last executing test programs:

1.600551079s ago: executing program 2 (id=9473):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94)

1.552250869s ago: executing program 2 (id=9475):
r0 = socket(0x2b, 0x80801, 0x1)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78)

1.5519318s ago: executing program 2 (id=9477):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)}, 0x0)
close(r3)
recvmsg$qrtr(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1, 0x0, 0x0, 0x1}, 0x38, 0x40)
sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x40, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046)
socketpair$unix(0x1, 0x4d6f56cdcb2f5931, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
accept4$alg(r2, 0x0, 0x0, 0x0)
sendmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x2404c001)
recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x2e, 0x9, 0x70bd27, 0x3, {0x4}, [@typed={0x8, 0x1a, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
recvmmsg(r6, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
bind$qrtr(r6, &(0x7f0000000140)={0x2a, 0x1}, 0xc)
writev(r7, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1.090508069s ago: executing program 0 (id=9484):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x1, 0x4, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.090321048s ago: executing program 0 (id=9485):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000180))

1.021488875s ago: executing program 0 (id=9486):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="60010000210001000000000000000000fc02000000000001fe80000000000000000000000000012000000000000000000a0000a02e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.021312211s ago: executing program 0 (id=9487):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x3c}}, 0x0)

953.140972ms ago: executing program 0 (id=9488):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
read(r3, &(0x7f0000000080)=""/38, 0x26)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000980)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0)
epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]})
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6)

682.408091ms ago: executing program 1 (id=9492):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0xb6}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20)

619.163565ms ago: executing program 1 (id=9493):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000140)={@void, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x32)

618.403144ms ago: executing program 2 (id=9494):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
close(0x3)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="0209fa000400e6f0c0474078712ef2c3e024bd7000fedb5aa120c1cf7f32a23c1694fbabbc533b4e5f77bade49b0c9"], 0x20}}, 0x24000800)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054)

493.575592ms ago: executing program 1 (id=9495):
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840)
sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000810)
write$nci(r0, &(0x7f0000000480)=ANY=[], 0x5)

429.660052ms ago: executing program 1 (id=9496):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x503, 0x4000, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40)

218.473581ms ago: executing program 1 (id=9497):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000100)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

91.360434ms ago: executing program 2 (id=9498):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@rand_addr=0x64010102, @multicast1, 0x4, "d30f388cfa00000000000000060000000000000000000000000000001000", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff00000000010000000400078008000100000000000c000200ff7f000000000000800eda78d9b9c2c62196f6519cd66a689528c80de14bda0fac3215a75b04ccb4c310a9be420f57a11349b5a812ab28a45689491df926b628921be64d0760c005a24debb7d2ff90a81b9863a82a10cc3a18907558046b72d0450a8bf74224e03d0604d2163572e6da19418036ea3ddab3768e9f15f87ec257e4ed1f"], 0x2c}}, 0x4000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)

90.743041ms ago: executing program 1 (id=9499):
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
unshare(0x20000400)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r1, 0x26, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2, r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, [@call={0x85, 0x0, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000080)="f4b84de4115d64244a0e839e86dd", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe4}, 0x50)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840), &(0x7f00000003c0), 0x1003, r6}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r6, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20)
syz_emit_ethernet(0x26, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
socket$netlink(0x10, 0x3, 0x0)

22.237031ms ago: executing program 0 (id=9500):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

0s ago: executing program 2 (id=9501):
unshare(0x8040480)
socket$unix(0x1, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280))

kernel console output (not intermixed with test programs):

