last executing test programs:

1.527099543s ago: executing program 2 (id=4051):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x34, 0x0, 0x0, 0x0, 0x20149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff80fe, 0x8}, 0x50)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x4000, 0x0, 0x0)

1.196698034s ago: executing program 1 (id=4066):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

1.116973731s ago: executing program 1 (id=4069):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)

1.116360207s ago: executing program 0 (id=4070):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029700100001e0a01080000000000000000070000060900020073797a31000000000900010073797a3000000000440103804001ae5e34010180b4000100"], 0x1f4}}, 0x0)

1.115889509s ago: executing program 1 (id=4071):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98)
unshare(0x20000400)
vmsplice(r8, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf)
splice(r7, 0x0, r8, 0x0, 0xc, 0x4)
write(r6, 0x0, 0x0)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6aff9bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0xb, 0xc, 0xc4, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x7fffffffffffffff, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x8]})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x60000000})
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448)
socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000deffffff002f3200000000000000927622e22e55ae93767576296e749594ceb2d83b3721d62adf5838caeb2ae525b6ecc74f53078641af4f6709fb57d19d1c83d460602fb385d9ae7242", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r9}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x2010, r4, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28)
close(r2)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080))

1.019299389s ago: executing program 0 (id=4072):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94)

1.019128116s ago: executing program 0 (id=4073):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411})

879.710189ms ago: executing program 0 (id=4074):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003040)=@newtfilter={0x1040, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1014, 0x2, [@TCA_BPF_NAME={0x100e, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0x1040}}, 0x20004804)

799.736852ms ago: executing program 0 (id=4075):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

689.373121ms ago: executing program 0 (id=4076):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x389c, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x312, 0x5, 0xd, 0x3, 0x9, @broadcast}, 0x10)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
socket(0x1, 0x6, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000000000000000010900010073797a3000000000140000001100010000000000000000000700000a"], 0xa8}}, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r6, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
sendmmsg(r7, 0x0, 0x0, 0x80)

689.122273ms ago: executing program 2 (id=4077):
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={<r1=>r0})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0)
close(r5)
write(r3, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1})

240.374886ms ago: executing program 2 (id=4078):
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc0202000000ff100f000ee1000c", 0x1c)

188.329338ms ago: executing program 2 (id=4079):
syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0)

188.149028ms ago: executing program 1 (id=4080):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0)

129.919215ms ago: executing program 2 (id=4081):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

129.612653ms ago: executing program 1 (id=4082):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth1_vlan\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2202, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

79.048415ms ago: executing program 2 (id=4083):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x37, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 1 (id=4084):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a675, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

