ret_from_fork+0x514/0xb70
[ 1109.565281][ T5675]        ret_from_fork_asm+0x1a/0x30
[ 1109.567365][ T5675] 
[ 1109.567365][ T5675] other info that might help us debug this:
[ 1109.567365][ T5675] 
[ 1109.571313][ T5675] Chain exists of:
[ 1109.571313][ T5675]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[ 1109.571313][ T5675] 
[ 1109.576113][ T5675]  Possible unsafe locking scenario:
[ 1109.576113][ T5675] 
[ 1109.579042][ T5675]        CPU0                    CPU1
[ 1109.581173][ T5675]        ----                    ----
[ 1109.583275][ T5675]   lock(&idev->mc_lock);
[ 1109.584987][ T5675]                                lock(sk_lock-AF_INET6);
[ 1109.587667][ T5675]                                lock(&idev->mc_lock);
[ 1109.590303][ T5675]   lock(fs_reclaim);
[ 1109.591899][ T5675] 
[ 1109.591899][ T5675]  *** DEADLOCK ***
[ 1109.591899][ T5675] 
[ 1109.594971][ T5675] 4 locks held by kworker/u8:4/5675:
[ 1109.597000][ T5675]  #0: ffff8881bcfe4940 ((wq_completion)bond0#7){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1109.601211][ T5675]  #1: ffffc9000634fc40 ((work_completion)(&(&bond->mcast_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1109.606028][ T5675]  #2: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: bond_resend_igmp_join_requests_delayed+0x23/0x170
[ 1109.610055][ T5675]  #3: ffff8881aeaf7530 (&idev->mc_lock){+.+.}-{4:4}, at: ipv6_mc_netdev_event+0xe1/0x5a0
[ 1109.613857][ T5675] 
[ 1109.613857][ T5675] stack backtrace:
[ 1109.616057][ T5675] CPU: 0 UID: 0 PID: 5675 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[ 1109.616078][ T5675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1109.616089][ T5675] Workqueue: bond0 bond_resend_igmp_join_requests_delayed
[ 1109.616118][ T5675] Call Trace:
[ 1109.616127][ T5675]  <TASK>
[ 1109.616134][ T5675]  dump_stack_lvl+0xe8/0x150
[ 1109.616162][ T5675]  print_circular_bug+0x2e1/0x300
[ 1109.616178][ T5675]  check_noncircular+0x12e/0x150
[ 1109.616195][ T5675]  __lock_acquire+0x1520/0x2cf0
[ 1109.616216][ T5675]  ? notifier_call_chain+0x1a5/0x3d0
[ 1109.616235][ T5675]  ? bond_resend_igmp_join_requests_delayed+0x61/0x170
[ 1109.616257][ T5675]  ? worker_thread+0xa47/0xfb0
[ 1109.616273][ T5675]  ? ret_from_fork+0x514/0xb70
[ 1109.616293][ T5675]  ? ret_from_fork_asm+0x1a/0x30
[ 1109.616312][ T5675]  ? __kmalloc_node_track_caller_noprof+0xbc/0x730
[ 1109.616331][ T5675]  lock_acquire+0x106/0x350
[ 1109.616350][ T5675]  ? __kmalloc_node_track_caller_noprof+0xbc/0x730
[ 1109.616374][ T5675]  fs_reclaim_acquire+0x71/0x100
[ 1109.616392][ T5675]  ? __kmalloc_node_track_caller_noprof+0xbc/0x730
[ 1109.616411][ T5675]  __kmalloc_node_track_caller_noprof+0xbc/0x730
[ 1109.616430][ T5675]  ? __alloc_skb+0x189/0x7a0
[ 1109.616444][ T5675]  ? mld_newpack+0x165/0xcb0
[ 1109.616463][ T5675]  ? mld_newpack+0x165/0xcb0
[ 1109.616481][ T5675]  ? __alloc_skb+0x189/0x7a0
[ 1109.616495][ T5675]  __alloc_skb+0x2bd/0x7a0
[ 1109.616510][ T5675]  mld_newpack+0x165/0xcb0
[ 1109.616529][ T5675]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1109.616545][ T5675]  ? rcu_is_watching+0x15/0xb0
[ 1109.616560][ T5675]  ? __pfx_mld_newpack+0x10/0x10
[ 1109.616579][ T5675]  ? __mutex_lock+0x30d/0x1550
[ 1109.616599][ T5675]  add_grec+0x119f/0x19d0
[ 1109.616620][ T5675]  ? tls_dev_event+0x68c/0xf50
[ 1109.616640][ T5675]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1109.616660][ T5675]  mld_send_report+0x1ed/0x380
[ 1109.616680][ T5675]  ipv6_mc_netdev_event+0x1b7/0x5a0
[ 1109.616701][ T5675]  notifier_call_chain+0x1a5/0x3d0
[ 1109.616722][ T5675]  call_netdevice_notifiers+0x90/0xd0
[ 1109.616741][ T5675]  ? __pfx_call_netdevice_notifiers+0x10/0x10
[ 1109.616758][ T5675]  ? process_scheduled_works+0xa20/0x14e0
[ 1109.616776][ T5675]  ? process_scheduled_works+0xa20/0x14e0
[ 1109.616821][ T5675]  bond_resend_igmp_join_requests_delayed+0x61/0x170
[ 1109.616842][ T5675]  ? process_scheduled_works+0xa20/0x14e0
[ 1109.616857][ T5675]  process_scheduled_works+0xa8e/0x14e0
[ 1109.616882][ T5675]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1109.616898][ T5675]  ? assign_work+0x3cf/0x5d0
[ 1109.616916][ T5675]  worker_thread+0xa47/0xfb0
[ 1109.616936][ T5675]  ? __kthread_parkme+0x71/0x1f0
[ 1109.616959][ T5675]  kthread+0x388/0x470
[ 1109.616979][ T5675]  ? __pfx_worker_thread+0x10/0x10
[ 1109.616995][ T5675]  ? __pfx_kthread+0x10/0x10
[ 1109.617015][ T5675]  ret_from_fork+0x514/0xb70
[ 1109.617037][ T5675]  ? __pfx_ret_from_fork+0x10/0x10
[ 1109.617056][ T5675]  ? __switch_to+0xc89/0x1420
[ 1109.617073][ T5675]  ? __pfx_kthread+0x10/0x10
[ 1109.617092][ T5675]  ret_from_fork_asm+0x1a/0x30
[ 1109.617112][ T5675]  </TASK>
[ 1109.748584][  T365] tipc: Resetting bearer <eth:syzkaller0>
[ 1109.762930][  T365] tipc: Disabling bearer <eth:syzkaller0>