er on device netdevsim0
[  277.033058][T16753] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  277.036312][T16753] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  277.039618][T16753] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  277.045255][T16753] mac80211_hwsim hwsim4 d: left promiscuous mode
[  277.047689][T16753] mac80211_hwsim hwsim4 d: left allmulticast mode
[  277.056795][T16753] 8021q: adding VLAN 0 to HW filter on device bond1
[  277.062375][T16753] bond1: entered promiscuous mode
[  277.064236][T16753] gretap1: entered promiscuous mode
[  277.066334][T16753] macvlan3: left promiscuous mode
[  277.068044][T16753] macvlan3: left allmulticast mode
[  277.070392][T16753] bond1: entered allmulticast mode
[  277.072306][T16753] gretap1: entered allmulticast mode
[  277.075162][T16753] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  277.078419][T16753] geneve2: left promiscuous mode
[  277.081349][T16753] geneve2: left allmulticast mode
[  277.102279][T16753] bond2: left promiscuous mode
[  277.104295][T16753] erspan1: left promiscuous mode
[  277.106401][T16753] bond2: left allmulticast mode
[  277.109011][T16753] 8021q: adding VLAN 0 to HW filter on device bond2
[  277.113382][T16753] erspan1: left allmulticast mode
[  277.117521][T16753] bond3: left promiscuous mode
[  277.119942][T16753] 8021q: adding VLAN 0 to HW filter on device bond3
[  277.123693][T16753] 8021q: adding VLAN 0 to HW filter on device bond4
[  277.128367][T16753] bond5: left promiscuous mode
[  277.131243][T16753] bond5: left allmulticast mode
[  277.133382][T16753] 8021q: adding VLAN 0 to HW filter on device bond5
[  277.142978][T16753] macsec1: left promiscuous mode
[  277.153556][T16753] 8021q: adding VLAN 0 to HW filter on device bond7
[  277.170839][T16753] 8021q: adding VLAN 0 to HW filter on device bond8
[  277.177290][T16753] 8021q: adding VLAN 0 to HW filter on device bond10
[  277.187744][T16753] geneve4: left promiscuous mode
[  277.189677][T16753] geneve4: left allmulticast mode
[  277.209129][ T8293] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  277.212945][ T8293] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  277.219255][ T8293] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  277.225521][ T8293] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  277.239667][T16767] netlink: 'syz.2.4725': attribute type 1 has an invalid length.
[  277.242482][ T8293] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  277.256689][ T8293] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  277.261730][ T8293] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  277.265345][ T8293] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  277.395369][T16781] Cannot find del_set index 14804 as target
[  277.703476][ T8288] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  277.718281][ T8288] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  277.729985][ T5727] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  277.813934][T16821] syzkaller1: entered promiscuous mode
[  277.817013][T16821] syzkaller1: entered allmulticast mode
[  277.950038][ T5727] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  278.543320][T16867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.586339][ T5727] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  281.647156][T16876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  281.851733][T16927] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  281.854947][T16927] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  281.858310][T16927] tipc: Resetting bearer <eth:syzkaller0>
[  282.016779][T16945] validate_nla: 1 callbacks suppressed
[  282.016837][T16945] netlink: 'syz.2.4798': attribute type 1 has an invalid length.
[  282.024569][T16945] __nla_validate_parse: 116 callbacks suppressed
[  282.024581][T16945] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4798'.
[  282.030228][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  282.060615][T16947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4801'.
[  282.138356][T16959] netlink: 'syz.2.4805': attribute type 11 has an invalid length.
[  282.141922][T16959] netlink: 'syz.2.4805': attribute type 11 has an invalid length.
[  282.145208][T16959] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4805'.
[  282.211730][T16967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4808'.
[  282.214991][T16967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4808'.
[  282.334743][T16980] netlink: 'syz.2.4814': attribute type 3 has an invalid length.
[  282.337768][T16980] netlink: 'syz.2.4814': attribute type 3 has an invalid length.
[  282.533860][T16980] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  283.042049][T17026] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4834'.
[  283.123526][T17030] smc: net device team0 applied user defined pnetid SYZ2
[  283.126776][T17030] smc: net device team0 erased user defined pnetid SYZ2
[  283.341900][T17038] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4840'.
[  283.421151][T17041] netlink: 'syz.2.4842': attribute type 83 has an invalid length.
[  283.536440][T17052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.886199][T17077] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4857'.
[  284.078580][T17074] bond1: left promiscuous mode
[  284.081708][T17074] gretap1: left promiscuous mode
[  284.296879][T11430] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.301131][T11430] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.307570][T11430] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  284.314120][T11430] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.319970][T11430] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.327844][T11430] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  284.334968][T11430] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.344806][T11430] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.358637][T11430] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  284.364695][T11430] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.371635][T11430] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.380500][T11430] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  284.505141][T17112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4872'.
[  284.609939][T17122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4876'.
[  284.827137][T17149] xt_hashlimit: size too large, truncated to 1048576
[  284.901044][T17155] bridge_slave_0 (unregistering): left allmulticast mode
[  284.904811][T17155] bridge_slave_0 (unregistering): left promiscuous mode
[  284.907303][T17155] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.949638][T17149] netlink: 'syz.1.4890': attribute type 1 has an invalid length.
[  285.703956][T17220] nbd1: detected capacity change from 0 to 127
[  285.719557][   T55] block nbd1: Receive control failed (result -32)
[  285.722160][T15892] block nbd1: Send control failed (result -32)
[  285.724710][T15892] block nbd1: Request send failed, requeueing
[  285.727880][   T98] block nbd1: Dead connection, failed to find a fallback
[  285.732267][   T98] block nbd1: shutting down sockets
[  285.732752][T17227] tipc: Resetting bearer <eth:syzkaller0>
[  285.733914][   T98] blk_print_req_error: 138 callbacks suppressed
[  285.733925][   T98] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  285.742527][   T98] buffer_io_error: 138 callbacks suppressed
[  285.742541][   T98] Buffer I/O error on dev nbd1, logical block 0, async page read
[  285.752639][T15892] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  285.762076][T15892] Buffer I/O error on dev nbd1, logical block 1, async page read
[  285.767080][T15892] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  285.771109][T15892] Buffer I/O error on dev nbd1, logical block 2, async page read
[  285.774254][T15892] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  285.777520][T15892] Buffer I/O error on dev nbd1, logical block 3, async page read
[  285.784165][T15892] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  285.789259][T15892] Buffer I/O error on dev nbd1, logical block 0, async page read
[  285.794030][T15892] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  285.799297][T15892] Buffer I/O error on dev nbd1, logical block 1, async page read
[  285.805514][T15892] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  285.810171][T15892] Buffer I/O error on dev nbd1, logical block 2, async page read
[  285.814473][T15892] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  285.819651][T15892] Buffer I/O error on dev nbd1, logical block 3, async page read
[  285.822652][T15892] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  285.827244][T15892] Buffer I/O error on dev nbd1, logical block 0, async page read
[  285.840551][T15892] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  285.845707][T15892] Buffer I/O error on dev nbd1, logical block 1, async page read
[  285.853880][T15892] ldm_validate_partition_table(): Disk read failed.
[  285.865931][T15892] Dev nbd1: unable to read RDB block 0
[  285.883859][T15892]  nbd1: unable to read partition table
[  285.894775][T15892] ldm_validate_partition_table(): Disk read failed.
[  285.902165][T15892] Dev nbd1: unable to read RDB block 0
[  285.907290][T15892]  nbd1: unable to read partition table
[  286.064826][T17251] netlink: 'syz.1.4924': attribute type 1 has an invalid length.
[  286.074167][T17253] netlink: 'syz.2.4925': attribute type 83 has an invalid length.
[  286.123077][T17257] netlink: 'syz.2.4928': attribute type 29 has an invalid length.
[  286.825756][T17321] netlink: 'syz.2.4959': attribute type 1 has an invalid length.
[  286.909577][T17323] tipc: Resetting bearer <eth:syzkaller0>
[  287.052867][T17334] __nla_validate_parse: 14 callbacks suppressed
[  287.052877][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4964'.
[  287.523001][T17367] netlink: 'syz.2.4979': attribute type 1 has an invalid length.
[  287.584270][T17373] netlink: 'syz.0.4982': attribute type 1 has an invalid length.
[  288.560454][T17399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4994'.
[  288.564290][T17399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4994'.
[  288.574199][T17402] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4995'.
[  288.809116][T17423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5004'.
[  288.861169][T17427] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  288.895633][T17433] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5009'.
[  289.107913][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5020'.
[  290.202896][T17486] netlink: 'syz.1.5035': attribute type 2 has an invalid length.
[  290.215489][T17486] netlink: 'syz.1.5035': attribute type 11 has an invalid length.
[  290.218826][T17486] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5035'.
[  290.304681][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5037'.
[  290.334283][T17498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5041'.
[  290.609495][T17522] netlink: 'syz.0.5050': attribute type 1 has an invalid length.
[  291.307165][T17578] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  291.820250][T17596] bond0: (slave syz_tun): Releasing backup interface
[  292.233901][T17626] __nla_validate_parse: 3 callbacks suppressed
[  292.233912][T17626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5094'.
[  292.242790][T17626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5094'.
[  292.453464][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5105'.
[  292.457641][T17650] x_tables: unsorted underflow at hook 1
[  292.517348][T17659] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  292.612437][T17668] netlink: 'syz.2.5112': attribute type 4 has an invalid length.
[  293.176075][T17681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5116'.
[  293.520836][T17671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  294.337038][T17752] syzkaller1: entered promiscuous mode
[  294.345575][T17752] syzkaller1: entered allmulticast mode
[  294.375535][T17754] xt_hashlimit: size too large, truncated to 1048576
[  294.709333][T17775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5156'.
[  294.717034][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5156'.
[  294.923494][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5165'.
[  294.927443][T17798] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5165'.
[  294.931611][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5165'.
[  294.935437][T17798] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5165'.
[  295.719436][T17853] sch_tbf: burst 0 is lower than device sit0 mtu (1280) !
[  295.869225][T17866] syzkaller1: entered promiscuous mode
[  295.871450][T17866] syzkaller1: entered allmulticast mode
[  295.996532][T17871] netlink: 'syz.0.5196': attribute type 26 has an invalid length.
[  295.999437][T17871] netlink: 'syz.0.5196': attribute type 26 has an invalid length.
[  296.075711][ T8288] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  296.081230][ T8288] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  296.089416][ T8288] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  296.096263][ T8288] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  296.779634][T17937] openvswitch: netlink: Key type 29 is not supported
[  297.052578][T17956] veth11: entered promiscuous mode
[  297.255026][T17976] netlink: 'syz.1.5242': attribute type 5 has an invalid length.
[  297.414559][T17987] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  297.848111][T18013] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  298.168037][T18028] __nla_validate_parse: 20 callbacks suppressed
[  298.168054][T18028] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5266'.
[  300.205375][T17972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  300.624542][T18078] xt_hashlimit: size too large, truncated to 1048576
[  300.651997][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5286'.
[  300.755711][T18078] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  300.867945][T18093] bond11: entered allmulticast mode
[  300.887343][T18093] macvlan0: entered promiscuous mode
[  300.891094][T18093] macvlan0: entered allmulticast mode
[  300.894352][T18093] bond11: (slave macvlan0): Opening slave failed
[  300.995950][T18100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5294'.
[  301.227408][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5303'.
[  301.294678][T18126] netlink: 'syz.2.5307': attribute type 8 has an invalid length.
[  301.314909][T18127] netlink: 'syz.1.5305': attribute type 1 has an invalid length.
[  301.359120][T18127] 8021q: adding VLAN 0 to HW filter on device bond9
[  301.383914][T18127] bond9: (slave geneve5): making interface the new active one
[  301.400398][T18127] bond9: (slave geneve5): Enslaving as an active interface with an up link
[  301.418623][T18130] batadv0: entered promiscuous mode
[  301.424317][T18130] gretap0: entered promiscuous mode
[  301.434793][T18130] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  301.439035][T18130] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  301.447480][T18130] hsr1: entered allmulticast mode
[  301.449662][T18130] batadv0: entered allmulticast mode
[  301.453072][T18130] gretap0: entered allmulticast mode
[  301.561769][T18140] openvswitch: netlink: Multiple metadata blocks provided
[  301.874346][T18168] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5324'.
[  302.758556][T18174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  302.953219][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5336'.
[  305.925127][T18203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  306.044148][T18233] openvswitch: netlink: IPv4 tun info is not correct
[  306.104061][T18235] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5348'.
[  306.114991][T18235] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5348'.
[  306.221734][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5356'.
[  306.227625][T18251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5356'.
[  306.303400][T18261] Bluetooth: MGMT ver 1.23
[  306.467937][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5366'.
[  307.233946][T18303] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  307.241170][T18303] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  307.249326][T18305] ip6_vti0 speed is unknown, defaulting to 1000
[  307.660402][T18336] bridge0: port 1(vlan5) entered blocking state
[  307.663482][T18336] bridge0: port 1(vlan5) entered disabled state
[  307.666577][T18336] vlan5: entered allmulticast mode
[  307.673404][T18336] bridge0: entered allmulticast mode
[  307.686189][T18336] vlan5: left allmulticast mode
[  307.690197][T18336] bridge0: left allmulticast mode
[  307.974118][T18358] netlink: 'syz.1.5401': attribute type 1 has an invalid length.
[  308.016962][T18358] bond10: entered promiscuous mode
[  308.019222][T18358] 8021q: adding VLAN 0 to HW filter on device bond10
[  308.025464][T18358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5401'.
[  308.030261][T18358] bond10: entered allmulticast mode
[  308.041443][T18358] bond10: (slave bridge16): making interface the new active one
[  308.045095][T18358] bridge16: entered promiscuous mode
[  308.047987][T18358] bridge16: entered allmulticast mode
[  308.053267][T18358] bond10: (slave bridge16): Enslaving as an active interface with an up link
[  308.621397][T18340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  308.858530][T18383] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  308.861256][T18383] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  309.496179][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5425'.