1 netdevsim3: renamed from eth3
[   67.247002][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   67.267805][ T5001] Bluetooth: hci0: command tx timeout
[   67.310891][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.324581][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.348026][ T5001] Bluetooth: hci2: command tx timeout
[   67.348079][ T5623] Bluetooth: hci1: command tx timeout
[   67.356805][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   67.373595][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   67.380507][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.383814][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.396429][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.398681][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.412032][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.414543][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.420929][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.423267][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.493902][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.538407][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[   67.559204][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.561915][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.579996][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.582756][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.896650][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.931809][ T5612] veth0_vlan: entered promiscuous mode
[   67.939558][ T5612] veth1_vlan: entered promiscuous mode
[   67.946484][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.982697][ T5612] veth0_macvtap: entered promiscuous mode
[   68.001041][ T5612] veth1_macvtap: entered promiscuous mode
[   68.022003][ T5617] veth0_vlan: entered promiscuous mode
[   68.034093][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.036631][ T5617] veth1_vlan: entered promiscuous mode
[   68.061919][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.078148][ T5446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.090282][ T5446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.094222][ T5446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.105140][ T5446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.121241][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.124275][ T5617] veth0_macvtap: entered promiscuous mode
[   68.133418][ T5617] veth1_macvtap: entered promiscuous mode
[   68.185731][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.209542][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.219066][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.230307][ T5446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.231062][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.244531][ T5446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.261400][ T5446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.264204][ T5446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.281932][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.282133][ T5618] veth0_vlan: entered promiscuous mode
[   68.286644][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.334491][ T5618] veth1_vlan: entered promiscuous mode
[   68.360858][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.367448][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.403099][ T5612] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.405045][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.416576][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.418027][ T5618] veth0_macvtap: entered promiscuous mode
[   68.433003][ T5618] veth1_macvtap: entered promiscuous mode
[   68.457062][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.480758][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.501361][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.508132][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.516423][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.526812][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.626120][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.636804][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.692043][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.697097][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.845763][ T5736] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8'.
[   68.962228][ T5744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11'.
[   69.357754][ T5623] Bluetooth: hci0: command tx timeout
[   69.403409][ T5776] IPv6: addrconf: prefix option has invalid lifetime
[   69.427883][ T5623] Bluetooth: hci1: command tx timeout
[   69.437862][ T5623] Bluetooth: hci2: command tx timeout
[   69.886447][ T5806] ip6gre1: entered promiscuous mode
[   69.889069][ T5806] ip6gre1: entered allmulticast mode
[   71.010721][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'.
[   71.211945][ T5887] netlink: 'syz.0.69': attribute type 3 has an invalid length.
[   71.273408][ T5894] vcan0: tx address claim with different name
[   71.427838][ T5623] Bluetooth: hci0: command tx timeout
[   71.507611][ T5623] Bluetooth: hci2: command tx timeout
[   71.507664][ T5001] Bluetooth: hci1: command tx timeout
[   71.656342][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.660666][ T5914] batadv_slave_0: entered promiscuous mode
[   71.793722][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.81'.
[   71.842569][ T5922] Zero length message leads to an empty skb
[   72.215152][ T5953] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   72.435892][ T5971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.103'.
[   72.519592][ T5978] tc_dump_action: action bad kind
[   73.509231][ T5001] Bluetooth: hci0: command tx timeout
[   73.567568][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.126'.
[   73.588467][ T5001] Bluetooth: hci2: command tx timeout
[   73.588495][ T5623] Bluetooth: hci1: command tx timeout
[   73.822178][ T6034] syz.0.131 uses obsolete (PF_INET,SOCK_PACKET)
[   74.571784][ T6088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.153'.
[   74.852034][ T6106] tipc: Can't bind to reserved service type 1
[   74.898204][ T6108] syzkaller1: entered promiscuous mode
[   74.899950][ T6108] syzkaller1: entered allmulticast mode
[   75.733352][ T6110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.842675][ T6110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.883250][ T6123] netlink: 560 bytes leftover after parsing attributes in process `syz.2.169'.
[   75.940603][ T6110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.055798][ T6110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.253984][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.298878][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.336429][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.374162][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.589516][ T6161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.644826][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[   76.649483][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[   76.784895][ T6176] netlink: 60 bytes leftover after parsing attributes in process `syz.0.194'.
[   77.049606][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'.
[   77.120951][ T6204] syzkaller0: entered promiscuous mode
[   77.123141][ T6204] syzkaller0: entered allmulticast mode
[   77.253725][ T6210] Driver unsupported XDP return value 0 on prog  (id 36) dev N/A, expect packet loss!
[   77.345069][   T13] nci: nci_rx_work: unknown MT 0x4
[   78.096374][ T6212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   78.432259][ T6261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.912394][ T6296] bridge0: port 3(vlan2) entered blocking state
[   78.919971][ T6296] bridge0: port 3(vlan2) entered disabled state
[   78.926837][ T6296] vlan2: entered allmulticast mode
[   78.933976][ T6296] geneve0: entered allmulticast mode
[   78.940433][ T6296] vlan2: entered promiscuous mode
[   78.945356][ T6296] geneve0: entered promiscuous mode
[   80.112126][ T6340] Bluetooth: MGMT ver 1.23
[   80.143487][ T6342] netlink: 'syz.1.265': attribute type 6 has an invalid length.
[   80.319970][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'.
[   80.324697][ T6326] netlink: 'syz.2.259': attribute type 1 has an invalid length.
[   80.336643][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'.
[   81.420399][ T6425] netlink: 'syz.0.299': attribute type 32 has an invalid length.
[   81.723724][  T888] IPVS: starting estimator thread 0...
[   81.827672][ T6446] IPVS: using max 65 ests per chain, 156000 per kthread
[   82.241548][ T6467] netlink: 292 bytes leftover after parsing attributes in process `syz.0.317'.
[   82.458493][   T24] cfg80211: failed to load regulatory.db
[   82.653581][ T6483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'.
[   82.675861][ T6485] xt_CT: You must specify a L4 protocol and not use inversions on it
[   82.819754][ T6497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.332'.
[   83.051970][ T6518] netlink: 'syz.2.342': attribute type 61 has an invalid length.
[   83.054785][ T6518] netlink: 'syz.2.342': attribute type 62 has an invalid length.
[   83.062621][ T6507] netlink: 'syz.0.337': attribute type 2 has an invalid length.
[   83.066431][ T6507] netlink: 'syz.0.337': attribute type 2 has an invalid length.
[   83.091119][ T6507] macsec1: entered promiscuous mode
[   83.701724][ T6546] netlink: 'syz.0.355': attribute type 1 has an invalid length.
[   83.704281][ T6546] netlink: 'syz.0.355': attribute type 2 has an invalid length.
[   83.709076][ T6546] netlink: 'syz.0.355': attribute type 1 has an invalid length.
[   83.735467][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'.
[   83.739774][ T6548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.356'.
[   84.034846][ T6562] IPVS: ip_vs_add_dest(): server weight less than zero
[   84.045038][ T6562] IPVS: sh: FWM 3 0x00000003 - no destination available
[   84.048683][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[   84.384696][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'.
[   84.388695][ T6590] bond0: Unable to set down delay as MII monitoring is disabled
[   84.454227][ T6593] IPv6: addrconf: prefix option has invalid lifetime
[   84.729708][ T6609] netlink: 17 bytes leftover after parsing attributes in process `syz.1.383'.
[   85.133953][ T6635] syzkaller0: entered promiscuous mode
[   85.136225][ T6635] syzkaller0: entered allmulticast mode
[   85.744896][ T6648] xt_connbytes: Forcing CT accounting to be enabled
[   85.778653][ T6646] xt_TPROXY: Can be used only with -p tcp or -p udp
[   85.834279][ T6652] validate_nla: 2 callbacks suppressed
[   85.834297][ T6652] netlink: 'syz.2.402': attribute type 10 has an invalid length.
[   85.862080][ T6652] team0: Port device dummy0 added
[   85.894759][ T6652] netlink: 'syz.2.402': attribute type 10 has an invalid length.
[   85.910674][ T6652] team0: Port device dummy0 removed
[   85.917864][ T6652] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   86.041284][ T6661] xt_TPROXY: Can be used only with -p tcp or -p udp
[   86.343897][ T6679] netlink: 'syz.2.414': attribute type 8 has an invalid length.
[   86.508837][ T6689] bond1: option updelay: invalid value (18446744073709518847)
[   86.512033][ T6689] bond1: option updelay: allowed values 0 - 2147483647
[   86.515833][ T6692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.420'.
[   86.519583][ T6689] bond1 (unregistering): Released all slaves
[   86.533700][ T6692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.420'.
[   86.895069][ T6705] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   86.907233][ T6705] bond1 (unregistering): Released all slaves
[   86.925472][ T6708] warning: `syz.2.427' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   87.085175][ T6712] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   87.094499][ T6712] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   87.096861][ T6712] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   87.099299][ T6712] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   87.101806][ T6712] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   87.105305][ T6712] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   87.108136][ T6712] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   87.755452][ T6724] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   87.763931][ T6724] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   87.769930][ T6724] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   87.775135][ T6724] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   87.780345][ T6724] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   87.784464][ T6724] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   87.788371][ T6724] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   87.859384][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'.
[   87.906177][ T6728] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.916287][ T6728] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   88.310519][ T6747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.444'.
[   88.367577][ T6754] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   88.371963][ T6754] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[   88.596316][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'.
[   88.790119][ T6793] netlink: 424 bytes leftover after parsing attributes in process `syz.2.465'.
[   89.030555][   T26] wlan1: Trigger new scan to find an IBSS to join
[   89.743374][ T6865] syzkaller1: entered promiscuous mode
[   89.745328][ T6865] syzkaller1: entered allmulticast mode
[   90.060550][ T6887] : renamed from veth0_to_bond (while UP)
[   90.200976][ T6894] net_ratelimit: 3323 callbacks suppressed
[   90.200993][ T6894] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   90.306812][ T6904] Cannot find del_set index 8192 as target
[   90.714354][ T6928] tipc: Started in network mode
[   90.716295][ T6928] tipc: Node identity 3ef220772507, cluster identity 4711
[   90.722184][ T6928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.725427][ T6928] syzkaller0: entered promiscuous mode
[   90.729333][ T6928] syzkaller0: entered allmulticast mode
[   90.751455][ T6928] tipc: Resetting bearer <eth:syzkaller0>
[   90.760080][ T6926] tipc: Resetting bearer <eth:syzkaller0>
[   90.777269][ T6926] tipc: Disabling bearer <eth:syzkaller0>
[   90.862874][ T6934] validate_nla: 50 callbacks suppressed
[   90.862885][ T6934] netlink: 'syz.1.521': attribute type 29 has an invalid length.
[   91.492806][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[   91.501704][ T6962] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   91.997882][   T26] wlan1: Trigger new scan to find an IBSS to join
[   92.165645][ T7005] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   92.170013][ T7003] bond0: (slave wlan0): Error: Device can not be enslaved while up
[   92.332964][ T7015] netlink: 'syz.2.559': attribute type 3 has an invalid length.
[   92.884931][ T7046] netlink: 52 bytes leftover after parsing attributes in process `syz.2.570'.
[   93.522865][ T7087] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.583756][ T7090] netlink: 'syz.0.586': attribute type 13 has an invalid length.
[   93.659724][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'.
[   93.914436][ T7116] netlink: 27 bytes leftover after parsing attributes in process `syz.0.597'.
[   94.023303][ T7123] syzkaller0: entered promiscuous mode
[   94.025326][ T7123] syzkaller0: entered allmulticast mode
[   94.250355][ T7132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.604'.
[   94.257777][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'.
[   94.262496][ T7132] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[   94.554496][ T7148] netlink: 'syz.2.613': attribute type 13 has an invalid length.
[   94.565591][ T7148] netlink: 152 bytes leftover after parsing attributes in process `syz.2.613'.
[   94.573590][ T7148] syz_tun: refused to change device tx_queue_len
[   94.577554][ T7148] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   95.055484][ T7178] netlink: 68 bytes leftover after parsing attributes in process `syz.0.627'.
[   95.058041][ T7176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.116712][ T7176] syzkaller0: entered promiscuous mode
[   95.122290][ T7176] syzkaller0: entered allmulticast mode
[   95.128167][ T7176] tipc: Resetting bearer <eth:syzkaller0>
[   95.184520][   T32] tipc: Resetting bearer <eth:syzkaller0>
[   95.199725][ T7175] tipc: Resetting bearer <eth:syzkaller0>
[   96.199409][ T7175] tipc: Disabling bearer <eth:syzkaller0>
[   96.208544][ T5721] tipc: Node number set to 469049463
[   96.301529][ T7206] netlink: 68 bytes leftover after parsing attributes in process `syz.2.638'.
[   96.633038][ T7226] netlink: 192 bytes leftover after parsing attributes in process `syz.1.648'.
[   96.947707][   T36] wlan1: Trigger new scan to find an IBSS to join
[   97.140534][ T7244] syzkaller0: entered promiscuous mode
[   97.145386][ T7244] syzkaller0: entered allmulticast mode
[   97.172527][ T7244] tipc: Started in network mode
[   97.176312][ T7244] tipc: Node identity 36e4fab395ad, cluster identity 4711
[   97.180903][ T7244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.192436][ T7243] tipc: Resetting bearer <eth:syzkaller0>
[   97.217610][ T7243] tipc: Disabling bearer <eth:syzkaller0>
[   97.516937][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'.
[   98.062793][ T7300] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   98.303519][ T7304] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   98.550829][ T7341] __nla_validate_parse: 3 callbacks suppressed
[   98.550840][ T7341] netlink: 196 bytes leftover after parsing attributes in process `syz.2.694'.
[   99.029586][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[   99.532334][ T7364] netlink: 14 bytes leftover after parsing attributes in process `syz.1.705'.
[   99.556438][ T7364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.578240][ T7364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.582204][ T7364] bond0 (unregistering): Released all slaves