[  309.809703][T18429] batadv_slave_0: entered promiscuous mode
[  309.813258][T18429] batadv_slave_0: entered allmulticast mode
[  309.882824][T18431] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5433'.
[  309.943040][T18437] netlink: 'syz.2.5436': attribute type 1 has an invalid length.
[  309.982958][T18437] 8021q: adding VLAN 0 to HW filter on device bond21
[  310.416421][T18470] ip6_vti0 speed is unknown, defaulting to 1000
[  310.537490][T18477] xt_addrtype: ipv6 does not support BROADCAST matching
[  311.001206][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5463'.
[  311.565933][T18534] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5477'.
[  311.609412][T18538] netlink: 'syz.0.5478': attribute type 1 has an invalid length.
[  311.615340][T18538] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5478'.
[  312.166127][T18586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5500'.
[  312.459018][T18613] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5515'.
[  312.518713][T18620] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5517'.
[  312.528726][T18620] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5517'.
[  312.744366][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5520'.
[  312.802490][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5520'.
[  312.811856][T18634] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5520'.
[  312.814835][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5520'.
[  313.379704][T18691] netlink: 'syz.0.5545': attribute type 16 has an invalid length.
[  313.491495][T18703] netlink: 'syz.0.5551': attribute type 1 has an invalid length.
[  314.223393][T18722] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  314.226460][T18722] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  315.256515][T18779] netlink: 'syz.0.5583': attribute type 10 has an invalid length.
[  315.484294][T18792] xt_TCPMSS: Only works on TCP SYN packets
[  315.551471][T18794] ip6_vti0 speed is unknown, defaulting to 1000
[  315.969632][T18812] netlink: 'syz.1.5597': attribute type 4 has an invalid length.
[  315.995111][T18812] netlink: 'syz.1.5597': attribute type 4 has an invalid length.
[  316.008775][T18812] netlink: 'syz.1.5597': attribute type 4 has an invalid length.
[  316.327432][T18830] netlink: 'syz.0.5606': attribute type 1 has an invalid length.
[  316.973286][T18873] __nla_validate_parse: 8 callbacks suppressed
[  316.973301][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5627'.
[  317.009911][T18873] bond12: option ad_actor_sys_prio: invalid value (0)
[  317.012890][T18873] bond12: option ad_actor_sys_prio: allowed values 1 - 65535
[  317.016494][T18873] bond12 (unregistering): Released all slaves
[  317.515909][T18898] syzkaller0: entered promiscuous mode
[  317.518061][T18898] syzkaller0: entered allmulticast mode
[  317.521060][T18898] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  317.633681][T18796] udevd[18796]: setting owner of /dev/rfcomm24 to uid=0, gid=18 failed: No such file or directory
[  317.858828][T18914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5647'.
[  319.090400][T18960] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  319.356732][T18994] netlink: 'syz.0.5679': attribute type 16 has an invalid length.
[  319.396622][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5683'.
[  319.401666][T18999] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5683'.
[  319.405347][T18999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5683'.
[  319.569688][T19018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5692'.
[  319.578879][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5692'.
[  319.912534][T19058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5710'.
[  319.924639][T19059] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  319.927362][T19059] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  319.931697][T19058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5710'.
[  319.985808][T19063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.014222][T19063] tipc: Resetting bearer <eth:syzkaller0>
[  320.062826][T19067] syzkaller0: entered promiscuous mode
[  320.069201][T19067] syzkaller0: entered allmulticast mode
[  320.090594][T19067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.094034][T19066] tipc: Resetting bearer <eth:syzkaller0>
[  320.117429][T19066] tipc: Disabling bearer <eth:syzkaller0>
[  320.132242][T19069] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5716'.
[  320.327981][T19089] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.447235][T19104] openvswitch: netlink: Invalid VLAN frame
[  320.635434][T19130] netlink: 'syz.0.5746': attribute type 13 has an invalid length.
[  320.736991][T19140] atomic_op ffff88816abaa998 conn xmit_atomic 0000000000000000
[  320.749636][T19142] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  321.011446][T19159] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  321.016436][T19170] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  321.028248][T19170] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  321.420135][T19208] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  321.423123][T19208] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  321.824804][T19240] netem: unknown loss type 0
[  321.829524][T19240] netem: change failed
[  323.037241][T19284] __nla_validate_parse: 6 callbacks suppressed
[  323.037255][T19284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5815'.
[  323.257584][T19297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5819'.
[  323.270403][T19299] netlink: 'syz.0.5823': attribute type 1 has an invalid length.
[  323.278460][T19299] netlink: 'syz.0.5823': attribute type 2 has an invalid length.
[  323.284518][T19299] netlink: 'syz.0.5823': attribute type 1 has an invalid length.
[  323.380244][ T5625] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  323.386019][ T5625] Bluetooth: hci2: command 0x0405 tx timeout
[  323.486160][T19313] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5829'.
[  323.667334][T19321] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5833'.
[  323.699855][T19325] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5835'.
[  323.857730][T19337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.894073][T19337] syzkaller0: entered promiscuous mode
[  323.896531][T19337] syzkaller0: entered allmulticast mode
[  323.899173][T19337] tipc: Resetting bearer <eth:syzkaller0>
[  323.905581][T19336] tipc: Resetting bearer <eth:syzkaller0>
[  324.368773][T19346] xt_cgroup: invalid path, errno=-2
[  326.690425][T19336] tipc: Disabling bearer <eth:syzkaller0>
[  326.699994][T19352] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  326.706616][T19352] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  326.758950][T19357] xt_nat: multiple ranges no longer supported
[  326.877478][T19367] netlink: 'syz.0.5852': attribute type 28 has an invalid length.
[  326.963972][T19374] x_tables: ip_tables: ah match: only valid for protocol 51
[  327.081944][T19385] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5857'.
[  327.151550][T19387] syzkaller0: entered promiscuous mode
[  327.156256][T19387] syzkaller0: entered allmulticast mode
[  327.477393][T19412] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  327.487672][T19412] netlink: 'syz.1.5869': attribute type 1 has an invalid length.
[  327.528205][T19414] veth8: entered allmulticast mode
[  327.544197][T19390] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  327.548457][T19390] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  327.607743][T19396] tipc: Resetting bearer <eth:xfrm0>
[  327.636316][T19396] tipc: Resetting bearer <eth:syzkaller0>
[  327.886895][T19434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5879'.
[  328.201829][T19455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5888'.
[  328.282000][T19459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5890'.
[  328.285303][T19459] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  328.746116][T19465] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5892'.
[  329.055779][T19485] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  329.804353][T19550] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5927'.
[  329.953138][T11430] tipc: Subscription rejected, illegal request
[  330.003227][T11430] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  330.686659][T19553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  330.782644][T19594] batadv_slave_0: left promiscuous mode
[  330.784775][T19594] batadv_slave_0: left allmulticast mode
[  330.789082][T19594] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  330.799949][T19594] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  330.811559][T19594] gtp0: left promiscuous mode
[  330.813623][T19594] gtp0: left allmulticast mode
[  330.886887][T19594] hsr1: left allmulticast mode
[  330.891629][T19594] batadv0: left allmulticast mode
[  330.893809][T19594] gretap0: left allmulticast mode
[  330.913064][T11430] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.916696][T11430] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  330.921298][T11430] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.928465][T11430] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  330.933873][T11430] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.939996][T11430] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  330.944881][T11430] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.948491][T11430] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  331.068184][T19605] pim6reg1: entered promiscuous mode
[  331.072321][T19605] pim6reg1: entered allmulticast mode
[  331.454058][T19632] netlink: 'syz.2.5961': attribute type 1 has an invalid length.
[  331.503408][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5964'.
[  331.507637][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5964'.
[  331.647311][T19651] xt_hashlimit: size too large, truncated to 1048576
[  331.712296][T19656] Unsupported ieee802154 address type: 0
[  332.531810][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5974'.
[  332.861502][T19680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5981'.
[  333.271615][T19704] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  333.292607][T19704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5992'.
[  333.323568][T19707] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5994'.
[  333.329267][T19707] syzkaller0: entered promiscuous mode
[  333.332240][T19707] syzkaller0: entered allmulticast mode
[  333.334892][T19704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5992'.
[  333.338130][T19707] tc action pedit offset must be on 32 bit boundaries
[  333.343717][T19707] tc action pedit offset must be on 32 bit boundaries
[  333.344013][T19704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5992'.
[  333.346407][T19707] tc action pedit offset must be on 32 bit boundaries
[  333.346423][T19707] tc action pedit offset must be on 32 bit boundaries
[  333.346431][T19707] tc action pedit offset must be on 32 bit boundaries
[  333.346439][T19707] tc action pedit offset must be on 32 bit boundaries
[  333.346446][T19707] tc action pedit offset must be on 32 bit boundaries
[  333.346454][T19707] tc action pedit offset must be on 32 bit boundaries
[  333.346461][T19707] tc action pedit offset must be on 32 bit boundaries
[  333.346469][T19707] tc action pedit offset must be on 32 bit boundaries
[  333.346484][T19707] 0: reclassify loop, rule prio 0, protocol 800
[  333.533830][T19721] netlink: 'syz.0.5999': attribute type 1 has an invalid length.
[  333.537762][T19719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5998'.
[  333.920964][T19754] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  333.954836][T19754] team0: entered promiscuous mode
[  333.958691][T19754] team_slave_0: entered promiscuous mode
[  333.964663][T19754] team_slave_1: entered promiscuous mode
[  333.967296][T19754] geneve1: entered promiscuous mode
[  333.973853][T19754] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  334.803776][T19766] bridge_slave_1: left allmulticast mode
[  334.805688][T19766] bridge_slave_1: left promiscuous mode
[  334.807684][T19766] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.825773][T19766] bond0: (slave bond_slave_0): Releasing backup interface
[  334.833650][T19766] bond0: (slave bond_slave_1): Releasing backup interface
[  334.842485][T19766] team_slave_0: left promiscuous mode
[  334.850288][T19766] team0: Port device team_slave_0 removed
[  334.852611][T19766] team_slave_1: left promiscuous mode
[  334.857907][T19766] team0: Port device team_slave_1 removed
[  334.860486][T19766] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  334.862905][T19766] batman_adv: batadv0: Removing interface: batadv_slave_1
[  334.866882][T19766] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  334.883047][T19767] ip6gre3: entered allmulticast mode
[  334.887515][T19767] ip6gre3: entered promiscuous mode
[  334.891044][T19767] team0: Device ip6gre3 is of different type
[  335.006013][T19769] netlink: 'syz.1.6020': attribute type 1 has an invalid length.
[  335.023270][T19769] bond11: entered promiscuous mode
[  335.025351][T19769] 8021q: adding VLAN 0 to HW filter on device bond11
[  335.040426][T19769] 8021q: adding VLAN 0 to HW filter on device bond11
[  335.043034][T19769] bond11: (slave vcan1): The slave device specified does not support setting the MAC address
[  335.046704][T19769] bond11: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  335.053722][T19769] bond11: (slave vcan1): making interface the new active one
[  335.056165][T19769] vcan1: entered promiscuous mode
[  335.059027][T19769] bond11: (slave vcan1): Enslaving as an active interface with an up link
[  335.300821][T19782] netlink: 'syz.1.6026': attribute type 6 has an invalid length.
[  335.304261][T19782] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.6026'.
[  335.343794][T19784] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6027'.
[  335.543825][T19795] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  336.664208][T19735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  337.001815][T19813] syzkaller0: entered promiscuous mode
[  337.010101][T19813] syzkaller0: entered allmulticast mode
[  337.149087][T19824] netlink: 'syz.0.6047': attribute type 1 has an invalid length.
[  337.153121][T19824] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6047'.
[  337.502155][T19850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6059'.
[  337.713567][T19863] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6064'.
[  337.832126][T10006] ip6_vti0 speed is unknown, defaulting to 1000
[  337.835154][T10006] syz2: Port: 1 Link DOWN
[  337.848248][T10006] ip6_vti0 speed is unknown, defaulting to 1000
[  338.492715][T19922] nbd2: detected capacity change from 0 to 63
[  338.497072][T19930] block nbd2: NBD_DISCONNECT
[  338.504082][T19930] block nbd2: Disconnected due to user request.
[  338.521845][T19930] block nbd2: shutting down sockets
[  338.525170][    C0] blk_print_req_error: 138 callbacks suppressed
[  338.525187][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.531925][    C0] buffer_io_error: 138 callbacks suppressed
[  338.531941][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  338.537875][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.541449][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[  338.544642][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.548460][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[  338.551870][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.555544][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[  338.564961][T19895] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.569003][T19895] Buffer I/O error on dev nbd2, logical block 0, async page read
[  338.582129][T19895] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.583675][T19934] __nla_validate_parse: 25 callbacks suppressed
[  338.583701][T19934] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6098'.
[  338.595934][T19895] Buffer I/O error on dev nbd2, logical block 1, async page read
[  338.607047][T19895] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.630009][T19895] Buffer I/O error on dev nbd2, logical block 2, async page read
[  338.635288][T19895] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.640645][T19895] Buffer I/O error on dev nbd2, logical block 3, async page read
[  338.647181][T19895] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.653482][T19895] Buffer I/O error on dev nbd2, logical block 0, async page read
[  338.656658][T19895] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  338.669436][T19895] Buffer I/O error on dev nbd2, logical block 1, async page read
[  338.681701][T19895] ldm_validate_partition_table(): Disk read failed.
[  338.686690][T19895] Dev nbd2: unable to read RDB block 0
[  338.691163][T19895]  nbd2: unable to read partition table
[  338.697691][T19895] ldm_validate_partition_table(): Disk read failed.
[  338.716465][T19895] Dev nbd2: unable to read RDB block 0
[  338.722889][T19895]  nbd2: unable to read partition table
[  338.775438][T19953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6107'.
[  338.823084][T19960] netlink: 'syz.1.6110': attribute type 21 has an invalid length.
[  338.826878][T19960] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6110'.
[  338.882416][T19969] netlink: 758 bytes leftover after parsing attributes in process `syz.2.6114'.
[  339.226839][T20010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6132'.
[  339.248550][T20010] 8021q: adding VLAN 0 to HW filter on device bond12
[  339.273411][T20010] 8021q: adding VLAN 0 to HW filter on device bond13
[  339.277729][T20010] bond12: (slave bond13): Enslaving as an active interface with an up link
[  339.287718][T20010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6132'.
[  339.303442][T20010] bond12 (unregistering): (slave bond13): Releasing backup interface
[  339.307996][T20010] bond12 (unregistering): Released all slaves
[  339.430625][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6139'.
[  339.435023][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6139'.
[  339.484795][T20034] netlink: 'syz.1.6142': attribute type 2 has an invalid length.
[  339.651791][T20053] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6152'.
[  339.913098][T20078] xt_ipcomp: unknown flags 1D
[  339.957207][T20082] netlink: 'syz.0.6166': attribute type 1 has an invalid length.
[  339.959957][T20082] netlink: 'syz.0.6166': attribute type 2 has an invalid length.
[  340.349133][T20124] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6185'.
[  340.937746][T20158] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode
[  341.268570][T20187] netlink: 'syz.0.6213': attribute type 1 has an invalid length.
[  341.386205][T20199] smbdirect: ib_dev[syz1] removed
[  341.481086][T20206] netlink: 'syz.1.6222': attribute type 1 has an invalid length.
[  341.716049][T20224] netlink: 'syz.0.6230': attribute type 1 has an invalid length.
[  341.750583][T20224] 8021q: adding VLAN 0 to HW filter on device bond12
[  342.318527][T20269] netlink: 'syz.1.6250': attribute type 1 has an invalid length.
[  342.375073][T20273] openvswitch: netlink: IP tunnel TTL not specified.
[  342.404112][ T8288] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  342.410121][ T8288] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  342.414969][ T8288] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  342.424848][ T8288] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  343.178861][T20342] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  343.243306][T20348] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  343.363188][T20356] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  343.365866][T20356] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  343.709950][ T5679] page_pool_release_retry() stalled pool shutdown: id 93, 1 inflight 60 sec
[  343.812922][T20377] netlink: 'syz.2.6298': attribute type 1 has an invalid length.
[  344.086637][T20399] netlink: 'syz.0.6310': attribute type 7 has an invalid length.
[  344.094193][T20399] netlink: 'syz.0.6310': attribute type 8 has an invalid length.
[  344.148891][T20403] __nla_validate_parse: 14 callbacks suppressed
[  344.148909][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6311'.
[  344.393735][T20418] bond0: option arp_validate: invalid value (55553)
[  344.447298][T20420] syzkaller0: entered promiscuous mode
[  344.450235][T20420] syzkaller0: entered allmulticast mode
[  344.726884][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6330'.
[  344.754522][T20446] sch_tbf: burst 185 is lower than device syzkaller0 mtu (313) !
[  345.020017][T20454] syzkaller0: entered promiscuous mode
[  345.022429][T20454] syzkaller0: entered allmulticast mode
[  346.030548][T20491] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  346.257667][T20505] tap0: tun_chr_ioctl cmd 1074025676
[  346.259559][T20505] tap0: owner set to 0
[  346.717871][T20543] syzkaller0: entered promiscuous mode
[  346.720933][T20543] syzkaller0: entered allmulticast mode
[  347.193716][T20553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6381'.
[  349.771101][T20551] tc_dump_action: action bad kind
[  350.028205][T20579] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6394'.
[  350.268385][T20598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6402'.
[  350.333235][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6405'.
[  350.419408][T20609] syzkaller1: entered promiscuous mode
[  350.424497][T20609] syzkaller1: entered allmulticast mode
[  350.800624][T20629] netlink: 'syz.2.6417': attribute type 10 has an invalid length.
[  350.866466][T20637] netem: change failed
[  350.953580][T20641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6423'.
[  351.271325][T20671] set match dimension is over the limit!
[  351.315329][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6437'.
[  351.375013][T20674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6437'.
[  352.086874][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6439'.
[  352.132837][T20681] netem: incorrect gi model size
[  352.136497][T20681] netem: change failed
[  352.364962][T20698] xt_cgroup: xt_cgroup: no path or classid specified
[  352.460200][T20704] syzkaller0: entered promiscuous mode
[  352.462914][T20704] syzkaller0: entered allmulticast mode
[  352.806056][T20728] bond0: (slave wlan0): Opening slave failed
[  352.809107][T20730] netlink: 'syz.1.6464': attribute type 21 has an invalid length.
[  352.812709][T20730] netlink: 'syz.1.6464': attribute type 22 has an invalid length.
[  352.815448][T20730] netlink: 'syz.1.6464': attribute type 23 has an invalid length.
[  352.818170][T20730] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6464'.
[  352.959463][T20746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6470'.
[  352.970994][T20746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6470'.
[  353.044541][T20752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.201664][ T8293] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  353.206064][ T8293] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  353.214279][ T8293] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  353.218205][ T8293] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  354.373360][T20859] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  354.394330][T20857] sctp: [Deprecated]: syz.0.6521 (pid 20857) Use of int in maxseg socket option.
[  354.394330][T20857] Use struct sctp_assoc_value instead
[  354.445697][T20863] netlink: 'syz.1.6523': attribute type 9 has an invalid length.
[  354.850676][T20892] bond12: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  354.858157][T20892] bond12 (unregistering): Released all slaves
[  355.034065][T20912] netlink: 'syz.0.6545': attribute type 3 has an invalid length.
[  355.209059][T20920] __nla_validate_parse: 14 callbacks suppressed
[  355.209076][T20920] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.6549'.
[  355.218625][T20920] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.6549'.
[  355.636625][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6563'.
[  355.640963][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6563'.
[  355.749635][T20955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6565'.
[  355.830311][T20960] xt_TCPMSS: Only works on TCP SYN packets
[  355.887165][T20964] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  356.071383][T20980] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6578'.
[  356.211210][T20994] netlink: 'syz.1.6585': attribute type 1 has an invalid length.
[  356.276445][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6588'.
[  356.290218][T21000] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6588'.
[  356.300107][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6588'.
[  356.306849][T21000] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6588'.
[  357.041468][T21058] xt_l2tp: invalid flags combination: 8
[  357.066864][T21058] netlink: 'syz.2.6616': attribute type 1 has an invalid length.
[  357.074397][T21058] gre0: entered promiscuous mode
[  357.076125][T21058] gre0: entered allmulticast mode
[  357.569323][T21087] netlink: 'syz.1.6631': attribute type 11 has an invalid length.
[  357.841735][T21114] bond14: Invalid ad_actor_system MAC address.
[  357.844066][T21114] bond14: option ad_actor_system: invalid value (1)
[  357.848998][T21114] bond14 (unregistering): Released all slaves
[  358.095255][T21132] ip6_vti0 speed is unknown, defaulting to 1000
[  358.316638][T21147] netlink: 'syz.0.6656': attribute type 1 has an invalid length.
[  358.474640][T21154] bond14 (unregistering): Released all slaves
[  358.960141][ T5625] Bluetooth: hci2: link tx timeout
[  358.964127][ T5625] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  359.809544][T21262] tipc: Invalid UDP bearer configuration
[  359.809587][T21262] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  360.423366][T21244] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  360.427995][T21244] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  360.980050][ T5618] Bluetooth: hci2: command 0x0405 tx timeout
[  360.990041][T21244] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  360.993807][T21244] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  361.280811][T21292] ip6_vti0 speed is unknown, defaulting to 1000
[  361.316362][T21296] netlink: 'syz.0.6721': attribute type 39 has an invalid length.
[  361.543063][T21302] __nla_validate_parse: 13 callbacks suppressed
[  361.543082][T21302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6725'.
[  361.767547][T21314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6731'.
[  362.140710][T21330] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.6738'.
[  362.214808][T21338] netlink: 'syz.2.6741': attribute type 1 has an invalid length.
[  362.295409][T21338] bond22: entered promiscuous mode
[  362.298281][T21338] 8021q: adding VLAN 0 to HW filter on device bond22
[  362.337165][T21338] bond22: (slave bridge11): making interface the new active one
[  362.342159][T21338] bridge11: entered promiscuous mode
[  362.347363][T21338] bridge11: left promiscuous mode
[  362.444199][T21361] netlink: 'syz.1.6753': attribute type 1 has an invalid length.
[  362.447330][T21361] netlink: 'syz.1.6753': attribute type 1 has an invalid length.
[  362.576571][T21374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6756'.
[  362.582461][T21374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6756'.
[  362.592596][T21374] netlink: 31 bytes leftover after parsing attributes in process `syz.0.6756'.
[  362.598883][T21374] netlink: 'syz.0.6756': attribute type 3 has an invalid length.
[  362.604403][T21374] netlink: 'syz.0.6756': attribute type 2 has an invalid length.
[  362.610066][T21374] netlink: 31 bytes leftover after parsing attributes in process `syz.0.6756'.
[  362.616309][T21374] netlink: 'syz.0.6756': attribute type 2 has an invalid length.
[  362.793746][T21394] xt_CT: You must specify a L4 protocol and not use inversions on it
[  362.865051][T21399] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6768'.
[  362.871349][T21399] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6768'.
[  363.144450][T21416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6775'.
[  363.309595][T21426] ip6_vti0 speed is unknown, defaulting to 1000
[  363.347548][T21432] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  363.401112][T21438] netlink: 'syz.0.6786': attribute type 1 has an invalid length.
[  363.408337][T21438] netlink: 'syz.0.6786': attribute type 2 has an invalid length.
[  363.412268][T21438] netlink: 'syz.0.6786': attribute type 1 has an invalid length.
[  364.747465][T21539] veth0_macvtap: Caught tx_queue_len zero misconfig
[  365.808238][T21602] openvswitch: netlink: Multiple metadata blocks provided
[  366.477605][T21665] team3: entered promiscuous mode
[  366.479665][T21665] team3: entered allmulticast mode
[  366.483127][T21665] 8021q: adding VLAN 0 to HW filter on device team3
[  366.538539][T21665] team4: entered promiscuous mode
[  366.544846][T21665] team4: entered allmulticast mode
[  366.550579][T21665] 8021q: adding VLAN 0 to HW filter on device team4
[  366.560558][T21675] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  367.090266][T21720] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  367.845293][T21764] ip6_vti0 speed is unknown, defaulting to 1000
[  367.937283][T21774] validate_nla: 2 callbacks suppressed
[  367.937365][T21774] netlink: 'syz.0.6933': attribute type 1 has an invalid length.
[  367.947893][T21774] netlink: 'syz.0.6933': attribute type 1 has an invalid length.
[  368.010427][T21776] netlink: 'syz.2.6934': attribute type 1 has an invalid length.
[  368.023002][T21776] __nla_validate_parse: 12 callbacks suppressed
[  368.023021][T21776] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6934'.
[  368.039624][T21776] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6934'.
[  368.051059][T21776] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6934'.
[  368.266529][T21787] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  368.273590][T21784] netlink: 'syz.0.6938': attribute type 1 has an invalid length.
[  368.369464][T21795] netlink: 'syz.2.6942': attribute type 1 has an invalid length.
[  368.375498][T21795] netlink: 'syz.2.6942': attribute type 2 has an invalid length.
[  368.388453][T21790] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address
[  368.396441][T21790] bond14: (slave vxcan1): Error -95 calling set_mac_address
[  368.460938][T21784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6938'.
[  368.518821][T21784] macvlan0: entered promiscuous mode
[  368.527584][T21784] macvlan0: entered allmulticast mode
[  368.548412][T21784] syzkaller1: tun_chr_ioctl cmd 1074025677
[  368.553633][T21784] syzkaller1: Refused to change device type
[  368.598877][T21805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6946'.
[  369.726697][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6960'.
[  369.746527][T21835] macvlan0: entered allmulticast mode
[  369.750855][T21835] gretap0: entered allmulticast mode
[  369.852024][T21844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6964'.
[  369.925518][T21850] xt_HMARK: proto mask must be zero with L3 mode
[  369.978635][T21854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6969'.
[  370.034455][T21858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.038189][T21858] syzkaller0: entered promiscuous mode
[  370.041049][T21858] syzkaller0: entered allmulticast mode
[  370.048639][T21858] netem: change failed
[  370.114500][T21858] netlink: 'syz.0.6971': attribute type 1 has an invalid length.
[  370.125866][T21858] netlink: 'syz.0.6971': attribute type 2 has an invalid length.
[  370.135806][T21858] netlink: 'syz.0.6971': attribute type 2 has an invalid length.
[  370.143256][T21858] netlink: 'syz.0.6971': attribute type 2 has an invalid length.
[  370.257071][T21857] tipc: Resetting bearer <eth:syzkaller0>
[  370.311164][T21857] tipc: Disabling bearer <eth:syzkaller0>
[  370.358794][T21875] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  370.374316][T21875] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  370.584557][T21897] nbd: couldn't find device at index -427251215
[  370.642835][T21901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6990'.
[  370.658914][T21899] syzkaller0: entered promiscuous mode
[  370.666693][T21899] syzkaller0: entered allmulticast mode
[  370.686127][T21906] IPv6: NLM_F_CREATE should be specified when creating new route
[  370.713761][T21908] openvswitch: netlink: IP tunnel dst address not specified
[  370.772629][T21914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.432587][T21942] syzkaller0: entered promiscuous mode
[  374.440647][T21942] syzkaller0: entered allmulticast mode
[  374.456924][T21944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7008'.
[  374.489143][T21944] bond0: Removing last ns target with arp_interval on
[  374.501803][T21944] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.242456][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7033'.
[  375.339595][T22008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7038'.
[  375.345490][T22008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7038'.
[  375.416261][T22014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  375.663028][T22036] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7048'.
[  375.711860][T22035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7049'.
[  375.766954][T22040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7051'.
[  375.885598][T22048] validate_nla: 3 callbacks suppressed
[  375.885613][T22048] netlink: 'syz.0.7054': attribute type 3 has an invalid length.
[  375.923473][T22052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7056'.
[  375.926711][T22052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7056'.
[  376.015925][T22060] netlink: 'syz.0.7060': attribute type 1 has an invalid length.
[  376.101496][T22068] x_tables: duplicate entry at hook 2
[  376.157592][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7068'.
[  376.242761][T22082] debugfs: 'netdev:syzkaller0' already exists in 'phy4'
[  376.414144][T22099] netlink: 'syz.2.7080': attribute type 1 has an invalid length.
[  376.629014][T22114] syzkaller0: entered promiscuous mode
[  376.632781][T22114] syzkaller0: entered allmulticast mode
[  376.875612][T22124] ip6_vti0 speed is unknown, defaulting to 1000
[  377.137834][T22141] Unsupported ieee802154 address type: 0
[  377.246882][T22145] netlink: 'syz.1.7098': attribute type 13 has an invalid length.
[  377.288891][T22147] netlink: 'syz.0.7099': attribute type 1 has an invalid length.
[  377.427584][T22155] netlink: 'syz.0.7101': attribute type 1 has an invalid length.
[  377.604832][T22165] netlink: 'syz.1.7106': attribute type 15 has an invalid length.
[  377.618731][T11430] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0