[   99.839536][ T7380] bond0: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   99.855723][ T7367] gretap0: entered promiscuous mode
[   99.872496][ T7367] vlan3: entered promiscuous mode
[   99.989120][   T26] wlan1: Trigger new scan to find an IBSS to join
[  100.533094][ T7411] lo: Caught tx_queue_len zero misconfig
[  100.606655][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'.
[  101.103722][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'.
[  101.443283][ T7478] netlink: 'syz.1.749': attribute type 1 has an invalid length.
[  101.478216][ T7478] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.483096][ T7478] bond1: (slave bond2): making interface the new active one
[  101.485942][ T7478] bond1: (slave bond2): Enslaving as an active interface with an up link
[  102.349944][ T7526] netlink: 72 bytes leftover after parsing attributes in process `syz.2.770'.
[  102.352586][ T7526] netlink: 'syz.2.770': attribute type 1 has an invalid length.
[  102.471296][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.773'.
[  102.544950][ T7538] syzkaller0: entered promiscuous mode
[  102.546847][ T7538] syzkaller0: entered allmulticast mode
[  103.038094][  T768] wlan1: Trigger new scan to find an IBSS to join
[  103.087848][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'.
[  103.891134][ T7629] netlink: 'syz.1.783': attribute type 29 has an invalid length.
[  104.264920][   T26] wlan1: Creating new IBSS network, BSSID da:66:0a:67:a2:d1
[  104.594094][ T7671] syzkaller0: entered promiscuous mode
[  104.595921][ T7671] syzkaller0: entered allmulticast mode
[  104.742770][ T7680] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  104.748084][ T7680] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  104.794628][ T7684] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  104.797695][ T7684] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  105.448694][ T7712] netlink: 'syz.2.817': attribute type 7 has an invalid length.
[  105.473473][ T7431] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.476598][ T7712] netlink: 'syz.2.817': attribute type 7 has an invalid length.
[  105.481413][ T7431] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.485268][ T7431] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.492420][ T7431] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.609303][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'.
[  105.642239][ T7719] team1: entered promiscuous mode
[  105.644336][ T7719] team1: entered allmulticast mode
[  105.646811][ T7719] 8021q: adding VLAN 0 to HW filter on device team1
[  105.655363][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'.
[  105.686280][ T7719] team2: entered promiscuous mode
[  105.688819][ T7719] team2: entered allmulticast mode
[  105.690930][ T7719] 8021q: adding VLAN 0 to HW filter on device team2
[  105.784722][ T7729] netlink: 3 bytes leftover after parsing attributes in process `syz.0.824'.
[  106.399814][ T7763] netlink: 758 bytes leftover after parsing attributes in process `syz.1.838'.
[  106.841699][ T7786] netlink: zone id is out of range
[  106.843814][ T7786] netlink: zone id is out of range
[  106.845852][ T7786] netlink: zone id is out of range
[  106.850734][ T7786] netlink: zone id is out of range
[  106.853987][ T7786] netlink: zone id is out of range
[  106.855975][ T7786] netlink: zone id is out of range
[  107.101166][ T7797] netlink: 'syz.2.854': attribute type 7 has an invalid length.
[  107.328205][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.856'.
[  107.331680][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.856'.
[  107.723309][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'.
[  107.733117][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'.
[  107.944551][ T7798] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.948927][ T7798] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.973311][ T7810] pim6reg1: entered promiscuous mode
[  107.976154][ T7810] pim6reg1: entered allmulticast mode
[  108.047148][ T7798] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.050725][ T7798] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.174603][ T7798] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.183690][ T7798] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.278140][ T7798] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.281181][ T7798] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.374403][ T7431] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.377871][ T7431] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.381387][ T7830] syzkaller0: entered promiscuous mode
[  108.383657][ T7830] syzkaller0: entered allmulticast mode
[  108.387830][ T7830] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  108.422105][ T7431] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.425398][ T7431] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.442461][ T7431] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.445854][ T7431] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.464102][ T7431] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.468720][ T7431] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.724456][ T7845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.874'.
[  109.230590][ T7873] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 4, id = 0
[  109.326789][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'.
[  109.384304][ T7887] netlink: 'syz.2.891': attribute type 1 has an invalid length.
[  109.386644][ T7887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.438298][ T7891] netlink: 'syz.2.893': attribute type 1 has an invalid length.
[  109.820072][ T7911] syzkaller1: entered promiscuous mode
[  109.822392][ T7911] syzkaller1: entered allmulticast mode
[  111.344905][ T7944] netlink: 'syz.0.917': attribute type 21 has an invalid length.
[  111.348392][ T7944] IPv6: NLM_F_CREATE should be specified when creating new route
[  111.351336][ T7944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  111.354789][ T7944] IPv6: NLM_F_CREATE should be set when creating new route
[  111.357170][ T7944] IPv6: NLM_F_CREATE should be set when creating new route
[  111.359462][ T7944] IPv6: NLM_F_CREATE should be set when creating new route
[  111.548332][ T7958] netlink: 32 bytes leftover after parsing attributes in process `syz.0.924'.
[  111.756651][ T7972] syzkaller0: entered promiscuous mode
[  111.762807][ T7972] syzkaller0: entered allmulticast mode
[  112.290245][ T7963] syz.1.926 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  112.312880][ T7963] CPU: 0 UID: 0 PID: 7963 Comm: syz.1.926 Not tainted syzkaller #0 PREEMPT(full) 
[  112.312898][ T7963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.312904][ T7963] Call Trace:
[  112.312908][ T7963]  <TASK>
[  112.312912][ T7963]  dump_stack_lvl+0xe8/0x150
[  112.312929][ T7963]  dump_header+0xd3/0x4c0
[  112.312945][ T7963]  oom_kill_process+0x3ab/0x970
[  112.312959][ T7963]  out_of_memory+0x106c/0x1410
[  112.312969][ T7963]  ? try_charge_memcg+0xbb9/0x1570
[  112.312983][ T7963]  ? __pfx___mutex_lock+0x10/0x10
[  112.313000][ T7963]  ? __pfx_out_of_memory+0x10/0x10
[  112.313008][ T7963]  ? do_raw_spin_unlock+0x4d/0x210
[  112.313025][ T7963]  try_charge_memcg+0xc77/0x1570
[  112.313073][ T7963]  ? __pfx_try_charge_memcg+0x10/0x10
[  112.313083][ T7963]  ? percpu_ref_tryget+0x15/0x180
[  112.313103][ T7963]  ? charge_memcg+0x23/0x2b0
[  112.313115][ T7963]  charge_memcg+0x1a2/0x2b0
[  112.313127][ T7963]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  112.313137][ T7963]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  112.313150][ T7963]  __swap_cache_prepare_and_add+0xdc/0x700
[  112.313163][ T7963]  ? page_rmappable_folio+0x9a/0x170
[  112.313180][ T7963]  swap_cache_alloc_folio+0xf1/0x240
[  112.313191][ T7963]  swap_cluster_readahead+0x355/0x670
[  112.313204][ T7963]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  112.313218][ T7963]  ? get_vma_policy+0x27b/0x3c0
[  112.313231][ T7963]  swapin_readahead+0x196/0xc50
[  112.313242][ T7963]  ? swap_table_get+0x1e/0x260
[  112.313253][ T7963]  ? __pfx_swapin_readahead+0x10/0x10
[  112.313263][ T7963]  ? swap_table_get+0x1e/0x260
[  112.313271][ T7963]  ? swap_table_get+0x1e/0x260
[  112.313278][ T7963]  ? swap_table_get+0x1e/0x260
[  112.313286][ T7963]  ? swap_table_get+0x216/0x260
[  112.313295][ T7963]  ? swap_cache_get_folio+0x2e4/0x2f0
[  112.313306][ T7963]  do_swap_page+0x555/0x5120
[  112.313318][ T7963]  ? __pte_offset_map+0x29/0x240
[  112.313329][ T7963]  ? __pte_offset_map+0x29/0x240
[  112.313341][ T7963]  ? do_swap_page+0x128/0x5120
[  112.313350][ T7963]  ? __pfx_do_swap_page+0x10/0x10
[  112.313357][ T7963]  ? __pte_offset_map+0x1ae/0x240
[  112.313368][ T7963]  ? pte_offset_map_rw_nolock+0xea/0x160
[  112.313378][ T7963]  handle_mm_fault+0x12d2/0x3170
[  112.313394][ T7963]  ? handle_mm_fault+0xee/0x3170
[  112.313406][ T7963]  ? __pfx_handle_mm_fault+0x10/0x10
[  112.313414][ T7963]  ? lock_vma_under_rcu+0x45a/0x500
[  112.313437][ T7963]  do_user_addr_fault+0xa73/0x1340
[  112.313449][ T7963]  ? rcu_is_watching+0x15/0xb0
[  112.313459][ T7963]  ? trace_page_fault_user+0x84/0x1e0
[  112.313468][ T7963]  exc_page_fault+0x6a/0xc0
[  112.313480][ T7963]  asm_exc_page_fault+0x26/0x30
[  112.313489][ T7963] RIP: 0033:0x7f717655d60e
[  112.313498][ T7963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  112.313505][ T7963] RSP: 002b:00007fff3bd1c158 EFLAGS: 00010246
[  112.313514][ T7963] RAX: 0000000000000000 RBX: 000055557d791500 RCX: 00007f717655d60e
[  112.313519][ T7963] RDX: 00007fff3bd1c1b0 RSI: 0000000000000000 RDI: 0000000000000000
[  112.313524][ T7963] RBP: 00007f7176817da0 R08: 0000000000000000 R09: 0000000000000000
[  112.313528][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001b6c5
[  112.313533][ T7963] R13: 00007f7176815fac R14: 000000000001b3b8 R15: 00007fff3bd1c2e0
[  112.313547][ T7963]  </TASK>
[  112.313550][ T7963] memory: usage 307200kB, limit 307200kB, failcnt 2156
[  112.428939][ T7963] memory+swap: usage 307300kB, limit 9007199254740988kB, failcnt 0
[  112.431446][ T7963] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  112.433807][ T7963] Memory cgroup stats for /syz1:
[  112.434205][ T7963] cache 0
[  112.446094][ T7963] rss 0
[  112.447050][ T7963] rss_huge 0
[  112.448220][ T7963] shmem 0
[  112.449260][ T7963] mapped_file 0
[  112.455381][ T7963] dirty 0
[  112.456386][ T7963] writeback 0
[  112.482529][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'.
[  112.491702][ T7963] workingset_refault_anon 1
[  112.493733][ T7963] workingset_refault_file 0
[  112.495515][ T7963] swap 102400
[  112.504525][ T7963] swapcached 126976
[  112.508464][ T7963] pgpgin 24098
[  112.514980][ T7963] pgpgout 24095
[  112.519916][ T7963] pgfault 56271
[  112.523152][ T7963] pgmajfault 1
[  112.524595][ T7963] inactive_anon 8192
[  112.535642][ T7963] active_anon 4096
[  112.541637][ T7963] inactive_file 0
[  112.555386][ T7963] active_file 0
[  112.560711][ T7963] unevictable 0
[  112.565616][ T7963] hierarchical_memory_limit 314572800
[  112.572170][ T7963] hierarchical_memsw_limit 9223372036854771712
[  112.579956][ T7963] total_cache 0
[  112.586774][ T7963] total_rss 0
[  112.588721][ T7963] total_rss_huge 0
[  112.591557][ T7963] total_shmem 0
[  112.592644][ T7963] total_mapped_file 0
[  112.600204][ T7963] total_dirty 0
[  112.601393][ T7963] total_writeback 0
[  112.606935][ T7963] total_workingset_refault_anon 1
[  112.616206][ T7963] total_workingset_refault_file 0
[  112.621095][ T7963] total_swap 102400
[  112.628440][ T7963] total_swapcached 126976
[  112.629828][ T7963] total_pgpgin 24098
[  112.635042][ T7963] total_pgpgout 24095
[  112.636440][ T7963] total_pgfault 56271
[  112.645578][ T7963] total_pgmajfault 1
[  112.653439][ T7963] total_inactive_anon 8192
[  112.658432][ T7963] total_active_anon 4096
[  112.663969][ T7963] total_inactive_file 0
[  112.670725][ T7963] total_active_file 0
[  112.672108][ T7963] total_unevictable 0
[  112.679097][ T7963] anon_cost 0
[  112.680394][ T7963] file_cost 0
[  112.691069][ T7963] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.926,pid=7963,uid=0
[  112.712256][ T7963] Memory cgroup out of memory: Killed process 7963 (syz.1.926) total-vm:102160kB, anon-rss:1248kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  113.070155][ T8017] netlink: 19 bytes leftover after parsing attributes in process `syz.1.953'.
[  113.093437][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'.
[  113.170914][ T8023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.956'.
[  113.192350][ T8023] ip6gre1: entered promiscuous mode
[  113.194307][ T8023] ip6gre1: entered allmulticast mode
[  113.198456][ T5446] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.203110][ T5446] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.228897][  T797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.378440][ T8036] ieee802154 phy0 wpan0: encryption failed: -22
[  113.439531][ T8044] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  113.551420][ T8051] netlink: 240 bytes leftover after parsing attributes in process `syz.0.962'.
[  113.560726][ T8053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.622288][ T8057] xt_l2tp: invalid flags combination: 8
[  113.993887][ T8074] netlink: 'syz.1.978': attribute type 3 has an invalid length.
[  113.998277][  T797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.188872][ T8084] IPVS: Error connecting to the multicast addr
[  114.229727][  T797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.409457][ T8094] netlink: 'syz.0.987': attribute type 10 has an invalid length.
[  114.412539][ T8094] netlink: 224 bytes leftover after parsing attributes in process `syz.0.987'.
[  114.416342][ T8093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.625597][ T8184] vxcan3: entered promiscuous mode
[  116.120403][ T8214] netlink: 'syz.1.1031': attribute type 2 has an invalid length.
[  116.123810][ T8214] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1031'.
[  116.628124][ T5001] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  116.644916][ T7431] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.655931][ T7431] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.665736][ T7431] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.679053][ T7431] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.216586][ T8289] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  117.427589][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.849856][ T8301] syzkaller1: entered promiscuous mode
[  117.852582][ T8301] syzkaller1: entered allmulticast mode
[  118.163913][ T8312] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1076'.
[  118.228857][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'.
[  118.382765][ T8331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1082'.
[  118.703223][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'.
[  118.759667][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'.
[  118.810957][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'.
[  118.900713][ T8366] netlink: 'syz.0.1097': attribute type 1 has an invalid length.
[  119.107788][ T8375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1100'.
[  119.590793][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'.
[  119.594401][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'.
[  119.599241][ T8389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1105'.
[  120.564470][ T8424] syzkaller1: entered promiscuous mode
[  120.566685][ T8424] syzkaller1: entered allmulticast mode
[  121.148335][ T8449] netlink: 'syz.2.1128': attribute type 9 has an invalid length.
[  121.162448][ T8451] ieee802154 phy0 wpan0: encryption failed: -22
[  121.841596][ T8480] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  122.045687][ T8493] syzkaller0: entered promiscuous mode
[  122.052648][ T8493] syzkaller0: entered allmulticast mode
[  122.515848][ T8530] syzkaller0: entered promiscuous mode
[  122.519260][ T8530] syzkaller0: entered allmulticast mode
[  122.530510][ T8530] sch_tbf: burst 185 is lower than device syzkaller0 mtu (1500) !
[  122.911449][ T8543] syzkaller1: entered promiscuous mode
[  122.913638][ T8543] syzkaller1: entered allmulticast mode
[  123.021992][ T8549] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  123.483586][ T8567] __nla_validate_parse: 7 callbacks suppressed
[  123.483603][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'.
[  124.104276][ T8579] syzkaller0: entered promiscuous mode
[  124.106646][ T8579] syzkaller0: entered allmulticast mode
[  125.016978][ T8601] netlink: 'syz.2.1195': attribute type 1 has an invalid length.
[  125.025817][ T8601] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1195'.
[  125.407442][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'.
[  125.414850][ T5721] IPVS: starting estimator thread 0...
[  125.497427][ T8620] IPVS: using max 64 ests per chain, 153600 per kthread
[  125.753847][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'.
[  126.148174][ T8657] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  126.148174][ T8657] Please contact the netfilter-devel mailing list or update your nftables rules.
[  126.286977][ T8667] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  126.298646][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.303796][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.311453][ T8669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.316465][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.392948][ T8675] netlink: 'syz.2.1221': attribute type 3 has an invalid length.
[  126.557462][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  126.624670][ T8689] geneve2: entered allmulticast mode
[  126.954408][ T8709] tipc: Started in network mode
[  126.956002][ T8709] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  126.961978][ T8709] tipc: Enabled bearer <udp:syz0>, priority 10
[  127.101166][ T8704] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  127.741904][ T8751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1250'.