[  377.618818][T22165] netlink: 'syz.1.7106': attribute type 15 has an invalid length.
[  377.627462][T11430] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  377.637166][T11430] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  377.647008][T11430] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  377.982315][T22202] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  378.271852][T22227] syzkaller1: entered promiscuous mode
[  378.274471][T22227] syzkaller1: entered allmulticast mode
[  378.379136][T22233] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  378.656614][T22255] batadv_slave_1: Caught tx_queue_len zero misconfig
[  378.818502][T22261] netlink: 'syz.1.7150': attribute type 7 has an invalid length.
[  379.254296][T22277] x_tables: duplicate underflow at hook 2
[  379.347851][T22281] GUP no longer grows the stack in syz.2.7159 (22281): 200000003000-20000000a000 (200000001000)
[  379.366935][T22281] CPU: 0 UID: 0 PID: 22281 Comm: syz.2.7159 Not tainted syzkaller #0 PREEMPT(full) 
[  379.366958][T22281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  379.366967][T22281] Call Trace:
[  379.366976][T22281]  <TASK>
[  379.366984][T22281]  dump_stack_lvl+0xe8/0x150
[  379.367014][T22281]  __get_user_pages+0x2378/0x2720
[  379.367036][T22281]  ? __gup_longterm_locked+0xc4e/0x1630
[  379.367066][T22281]  ? __gup_longterm_locked+0xc4e/0x1630
[  379.367081][T22281]  ? down_read_killable+0x1bb/0x340
[  379.367103][T22281]  __gup_longterm_locked+0xdcf/0x1630
[  379.367124][T22281]  ? lock_acquire+0x106/0x350
[  379.367154][T22281]  gup_fast_fallback+0x1d84/0x20d0
[  379.367189][T22281]  ? __pfx_gup_fast_fallback+0x10/0x10
[  379.367206][T22281]  ? is_valid_gup_args+0x11f/0x200
[  379.367221][T22281]  ? get_user_pages_fast+0x4d/0xb0
[  379.367239][T22281]  __iov_iter_get_pages_alloc+0x370/0xa10
[  379.367267][T22281]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  379.367290][T22281]  iov_iter_get_pages2+0x5e/0xa0
[  379.367313][T22281]  __se_sys_vmsplice+0x7c7/0x1620
[  379.367346][T22281]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  379.367363][T22281]  ? __pfx_futex_wait+0x10/0x10
[  379.367393][T22281]  ? lockdep_hardirqs_on+0x7a/0x110
[  379.367444][T22281]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.367461][T22281]  do_syscall_64+0x15f/0xf80
[  379.367479][T22281]  ? trace_irq_disable+0x3b/0x140
[  379.367531][T22281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.367547][T22281] RIP: 0033:0x7f2d9ff9cdd9
[  379.367562][T22281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.367575][T22281] RSP: 002b:00007f2da0f0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  379.367591][T22281] RAX: ffffffffffffffda RBX: 00007f2da0215fa0 RCX: 00007f2d9ff9cdd9
[  379.367602][T22281] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[  379.367619][T22281] RBP: 00007f2da0032d69 R08: 0000000000000000 R09: 0000000000000000
[  379.367628][T22281] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  379.367636][T22281] R13: 00007f2da0216038 R14: 00007f2da0215fa0 R15: 00007fffc3b39338
[  379.367659][T22281]  </TASK>
[  379.622009][T22289] __nla_validate_parse: 21 callbacks suppressed
[  379.622032][T22289] netlink: 746 bytes leftover after parsing attributes in process `syz.1.7163'.
[  379.817289][T22301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7169'.
[  379.831109][T22301] netlink: 'syz.2.7169': attribute type 30 has an invalid length.
[  379.892271][T22301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7169'.
[  380.709209][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7191'.
[  381.361968][T22367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7199'.
[  381.697015][T22378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7205'.
[  381.827611][T22388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7209'.
[  381.833970][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7209'.
[  381.882235][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  381.887167][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  381.894593][T22388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7209'.
[  381.901649][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  381.907440][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7209'.
[  381.913011][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  382.009413][T22396] validate_nla: 1 callbacks suppressed
[  382.009447][T22396] netlink: 'syz.1.7213': attribute type 32 has an invalid length.
[  382.048671][T22401] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  382.318092][T22432] syzkaller1: entered promiscuous mode
[  382.323105][T22432] syzkaller1: entered allmulticast mode
[  382.365777][T11426] block nbd2: Receive control failed (result -32)
[  383.275259][T22508] netlink: ct family unspecified
[  383.277038][T22508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.334733][T22515] bond11: entered allmulticast mode
[  383.336653][T22515] vcan1: entered allmulticast mode
[  383.357381][T22517] netlink: 'syz.0.7265': attribute type 4 has an invalid length.
[  383.962745][T22549] 8021q: adding VLAN 0 to HW filter on device team0
[  383.998709][T22549] 8021q: adding VLAN 0 to HW filter on device 60X
[  384.059121][T22549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  384.064214][T22549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  384.074651][T22549] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  384.336725][T22581] bond24: entered promiscuous mode
[  384.339455][T22581] 8021q: adding VLAN 0 to HW filter on device bond24
[  384.380724][T22586] bridge11: entered promiscuous mode
[  384.383022][T22586] bond24: (slave bridge11): Enslaving as an active interface with an up link
[  384.426065][T22581] bond24 (unregistering): (slave bridge11): Releasing backup interface
[  384.438944][T22581] bridge11: left promiscuous mode
[  384.452154][T22581] bond24 (unregistering): Released all slaves
[  384.756402][T22607] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  384.764173][T22607] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  384.851352][T22618] __nla_validate_parse: 10 callbacks suppressed
[  384.851376][T22618] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7306'.
[  385.068910][T22624] netlink: 'syz.1.7306': attribute type 1 has an invalid length.
[  385.492734][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7306'.
[  385.636067][T22632] Unknown options in mask 6
[  385.865705][T22643] netlink: 'syz.1.7313': attribute type 11 has an invalid length.
[  385.944694][T22649] netlink: 'syz.2.7315': attribute type 2 has an invalid length.
[  386.011555][T22651] netlink: 'syz.1.7316': attribute type 30 has an invalid length.
[  386.765772][T22675] syz.0.7325 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  386.779846][T22675] CPU: 1 UID: 0 PID: 22675 Comm: syz.0.7325 Not tainted syzkaller #0 PREEMPT(full) 
[  386.779860][T22675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  386.779865][T22675] Call Trace:
[  386.779869][T22675]  <TASK>
[  386.779886][T22675]  dump_stack_lvl+0xe8/0x150
[  386.779930][T22675]  dump_header+0xd3/0x4c0
[  386.779948][T22675]  oom_kill_process+0x3ab/0x970
[  386.779965][T22675]  out_of_memory+0x106c/0x1410
[  386.779977][T22675]  ? try_charge_memcg+0xbb9/0x1570
[  386.780000][T22675]  ? __pfx___mutex_lock+0x10/0x10
[  386.780052][T22675]  ? __pfx_out_of_memory+0x10/0x10
[  386.780060][T22675]  ? do_raw_spin_unlock+0x4d/0x210
[  386.780075][T22675]  try_charge_memcg+0xc77/0x1570
[  386.780092][T22675]  ? __pfx_try_charge_memcg+0x10/0x10
[  386.780102][T22675]  ? percpu_ref_tryget+0x15/0x180
[  386.780121][T22675]  ? charge_memcg+0x23/0x2b0
[  386.780132][T22675]  charge_memcg+0x1a2/0x2b0
[  386.780142][T22675]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  386.780152][T22675]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  386.780163][T22675]  __swap_cache_prepare_and_add+0xdc/0x700
[  386.780174][T22675]  ? page_rmappable_folio+0x9a/0x170
[  386.780189][T22675]  swap_cache_alloc_folio+0xf1/0x240
[  386.780203][T22675]  swap_cluster_readahead+0x355/0x670
[  386.780215][T22675]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  386.780228][T22675]  ? get_vma_policy+0x27b/0x3c0
[  386.780240][T22675]  swapin_readahead+0x196/0xc50
[  386.780250][T22675]  ? swap_table_get+0x1e/0x260
[  386.780259][T22675]  ? __pfx_swapin_readahead+0x10/0x10
[  386.780269][T22675]  ? swap_table_get+0x1e/0x260
[  386.780276][T22675]  ? swap_table_get+0x1e/0x260
[  386.780283][T22675]  ? swap_table_get+0x1e/0x260
[  386.780291][T22675]  ? swap_table_get+0x216/0x260
[  386.780299][T22675]  ? swap_cache_get_folio+0x2e4/0x2f0
[  386.780309][T22675]  do_swap_page+0x555/0x5120
[  386.780321][T22675]  ? __pte_offset_map+0x29/0x240
[  386.780330][T22675]  ? __pte_offset_map+0x29/0x240
[  386.780342][T22675]  ? do_swap_page+0x128/0x5120
[  386.780350][T22675]  ? __pfx_do_swap_page+0x10/0x10
[  386.780357][T22675]  ? __pte_offset_map+0x1ae/0x240
[  386.780367][T22675]  ? pte_offset_map_rw_nolock+0xea/0x160
[  386.780377][T22675]  handle_mm_fault+0x12d2/0x3170
[  386.780391][T22675]  ? handle_mm_fault+0xee/0x3170
[  386.780403][T22675]  ? __pfx_handle_mm_fault+0x10/0x10
[  386.780410][T22675]  ? lock_vma_under_rcu+0x45a/0x500
[  386.780430][T22675]  do_user_addr_fault+0xa73/0x1340
[  386.780471][T22675]  ? rcu_is_watching+0x15/0xb0
[  386.780482][T22675]  ? trace_page_fault_user+0x84/0x1e0
[  386.780491][T22675]  exc_page_fault+0x6a/0xc0
[  386.780501][T22675]  asm_exc_page_fault+0x26/0x30
[  386.780508][T22675] RIP: 0033:0x7f82fcf57f03
[  386.780526][T22675] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ae 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b
[  386.780533][T22675] RSP: 002b:00007fff5e299410 EFLAGS: 00010246
[  386.780549][T22675] RAX: 0000000000000000 RBX: 000055556b564500 RCX: 0000000000000000
[  386.780554][T22675] RDX: 00007fff5e299450 RSI: 0000000000000000 RDI: 0000000000000000
[  386.780558][T22675] RBP: 00007f82fd217da0 R08: 0000000000000000 R09: 0000000000000000
[  386.780563][T22675] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005e734
[  386.780567][T22675] R13: 00007f82fd215fac R14: 000000000005e427 R15: 00007fff5e299580
[  386.780578][T22675]  </TASK>
[  386.780582][T22675] memory: usage 307200kB, limit 307200kB, failcnt 3124
[  386.900054][T22675] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0
[  386.902856][T22675] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  386.905434][T22675] Memory cgroup stats for /syz0:
[  386.905512][T22675] cache 0
[  386.908239][T22675] rss 0
[  386.909427][T22675] rss_huge 0
[  386.917963][T22675] shmem 0
[  386.921320][T22675] mapped_file 0
[  386.924000][T22675] dirty 0
[  386.925543][T22675] writeback 0
[  386.927841][T22675] workingset_refault_anon 4
[  386.932490][T22675] workingset_refault_file 1
[  386.936886][T22675] swap 106496
[  386.940099][T22675] swapcached 151552
[  386.943219][T22675] pgpgin 192558
[  386.945638][T22675] pgpgout 192556
[  386.948620][T22675] pgfault 400647
[  386.952297][T22675] pgmajfault 8
[  386.954584][T22675] inactive_anon 0
[  386.957536][T22675] active_anon 8192
[  386.962871][T22675] inactive_file 0
[  386.968988][T22675] active_file 0
[  386.974646][T22675] unevictable 0
[  386.975779][T22675] hierarchical_memory_limit 314572800
[  386.983728][T22675] hierarchical_memsw_limit 9223372036854771712
[  386.985763][T22675] total_cache 0
[  386.986875][T22675] total_rss 0
[  386.988005][T22675] total_rss_huge 0
[  386.989164][T22675] total_shmem 0
[  386.991917][T22675] total_mapped_file 0
[  386.993295][T22675] total_dirty 0
[  386.994434][T22675] total_writeback 0
[  386.995664][T22675] total_workingset_refault_anon 4
[  386.997492][T22675] total_workingset_refault_file 1
[  386.999123][T22675] total_swap 106496
[  387.006259][T22675] total_swapcached 151552
[  387.007674][T22675] total_pgpgin 192558
[  387.013699][T22675] total_pgpgout 192556
[  387.016471][T22675] total_pgfault 400647
[  387.021407][T22675] total_pgmajfault 8
[  387.025288][T22675] total_inactive_anon 0
[  387.028656][T22675] total_active_anon 8192
[  387.032163][T22675] total_inactive_file 0
[  387.033638][T22675] total_active_file 0
[  387.037635][T22675] total_unevictable 0
[  387.039208][T22675] anon_cost 0
[  387.041277][T22675] file_cost 0
[  387.042422][T22675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7325,pid=22675,uid=0
[  387.049063][T22675] Memory cgroup out of memory: Killed process 22675 (syz.0.7325) total-vm:102160kB, anon-rss:1248kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  387.087852][T22713] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7342'.
[  387.290894][   T10] bridge0: entered promiscuous mode
[  387.362767][T22730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7350'.
[  387.366529][T22730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7350'.
[  387.475502][T22737] netlink: 'syz.1.7353': attribute type 29 has an invalid length.
[  387.490684][T22737] netlink: 'syz.1.7353': attribute type 29 has an invalid length.
[  387.501096][T22737] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7353'.
[  388.139024][T22755] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  388.303629][T22771] veth0: entered promiscuous mode
[  388.306056][T22770] veth0: left promiscuous mode
[  388.832981][T22817] gretap0: entered promiscuous mode
[  388.895115][T22817] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.899056][T22817] 8021q: adding VLAN 0 to HW filter on device team0
[  388.926702][T22817] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  388.935652][T10006] ip6_vti0 speed is unknown, defaulting to 1000
[  388.938368][T10006] syz2: Port: 1 Link ACTIVE
[  388.948086][T10006] ip6_vti0 speed is unknown, defaulting to 1000
[  389.378876][T22856] vxcan2: entered allmulticast mode
[  389.467327][T22866] sock: sock_timestamping_bind_phc: sock not bind to device
[  389.700761][T22893] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7427'.
[  389.889026][T22911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7428'.
[  389.980604][T22915] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  390.424745][T22942] tipc: Enabled bearer <ib:ip6gre0>, priority 8
[  390.479578][T22946] geneve6: entered promiscuous mode
[  390.835120][T22972] netlink: 'syz.2.7461': attribute type 1 has an invalid length.
[  390.966640][T22988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7468'.
[  391.652024][T23032] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7488'.
[  391.662893][T23032] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7488'.
[  392.419166][T23096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7520'.
[  392.473731][T23101] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7522'.
[  392.477537][T23101] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7522'.
[  393.984887][T23192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7559'.
[  394.158044][T23203] netlink: 'syz.2.7562': attribute type 10 has an invalid length.
[  394.319183][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816db5e400: rx timeout, send abort
[  394.825729][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816db5e400: abort rx timeout. Force session deactivation
[  395.175303][T23249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7580'.
[  395.207656][T23249] 8021q: adding VLAN 0 to HW filter on device bond25
[  395.214344][T23249] netlink: 'syz.2.7580': attribute type 8 has an invalid length.
[  395.226549][T23249] bond25 (unregistering): Released all slaves
[  395.713825][T23277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7590'.
[  395.729984][T23277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7590'.
[  395.785688][T23283] netlink: 'syz.0.7592': attribute type 3 has an invalid length.
[  396.011349][T23312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7608'.
[  396.016251][T23312] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7608'.
[  396.234663][T23332] tunl0: Caught tx_queue_len zero misconfig
[  396.438288][T23352] vlan0: entered promiscuous mode
[  396.443053][T23352] macvtap0: entered promiscuous mode
[  396.655708][T23370] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  396.753679][T23380] netlink: 'syz.0.7640': attribute type 1 has an invalid length.
[  396.758776][T23380] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7640'.
[  397.175756][T23417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7658'.
[  397.241642][T23425] netlink: 'syz.1.7663': attribute type 4 has an invalid length.
[  397.332878][T23434] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.7666'.
[  397.339690][T23434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7666'.
[  397.349921][T23434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7666'.
[  397.564872][T23453] xt_time: unknown flags 0xf4
[  397.699001][T23464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.457399][T23547] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  400.363016][ T8288] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.367503][ T8288] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  400.382662][ T8288] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.390446][ T8288] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  400.394039][ T8288] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.397445][ T8288] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  400.405532][ T8288] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  400.410093][ T8288] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  401.163946][T23647] batman_adv: batadv0: Adding interface: gretap3