[  127.975707][ T8769] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1259'.
[  128.087811][  T797] tipc: Node number set to 4269801491
[  128.454200][ T8785] syzkaller0: entered promiscuous mode
[  128.456431][ T8785] syzkaller0: entered allmulticast mode
[  129.560741][ T8830] syzkaller0: entered promiscuous mode
[  129.566904][ T8830] syzkaller0: entered allmulticast mode
[  129.581351][ T8832] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  129.623175][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'.
[  129.755842][ T8840] syzkaller1: entered promiscuous mode
[  129.759902][ T8840] syzkaller1: entered allmulticast mode
[  129.776050][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.858611][ T8844] netlink: 'syz.1.1293': attribute type 1 has an invalid length.
[  129.861112][ T8844] netlink: 'syz.1.1293': attribute type 2 has an invalid length.
[  129.863497][ T8844] netlink: 'syz.1.1293': attribute type 1 has an invalid length.
[  130.033136][ T8852] syz_tun: entered allmulticast mode
[  130.081016][ T8854] netlink: 'syz.0.1298': attribute type 1 has an invalid length.
[  130.098986][ T8851] syz_tun: left allmulticast mode
[  130.191745][ T8863] openvswitch: netlink: IP tunnel dst address not specified
[  130.223374][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1300'.
[  130.255732][ T5001] Bluetooth: hci2: link tx timeout
[  130.261854][ T5001] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  130.266675][ T5001] Bluetooth: hci2: link tx timeout
[  130.268849][ T5001] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  130.283974][ T8865] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  130.289981][ T8865] CPU: 0 UID: 0 PID: 8865 Comm: syz.0.1301 Not tainted syzkaller #0 PREEMPT(full) 
[  130.290002][ T8865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.290012][ T8865] Call Trace:
[  130.290018][ T8865]  <TASK>
[  130.290025][ T8865]  dump_stack_lvl+0xe8/0x150
[  130.290052][ T8865]  sysfs_warn_dup+0x8e/0xa0
[  130.290074][ T8865]  sysfs_do_create_link_sd+0xc0/0x110
[  130.290096][ T8865]  device_add_class_symlinks+0x1cf/0x240
[  130.290118][ T8865]  device_add+0x475/0xbb0
[  130.290140][ T8865]  wiphy_register+0x1dc5/0x2dc0
[  130.290175][ T8865]  ? __pfx_wiphy_register+0x10/0x10
[  130.290197][ T8865]  ? __pfx_netdev_run_todo+0x10/0x10
[  130.290220][ T8865]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  130.290243][ T8865]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  130.290269][ T8865]  ieee80211_register_hw+0x3d82/0x4a70
[  130.290303][ T8865]  ? ieee80211_register_hw+0x1981/0x4a70
[  130.290340][ T8865]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  130.290364][ T8865]  ? __asan_memset+0x22/0x50
[  130.290383][ T8865]  ? __hrtimer_setup+0x1b7/0x260
[  130.290400][ T8865]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  130.290421][ T8865]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  130.290461][ T8865]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  130.290475][ T8865]  ? kstrndup+0xbf/0x160
[  130.290496][ T8865]  hwsim_new_radio_nl+0xf6a/0x1c00
[  130.290529][ T8865]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  130.290561][ T8865]  ? rcu_is_watching+0x15/0xb0
[  130.290580][ T8865]  ? trace_kmalloc+0x2a/0xf0
[  130.290603][ T8865]  ? __nla_parse+0x40/0x60
[  130.290629][ T8865]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  130.290646][ T8865]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  130.290668][ T8865]  genl_family_rcv_msg_doit+0x22a/0x330
[  130.290690][ T8865]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  130.290749][ T8865]  ? bpf_lsm_capable+0x9/0x20
[  130.290764][ T8865]  ? security_capable+0x7e/0x2c0
[  130.290789][ T8865]  genl_rcv_msg+0x61c/0x7a0
[  130.290808][ T8865]  ? __pfx_genl_rcv_msg+0x10/0x10
[  130.290823][ T8865]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  130.290852][ T8865]  netlink_rcv_skb+0x232/0x4b0
[  130.290872][ T8865]  ? __pfx_genl_rcv_msg+0x10/0x10
[  130.290888][ T8865]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  130.290920][ T8865]  ? down_read+0x270/0x2e0
[  130.290933][ T8865]  ? genl_rcv+0xd/0x40
[  130.290948][ T8865]  genl_rcv+0x28/0x40
[  130.290961][ T8865]  netlink_unicast+0x75c/0x8e0
[  130.290988][ T8865]  netlink_sendmsg+0x813/0xb40
[  130.291016][ T8865]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.291038][ T8865]  ? aa_sock_msg_perm+0xf1/0x1b0
[  130.291059][ T8865]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  130.291081][ T8865]  ____sys_sendmsg+0x972/0x9f0
[  130.291101][ T8865]  ? __might_fault+0xaf/0x130
[  130.291125][ T8865]  ? __pfx_____sys_sendmsg+0x10/0x10
[  130.291154][ T8865]  ? import_iovec+0x73/0xa0
[  130.291178][ T8865]  ___sys_sendmsg+0x2a5/0x360
[  130.291197][ T8865]  ? __lock_acquire+0x6b5/0x2cf0
[  130.291217][ T8865]  ? __pfx____sys_sendmsg+0x10/0x10
[  130.291243][ T8865]  ? futex_wake+0x4ac/0x580
[  130.291283][ T8865]  ? __fget_files+0x2a/0x420
[  130.291301][ T8865]  ? __fget_files+0x3a0/0x420
[  130.291327][ T8865]  __x64_sys_sendmsg+0x1bd/0x2a0
[  130.291350][ T8865]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  130.291378][ T8865]  ? rcu_is_watching+0x15/0xb0
[  130.291401][ T8865]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.291416][ T8865]  do_syscall_64+0x15f/0xf80
[  130.291437][ T8865]  ? trace_irq_disable+0x3b/0x140
[  130.291463][ T8865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.291477][ T8865] RIP: 0033:0x7f266319cdd9
[  130.291515][ T8865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.291528][ T8865] RSP: 002b:00007f266406e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.291555][ T8865] RAX: ffffffffffffffda RBX: 00007f2663415fa0 RCX: 00007f266319cdd9
[  130.291566][ T8865] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  130.291575][ T8865] RBP: 00007f2663232d69 R08: 0000000000000000 R09: 0000000000000000
[  130.291583][ T8865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.291591][ T8865] R13: 00007f2663416038 R14: 00007f2663415fa0 R15: 00007ffefbb38358
[  130.291614][ T8865]  </TASK>
[  130.529740][ T8875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1308'.
[  130.709970][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'.
[  130.726438][ T8891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1313'.
[  130.900328][ T8899] dvmrp0: entered allmulticast mode
[  131.343823][ T8929] syzkaller0: entered promiscuous mode
[  131.348458][ T8929] syzkaller0: entered allmulticast mode
[  132.157245][ T8968] syzkaller0: entered promiscuous mode
[  132.160973][ T8968] syzkaller0: entered allmulticast mode
[  132.199188][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'.
[  132.202658][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'.
[  132.308382][ T5001] Bluetooth: hci2: command 0x0405 tx timeout
[  132.642551][ T8993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1357'.
[  132.646359][ T8993] unsupported nlmsg_type 40
[  132.778105][ T9003] openvswitch: netlink: Missing valid actions attribute.
[  132.783325][ T9003] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.008001][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1371'.
[  133.240612][ T9038] syzkaller0: entered promiscuous mode
[  133.242927][ T9038] syzkaller0: entered allmulticast mode
[  133.364181][ T9045] syzkaller0: entered promiscuous mode
[  133.369005][ T9045] syzkaller0: entered allmulticast mode
[  133.563316][ T9053] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.577633][ T9053] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.671609][ T9064] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1391'.
[  133.682119][ T9064] netlink: 'syz.2.1391': attribute type 9 has an invalid length.
[  133.704087][ T9053] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.711497][ T9053] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.839522][ T9073] netlink: 'syz.2.1393': attribute type 10 has an invalid length.
[  133.847266][ T9053] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.856413][ T9053] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.881657][ T9073] 8021q: adding VLAN 0 to HW filter on device team0
[  133.891716][ T9073] bond0: (slave team0): Enslaving as an active interface with an up link
[  133.942786][ T9053] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.945770][ T9053] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.040986][ T7431] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.047583][ T7431] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.059718][ T7431] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.062658][ T7431] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.075581][ T7431] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.079692][ T7431] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.091613][ T7431] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.095000][ T7431] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.271038][ T9091] netlink: 'syz.0.1404': attribute type 11 has an invalid length.
[  134.387672][ T5001] Bluetooth: hci2: command 0x0405 tx timeout
[  134.491013][ T9108] vlan0: entered promiscuous mode
[  134.821984][ T9132] bond0: Caught tx_queue_len zero misconfig
[  134.903248][ T9138] __nla_validate_parse: 4 callbacks suppressed
[  134.903261][ T9138] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1427'.
[  134.921497][ T9144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.340672][ T9182] x_tables: unsorted entry at hook 2
[  135.430831][ T9191] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1452'.
[  135.434854][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1452'.
[  135.764721][ T9212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1460'.
[  137.439928][ T1112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  137.784457][ T9243] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1471'.
[  138.069361][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  138.071842][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  138.910651][ T9218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  138.916505][ T9224] netlink: 'syz.1.1464': attribute type 1 has an invalid length.
[  138.921257][ T9224] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1464'.
[  138.924801][ T9224] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1464'.
[  138.932686][ T9224] netlink: 'syz.1.1464': attribute type 1 has an invalid length.
[  138.941671][ T9224] netlink: 634 bytes leftover after parsing attributes in process `syz.1.1464'.
[  139.193759][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1478'.
[  139.208539][ T9259] trusted_key: syz.2.1477 sent an empty control message without MSG_MORE.
[  139.285608][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'.
[  140.134081][ T9272] syzkaller0: entered promiscuous mode
[  140.136418][ T9272] syzkaller0: entered allmulticast mode
[  140.218675][ T9274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1485'.
[  140.350578][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1488'.
[  140.361237][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1488'.
[  140.368188][ T9280] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1488'.
[  140.460552][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'.
[  140.481036][ T9288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1492'.
[  140.491137][ T9288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1492'.
[  140.495930][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'.
[  140.580922][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.634678][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'.
[  141.325615][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'.
[  141.330116][ T9362] netlink: 'syz.0.1528': attribute type 13 has an invalid length.
[  141.804021][   T56] block nbd0: Wrong magic (0x0)
[  141.814727][ T9380] syzkaller0: entered promiscuous mode
[  141.824902][ T9380] syzkaller0: entered allmulticast mode
[  141.898040][ T9385] Bluetooth: MGMT ver 1.23
[  142.118046][ T9397] syzkaller0: entered promiscuous mode
[  142.120245][ T9397] syzkaller0: entered allmulticast mode
[  142.159181][ T9399] netlink: 'syz.1.1542': attribute type 9 has an invalid length.
[  142.163960][   T33] audit: type=1800 audit(1778453562.429:2): pid=9388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1536" name="memory.events" dev="tmpfs" ino=2445 res=0 errno=0
[  142.183039][ T9399] bridge1: entered allmulticast mode
[  142.578514][ T9431] sctp: [Deprecated]: syz.0.1556 (pid 9431) Use of int in max_burst socket option.
[  142.578514][ T9431] Use struct sctp_assoc_value instead
[  142.937588][ T9449] xt_CT: You must specify a L4 protocol and not use inversions on it
[  143.360812][ T9473] RDS: rds_bind could not find a transport for 0:b3::, load rds_tcp or rds_rdma?
[  143.602032][ T9478] veth5: entered allmulticast mode
[  143.607872][ T9478] bond3: (slave veth5): Enslaving as an active interface with an up link
[  143.654213][ T9484] bond3 (unregistering): (slave veth5): Releasing backup interface
[  143.679093][ T9484] bond3 (unregistering): Released all slaves
[  143.763001][ T9499] x_tables: duplicate entry at hook 2
[  143.820904][ T9501] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.885634][ T9506] tipc: New replicast peer: 172.20.20.170
[  143.889028][ T9506] tipc: Enabled bearer <udp:syz2>, priority 10
[  143.901793][ T9501] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.985966][ T9501] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.068970][ T9501] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.202920][ T5446] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.215716][ T5446] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.236276][ T7431] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.259725][ T7431] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.455706][ T9539] tc_dump_action: action bad kind
[  144.467538][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  144.832786][ T9560] netlink: 'syz.0.1614': attribute type 1 has an invalid length.
[  145.291623][ T9582] batadv_slave_1: entered promiscuous mode
[  145.295397][ T9581] batadv_slave_1: left promiscuous mode
[  145.510374][ T9590] __nla_validate_parse: 7 callbacks suppressed
[  145.510393][ T9590] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1626'.
[  145.527060][ T9590] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  145.569692][   T33] audit: type=1804 audit(1778453565.829:3): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1629" name="/newroot/516/memory.events" dev="tmpfs" ino=2623 res=1 errno=0
[  145.582086][   T33] audit: type=1800 audit(1778453565.849:4): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1629" name="memory.events" dev="tmpfs" ino=2623 res=0 errno=0
[  145.593724][   T33] audit: type=1804 audit(1778453565.849:5): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1629" name="/newroot/516/memory.events" dev="tmpfs" ino=2623 res=1 errno=0
[  145.982188][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'.
[  146.012197][ T9617] ip6tnl2: entered allmulticast mode
[  146.251033][ T9637] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1651'.
[  146.450767][ T9652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1657'.
[  146.786005][ T9672] raw_sendmsg: syz.2.1666 forgot to set AF_INET. Fix it!
[  146.908408][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1671'.
[  147.706739][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1688'.
[  147.761715][   T56] block nbd1: Receive control failed (result -1)
[  147.809679][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'.
[  148.736392][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.739622][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.869563][ T9759] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.881514][ T9759] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.952775][ T7431] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  148.956049][ T7431] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.964920][ T7431] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  148.970209][ T7431] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.996522][ T7431] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.008475][ T7431] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.017837][ T7431] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.021408][ T7431] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.435222][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'.
[  149.443791][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'.
[  149.455954][ T9783] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1709'.
[  149.733521][ T9794] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.820184][ T9794] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.927439][ T5446] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.930617][ T5446] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.979653][ T5446] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.983313][ T5446] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.989469][ T5446] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.994775][ T5446] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.007158][ T5446] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.018064][ T5446] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.270649][ T9828] syz_tun: entered allmulticast mode
[  150.275012][ T9827] syz_tun: left allmulticast mode
[  150.722390][ T9851] __nla_validate_parse: 1 callbacks suppressed
[  150.722403][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1739'.
[  150.765216][ T9853] batadv_slave_1: entered promiscuous mode
[  150.768051][ T9852] batadv_slave_1: left promiscuous mode
[  150.812582][ T9855] xt_hashlimit: max too large, truncated to 1048576
[  151.706501][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1765'.
[  151.735049][ T9906] bond3: entered promiscuous mode
[  151.738868][ T9906] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.756504][ T9906] bridge2: entered promiscuous mode
[  151.762787][ T9906] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  151.774657][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'.
[  151.791506][ T9906] bond3 (unregistering): (slave bridge2): Releasing backup interface
[  151.795781][ T9906] bridge2: left promiscuous mode
[  151.800634][ T9906] bond3 (unregistering): Released all slaves
[  152.378624][ T9929] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  152.385299][ T9929] syzkaller0: entered promiscuous mode
[  152.390914][ T9929] syzkaller0: entered allmulticast mode
[  152.483068][ T9931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1775'.
[  152.502461][ T9931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1775'.
[  152.570011][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'.
[  152.588505][ T9935] netlink: 'syz.1.1777': attribute type 1 has an invalid length.
[  152.594194][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'.
[  152.814482][   T10] IPVS: starting estimator thread 0...
[  152.816761][ T9945] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.1781'.
[  152.818227][ T9948] IPVS: sh: FWM 3 0x00000003 - no destination available
[  152.820458][ T9945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1781'.
[  152.826270][ T9945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1781'.
[  152.917511][ T9949] IPVS: using max 58 ests per chain, 139200 per kthread
[  153.133772][ T9967] syzkaller0: entered promiscuous mode
[  153.135480][ T9967] syzkaller0: entered allmulticast mode
[  153.279943][ T9981] ipip0: entered promiscuous mode
[  153.286758][ T9981] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip0
[  153.290792][ T9981] gretap1: entered promiscuous mode
[  153.293376][ T9981] gretap1: entered allmulticast mode
[  153.312646][ T9984] netlink: 'syz.0.1799': attribute type 11 has an invalid length.
[  153.486383][ T9997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.494283][ T9997] syzkaller0: entered promiscuous mode
[  153.504740][ T9997] syzkaller0: entered allmulticast mode
[  153.548093][ T9997] tipc: Resetting bearer <eth:syzkaller0>
[  153.554360][ T9999] netlink: 'syz.0.1804': attribute type 1 has an invalid length.
[  153.559818][ T9997] tipc: Resetting bearer <eth:syzkaller0>
[  153.578353][ T9997] tipc: Disabling bearer <eth:syzkaller0>
[  153.686321][T10003] netlink: 'syz.0.1806': attribute type 10 has an invalid length.
[  153.689871][T10003] ipvlan0: entered allmulticast mode
[  153.692015][T10003] veth0_vlan: entered allmulticast mode
[  153.699730][T10003] team0: Device ipvlan0 failed to register rx_handler
[  154.747671][T10063] syzkaller0: entered promiscuous mode
[  154.749912][T10063] syzkaller0: entered allmulticast mode
[  155.424813][T10080] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  156.148806][T10088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.193371][T10089] syzkaller0: entered promiscuous mode
[  156.195292][T10089] syzkaller0: entered allmulticast mode
[  156.197663][T10089] tipc: Resetting bearer <eth:syzkaller0>
[  156.207538][T10085] tipc: Resetting bearer <eth:syzkaller0>
[  157.555180][T10085] tipc: Disabling bearer <eth:syzkaller0>
[  157.573957][T10096] __nla_validate_parse: 6 callbacks suppressed
[  157.573974][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'.
[  157.591729][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'.
[  157.632082][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'.
[  157.685890][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1842'.
[  158.159495][T10143] IPVS: persistence engine module ip_vs_pe_ not found
[  158.167428][T10147] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  158.319697][T10156] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  158.322249][T10156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.599382][T10178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1876'.
[  158.651330][T10182] syzkaller0: entered promiscuous mode
[  158.653507][T10182] syzkaller0: entered allmulticast mode
[  158.795053][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'.
[  158.797995][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1880'.
[  158.802656][T10194] netlink: 'syz.1.1880': attribute type 7 has an invalid length.
[  158.826845][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'.
[  158.826886][ T7431] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  158.835017][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1880'.
[  158.840982][T10194] netlink: 'syz.1.1880': attribute type 7 has an invalid length.
[  158.845128][ T7431] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  158.854780][ T7431] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  158.862337][ T7431] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  158.922349][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1884'.
[  160.312693][T10321] netlink: 'syz.2.1924': attribute type 3 has an invalid length.
[  160.846174][T10341] openvswitch: netlink: Message has 4 unknown bytes.
[  160.850890][T10341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.030100][T10352] ip6tnl0: Caught tx_queue_len zero misconfig
[  161.348372][   T33] audit: type=1800 audit(1778453581.609:6): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1943" name="memory.events" dev="tmpfs" ino=3322 res=0 errno=0
[  161.385420][   T33] audit: type=1804 audit(1778453581.609:7): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1943" name="/newroot/655/memory.events" dev="tmpfs" ino=3322 res=1 errno=0
[  161.939731][T10410] xt_TPROXY: Can be used only with -p tcp or -p udp
[  162.843764][T10476] __nla_validate_parse: 2 callbacks suppressed
[  162.843776][T10476] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1987'.
[  162.862420][T10476] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  163.499960][T10512] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2005'.
[  163.525179][T10514] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.586044][T10517] debugfs: 'netdev:syzkaller0' already exists in 'phy6'
[  163.602815][T10514] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.635372][T10521] netlink: 'syz.1.2009': attribute type 62 has an invalid length.
[  163.682958][T10514] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.737744][T10514] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.874516][ T7428] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.888036][ T7428] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.913119][ T7428] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.942227][ T7429] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.135127][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2023'.
[  164.164908][T10551] IPVS: set_ctl: invalid protocol: 59 100.1.1.3:20002
[  164.251940][T10558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.495533][ T7434] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.509378][ T7434] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.514844][ T7434] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.518466][ T7434] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.559259][T10581] syzkaller0: entered promiscuous mode
[  164.570101][T10581] syzkaller0: entered allmulticast mode
[  164.636378][T10586] sctp: [Deprecated]: syz.1.2037 (pid 10586) Use of int in maxseg socket option.
[  164.636378][T10586] Use struct sctp_assoc_value instead
[  165.389657][T10604] netlink: 'syz.2.2045': attribute type 22 has an invalid length.
[  165.397058][T10604] netlink: 'syz.2.2045': attribute type 1 has an invalid length.
[  165.402697][T10604] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2045'.
[  165.520202][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'.
[  165.594938][T10616] netlink: 'syz.2.2051': attribute type 1 has an invalid length.
[  165.673994][T10616] 8021q: adding VLAN 0 to HW filter on device bond3
[  165.698654][T10620] vlan0: entered allmulticast mode
[  165.704237][T10620] veth0_to_bond: entered allmulticast mode
[  165.710220][T10620] bond3: (slave vlan0): Opening slave failed
[  166.488964][T10645] syzkaller0: entered promiscuous mode
[  166.490732][T10645] syzkaller0: entered allmulticast mode
[  166.936438][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2083'.
[  166.940699][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2083'.
[  167.036144][T10693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.038927][T10693] syzkaller0: entered promiscuous mode
[  167.040696][T10693] syzkaller0: entered allmulticast mode
[  167.056674][T10693] tipc: Resetting bearer <eth:syzkaller0>
[  167.061982][T10692] tipc: Resetting bearer <eth:syzkaller0>
[  167.074293][T10692] tipc: Disabling bearer <eth:syzkaller0>
[  167.262032][T10701] syzkaller0: entered promiscuous mode
[  167.264193][T10701] syzkaller0: entered allmulticast mode
[  167.389492][T10708] syzkaller1: entered promiscuous mode
[  167.391271][T10708] syzkaller1: entered allmulticast mode
[  167.533832][T10714] pim6reg: entered allmulticast mode
[  167.536404][T10714] pim6reg: left allmulticast mode
[  168.633810][T10755] netlink: 'syz.1.2114': attribute type 1 has an invalid length.
[  168.636949][T10755] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2114'.
[  168.900748][T10768] netlink: 'syz.1.2120': attribute type 4 has an invalid length.
[  168.905171][T10768] netlink: 'syz.1.2120': attribute type 8 has an invalid length.
[  168.909905][T10768] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2120'.
[  169.138020][T10779] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2125'.
[  169.141625][T10779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2125'.
[  169.884776][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'.
[  169.898273][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'.
[  169.936165][T10804] netlink: 'syz.1.2133': attribute type 10 has an invalid length.
[  169.992813][T10808] gre3: entered promiscuous mode
[  170.084083][T10812] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  170.122141][T10812] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  170.134245][T10812] 8021q: adding VLAN 0 to HW filter on device eth0
[  170.139409][  T888] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  170.144241][T10812] 8021q: adding VLAN 0 to HW filter on device eth1
[  170.149889][T10812] 8021q: adding VLAN 0 to HW filter on device eth2
[  170.153957][T10812] 8021q: adding VLAN 0 to HW filter on device eth3
[  170.160520][  T768] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.162335][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2139'.
[  170.163293][  T768] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.189638][ T7429] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  170.195707][ T7429] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  170.205348][ T7429] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  170.212616][ T7429] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  170.558396][   T33] audit: type=1804 audit(1778453590.819:8): pid=10841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2151" name="/newroot/711/memory.events" dev="tmpfs" ino=3608 res=1 errno=0
[  170.575288][   T33] audit: type=1800 audit(1778453590.829:9): pid=10841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2151" name="memory.events" dev="tmpfs" ino=3608 res=0 errno=0
[  170.599607][T10841] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  170.605043][T10841] bond1 (unregistering): Released all slaves
[  170.870239][  T888] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  171.060060][T10856] ieee802154 phy0 wpan0: encryption failed: -22
[  171.130574][T10860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2159'.
[  171.376955][T10871] netlink: 'syz.1.2164': attribute type 29 has an invalid length.
[  171.381883][T10871] netlink: 'syz.1.2164': attribute type 29 has an invalid length.
[  171.385439][T10871] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2164'.
[  171.391930][T10871] unsupported nla_type 58
[  171.898556][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2174'.
[  171.957401][T10907] bridge_slave_0: left allmulticast mode
[  171.959989][T10907] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.975462][T10907] bridge_slave_1: left allmulticast mode
[  171.980789][T10907] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.991362][T10907] bond0: (slave bond_slave_0): Releasing backup interface
[  171.998666][T10907] bond0: (slave bond_slave_1): Releasing backup interface
[  172.010013][T10907] team0: Port device team_slave_0 removed
[  172.014807][T10907] team0: Port device team_slave_1 removed
[  172.021065][T10907] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  173.009055][T10985] netlink: 'syz.2.2215': attribute type 3 has an invalid length.
[  173.225956][T10999] netlink: 'syz.0.2222': attribute type 1 has an invalid length.
[  173.242081][T10999] netlink: 'syz.0.2222': attribute type 1 has an invalid length.
[  173.733801][T11034] __nla_validate_parse: 16 callbacks suppressed
[  173.733814][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2234'.
[  173.892831][T11041] bond3: option arp_interval: invalid value (18446744073709551615)
[  173.898059][T11041] bond3: option arp_interval: allowed values 0 - 2147483647
[  173.903931][T11041] bond3 (unregistering): Released all slaves
[  173.925690][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'.
[  173.936030][T11046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2234'.
[  173.956775][T11046] ip6gretap0: entered promiscuous mode
[  173.963865][T11046] syz_tun: entered promiscuous mode
[  173.969090][T11046] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  173.973818][T11046] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  174.814632][T11073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.816840][T11073] IPv6: NLM_F_CREATE should be set when creating new route
[  174.819274][T11073] IPv6: NLM_F_CREATE should be set when creating new route
[  174.822052][T11073] IPv6: NLM_F_CREATE should be set when creating new route
[  174.836032][T11073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  175.096781][T11094] xt_CT: You must specify a L4 protocol and not use inversions on it
[  175.459820][T11124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2276'.
[  175.752739][T11152] sctp: [Deprecated]: syz.0.2288 (pid 11152) Use of struct sctp_assoc_value in delayed_ack socket option.
[  175.752739][T11152] Use struct sctp_sack_info instead
[  175.767029][T11156] netlink: 'syz.2.2286': attribute type 10 has an invalid length.
[  175.781893][T11156] syz_tun: entered promiscuous mode
[  175.802419][T11156] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  175.813579][T11149] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2286'.
[  175.825143][T11149] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2286'.
[  175.840378][T11149] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2286'.
[  175.970681][T11166] netlink: 'syz.2.2294': attribute type 14 has an invalid length.
[  177.009611][T11205] netlink: 'syz.2.2309': attribute type 30 has an invalid length.
[  177.151364][T11211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2312'.
[  177.825709][T11250] bond4: option arp_validate: invalid value (18446744073709551613)
[  177.834951][T11250] bond4 (unregistering): Released all slaves
[  178.255924][T11277] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  178.462560][T11290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2345'.
[  179.253796][T11336] netlink: 'syz.1.2366': attribute type 1 has an invalid length.
[  179.256251][T11336] netlink: 'syz.1.2366': attribute type 1 has an invalid length.
[  179.259363][T11336] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2366'.
[  179.530750][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'.
[  179.544813][T11354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.667446][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  180.017721][T11389] erspan1: entered promiscuous mode
[  180.019301][T11389] erspan1: entered allmulticast mode
[  180.105549][T11397] netlink: 'syz.0.2393': attribute type 2 has an invalid length.
[  180.110527][T11397] netlink: 'syz.0.2393': attribute type 2 has an invalid length.
[  180.719127][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  181.201963][T11466] netlink: 'syz.2.2424': attribute type 41 has an invalid length.
[  181.287516][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  181.488182][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2434'.
[  181.545835][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'.
[  181.707208][T11498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2439'.
[  182.742394][T11565] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  182.881843][T11574] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2472'.
[  183.009237][T11581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2476'.
[  183.120047][T11591] ieee802154 phy0 wpan0: encryption failed: -22
[  183.658538][T11625] bridge_slave_1: left promiscuous mode
[  183.734957][T11625] ipvlan0: left allmulticast mode
[  183.738002][T11625] veth0_vlan: left allmulticast mode
[  183.868854][T11625] ip6gre1: left promiscuous mode
[  183.870552][T11625] ip6gre1: left allmulticast mode
[  183.930321][T11625] geneve2: left allmulticast mode
[  183.962752][T11625] gre3: left promiscuous mode
[  183.965915][T11625] erspan1: left promiscuous mode
[  183.967830][T11625] erspan1: left allmulticast mode
[  183.990152][ T7428] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.994203][ T7428] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.002079][ T7428] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.008507][ T7428] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.014923][ T7428] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.022493][ T7428] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.033543][ T7428] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.045064][ T7428] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.328803][T11657] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2510'.
[  184.336457][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2510'.
[  184.347417][T11657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2510'.
[  184.733531][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'.