[  401.166598][T23647] batman_adv: batadv0: The MTU of interface gretap3 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem.
[  401.202950][T23647] batman_adv: batadv0: Interface activated: gretap3
[  401.393690][T23656] bridge12: entered promiscuous mode
[  401.396118][T23656] bridge12: entered allmulticast mode
[  401.402484][T23656] team0: Port device bridge12 added
[  401.978888][T23656] bridge0: port 1(team0) entered blocking state
[  401.986507][T23656] bridge0: port 1(team0) entered disabled state
[  401.988757][T23656] team0: entered allmulticast mode
[  401.993330][T23656] bond1: entered allmulticast mode
[  402.004297][T23656] team0: left allmulticast mode
[  402.005985][T23656] bond1: left allmulticast mode
[  403.573668][T23745] syz_tun: entered allmulticast mode
[  403.585521][T23745] dvmrp8: entered allmulticast mode
[  403.589687][T23744] syz_tun: left allmulticast mode
[  403.685527][T23761] __nla_validate_parse: 3 callbacks suppressed
[  403.685537][T23761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7810'.
[  403.836941][T23771] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7814'.
[  404.659550][T23805] netlink: 'syz.1.7829': attribute type 1 has an invalid length.
[  404.662655][T23805] netlink: 'syz.1.7829': attribute type 2 has an invalid length.
[  404.889078][T23827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7838'.
[  404.892547][T23827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7838'.
[  405.068051][T23832] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  405.073307][T23832] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  405.245416][T23853] netlink: 'syz.1.7848': attribute type 1 has an invalid length.
[  405.248579][T23853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7848'.
[  405.254083][T23853] netlink: 'syz.1.7848': attribute type 1 has an invalid length.
[  405.292414][T23853] syzkaller1: entered promiscuous mode
[  405.296465][T23853] syzkaller1: entered allmulticast mode
[  405.576941][T23859] netlink: 'syz.0.7850': attribute type 1 has an invalid length.
[  405.880240][T23861] nbd3: detected capacity change from 0 to 63
[  405.888086][   T55] block nbd3: Receive control failed (result -104)
[  405.891551][T17223] block nbd3: Receive control failed (result -32)
[  406.222468][T23896] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[  406.278436][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7867'.
[  406.290072][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7867'.
[  406.675622][T23928] syzkaller0: entered promiscuous mode
[  406.679492][T23932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.685580][T23928] syzkaller0: entered allmulticast mode
[  407.043134][T23961] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  407.678086][T24013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7923'.
[  407.683200][T24013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7923'.
[  407.868886][T24029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7931'.
[  408.240355][ T5503] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  408.247879][ T5503] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  408.255515][ T5503] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  408.270212][ T5503] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  408.653989][T24079] netlink: 'syz.0.7954': attribute type 2 has an invalid length.
[  408.757026][T24085] ip6_vti0 speed is unknown, defaulting to 1000
[  408.821948][T24095] netlink: 'syz.1.7960': attribute type 10 has an invalid length.
[  408.826641][T24095] vxcan0: entered promiscuous mode
[  408.828652][T24095] team0: Device vxcan0 is of different type
[  408.957776][T24103] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  409.516014][T24138] tap0: tun_chr_ioctl cmd 1074025681
[  409.577886][T24144] __nla_validate_parse: 2 callbacks suppressed
[  409.577897][T24144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7983'.
[  409.807012][T24171] netlink: 'syz.1.7996': attribute type 10 has an invalid length.
[  409.876302][T24177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  409.887880][T24177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  410.871581][T24213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8016'.
[  410.924820][T24216] netlink: 16158 bytes leftover after parsing attributes in process `syz.1.8017'.
[  410.950274][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8018'.
[  411.006782][T24221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8019'.
[  411.037788][T24223] syzkaller0: entered promiscuous mode
[  411.040230][T24223] syzkaller0: entered allmulticast mode
[  411.048272][T24223] 0: reclassify loop, rule prio 0, protocol 700
[  411.268700][T24238] syzkaller0: entered promiscuous mode
[  411.273179][T24238] syzkaller0: entered allmulticast mode
[  411.549189][T24259] hmac(sh: entered promiscuous mode
[  411.597849][T24262] : renamed from wg2 (while UP)
[  411.692687][T24277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8045'.
[  411.990194][T24284] wg1: entered promiscuous mode
[  411.994944][T24284] wg1: entered allmulticast mode
[  412.092897][T24286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8049'.
[  412.189493][T24294] netlink: 'syz.0.8053': attribute type 12 has an invalid length.
[  412.255369][T24300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8056'.
[  412.607238][T24313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8063'.
[  413.112576][T24347] ip6_vti0 speed is unknown, defaulting to 1000
[  413.215651][T24353] veth0: entered promiscuous mode
[  413.234175][T24353] bond0: entered promiscuous mode
[  413.244276][T24352] bond0: left promiscuous mode
[  413.251324][T24352] veth0: left promiscuous mode
[  413.358328][T24357] netlink: 'syz.1.8082': attribute type 1 has an invalid length.
[  413.374916][T24357] sctp: [Deprecated]: syz.1.8082 (pid 24357) Use of struct sctp_assoc_value in delayed_ack socket option.
[  413.374916][T24357] Use struct sctp_sack_info instead
[  413.566328][T24362] syzkaller0: entered promiscuous mode
[  413.580535][T24362] syzkaller0: entered allmulticast mode
[  413.672795][T24366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  414.739349][T24398] ip6_vti0 speed is unknown, defaulting to 1000
[  415.025423][T24421] ip6tnl0: Caught tx_queue_len zero misconfig
[  415.033712][T24423] netlink: 'syz.2.8110': attribute type 1 has an invalid length.
[  416.104145][T24481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8137'.
[  416.185312][T24485] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  416.227242][T24485] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  416.300619][T24485] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  416.373610][T24495] sctp: [Deprecated]: syz.0.8143 (pid 24495) Use of int in maxseg socket option.
[  416.373610][T24495] Use struct sctp_assoc_value instead
[  416.388803][T24485] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  416.463342][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  416.483979][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  416.514889][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  416.546292][ T8289] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  416.832589][T24527] ip6_vti0 speed is unknown, defaulting to 1000
[  417.135245][T24542] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8164'.
[  417.250572][T24550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8167'.
[  417.619993][T24578] geneve5: entered promiscuous mode
[  417.622321][T24578] geneve5: entered allmulticast mode
[  417.831341][T24593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8187'.
[  417.996540][T24601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8191'.
[  418.763412][T24634] tipc: Resetting bearer <ib:ip6gre0>
[  419.081062][ T5503] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  419.087904][ T5503] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  419.098686][ T5503] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  419.108625][ T5503] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  419.303226][T24667] netlink: 'syz.0.8219': attribute type 1 has an invalid length.
[  419.319350][T24667] 8021q: adding VLAN 0 to HW filter on device bond16
[  419.329683][T24667] bond16: (slave gretap0): making interface the new active one
[  419.334338][T24667] bond16: (slave gretap0): Enslaving as an active interface with an up link
[  419.448933][T24682] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8226'.
[  419.453502][T24682] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8226'.
[  420.412419][T24718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8239'.
[  420.593173][T24729] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.597093][T24729] 8021q: adding VLAN 0 to HW filter on device team0
[  420.784419][T24746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.838161][T24754] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  421.035554][T24762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.077604][T24762] tipc: Resetting bearer <eth:xfrm0>
[  421.213779][T24766] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  421.217064][T24766] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  421.455233][T24782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8267'.
[  421.635205][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8275'.
[  421.639219][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8275'.
[  421.644935][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8275'.
[  421.648767][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8275'.
[  421.657760][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8275'.
[  421.664434][T24802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8276'.
[  421.667421][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8275'.
[  421.672089][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8275'.
[  421.675069][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8275'.
[  422.051574][T24841] pimreg: entered allmulticast mode
[  422.056040][T24840] pimreg: left allmulticast mode
[  422.413176][T24882] netlink: 'syz.0.8311': attribute type 2 has an invalid length.
[  423.542595][T24945] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.585142][T24945] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.647895][T24945] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.670699][T24956] netlink: 'syz.1.8344': attribute type 10 has an invalid length.
[  423.693549][T24945] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.772616][ T5503] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  423.811048][ T5503] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  423.826825][ T5503] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  423.854231][ T5503] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  425.364762][T25031] syzkaller1: tun_chr_ioctl cmd 1074025677
[  425.380884][T25031] syzkaller1: linktype set to 769
[  425.482928][T25042] netlink: 'syz.2.8384': attribute type 12 has an invalid length.
[  425.487205][T25042] netlink: 'syz.2.8384': attribute type 12 has an invalid length.
[  425.564709][T25048] netlink: 'syz.1.8386': attribute type 21 has an invalid length.
[  426.094277][T25096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  426.295117][T25119] netlink: 'syz.1.8417': attribute type 1 has an invalid length.
[  426.295298][T25118] vlan5: entered promiscuous mode
[  426.300354][T25118] bond0: entered promiscuous mode
[  427.001736][T25146] __nla_validate_parse: 15 callbacks suppressed
[  427.001753][T25146] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8431'.
[  427.014647][T25146] netlink: 'syz.2.8431': attribute type 1 has an invalid length.
[  427.182616][T25152] ip6_vti0 speed is unknown, defaulting to 1000
[  427.199141][T25159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8437'.
[  427.447626][T25181] netlink: 'syz.1.8447': attribute type 7 has an invalid length.
[  427.458630][ T5727] bridge0: entered promiscuous mode
[  427.982630][T25216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8464'.
[  428.192770][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8476'.
[  428.195713][T25240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8476'.
[  428.199018][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8476'.
[  428.202656][T25240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8476'.
[  428.267805][T25248] netlink: 332 bytes leftover after parsing attributes in process `syz.0.8480'.
[  428.273643][T25248] netlink: 'syz.0.8480': attribute type 9 has an invalid length.
[  428.280089][T25248] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8480'.
[  428.283248][T25248] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8480'.
[  428.351505][T25255] netlink: 'syz.1.8483': attribute type 4 has an invalid length.
[  428.875404][T25290] xt_hashlimit: size too large, truncated to 1048576
[  429.099288][T25315] netlink: 'syz.2.8508': attribute type 6 has an invalid length.
[  429.203346][T25326] gre0: left promiscuous mode
[  429.224830][T25326] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  429.363116][T25339] xt_hashlimit: overflow, try lower: 6/0
[  429.497192][T25351] netlink: 'syz.1.8524': attribute type 32 has an invalid length.
[  429.551988][T25357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.555608][T25357] syzkaller0: entered promiscuous mode
[  429.557566][T25357] syzkaller0: entered allmulticast mode
[  429.591143][T25357] tipc: Resetting bearer <eth:syzkaller0>
[  429.596715][T25356] tipc: Resetting bearer <eth:syzkaller0>
[  429.624043][T25356] tipc: Disabling bearer <eth:syzkaller0>
[  430.057789][T25391] netlink: 'syz.1.8544': attribute type 14 has an invalid length.
[  430.160450][T25398] vlan2: entered allmulticast mode
[  430.164295][T25398] bond0: entered allmulticast mode
[  431.393378][T25471] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  431.435004][T25477] netlink: 'syz.1.8582': attribute type 8 has an invalid length.
[  432.087587][T25550] vlan3: entered promiscuous mode
[  432.093294][T25550] 0X: entered promiscuous mode
[  432.309724][T25570] __nla_validate_parse: 5 callbacks suppressed
[  432.321617][T25570] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8624'.
[  432.388631][T25576] Cannot find add_set index 2 as target
[  432.887541][T25617] netlink: 204 bytes leftover after parsing attributes in process `syz.2.8648'.
[  432.892190][T25617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8648'.
[  433.318155][T25659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8666'.
[  433.410592][T25665] bridge0: left promiscuous mode
[  433.417106][T25665] 8021q: adding VLAN 0 to HW filter on device team0
[  433.424397][T25665] 8021q: adding VLAN 0 to HW filter on device 60X
[  433.496508][T25665] wg1: left promiscuous mode
[  433.499867][T25665] wg1: left allmulticast mode
[  434.327839][T25665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  434.334366][T25665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  434.344684][T25665] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  434.394156][T25669] ip6_vti0 speed is unknown, defaulting to 1000
[  434.851947][T25691] netlink: 'syz.0.8679': attribute type 12 has an invalid length.
[  434.877926][T25691] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8679'.
[  435.047586][T25697] netlink: 300 bytes leftover after parsing attributes in process `syz.0.8682'.
[  435.375921][T25707] tipc: Resetting bearer <eth:xfrm0>
[  435.409063][T25707] tipc: Resetting bearer <eth:syzkaller0>
[  435.432807][T25712] netlink: 'syz.1.8688': attribute type 10 has an invalid length.
[  435.762619][T25738] x_tables: duplicate underflow at hook 4
[  435.792820][T25742] netlink: 'syz.2.8703': attribute type 21 has an invalid length.
[  435.800180][T25742] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8703'.
[  435.807567][T25742] netlink: 'syz.2.8703': attribute type 1 has an invalid length.
[  435.822377][T25742] xt_hashlimit: size too large, truncated to 1048576
[  436.098731][T25752] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  436.118623][   T98] block nbd3: Connection timed out, retrying (0/2 alive)
[  436.124359][   T98] block nbd3: Connection timed out, retrying (0/2 alive)
[  436.128052][   T98] block nbd3: Connection timed out, retrying (0/2 alive)
[  436.131088][   T98] block nbd3: Connection timed out, retrying (0/2 alive)
[  436.133449][   T98] block nbd3: Dead connection, failed to find a fallback
[  436.135735][   T98] block nbd3: shutting down sockets
[  436.137780][   T98] blk_print_req_error: 138 callbacks suppressed
[  436.137791][   T98] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.144007][   T98] buffer_io_error: 138 callbacks suppressed
[  436.144015][   T98] Buffer I/O error on dev nbd3, logical block 3, async page read
[  436.148773][   T98] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.152290][   T98] Buffer I/O error on dev nbd3, logical block 2, async page read
[  436.154990][   T98] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.158282][   T98] Buffer I/O error on dev nbd3, logical block 1, async page read
[  436.162696][   T98] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.166143][   T98] Buffer I/O error on dev nbd3, logical block 0, async page read
[  436.171572][T23161] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.175086][T23161] Buffer I/O error on dev nbd3, logical block 0, async page read
[  436.178471][T23161] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.192450][T23161] Buffer I/O error on dev nbd3, logical block 1, async page read
[  436.203750][T23161] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.214337][T23161] Buffer I/O error on dev nbd3, logical block 2, async page read
[  436.217749][T23161] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.225249][T23161] Buffer I/O error on dev nbd3, logical block 3, async page read
[  436.228596][T23161] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.235245][T23161] Buffer I/O error on dev nbd3, logical block 0, async page read
[  436.250065][T23161] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  436.253207][T23161] Buffer I/O error on dev nbd3, logical block 1, async page read
[  436.257110][T23161] ldm_validate_partition_table(): Disk read failed.
[  436.262621][T23161] Dev nbd3: unable to read RDB block 0
[  436.266014][T23161]  nbd3: unable to read partition table
[  436.272126][T23161] ldm_validate_partition_table(): Disk read failed.
[  436.275094][T23161] Dev nbd3: unable to read RDB block 0
[  436.277846][T23161]  nbd3: unable to read partition table
[  436.355006][T25762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8711'.
[  437.037873][T25831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8743'.
[  437.983652][T25882] ip6_vti0 speed is unknown, defaulting to 1000
[  438.255902][T25901] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8773'.
[  438.542283][T25914] netlink: 'syz.0.8778': attribute type 13 has an invalid length.
[  438.554750][T25914] netlink: 'syz.0.8778': attribute type 17 has an invalid length.
[  438.583906][T25912] tipc: Resetting bearer <ib:ip6gre0>
[  438.705140][T25927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8778'.
[  438.885229][T25914] 8021q: adding VLAN 0 to HW filter on device team0
[  438.893866][T25914] 8021q: adding VLAN 0 to HW filter on device 60X
[  438.943151][T25914] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  439.004276][T25916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.011201][T25916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  439.015012][T25916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.158530][T25916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.164282][T25916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  439.168596][T25916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.264228][T25916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.268696][T25916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  439.274133][T25916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.386967][T25946] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8788'.
[  439.394483][T25916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.398764][T25916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  439.420808][T25916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.437427][T25944] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.504628][T25951] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8790'.
[  439.514608][T25944] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.568051][T11430] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  439.572139][T11430] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  439.575150][T11430] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  439.588781][T11430] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  439.592798][T11430] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  439.596238][T11430] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  439.605101][T25944] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.645360][ T8289] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  439.650499][ T8289] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  439.653992][ T8289] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  439.684657][T25944] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.693359][ T8289] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  439.699282][ T8289] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  439.713087][ T8289] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  439.730499][T25958] erspan0: entered promiscuous mode
[  439.733102][T25958] macsec3: entered promiscuous mode
[  439.736696][T25958] erspan0: left promiscuous mode
[  439.793147][ T8289] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  439.809354][ T5503] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  439.832258][ T8289] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  439.849083][ T5503] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  439.879467][T25967] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  439.889512][T25967] bond12 (unregistering): Released all slaves
[  440.158767][T25990] team_slave_1: Caught tx_queue_len zero misconfig
[  440.715470][T26021] syzkaller1: entered promiscuous mode
[  440.717787][T26021] syzkaller1: entered allmulticast mode
[  441.743089][T26051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  441.899162][T26053] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  442.413244][T26086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8847'.
[  442.416699][T26090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8848'.
[  442.431555][T26086] ip6gre3: entered promiscuous mode
[  442.438562][T26086] ip6gre3: entered allmulticast mode
[  442.453160][T26086] netlink: 'syz.1.8847': attribute type 6 has an invalid length.
[  442.458457][T26086] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8847'.
[  442.489198][T26097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8852'.
[  442.513572][T26086] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  442.516632][T26086] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  442.916469][T26126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8864'.
[  442.919969][T26126] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8864'.
[  443.031129][T26132] tc_dump_action: action bad kind
[  443.759243][T26165] netlink: 'syz.0.8883': attribute type 9 has an invalid length.
[  443.767101][T26165] __nla_validate_parse: 1 callbacks suppressed
[  443.767119][T26165] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8883'.
[  444.026423][T26181] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8890'.
[  444.036497][T26181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8890'.
[  444.109102][T26183] macsec0: entered promiscuous mode
[  444.222081][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8893'.
[  444.732978][T26213] netlink: 'syz.2.8903': attribute type 1 has an invalid length.
[  444.746701][T26213] 8021q: adding VLAN 0 to HW filter on device bond25
[  444.775093][T26213] bond25: (slave dummy0): making interface the new active one
[  444.778759][T26213] bond25: (slave dummy0): Enslaving as an active interface with an up link
[  444.783859][T26213] netlink: 'syz.2.8903': attribute type 10 has an invalid length.
[  444.787082][T26213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8903'.
[  444.794035][T26213] dummy0: entered promiscuous mode
[  444.799448][T26213] bond25: (slave dummy0): Releasing active interface
[  444.906570][T26227] tipc: Failed to remove unknown binding: 66,0,0/134353152:1714044299/1714044301
[  444.909623][T26227] tipc: Failed to remove unknown binding: 66,0,0/134353152:1714044299/1714044300
[  444.914433][T26227] tipc: Failed to remove unknown binding: 66,0,0/134353152:1714044299/1714044301
[  444.917929][T26227] tipc: Failed to remove unknown binding: 66,0,0/134353152:1714044299/1714044300
[  445.117409][T26243] netlink: 11 bytes leftover after parsing attributes in process `syz.0.8917'.
[  445.163379][T26247] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  445.297917][T26251] netlink: 'syz.0.8921': attribute type 4 has an invalid length.
[  445.307187][T26251] netlink: 'syz.0.8921': attribute type 4 has an invalid length.
[  445.704745][T26264] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  445.715861][T26266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8928'.
[  446.179252][T26287] xt_CT: You must specify a L4 protocol and not use inversions on it
[  446.556906][T26317] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  446.726345][T26326] xt_TPROXY: Can be used only with -p tcp or -p udp
[  446.866032][T26334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8960'.
[  446.898827][T26334] team1: entered promiscuous mode
[  446.903054][T26334] team1: entered allmulticast mode
[  446.906632][T26334] 8021q: adding VLAN 0 to HW filter on device team1
[  447.245423][T26358] lo: Caught tx_queue_len zero misconfig
[  447.518424][T26386] bond12: option lacp_rate: invalid value (128)
[  447.526032][T26386] bond12 (unregistering): Released all slaves
[  447.558726][T26395] : renamed from lo (while UP)
[  447.560405][T26390]  speed is unknown, defaulting to 1000
[  447.571913][T26390]  speed is unknown, defaulting to 1000
[  447.576239][T26390]  speed is unknown, defaulting to 1000
[  447.578713][T26390] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  447.584459][T26390] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  447.598702][T26390] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  447.614737][T26390] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98
[  447.642255][T26390]  speed is unknown, defaulting to 1000
[  447.652914][T26390]  speed is unknown, defaulting to 1000
[  447.655852][T26390]  speed is unknown, defaulting to 1000
[  447.665965][T26400] netlink: 'syz.1.8986': attribute type 13 has an invalid length.
[  447.669274][T26400] netlink: 'syz.1.8986': attribute type 17 has an invalid length.
[  447.695695][T26400] team0: left promiscuous mode
[  447.697986][T26400] geneve1: left promiscuous mode
[  447.753346][T26400] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  447.837055][T26410] netlink: 'syz.1.8990': attribute type 61 has an invalid length.
[  447.914825][T26417] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8993'.
[  448.125081][T26434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9000'.
[  448.894289][T26519] syzkaller1: entered allmulticast mode
[  449.078361][T26533] __nla_validate_parse: 1 callbacks suppressed
[  449.078380][T26533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9042'.
[  449.238966][T26546] netlink: 'syz.0.9048': attribute type 1 has an invalid length.
[  449.242551][T26546] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9048'.
[  449.246422][T26546] netlink: 'syz.0.9048': attribute type 1 has an invalid length.
[  449.254017][T26546] netlink: 638 bytes leftover after parsing attributes in process `syz.0.9048'.
[  449.258260][T26546] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9048'.
[  449.311325][T26550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9050'.
[  449.589987][T26568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9058'.
[  449.599317][T26568] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9058'.
[  449.753341][T26580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.077618][T26601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9072'.
[  450.090152][T26601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9072'.
[  450.311314][T26625] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  450.417345][T26637] bond26: option lacp_active: invalid value (8)
[  450.424202][T26637] bond26 (unregistering): Released all slaves
[  450.450973][T26644] netlink: 'syz.0.9092': attribute type 29 has an invalid length.
[  450.454423][T26644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9092'.
[  450.478152][T26646] sit4: entered allmulticast mode
[  450.570287][T26656] bond26: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  450.573695][T26656] bond26: entered promiscuous mode
[  450.577022][T26656] 8021q: adding VLAN 0 to HW filter on device bond26
[  450.700060][T26671] netlink: 'syz.0.9103': attribute type 12 has an invalid length.
[  450.702840][T26671] netlink: 'syz.0.9103': attribute type 13 has an invalid length.
[  451.692189][T26759] netlink: 'syz.1.9142': attribute type 3 has an invalid length.
[  451.768766][T26768] netlink: 'syz.2.9146': attribute type 3 has an invalid length.
[  452.045128][T26789] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  452.569031][T26847] macvlan0: left promiscuous mode
[  452.572771][T26847] macvlan0: left allmulticast mode
[  452.611727][T26851] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  452.727012][T26868] ipvlan0: left allmulticast mode
[  452.732342][T26868] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  452.791573][T26876] validate_nla: 1 callbacks suppressed
[  452.791586][T26876] netlink: 'syz.2.9198': attribute type 3 has an invalid length.
[  452.826303][T26879] geneve6: entered promiscuous mode
[  453.034931][T26902] ip6_vti0 speed is unknown, defaulting to 1000
[  453.121110][T26902]  speed is unknown, defaulting to 1000
[  453.524967][T26915] ip6_vti0 speed is unknown, defaulting to 1000
[  453.624024][T26915]  speed is unknown, defaulting to 1000
[  453.848956][T26928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.606609][T26934] bond11: (slave ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  454.629384][T26934] bond11: (slave ): Enslaving as an active interface with an up link
[  454.680442][T26934] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  454.688396][   T10]  speed is unknown, defaulting to 1000
[  454.694074][ T5727]  speed is unknown, defaulting to 1000
[  454.697532][ T5672]  speed is unknown, defaulting to 1000
[  454.746075][T26940] __nla_validate_parse: 16 callbacks suppressed
[  454.746091][T26940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9221'.
[  455.068142][T26953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9221'.
[  455.236952][T26936] veth0_macvtap: left allmulticast mode
[  455.293170][T26936] gretap0: left allmulticast mode
[  455.353063][  T855] ip6_vti0 speed is unknown, defaulting to 1000
[  455.356468][T26953] vlan2: entered promiscuous mode
[  455.357746][  T855] syz2: Port: 1 Link DOWN
[  455.382647][  T855] ip6_vti0 speed is unknown, defaulting to 1000
[  455.388745][ T5503] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  455.395904][ T5503] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 2816 - 0
[  455.407919][ T5503] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  455.413464][ T5503] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  455.419495][ T5503] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 2816 - 0
[  455.427558][ T5503] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  455.446501][ T5503] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  455.452202][ T5503] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 2816 - 0
[  455.455522][ T5503] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  455.458984][ T5503] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  455.463337][ T5503] netdevsim netdevsim1 eth3: unset [0, 1] type 1 family 0 port 2816 - 0
[  455.466725][ T5503] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  455.473260][T17223] block nbd4: Receive control failed (result -32)
[  455.482114][   T55] block nbd4: Receive control failed (result -32)
[  455.496959][T26973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.551493][T26973] syzkaller0: entered promiscuous mode
[  455.561284][T26973] syzkaller0: entered allmulticast mode
[  455.567284][T26973] tipc: Resetting bearer <eth:syzkaller0>
[  455.592698][T26972] tipc: Resetting bearer <eth:syzkaller0>
[  458.309895][T26972] tipc: Disabling bearer <eth:syzkaller0>
[  458.329376][T26995] bridge0: port 1(erspan0) entered blocking state
[  458.339045][T26995] bridge0: port 1(erspan0) entered disabled state
[  458.344627][T26995] erspan0: entered allmulticast mode
[  458.348329][T26995] erspan0: entered promiscuous mode
[  458.353659][T26997] erspan0: left allmulticast mode
[  458.355425][T26997] erspan0: left promiscuous mode
[  458.357101][T26997] bridge0: port 1(erspan0) entered disabled state
[  458.424017][T27003] block nbd0: reconnected socket
[  458.427257][T27003] block nbd0: reconnected socket
[  458.434430][   T55] block nbd0: Receive control failed (result -32)
[  458.439325][T17223] block nbd0: Receive control failed (result -32)
[  458.788551][T27029] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9247'.
[  459.083777][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9260'.
[  459.110042][T27064] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  459.188451][T27072] netlink: 'syz.2.9265': attribute type 20 has an invalid length.
[  459.197349][T27072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9265'.
[  459.251446][T27072] netlink: 'syz.2.9265': attribute type 20 has an invalid length.
[  459.258140][T27072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9265'.
[  459.380706][T27087] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  459.404032][T27087] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  459.418454][T27087] CPU: 1 UID: 0 PID: 27087 Comm: syz.0.9272 Not tainted syzkaller #0 PREEMPT(full) 
[  459.418468][T27087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  459.418499][T27087] Call Trace:
[  459.418504][T27087]  <TASK>
[  459.418508][T27087]  dump_stack_lvl+0xe8/0x150
[  459.418524][T27087]  sysfs_warn_dup+0x8e/0xa0
[  459.418535][T27087]  sysfs_do_create_link_sd+0xc0/0x110
[  459.418545][T27087]  device_add_class_symlinks+0x1cf/0x240
[  459.418620][T27087]  device_add+0x475/0xbb0
[  459.418630][T27087]  wiphy_register+0x1dc5/0x2dc0
[  459.418652][T27087]  ? __pfx_wiphy_register+0x10/0x10
[  459.418664][T27087]  ? __pfx_netdev_run_todo+0x10/0x10
[  459.418712][T27087]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  459.418727][T27087]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  459.418744][T27087]  ieee80211_register_hw+0x3d82/0x4a70