[  188.449854][T11714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  188.699666][T11754] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2548'.
[  189.452236][T11776] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2560'.
[  189.645976][T11790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.233055][T11903] netlink: 'syz.0.2616': attribute type 2 has an invalid length.
[  191.236047][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2616'.
[  191.350476][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  191.521802][T11921] xt_bpf: check failed: parse error
[  192.106060][T11961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2642'.
[  192.115592][T11963] syzkaller0: entered promiscuous mode
[  192.120539][T11963] syzkaller0: entered allmulticast mode
[  192.452182][T11987] netlink: 'syz.1.2654': attribute type 10 has an invalid length.
[  192.457822][T11987] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.2654'.
[  192.609896][T11997] syzkaller1: entered allmulticast mode
[  192.613452][T11999] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2660'.
[  193.057492][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2671'.
[  193.374501][T12032] netlink: 'syz.0.2675': attribute type 1 has an invalid length.
[  193.414569][T12034] smc: net device lo applied user defined pnetid SYZ2
[  193.419455][T12034] smc: net device lo erased user defined pnetid SYZ2
[  193.717739][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2686'.
[  194.019073][T12077] block nbd1: reconnected socket
[  194.063395][   T55] block nbd1: Receive control failed (result -32)
[  194.145824][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'.
[  194.272524][T12105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2710'.
[  194.606967][T12135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.622855][T12138] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2726'.
[  195.898866][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'.
[  195.903000][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'.
[  195.906186][T12181] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2744'.
[  195.982636][T12187] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2747'.
[  197.660036][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2773'.
[  197.774297][T12251] netlink: 1100 bytes leftover after parsing attributes in process `syz.2.2774'.
[  197.859933][T12257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2776'.
[  198.068515][T12273] nbd: socks must be embedded in a SOCK_ITEM attr
[  198.074774][T12273] block nbd2: shutting down sockets
[  198.204376][T12282] syzkaller1: entered promiscuous mode
[  198.206314][T12282] syzkaller1: entered allmulticast mode
[  198.592139][T12306] netlink: 'syz.2.2797': attribute type 32 has an invalid length.
[  198.781625][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2804'.
[  198.785178][T12320] netlink: 'syz.2.2804': attribute type 1 has an invalid length.
[  198.790687][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2804'.
[  199.371736][T12356] netlink: 'syz.1.2820': attribute type 3 has an invalid length.
[  199.511270][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  199.513740][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  199.688703][T12371] tap0: tun_chr_ioctl cmd 1074025677
[  199.691141][T12371] tap0: linktype set to 773
[  199.980254][T12386] batadv0: entered promiscuous mode
[  199.986646][T12386] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  200.281530][T12407] netlink: 'syz.0.2838': attribute type 1 has an invalid length.
[  200.334339][T12407] 8021q: adding VLAN 0 to HW filter on device bond2
[  200.355737][T12409] bond2: (slave geneve3): making interface the new active one
[  200.393352][T12409] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  200.419840][ T5669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.424946][ T5669] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.428680][ T5669] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.432338][ T5669] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.398216][T12453] vlan0: entered allmulticast mode
[  201.401180][T12453] bond0: entered allmulticast mode
[  201.403965][T12453] bond_slave_0: entered allmulticast mode
[  201.407735][T12453] bond_slave_1: entered allmulticast mode
[  201.410209][T12453] dummy0: entered allmulticast mode
[  201.414706][T12453] team0: entered allmulticast mode
[  201.417063][T12453] team_slave_0: entered allmulticast mode
[  201.420190][T12453] team_slave_1: entered allmulticast mode
[  201.422824][T12453] syz_tun: entered allmulticast mode
[  201.559652][T12434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  201.966602][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2869'.
[  201.987607][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2869'.
[  201.990657][T12479] netlink: 'syz.1.2869': attribute type 18 has an invalid length.
[  202.031336][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2871'.
[  202.034044][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2871'.
[  202.225154][T12497] netlink: 'syz.1.2878': attribute type 3 has an invalid length.
[  202.480643][T12519] Cannot find del_set index 8192 as target
[  202.570510][T12527] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  202.584892][T12527] ip6gre1: entered allmulticast mode
[  202.588590][T12527] team0: Device ip6gre1 is of different type
[  202.663280][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'.
[  202.929198][T12550] syzkaller0: entered promiscuous mode
[  202.931406][T12550] syzkaller0: entered allmulticast mode
[  205.915564][T12673] bridge0: entered allmulticast mode
[  205.925390][T12673] pim6reg: entered allmulticast mode
[  206.688287][T12588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  207.095647][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'.
[  207.098628][T12737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2982'.
[  207.135137][T12741] netlink: 'syz.2.2983': attribute type 1 has an invalid length.
[  207.163504][T12741] bond4: (slave bridge7): making interface the new active one
[  207.176461][T12741] bond4: (slave bridge7): Enslaving as an active interface with an up link
[  208.363950][T12792] bridge_slave_0 (unregistering): left allmulticast mode
[  208.373498][T12792] bridge_slave_0 (unregistering): left promiscuous mode
[  208.376480][T12792] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.541614][T12808] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3009'.
[  208.573987][T12812] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3011'.
[  208.673042][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3015'.
[  208.799834][T12824] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  208.820522][T12824] bond3 (unregistering): Released all slaves
[  208.958422][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'.
[  209.049233][T12846] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3027'.
[  209.152691][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3031'.
[  209.155633][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'.
[  209.160436][T12854] netlink: 'syz.2.3031': attribute type 19 has an invalid length.
[  209.164551][T12854] netlink: 'syz.2.3031': attribute type 20 has an invalid length.
[  209.238609][T12860] veth9: entered allmulticast mode
[  209.244714][T12860] team0: Port device veth9 added
[  209.393065][T12870] syzkaller1: entered promiscuous mode
[  209.396012][T12870] syzkaller1: entered allmulticast mode
[  210.681607][T12922] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3051'.
[  210.815135][ T7428] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.827492][ T7434] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.834944][ T7434] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.840917][ T7434] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  211.330142][T12951] vlan1: entered promiscuous mode
[  211.466854][ T7429] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.478618][ T7429] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.489548][ T7429] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.502824][ T7429] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.365133][T13030] ieee802154 phy0 wpan0: encryption failed: -22
[  212.698339][T13052] syzkaller1: entered promiscuous mode
[  212.700744][T13052] syzkaller1: entered allmulticast mode
[  213.094909][T13066] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3105'.
[  213.099120][T13066] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3105'.
[  213.102750][T13066] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  213.193012][T13072] tun0: tun_chr_ioctl cmd 2147767507
[  213.230481][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3109'.
[  213.246971][T13076] hsr_slave_1 (unregistering): left promiscuous mode
[  213.546497][T13104] netlink: 'syz.1.3123': attribute type 8 has an invalid length.
[  213.791594][T13126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3132'.
[  214.090613][T13155] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.3144'.
[  214.128304][T13160] netlink: 'syz.1.3147': attribute type 29 has an invalid length.
[  214.181272][T13165] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3148'.
[  215.050948][T13208] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3160'.
[  215.100639][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3163'.
[  215.104098][T13212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3163'.
[  215.146475][T13216] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3165'.
[  218.752294][T13247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  218.869889][T13275] netlink: 'syz.0.3186': attribute type 4 has an invalid length.
[  218.873791][T13275] netlink: 'syz.0.3186': attribute type 4 has an invalid length.
[  218.962015][T13285] IPVS: Error connecting to the multicast addr
[  219.155686][T13307] __nla_validate_parse: 2 callbacks suppressed
[  219.155698][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3202'.
[  219.175537][T13307] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3202'.
[  219.216509][T13315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3205'.
[  219.264901][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3205'.
[  219.374134][T13326] netlink: 'syz.2.3210': attribute type 3 has an invalid length.
[  219.377652][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3210'.
[  219.570372][T13345] syzkaller0: entered promiscuous mode
[  219.572166][T13345] syzkaller0: entered allmulticast mode
[  219.703628][T13347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.736737][T13347] syzkaller0: entered promiscuous mode
[  219.739439][T13347] syzkaller0: entered allmulticast mode
[  219.742830][T13347] tipc: Resetting bearer <eth:syzkaller0>
[  219.759720][T13346] tipc: Resetting bearer <eth:syzkaller0>
[  220.086687][T13349] netlink: 'syz.0.3221': attribute type 1 has an invalid length.
[  221.217619][T13346] tipc: Disabling bearer <eth:syzkaller0>
[  221.224554][T13349] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  221.245545][   T10] tipc: Node number set to 2739534515
[  221.372305][T13362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.581691][T13379] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  221.586123][T13379] syzkaller0: entered promiscuous mode
[  221.588977][T13379] syzkaller0: entered allmulticast mode
[  221.598141][T13379] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.615886][T13378] tipc: Resetting bearer <eth:syzkaller0>
[  221.658343][T13378] tipc: Disabling bearer <eth:syzkaller0>
[  221.798190][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'.
[  221.880028][T13395] syzkaller0: entered promiscuous mode
[  221.881709][T13395] syzkaller0: entered allmulticast mode
[  225.646026][T13444] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  225.653657][T13444] tipc: Enabled bearer <udp:s>, priority 10
[  225.777484][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  225.895834][T13459] netlink: 'syz.0.3266': attribute type 1 has an invalid length.
[  226.006653][T13467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3269'.
[  226.058459][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  226.154162][T13479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.160841][T13479] syzkaller0: entered promiscuous mode
[  226.164049][T13479] syzkaller0: entered allmulticast mode
[  226.195212][T13479] tipc: Resetting bearer <eth:syzkaller0>
[  226.199767][T13478] tipc: Resetting bearer <eth:syzkaller0>
[  226.212871][T13478] tipc: Disabling bearer <eth:syzkaller0>
[  226.597482][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  226.751683][T13497] sctp: [Deprecated]: syz.0.3282 (pid 13497) Use of int in max_burst socket option.
[  226.751683][T13497] Use struct sctp_assoc_value instead
[  227.133211][T13518] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3292'.
[  227.197143][T13524] xt_HMARK: spi-set and port-set can't be combined
[  227.438719][T13539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3301'.
[  227.483498][T13541] 5n: entered promiscuous mode
[  227.512099][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3303'.
[  227.667517][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  227.865779][T13561] netlink: 'syz.1.3313': attribute type 21 has an invalid length.
[  227.873515][T13561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3313'.
[  228.353317][T13598] batman_adv: batadv0: Adding interface: dummy0
[  228.355843][T13598] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  228.367244][T13598] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  228.661087][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3335'.
[  228.717525][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  228.901612][T13623] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  229.057175][   T33] audit: type=1804 audit(1778453649.319:10): pid=13635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3347" name="/newroot/1117/memory.events" dev="tmpfs" ino=5637 res=1 errno=0
[  229.069426][   T33] audit: type=1800 audit(1778453649.319:11): pid=13635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3347" name="memory.events" dev="tmpfs" ino=5637 res=0 errno=0
[  229.084237][T13635] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  229.098983][T13635] bond3 (unregistering): Released all slaves
[  229.126116][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3351'.
[  229.699897][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3370'.
[  229.757441][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  230.723113][T13727] syzkaller0: entered promiscuous mode
[  230.725289][T13727] syzkaller0: entered allmulticast mode
[  230.797364][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  231.827450][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  232.479395][T13678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  232.542460][T13741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3388'.
[  232.842854][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3399'.
[  232.867410][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  233.232327][T13784] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3408'.
[  233.325542][T13791] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3411'.
[  233.333996][T13791] : default FDB implementation only supports local addresses
[  233.551451][T13809] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3419'.
[  233.874694][T13824] bond3: entered promiscuous mode
[  233.882026][T13824] 8021q: adding VLAN 0 to HW filter on device bond3
[  233.907457][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  234.352033][T13857] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  234.356449][T13857] bond3 (unregistering): Released all slaves
[  234.457157][T13862] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3440'.
[  234.460187][T13862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3440'.
[  234.557567][T13865] 8021q: adding VLAN 0 to HW filter on device bond6
[  234.561683][T13865] bond5: (slave bond6): Enslaving as an active interface with an up link
[  234.576451][T13865] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  234.688413][T13886] netlink: 'syz.0.3452': attribute type 32 has an invalid length.
[  234.691433][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3452'.
[  234.694695][T13886] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  234.805284][T13898] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3457'.
[  234.887227][T13906] netlink: 'syz.0.3461': attribute type 13 has an invalid length.
[  234.892130][T13906] gretap0: refused to change device tx_queue_len
[  234.894672][T13906] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  234.947541][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  235.023945][T13919] netlink: 'syz.0.3468': attribute type 3 has an invalid length.
[  235.125258][T13927] netlink: 'syz.2.3470': attribute type 13 has an invalid length.
[  235.184138][T13927] syzkaller0: entered promiscuous mode
[  235.186033][T13927] syzkaller0: entered allmulticast mode
[  235.516691][T13943] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3477'.
[  235.987529][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  237.027384][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  237.108430][T14021] syzkaller1: entered promiscuous mode
[  237.110644][T14021] syzkaller1: entered allmulticast mode
[  237.657668][T14053] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  237.661814][T14053] CPU: 1 UID: 0 PID: 14053 Comm: syz.1.3522 Not tainted syzkaller #0 PREEMPT(full) 
[  237.661835][T14053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.661846][T14053] Call Trace:
[  237.661852][T14053]  <TASK>
[  237.661860][T14053]  dump_stack_lvl+0xe8/0x150
[  237.661884][T14053]  sysfs_warn_dup+0x8e/0xa0
[  237.661897][T14053]  sysfs_do_create_link_sd+0xc0/0x110
[  237.661911][T14053]  device_add_class_symlinks+0x1cf/0x240
[  237.661928][T14053]  device_add+0x475/0xbb0
[  237.661950][T14053]  wiphy_register+0x1dc5/0x2dc0
[  237.661991][T14053]  ? __pfx_wiphy_register+0x10/0x10
[  237.662013][T14053]  ? __pfx_netdev_run_todo+0x10/0x10
[  237.662027][T14053]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  237.662046][T14053]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  237.662072][T14053]  ieee80211_register_hw+0x3d82/0x4a70
[  237.662109][T14053]  ? ieee80211_register_hw+0x1981/0x4a70
[  237.662143][T14053]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  237.662164][T14053]  ? __asan_memset+0x22/0x50
[  237.662184][T14053]  ? __hrtimer_setup+0x1b7/0x260
[  237.662205][T14053]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  237.662231][T14053]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  237.662264][T14053]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  237.662280][T14053]  ? kstrndup+0xbf/0x160
[  237.662305][T14053]  hwsim_new_radio_nl+0xf6a/0x1c00
[  237.662336][T14053]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  237.662360][T14053]  ? rcu_is_watching+0x15/0xb0
[  237.662379][T14053]  ? trace_kmalloc+0x2a/0xf0
[  237.662412][T14053]  ? __nla_parse+0x40/0x60
[  237.662434][T14053]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  237.662452][T14053]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  237.662475][T14053]  genl_family_rcv_msg_doit+0x22a/0x330
[  237.662497][T14053]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  237.662518][T14053]  ? bpf_lsm_capable+0x9/0x20
[  237.662529][T14053]  ? security_capable+0x7e/0x2c0
[  237.662554][T14053]  genl_rcv_msg+0x61c/0x7a0
[  237.662575][T14053]  ? __pfx_genl_rcv_msg+0x10/0x10
[  237.662589][T14053]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  237.662619][T14053]  netlink_rcv_skb+0x232/0x4b0
[  237.662634][T14053]  ? __pfx_genl_rcv_msg+0x10/0x10
[  237.662646][T14053]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  237.662679][T14053]  ? down_read+0x270/0x2e0
[  237.662693][T14053]  ? genl_rcv+0xd/0x40
[  237.662739][T14053]  genl_rcv+0x28/0x40
[  237.662754][T14053]  netlink_unicast+0x75c/0x8e0
[  237.662783][T14053]  netlink_sendmsg+0x813/0xb40
[  237.662806][T14053]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.662830][T14053]  ? aa_sock_msg_perm+0xf1/0x1b0
[  237.662852][T14053]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  237.662949][T14053]  ____sys_sendmsg+0x972/0x9f0
[  237.662981][T14053]  ? __might_fault+0xaf/0x130
[  237.663008][T14053]  ? __pfx_____sys_sendmsg+0x10/0x10
[  237.663038][T14053]  ? import_iovec+0x73/0xa0
[  237.663064][T14053]  ___sys_sendmsg+0x2a5/0x360
[  237.663084][T14053]  ? __lock_acquire+0x6b5/0x2cf0
[  237.663106][T14053]  ? __pfx____sys_sendmsg+0x10/0x10
[  237.663127][T14053]  ? futex_wait+0x2a2/0x390
[  237.663171][T14053]  ? __fget_files+0x2a/0x420
[  237.663191][T14053]  ? __fget_files+0x3a0/0x420
[  237.663250][T14053]  __x64_sys_sendmsg+0x1bd/0x2a0
[  237.663277][T14053]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  237.663308][T14053]  ? rcu_is_watching+0x15/0xb0
[  237.663334][T14053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.663346][T14053]  do_syscall_64+0x15f/0xf80
[  237.663363][T14053]  ? trace_irq_disable+0x3b/0x140
[  237.663405][T14053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.663421][T14053] RIP: 0033:0x7f717659cdd9
[  237.663436][T14053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.663450][T14053] RSP: 002b:00007f717738e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.663464][T14053] RAX: ffffffffffffffda RBX: 00007f7176815fa0 RCX: 00007f717659cdd9
[  237.663474][T14053] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  237.663484][T14053] RBP: 00007f7176632d69 R08: 0000000000000000 R09: 0000000000000000
[  237.663492][T14053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.663500][T14053] R13: 00007f7176816038 R14: 00007f7176815fa0 R15: 00007fff3bd1c078
[  237.663527][T14053]  </TASK>
[  238.067652][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  238.109749][T14088] xt_CONNSECMARK: invalid mode: 254
[  238.133980][T14092] erspan0: entered promiscuous mode
[  238.137477][T14090] erspan0: left promiscuous mode
[  238.210640][   T33] audit: type=1804 audit(1778453658.479:12): pid=14098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3543" name="/newroot/1226/cgroup.controllers" dev="tmpfs" ino=6208 res=1 errno=0
[  238.229525][   T33] audit: type=1800 audit(1778453658.479:13): pid=14098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3543" name="cgroup.controllers" dev="tmpfs" ino=6208 res=0 errno=0
[  238.247972][   T33] audit: type=1800 audit(1778453658.479:14): pid=14098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3543" name="cgroup.controllers" dev="tmpfs" ino=6208 res=0 errno=0
[  238.325110][T14110] netlink: 'syz.0.3548': attribute type 13 has an invalid length.
[  239.107438][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  239.860046][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'.
[  239.863538][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'.
[  240.157436][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  240.239054][T14210] gtp3: entered promiscuous mode
[  240.240593][T14210] gtp3: entered allmulticast mode
[  240.487009][T14232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  240.515648][T14234] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3602'.
[  240.519697][T14234] netlink: 'syz.0.3602': attribute type 9 has an invalid length.
[  240.523029][T14234] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3602'.
[  240.526757][T14234] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3602'.
[  240.540510][T14236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3603'.
[  240.547613][T14236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3603'.
[  240.550974][T14236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3603'.
[  240.554206][T14236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3603'.
[  240.557165][T14236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3603'.
[  240.612005][   T33] audit: type=1804 audit(1778453660.879:15): pid=14245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3608" name="/newroot/1185/cgroup.controllers" dev="tmpfs" ino=5981 res=1 errno=0
[  240.630453][   T33] audit: type=1800 audit(1778453660.889:16): pid=14245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3608" name="cgroup.controllers" dev="tmpfs" ino=5981 res=0 errno=0
[  240.745430][T14254] bond4: Removing last arp target with arp_interval on
[  240.788393][ T5623] Bluetooth: hci2: command 0x0405 tx timeout
[  240.799098][T14261] syz_tun: entered allmulticast mode
[  240.815345][T14261] syz_tun (unregistering): left allmulticast mode
[  240.818908][T14261] syz_tun (unregistering): left promiscuous mode
[  241.197501][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  241.460489][T14300] ieee802154 phy0 wpan0: encryption failed: -22
[  241.482746][T14300] 0X: renamed from batadv0
[  241.488726][T14300] 0X: entered allmulticast mode
[  241.492701][T14300] 8021q: adding VLAN 0 to HW filter on device 60X
[  241.495864][T14300] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  241.628854][T14308] syzkaller0: entered promiscuous mode
[  241.630727][T14308] syzkaller0: entered allmulticast mode
[  241.731292][T14316] 8021q: adding VLAN 0 to HW filter on device bond7
[  241.742965][T14316] team0: Device bond7 is up. Set it down before adding it as a team port
[  241.787149][T14321] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  241.930120][T14337] x_tables: unsorted entry at hook 2
[  242.104803][T14357] netlink: 'syz.0.3657': attribute type 2 has an invalid length.
[  242.227471][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  242.343120][T14385] wg2: Caught tx_queue_len zero misconfig
[  242.664521][T14413] netlink: 'syz.2.3683': attribute type 10 has an invalid length.
[  243.277557][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  243.675498][T14495] nbd: socks must be embedded in a SOCK_ITEM attr
[  243.839559][T14515] netlink: 'syz.2.3721': attribute type 1 has an invalid length.
[  243.854984][T14515] bond8: entered promiscuous mode
[  243.856873][T14515] 8021q: adding VLAN 0 to HW filter on device bond8
[  243.873540][T14515] bond8: (slave bridge10): making interface the new active one
[  243.876000][T14515] bridge10: entered promiscuous mode
[  243.879817][T14515] bond8: (slave bridge10): Enslaving as an active interface with an up link
[  244.307440][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  244.343988][T14540] netlink: 'syz.0.3732': attribute type 21 has an invalid length.
[  245.052050][T14582] __nla_validate_parse: 44 callbacks suppressed
[  245.052073][T14582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3749'.
[  245.357484][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  245.437089][T14613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3760'.
[  245.869181][T14633] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3769'.
[  246.209160][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'.
[  246.387609][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  246.785806][T14692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3796'.
[  246.800950][T14692] lo: Caught tx_queue_len zero misconfig
[  246.846983][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3798'.
[  247.031077][T14713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3805'.
[  247.033928][T14713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3805'.
[  247.036691][T14713] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3805'.
[  247.161060][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3811'.
[  247.427467][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  247.565514][T14750] netlink: 'syz.1.3822': attribute type 1 has an invalid length.
[  247.704115][ T7427] nci: nci_rsp_packet: unknown rsp opcode 0x606
[  247.981977][T14775] syzkaller0: entered promiscuous mode
[  247.983723][T14775] syzkaller0: entered allmulticast mode
[  248.236513][T14785] xt_TCPMSS: Only works on TCP SYN packets
[  248.455777][T14756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  248.473661][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  248.638282][ T5623] Bluetooth: hci2: command 0x0405 tx timeout
[  248.726084][T14809] tap0: tun_chr_ioctl cmd 1074025680
[  248.860605][T14814] geneve1: entered promiscuous mode
[  249.096929][T14828] syzkaller0: entered promiscuous mode
[  249.099121][T14828] syzkaller0: entered allmulticast mode
[  249.507585][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  249.976754][T14875] veth0_to_bond: entered allmulticast mode
[  250.149482][T14887] __nla_validate_parse: 4 callbacks suppressed
[  250.149496][T14887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3882'.
[  250.255525][T14892] netlink: 'syz.0.3885': attribute type 13 has an invalid length.
[  250.281329][ T7427] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  250.285566][T14892] netlink: 'syz.0.3885': attribute type 13 has an invalid length.
[  250.288453][ T7427] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  250.295869][ T7427] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  250.304440][ T7427] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  250.426735][T14903] xfrm0: Caught tx_queue_len zero misconfig
[  250.547551][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  250.676684][T14922] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  250.680294][T14922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.899930][T14934] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3904'.
[  250.903800][T14934] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3904'.
[  250.978489][T14940] ip6tnl0: Caught tx_queue_len zero misconfig
[  251.038588][T14944] x_tables: duplicate entry at hook 2
[  251.122399][T14950] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3912'.
[  251.227834][T14939] nbd2: detected capacity change from 0 to 63
[  251.240455][T14946] netlink: 'syz.0.3910': attribute type 1 has an invalid length.
[  251.244767][T12078] block nbd2: Receive control failed (result -104)
[  251.248999][   T55] block nbd2: Receive control failed (result -32)
[  251.314344][T14961] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  251.597382][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  251.780999][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3935'.
[  251.837255][T15005] tc_dump_action: action bad kind
[  252.064274][T15029] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3945'.
[  252.169240][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3948'.
[  252.515598][T15049] netlink: 'syz.2.3955': attribute type 13 has an invalid length.
[  252.522473][T15049] netlink: 'syz.2.3955': attribute type 17 has an invalid length.
[  252.604531][T15049] syz_tun: left promiscuous mode
[  252.628669][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  252.634228][T15049] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.640360][T15049] 8021q: adding VLAN 0 to HW filter on device team0
[  252.646732][T15049] batadv0: left promiscuous mode
[  252.649498][T15049] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.678137][T15049] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.682257][T15049] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.692376][T15049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  252.696123][T15049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  252.710650][T15049] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  252.716833][T15049] bridge0: port 3(vlan2) entered blocking state
[  252.718891][T15049] bridge0: port 3(vlan2) entered forwarding state
[  252.729412][T15049] ip6gre1: left promiscuous mode
[  252.731044][T15049] ip6gre1: left allmulticast mode
[  252.735661][T15049] 8021q: adding VLAN 0 to HW filter on device bond1
[  252.743415][T15049] team1: left promiscuous mode
[  252.745027][T15049] team1: left allmulticast mode
[  252.746789][T15049] 8021q: adding VLAN 0 to HW filter on device team1
[  252.750310][T15049] team2: left promiscuous mode
[  252.751874][T15049] team2: left allmulticast mode
[  252.754130][T15049] 8021q: adding VLAN 0 to HW filter on device team2
[  252.760069][T15049] netdevsim netdevsim2 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  252.763534][T15049] 8021q: adding VLAN 0 to HW filter on device eth0
[  252.769437][T15049] netdevsim netdevsim2 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  252.773101][T15049] 8021q: adding VLAN 0 to HW filter on device eth1
[  252.776314][T15049] netdevsim netdevsim2 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  252.780024][T15049] 8021q: adding VLAN 0 to HW filter on device eth2
[  252.783070][T15049] netdevsim netdevsim2 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  252.786893][T15049] 8021q: adding VLAN 0 to HW filter on device eth3
[  252.793387][T15049] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  252.806178][T15049] 8021q: adding VLAN 0 to HW filter on device bond2
[  252.813805][T15049] veth5: left allmulticast mode
[  252.819224][T15049] ip6tnl2: left allmulticast mode
[  252.831945][T15049] ipip0: left promiscuous mode
[  252.836070][T15049] gretap1: left promiscuous mode
[  252.837969][T15049] gretap1: left allmulticast mode
[  252.846740][T15049] 8021q: adding VLAN 0 to HW filter on device bond3
[  252.871736][T15049] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  252.879155][T15049] vlan0: left allmulticast mode
[  252.880852][T15049] bond0: left allmulticast mode
[  252.882428][T15049] bond_slave_0: left allmulticast mode
[  252.884175][T15049] bond_slave_1: left allmulticast mode
[  252.886260][T15049] dummy0: left allmulticast mode
[  252.889622][T15049] team0: left allmulticast mode
[  252.891110][T15049] team_slave_0: left allmulticast mode
[  252.892798][T15049] team_slave_1: left allmulticast mode
[  252.894493][T15049] veth9: left allmulticast mode
[  252.896081][T15049] syz_tun: left allmulticast mode
[  252.902316][T15049] 8021q: adding VLAN 0 to HW filter on device bond4
[  252.910271][T15049] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  252.931345][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.934598][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.942829][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.944946][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.667789][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  253.821881][ T7428] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  253.827858][ T7428] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.838294][ T7428] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  253.852908][ T7428] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.884919][ T7428] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  253.891012][ T7428] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.895395][ T7428] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  253.900394][ T7428] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.427622][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3965'.
[  254.590083][T15092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3971'.
[  254.691913][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3974'.
[  254.707510][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  255.133721][T15104] 0X: left allmulticast mode
[  255.139400][T15104] veth0_to_bond: left allmulticast mode
[  255.142723][T15104] vlan0: left promiscuous mode
[  255.145056][T15104] geneve1: left promiscuous mode
[  255.148841][T15104] bridge1: left allmulticast mode
[  255.331024][T15104] bond3: left promiscuous mode
[  255.479960][T15126] __nla_validate_parse: 1 callbacks suppressed
[  255.479979][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3984'.
[  255.486877][T15125] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3983'.
[  255.496402][T15125] xt_hashlimit: invalid rate
[  255.513647][T15126] veth11: entered promiscuous mode
[  255.747581][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  256.132693][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4006'.
[  256.243097][T15183] syzkaller0: entered promiscuous mode
[  256.244960][T15183] syzkaller0: entered allmulticast mode
[  256.650184][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4015'.
[  256.798491][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  256.856754][T15233] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.861897][T15233] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.952929][T15233] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.960109][T15233] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.038045][T15233] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.040961][T15233] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.121903][T15233] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.126080][T15233] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.217790][ T7427] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  257.220485][ T7427] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.232605][ T7427] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.235420][ T7427] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.248101][ T7427] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.251679][ T7427] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.265601][ T7427] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  257.269156][ T7427] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.390020][T15267] netlink: 'syz.2.4035': attribute type 1 has an invalid length.
[  257.393080][T15267] netlink: 'syz.2.4035': attribute type 4 has an invalid length.
[  257.396068][T15267] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4035'.
[  257.461467][T15275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4040'.
[  257.464399][T15275] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4040'.
[  257.468024][T15275] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4040'.
[  257.470791][T15275] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4040'.
[  257.510513][T15279] syzkaller0: entered promiscuous mode
[  257.512314][T15279] syzkaller0: entered allmulticast mode
[  257.530390][T15279] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  257.718934][T15284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  257.837385][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  258.287640][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4070'.
[  258.720968][T15357] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  258.724643][T15357] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.766962][T15357] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  258.770805][T15357] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.824981][T15357] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  258.828411][T15357] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.867549][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  258.903463][T15357] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  258.912083][T15357] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.012328][ T7434] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  259.015524][ T7434] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.034783][ T7434] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  259.038241][ T7434] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.079846][ T7434] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  259.085258][ T7434] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.096015][ T7434] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  259.099482][ T7434] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.129894][T15366] netlink: 'syz.2.4078': attribute type 4 has an invalid length.
[  259.535027][T15356] 
[  259.536058][T15356] ======================================================
[  259.538492][T15356] WARNING: possible circular locking dependency detected
[  259.541039][T15356] syzkaller #0 Not tainted
[  259.542727][T15356] ------------------------------------------------------
[  259.545260][T15356] syz.0.4076/15356 is trying to acquire lock:
[  259.547306][T15356] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  259.551206][T15356] 
[  259.551206][T15356] but task is already holding lock:
[  259.553831][T15356] ffff8881ab8b3860 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_check_listen_stop+0x1a6/0x2b0
[  259.557667][T15356] 
[  259.557667][T15356] which lock already depends on the new lock.
[  259.557667][T15356] 
[  259.561468][T15356] 
[  259.561468][T15356] the existing dependency chain (in reverse order) is:
[  259.564677][T15356] 
[  259.564677][T15356] -> #7 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}:
[  259.567589][T15356]        lock_sock_nested+0x41/0x100
[  259.569544][T15356]        mptcp_subflow_create_socket+0x142/0x800
[  259.571882][T15356]        __mptcp_nmpc_sk+0x155/0x790
[  259.573860][T15356]        mptcp_bind+0xab/0x1d0
[  259.575647][T15356]        __sys_bind+0x2e3/0x410
[  259.577452][T15356]        __x64_sys_bind+0x7a/0x90
[  259.579345][T15356]        do_syscall_64+0x15f/0xf80
[  259.581285][T15356]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.583653][T15356] 
[  259.583653][T15356] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  259.586472][T15356]        lock_sock_nested+0x41/0x100
[  259.588405][T15356]        inet_shutdown+0x6a/0x390
[  259.590278][T15356]        nbd_mark_nsock_dead+0x2e9/0x560
[  259.592349][T15356]        recv_work+0x1c2e/0x1d40
[  259.594225][T15356]        process_scheduled_works+0xb5d/0x1860
[  259.596483][T15356]        worker_thread+0xa53/0xfc0
[  259.598377][T15356]        kthread+0x388/0x470
[  259.600043][T15356]        ret_from_fork+0x514/0xb70
[  259.601942][T15356]        ret_from_fork_asm+0x1a/0x30
[  259.603886][T15356] 
[  259.603886][T15356] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  259.606701][T15356]        __mutex_lock+0x1a3/0x1550
[  259.608557][T15356]        nbd_queue_rq+0x37b/0x1100
[  259.610454][T15356]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  259.612721][T15356]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  259.615230][T15356]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  259.617575][T15356]        blk_mq_run_hw_queue+0x348/0x4f0
[  259.619664][T15356]        blk_mq_dispatch_list+0xd16/0xe10
[  259.621776][T15356]        blk_mq_flush_plug_list+0x48d/0x570
[  259.623941][T15356]        __blk_flush_plug+0x3ed/0x4d0
[  259.625892][T15356]        __submit_bio+0x28d/0x580
[  259.627740][T15356]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  259.630001][T15356]        block_read_full_folio+0x599/0x830
[  259.632149][T15356]        filemap_read_folio+0x137/0x3b0
[  259.634232][T15356]        do_read_cache_folio+0x358/0x590
[  259.636337][T15356]        read_part_sector+0xb6/0x2b0
[  259.638218][T15356]        adfspart_check_ICS+0xb1/0x960
[  259.640197][T15356]        bdev_disk_changed+0x817/0x1770
[  259.642244][T15356]        blkdev_get_whole+0x380/0x510
[  259.644253][T15356]        bdev_open+0x31e/0xd30
[  259.646019][T15356]        blkdev_open+0x470/0x610
[  259.647800][T15356]        do_dentry_open+0x785/0x14e0
[  259.649763][T15356]        vfs_open+0x3b/0x340
[  259.651470][T15356]        path_openat+0x2e08/0x3860
[  259.653405][T15356]        do_file_open+0x23e/0x4a0
[  259.655271][T15356]        do_sys_openat2+0x113/0x200
[  259.657199][T15356]        __x64_sys_openat+0x138/0x170
[  259.659198][T15356]        do_syscall_64+0x15f/0xf80
[  259.661095][T15356]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.663476][T15356] 
[  259.663476][T15356] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  259.666125][T15356]        __mutex_lock+0x1a3/0x1550
[  259.668037][T15356]        nbd_queue_rq+0xc6/0x1100
[  259.669925][T15356]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  259.672156][T15356]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  259.674707][T15356]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  259.677116][T15356]        blk_mq_run_hw_queue+0x348/0x4f0
[  259.679201][T15356]        blk_mq_dispatch_list+0xd16/0xe10
[  259.681305][T15356]        blk_mq_flush_plug_list+0x48d/0x570
[  259.683501][T15356]        __blk_flush_plug+0x3ed/0x4d0
[  259.685410][T15356]        __submit_bio+0x28d/0x580
[  259.687142][T15356]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  259.689449][T15356]        block_read_full_folio+0x599/0x830
[  259.691613][T15356]        filemap_read_folio+0x137/0x3b0
[  259.693686][T15356]        do_read_cache_folio+0x358/0x590
[  259.695776][T15356]        read_part_sector+0xb6/0x2b0
[  259.697743][T15356]        adfspart_check_ICS+0xb1/0x960
[  259.699784][T15356]        bdev_disk_changed+0x817/0x1770
[  259.701825][T15356]        blkdev_get_whole+0x380/0x510
[  259.703798][T15356]        bdev_open+0x31e/0xd30
[  259.705565][T15356]        blkdev_open+0x470/0x610
[  259.707406][T15356]        do_dentry_open+0x785/0x14e0
[  259.709363][T15356]        vfs_open+0x3b/0x340
[  259.711093][T15356]        path_openat+0x2e08/0x3860
[  259.712998][T15356]        do_file_open+0x23e/0x4a0
[  259.714890][T15356]        do_sys_openat2+0x113/0x200
[  259.716817][T15356]        __x64_sys_openat+0x138/0x170
[  259.718772][T15356]        do_syscall_64+0x15f/0xf80
[  259.720699][T15356]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.723092][T15356] 
[  259.723092][T15356] -> #3 (set->srcu){.+.+}-{0:0}:
[  259.725705][T15356]        __synchronize_srcu+0xca/0x300
[  259.727700][T15356]        elevator_switch+0x1e8/0x7a0
[  259.729661][T15356]        elevator_change+0x2cc/0x450
[  259.731622][T15356]        elevator_set_default+0x36c/0x430
[  259.733751][T15356]        blk_register_queue+0x3e9/0x4e0
[  259.735770][T15356]        __add_disk+0x677/0xd50
[  259.737597][T15356]        add_disk_fwnode+0xfb/0x480
[  259.739560][T15356]        nbd_dev_add+0x72c/0xb50
[  259.741446][T15356]        nbd_init+0x168/0x1f0
[  259.743215][T15356]        do_one_initcall+0x250/0x870
[  259.745163][T15356]        do_initcall_level+0x104/0x190
[  259.747090][T15356]        do_initcalls+0x59/0xa0
[  259.748875][T15356]        kernel_init_freeable+0x2a6/0x3e0
[  259.750977][T15356]        kernel_init+0x1d/0x1d0
[  259.752782][T15356]        ret_from_fork+0x514/0xb70
[  259.754665][T15356]        ret_from_fork_asm+0x1a/0x30
[  259.756602][T15356] 
[  259.756602][T15356] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  259.759474][T15356]        __mutex_lock+0x1a3/0x1550
[  259.761385][T15356]        elevator_change+0x1b3/0x450
[  259.763339][T15356]        elevator_set_none+0xb5/0x140
[  259.765306][T15356]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  259.767629][T15356]        nbd_start_device+0x17f/0xb10
[  259.769614][T15356]        nbd_genl_connect+0x165b/0x1cf0
[  259.771635][T15356]        genl_family_rcv_msg_doit+0x22a/0x330
[  259.773914][T15356]        genl_rcv_msg+0x61c/0x7a0
[  259.775783][T15356]        netlink_rcv_skb+0x232/0x4b0
[  259.777752][T15356]        genl_rcv+0x28/0x40
[  259.779454][T15356]        netlink_unicast+0x75c/0x8e0
[  259.781415][T15356]        netlink_sendmsg+0x813/0xb40
[  259.783388][T15356]        ____sys_sendmsg+0x972/0x9f0
[  259.785358][T15356]        ___sys_sendmsg+0x2a5/0x360
[  259.787294][T15356]        __x64_sys_sendmsg+0x1bd/0x2a0
[  259.789315][T15356]        do_syscall_64+0x15f/0xf80
[  259.791210][T15356]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.793505][T15356] 
[  259.793505][T15356] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  259.796666][T15356]        blk_alloc_queue+0x546/0x680
[  259.798674][T15356]        __blk_mq_alloc_disk+0x197/0x390
[  259.800765][T15356]        nbd_dev_add+0x499/0xb50
[  259.802616][T15356]        nbd_init+0x168/0x1f0
[  259.804375][T15356]        do_one_initcall+0x250/0x870
[  259.806312][T15356]        do_initcall_level+0x104/0x190
[  259.808336][T15356]        do_initcalls+0x59/0xa0
[  259.810272][T15356]        kernel_init_freeable+0x2a6/0x3e0
[  259.812409][T15356]        kernel_init+0x1d/0x1d0
[  259.814248][T15356]        ret_from_fork+0x514/0xb70
[  259.816176][T15356]        ret_from_fork_asm+0x1a/0x30
[  259.818163][T15356] 
[  259.818163][T15356] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  259.820865][T15356]        __lock_acquire+0x15a5/0x2cf0
[  259.822851][T15356]        lock_acquire+0x106/0x350
[  259.824763][T15356]        fs_reclaim_acquire+0x71/0x100
[  259.826773][T15356]        __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  259.829331][T15356]        __alloc_skb+0x2c1/0x7d0
[  259.831204][T15356]        mptcp_event_pm_listener+0x134/0x550
[  259.833436][T15356]        mptcp_check_listen_stop+0x1d3/0x2b0
[  259.835681][T15356]        __mptcp_close+0xf5/0xd10
[  259.837574][T15356]        mptcp_close+0x28/0x1a0
[  259.839414][T15356]        inet_release+0x143/0x190
[  259.841331][T15356]        sock_close+0xc3/0x240
[  259.843143][T15356]        __fput+0x44f/0xa60
[  259.844834][T15356]        task_work_run+0x1d9/0x270
[  259.846765][T15356]        exit_to_user_mode_loop+0xed/0x480
[  259.848941][T15356]        do_syscall_64+0x33e/0xf80
[  259.850867][T15356]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.853294][T15356] 
[  259.853294][T15356] other info that might help us debug this:
[  259.853294][T15356] 
[  259.857013][T15356] Chain exists of:
[  259.857013][T15356]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6/1
[  259.857013][T15356] 
[  259.861851][T15356]  Possible unsafe locking scenario:
[  259.861851][T15356] 
[  259.864620][T15356]        CPU0                    CPU1
[  259.866619][T15356]        ----                    ----
[  259.868786][T15356]   lock(k-sk_lock-AF_INET6/1);
[  259.870564][T15356]                                lock(sk_lock-AF_INET6);
[  259.873091][T15356]                                lock(k-sk_lock-AF_INET6/1);
[  259.875568][T15356]   lock(fs_reclaim);
[  259.877005][T15356] 
[  259.877005][T15356]  *** DEADLOCK ***
[  259.877005][T15356] 
[  259.879983][T15356] 3 locks held by syz.0.4076/15356:
[  259.881914][T15356]  #0: ffff8881a9000240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  259.885586][T15356]  #1: ffff888176c42960 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_close+0x1d/0x1a0
[  259.888946][T15356]  #2: ffff8881ab8b3860 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_check_listen_stop+0x1a6/0x2b0
[  259.892920][T15356] 
[  259.892920][T15356] stack backtrace:
[  259.895155][T15356] CPU: 0 UID: 0 PID: 15356 Comm: syz.0.4076 Not tainted syzkaller #0 PREEMPT(full) 
[  259.895173][T15356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  259.895183][T15356] Call Trace:
[  259.895192][T15356]  <TASK>
[  259.895200][T15356]  dump_stack_lvl+0xe8/0x150
[  259.895221][T15356]  print_circular_bug+0x2e1/0x300
[  259.895242][T15356]  check_noncircular+0x12e/0x150
[  259.895262][T15356]  __lock_acquire+0x15a5/0x2cf0
[  259.895276][T15356]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.895296][T15356]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  259.895316][T15356]  lock_acquire+0x106/0x350
[  259.895330][T15356]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  259.895353][T15356]  fs_reclaim_acquire+0x71/0x100
[  259.895371][T15356]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  259.895389][T15356]  __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  259.895408][T15356]  ? mptcp_event_pm_listener+0x134/0x550
[  259.895424][T15356]  ? __alloc_skb+0x186/0x7d0
[  259.895442][T15356]  __alloc_skb+0x2c1/0x7d0
[  259.895461][T15356]  mptcp_event_pm_listener+0x134/0x550
[  259.895475][T15356]  ? __local_bh_enable_ip+0xd0/0x130
[  259.895491][T15356]  ? inet_csk_listen_stop+0xa1f/0xbd0
[  259.895503][T15356]  ? __local_bh_enable_ip+0xd0/0x130
[  259.895516][T15356]  ? __pfx_mptcp_event_pm_listener+0x10/0x10
[  259.895530][T15356]  ? mptcp_subflow_queue_clean+0xa9/0x3d0
[  259.895543][T15356]  ? __local_bh_enable_ip+0xd0/0x130
[  259.895555][T15356]  ? mptcp_subflow_queue_clean+0x39c/0x3d0
[  259.895569][T15356]  ? __local_bh_enable_ip+0xd0/0x130
[  259.895584][T15356]  mptcp_check_listen_stop+0x1d3/0x2b0
[  259.895602][T15356]  __mptcp_close+0xf5/0xd10
[  259.895618][T15356]  ? __local_bh_enable_ip+0xd0/0x130
[  259.895639][T15356]  mptcp_close+0x28/0x1a0
[  259.895656][T15356]  inet_release+0x143/0x190
[  259.895677][T15356]  sock_close+0xc3/0x240
[  259.895692][T15356]  ? __pfx_sock_close+0x10/0x10
[  259.895703][T15356]  __fput+0x44f/0xa60
[  259.895724][T15356]  task_work_run+0x1d9/0x270
[  259.895749][T15356]  ? __pfx_task_work_run+0x10/0x10
[  259.895769][T15356]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.895782][T15356]  exit_to_user_mode_loop+0xed/0x480
[  259.895796][T15356]  ? rcu_is_watching+0x15/0xb0
[  259.895813][T15356]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.895826][T15356]  do_syscall_64+0x33e/0xf80
[  259.895848][T15356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.895862][T15356] RIP: 0033:0x7f266319cdd9
[  259.895877][T15356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.895890][T15356] RSP: 002b:00007ffefbb384b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  259.895905][T15356] RAX: 0000000000000000 RBX: 00007f2663417da0 RCX: 00007f266319cdd9
[  259.895914][T15356] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  259.895923][T15356] RBP: 00007f2663417da0 R08: 0000000000000006 R09: 0000000000000000
[  259.895931][T15356] R10: 00007f2663417cb0 R11: 0000000000000246 R12: 000000000003f55f
[  259.895940][T15356] R13: 00007f266341627c R14: 000000000003f33d R15: 00007f2663416270
[  259.895956][T15356]  </TASK>
[  259.937497][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  260.947924][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  260.948572][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  260.952586][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  261.987535][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  263.027592][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  264.067477][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  265.107542][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  266.147509][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  267.187558][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  268.227521][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  269.267577][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