[  459.418762][T27087]  ? ieee80211_register_hw+0x18e1/0x4a70
[  459.418783][T27087]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  459.418797][T27087]  ? __asan_memset+0x22/0x50
[  459.418807][T27087]  ? __hrtimer_setup+0x1b7/0x260
[  459.418816][T27087]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  459.418850][T27087]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  459.418872][T27087]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  459.418882][T27087]  ? kstrndup+0xbf/0x160
[  459.418894][T27087]  hwsim_new_radio_nl+0xf6a/0x1c00
[  459.418913][T27087]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  459.418926][T27087]  ? rcu_is_watching+0x15/0xb0
[  459.418937][T27087]  ? trace_kmalloc+0x2a/0xf0
[  459.418951][T27087]  ? __nla_parse+0x40/0x60
[  459.418989][T27087]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  459.418999][T27087]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  459.419012][T27087]  genl_family_rcv_msg_doit+0x22a/0x330
[  459.419024][T27087]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  459.419038][T27087]  ? bpf_lsm_capable+0x9/0x20
[  459.419046][T27087]  ? security_capable+0x7e/0x2c0
[  459.419069][T27087]  genl_rcv_msg+0x61c/0x7a0
[  459.419079][T27087]  ? __pfx_genl_rcv_msg+0x10/0x10
[  459.419086][T27087]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  459.419099][T27087]  netlink_rcv_skb+0x232/0x4b0
[  459.419111][T27087]  ? __pfx_genl_rcv_msg+0x10/0x10
[  459.419119][T27087]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  459.419141][T27087]  ? down_read+0x270/0x2e0
[  459.419149][T27087]  ? genl_rcv+0xd/0x40
[  459.419158][T27087]  genl_rcv+0x28/0x40
[  459.419165][T27087]  netlink_unicast+0x75c/0x8e0
[  459.419179][T27087]  netlink_sendmsg+0x813/0xb40
[  459.419194][T27087]  ? __pfx_netlink_sendmsg+0x10/0x10
[  459.419205][T27087]  ? aa_sock_msg_perm+0xf1/0x1b0
[  459.419218][T27087]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  459.419230][T27087]  ____sys_sendmsg+0x972/0x9f0
[  459.419243][T27087]  ? __might_fault+0xaf/0x130
[  459.419255][T27087]  ? __pfx_____sys_sendmsg+0x10/0x10
[  459.419269][T27087]  ? import_iovec+0x73/0xa0
[  459.419281][T27087]  ___sys_sendmsg+0x2a5/0x360
[  459.419290][T27087]  ? __lock_acquire+0x6b5/0x2cf0
[  459.419300][T27087]  ? __pfx____sys_sendmsg+0x10/0x10
[  459.419312][T27087]  ? futex_wake+0x4ac/0x580
[  459.419333][T27087]  ? __fget_files+0x2a/0x420
[  459.419341][T27087]  ? __fget_files+0x3a0/0x420
[  459.419354][T27087]  __x64_sys_sendmsg+0x1bd/0x2a0
[  459.419364][T27087]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  459.419378][T27087]  ? rcu_is_watching+0x15/0xb0
[  459.419390][T27087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.419398][T27087]  do_syscall_64+0x15f/0xf80
[  459.419408][T27087]  ? trace_irq_disable+0x3b/0x140
[  459.419420][T27087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.419427][T27087] RIP: 0033:0x7f82fcf9cdd9
[  459.419436][T27087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  459.419442][T27087] RSP: 002b:00007f82fdf00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  459.419451][T27087] RAX: ffffffffffffffda RBX: 00007f82fd215fa0 RCX: 00007f82fcf9cdd9
[  459.419456][T27087] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  459.419461][T27087] RBP: 00007f82fd032d69 R08: 0000000000000000 R09: 0000000000000000
[  459.419465][T27087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  459.419492][T27087] R13: 00007f82fd216038 R14: 00007f82fd215fa0 R15: 00007fff5e299318
[  459.419507][T27087]  </TASK>
[  459.561945][T27094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9276'.
[  459.565255][T27094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9276'.
[  459.676128][T27099] netlink: 'syz.0.9277': attribute type 1 has an invalid length.
[  459.727580][T27099] bond17: entered promiscuous mode
[  459.736314][T27099] 8021q: adding VLAN 0 to HW filter on device bond17
[  459.775281][T27103] 8021q: adding VLAN 0 to HW filter on device bond17
[  459.778566][T27103] bond17: (slave wireguard0): The slave device specified does not support setting the MAC address
[  459.785045][T27103] bond17: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  459.796151][T27103] bond17: (slave wireguard0): making interface the new active one
[  459.799037][T27103] wireguard0: entered promiscuous mode
[  459.803067][T27103] bond17: (slave wireguard0): Enslaving as an active interface with an up link
[  460.847153][T27137] syzkaller0: entered promiscuous mode
[  460.849179][T27137] syzkaller0: entered allmulticast mode
[  460.871524][T27130] netlink: 'syz.2.9289': attribute type 2 has an invalid length.
[  460.877933][T27130] netlink: 'syz.2.9289': attribute type 2 has an invalid length.
[  460.918784][T27141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9294'.
[  460.926922][T27130] macsec1: entered promiscuous mode
[  461.062364][T27148] netlink: 388 bytes leftover after parsing attributes in process `syz.1.9297'.
[  461.520018][T27161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9301'.
[  463.575343][T27161] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9301'.
[  463.726003][T27191] syzkaller0: entered promiscuous mode
[  463.729350][T27191] syzkaller0: entered allmulticast mode
[  463.738624][T27195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9316'.
[  463.897270][T27216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  463.909115][T27218] netlink: 'syz.0.9327': attribute type 1 has an invalid length.
[  464.024849][T27230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9331'.
[  464.133490][T27233] netlink: 'syz.0.9332': attribute type 1 has an invalid length.
[  464.138411][T27233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9332'.
[  464.145092][T27233] netlink: 'syz.0.9332': attribute type 1 has an invalid length.
[  464.454737][T27238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  464.999651][T27249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9338'.
[  465.048498][T27255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.336085][T27276] vlan5: entered promiscuous mode
[  466.425227][T27282] gretap0: left promiscuous mode
[  466.437299][T27282] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.447687][T27282] 8021q: adding VLAN 0 to HW filter on device batadv0
[  466.497068][T10001] ip6_vti0 speed is unknown, defaulting to 1000
[  466.504428][T10001] syz2: Port: 1 Link ACTIVE
[  466.526912][T10001] ip6_vti0 speed is unknown, defaulting to 1000
[  466.628952][T27300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9359'.
[  466.667535][T27305] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component
[  467.263945][T27339] netlink: 'syz.2.9376': attribute type 8 has an invalid length.
[  467.267010][T27339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9376'.
[  467.488154][T27348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9380'.
[  467.491217][T27348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9380'.
[  467.712576][T27367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9389'.
[  467.841154][T27375] xt_hashlimit: size too large, truncated to 1048576
[  467.904899][T27382] netlink: 'syz.1.9395': attribute type 1 has an invalid length.
[  467.909829][T27382] netlink: 'syz.1.9395': attribute type 2 has an invalid length.
[  467.913037][T27382] netlink: 'syz.1.9395': attribute type 3 has an invalid length.
[  468.094769][T27401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9404'.
[  468.129500][T27403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  468.137612][T27403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9405'.
[  468.385878][T27414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9410'.
[  468.428276][T27418] sch_tbf: burst 0 is lower than device sit0 mtu (1280) !
[  468.451218][T27420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9413'.
[  468.454161][T27420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9413'.
[  469.073939][T27450] netlink: 'syz.0.9426': attribute type 1 has an invalid length.
[  469.638613][T27519] sctp: [Deprecated]: syz.0.9456 (pid 27519) Use of struct sctp_assoc_value in delayed_ack socket option.
[  469.638613][T27519] Use struct sctp_sack_info instead
[  469.675477][T27523] sock: sock_timestamping_bind_phc: sock not bind to device
[  469.752748][T27532] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  469.897702][T27549] netlink: 'syz.2.9470': attribute type 2 has an invalid length.
[  471.119556][T27617] bond12: option arp_validate: invalid value (18446744073709551613)
[  471.127561][T27617] bond12 (unregistering): Released all slaves
[  471.469606][T27622] nbd: nbd0 already in use
[  471.476959][T27622] block nbd2: NBD_DISCONNECT
[  471.482878][T27622] block nbd2: Send disconnect failed -32
[  471.485488][T27622] block nbd2: shutting down sockets
[  471.561321][T27626] 
[  471.562385][T27626] ======================================================
[  471.565158][T27626] WARNING: possible circular locking dependency detected
[  471.567965][T27626] syzkaller #0 Not tainted
[  471.569776][T27626] ------------------------------------------------------
[  471.572490][T27626] syz.0.9500/27626 is trying to acquire lock:
[  471.574446][T27626] ffff8881012b4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  471.577807][T27626] 
[  471.577807][T27626] but task is already holding lock:
[  471.580414][T27626] ffffffff8f38dd80 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  471.583338][T27626] 
[  471.583338][T27626] which lock already depends on the new lock.
[  471.583338][T27626] 
[  471.586932][T27626] 
[  471.586932][T27626] the existing dependency chain (in reverse order) is:
[  471.589865][T27626] 
[  471.589865][T27626] -> #10 (gdp_mutex){+.+.}-{4:4}:
[  471.592260][T27626]        __mutex_lock+0x1a3/0x1550
[  471.593972][T27626]        get_device_parent+0x16f/0x3a0
[  471.596066][T27626]        device_add+0x2e1/0xbb0
[  471.597814][T27626]        device_create+0x269/0x300
[  471.599620][T27626]        msr_device_create+0x33/0x50
[  471.601522][T27626]        cpuhp_invoke_callback+0x445/0x860
[  471.603641][T27626]        cpuhp_thread_fun+0x36b/0x780
[  471.605704][T27626]        smpboot_thread_fn+0x541/0xa50
[  471.607765][T27626]        kthread+0x388/0x470
[  471.609521][T27626]        ret_from_fork+0x514/0xb70
[  471.611193][T27626]        ret_from_fork_asm+0x1a/0x30
[  471.612941][T27626] 
[  471.612941][T27626] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  471.615576][T27626]        cpuhp_thread_fun+0x127/0x780
[  471.617339][T27626]        smpboot_thread_fn+0x541/0xa50
[  471.619155][T27626]        kthread+0x388/0x470
[  471.620850][T27626]        ret_from_fork+0x514/0xb70
[  471.622560][T27626]        ret_from_fork_asm+0x1a/0x30
[  471.624414][T27626] 
[  471.624414][T27626] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  471.627115][T27626]        cpus_read_lock+0x42/0x160
[  471.629030][T27626]        static_key_slow_inc+0x12/0x30
[  471.630809][T27626]        nbd_genl_reconfigure+0x132f/0x1ea0
[  471.632604][T27626]        genl_family_rcv_msg_doit+0x22a/0x330
[  471.634562][T27626]        genl_rcv_msg+0x61c/0x7a0
[  471.636142][T27626]        netlink_rcv_skb+0x232/0x4b0
[  471.637998][T27626]        genl_rcv+0x28/0x40
[  471.639688][T27626]        netlink_unicast+0x75c/0x8e0
[  471.641488][T27626]        netlink_sendmsg+0x813/0xb40
[  471.643431][T27626]        ____sys_sendmsg+0x972/0x9f0
[  471.645090][T27626]        ___sys_sendmsg+0x2a5/0x360
[  471.646761][T27626]        __x64_sys_sendmsg+0x1bd/0x2a0
[  471.648646][T27626]        do_syscall_64+0x15f/0xf80
[  471.650439][T27626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.652853][T27626] 
[  471.652853][T27626] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  471.655534][T27626]        __mutex_lock+0x1a3/0x1550
[  471.657257][T27626]        nbd_queue_rq+0x37b/0x1100
[  471.659130][T27626]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  471.661263][T27626]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  471.663390][T27626]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  471.665564][T27626]        blk_mq_run_hw_queue+0x348/0x4f0
[  471.667438][T27626]        blk_mq_dispatch_list+0xd16/0xe10
[  471.669347][T27626]        blk_mq_flush_plug_list+0x48d/0x570
[  471.671238][T27626]        __blk_flush_plug+0x3ed/0x4d0
[  471.673079][T27626]        __submit_bio+0x28d/0x580
[  471.674975][T27626]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  471.676990][T27626]        block_read_full_folio+0x599/0x830
[  471.678902][T27626]        filemap_read_folio+0x137/0x3b0
[  471.680966][T27626]        do_read_cache_folio+0x358/0x590
[  471.682988][T27626]        read_part_sector+0xb6/0x2b0
[  471.684939][T27626]        adfspart_check_ICS+0xb1/0x960
[  471.686884][T27626]        bdev_disk_changed+0x817/0x1770
[  471.688698][T27626]        blkdev_get_whole+0x380/0x510
[  471.690580][T27626]        bdev_open+0x31e/0xd30
[  471.692094][T27626]        blkdev_open+0x470/0x610
[  471.693710][T27626]        do_dentry_open+0x785/0x14e0
[  471.695521][T27626]        vfs_open+0x3b/0x340
[  471.697125][T27626]        path_openat+0x2e08/0x3860
[  471.698792][T27626]        do_file_open+0x23e/0x4a0
[  471.700593][T27626]        do_sys_openat2+0x113/0x200
[  471.702287][T27626]        __x64_sys_openat+0x138/0x170
[  471.704044][T27626]        do_syscall_64+0x15f/0xf80
[  471.705711][T27626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.707942][T27626] 
[  471.707942][T27626] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  471.710428][T27626]        __mutex_lock+0x1a3/0x1550
[  471.712106][T27626]        nbd_queue_rq+0xc6/0x1100
[  471.713827][T27626]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  471.715820][T27626]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  471.718144][T27626]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  471.720689][T27626]        blk_mq_run_hw_queue+0x348/0x4f0
[  471.722826][T27626]        blk_mq_dispatch_list+0xd16/0xe10
[  471.724711][T27626]        blk_mq_flush_plug_list+0x48d/0x570
[  471.726614][T27626]        __blk_flush_plug+0x3ed/0x4d0
[  471.728334][T27626]        __submit_bio+0x28d/0x580
[  471.729967][T27626]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  471.731973][T27626]        block_read_full_folio+0x599/0x830
[  471.733886][T27626]        filemap_read_folio+0x137/0x3b0
[  471.735621][T27626]        do_read_cache_folio+0x358/0x590
[  471.737491][T27626]        read_part_sector+0xb6/0x2b0
[  471.739191][T27626]        adfspart_check_ICS+0xb1/0x960
[  471.741019][T27626]        bdev_disk_changed+0x817/0x1770
[  471.742817][T27626]        blkdev_get_whole+0x380/0x510
[  471.744597][T27626]        bdev_open+0x31e/0xd30
[  471.746136][T27626]        blkdev_open+0x470/0x610
[  471.747744][T27626]        do_dentry_open+0x785/0x14e0
[  471.749463][T27626]        vfs_open+0x3b/0x340
[  471.750953][T27626]        path_openat+0x2e08/0x3860
[  471.752658][T27626]        do_file_open+0x23e/0x4a0
[  471.754411][T27626]        do_sys_openat2+0x113/0x200
[  471.756315][T27626]        __x64_sys_openat+0x138/0x170
[  471.758470][T27626]        do_syscall_64+0x15f/0xf80
[  471.760410][T27626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.762922][T27626] 
[  471.762922][T27626] -> #5 (set->srcu){.+.+}-{0:0}:
[  471.765334][T27626]        __synchronize_srcu+0xca/0x300
[  471.767390][T27626]        elevator_switch+0x1e8/0x7a0
[  471.769495][T27626]        elevator_change+0x2cc/0x450
[  471.771576][T27626]        elevator_set_default+0x36c/0x430
[  471.773661][T27626]        blk_register_queue+0x3e9/0x4e0
[  471.775455][T27626]        __add_disk+0x677/0xd50
[  471.777020][T27626]        add_disk_fwnode+0xfb/0x480
[  471.778701][T27626]        nbd_dev_add+0x72c/0xb50
[  471.780298][T27626]        nbd_init+0x168/0x1f0
[  471.781903][T27626]        do_one_initcall+0x250/0x870
[  471.783615][T27626]        do_initcall_level+0x104/0x190
[  471.785389][T27626]        do_initcalls+0x59/0xa0
[  471.786945][T27626]        kernel_init_freeable+0x2a6/0x3e0
[  471.788809][T27626]        kernel_init+0x1d/0x1d0
[  471.790430][T27626]        ret_from_fork+0x514/0xb70
[  471.792083][T27626]        ret_from_fork_asm+0x1a/0x30
[  471.793815][T27626] 
[  471.793815][T27626] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  471.796317][T27626]        __mutex_lock+0x1a3/0x1550
[  471.797973][T27626]        elevator_change+0x1b3/0x450
[  471.799786][T27626]        elevator_set_none+0xb5/0x140
[  471.801498][T27626]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  471.803528][T27626]        nbd_start_device+0x17f/0xb10
[  471.805259][T27626]        nbd_genl_connect+0x165b/0x1cf0
[  471.807050][T27626]        genl_family_rcv_msg_doit+0x22a/0x330
[  471.809014][T27626]        genl_rcv_msg+0x61c/0x7a0
[  471.810626][T27626]        netlink_rcv_skb+0x232/0x4b0
[  471.812305][T27626]        genl_rcv+0x28/0x40
[  471.813805][T27626]        netlink_unicast+0x75c/0x8e0
[  471.815655][T27626]        netlink_sendmsg+0x813/0xb40
[  471.817312][T27626]        ____sys_sendmsg+0x972/0x9f0
[  471.819065][T27626]        ___sys_sendmsg+0x2a5/0x360
[  471.820915][T27626]        __x64_sys_sendmsg+0x1bd/0x2a0
[  471.822848][T27626]        do_syscall_64+0x15f/0xf80
[  471.824670][T27626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.826783][T27626] 
[  471.826783][T27626] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  471.829700][T27626]        blk_alloc_queue+0x546/0x680
[  471.831476][T27626]        __blk_mq_alloc_disk+0x197/0x390
[  471.833345][T27626]        nbd_dev_add+0x499/0xb50
[  471.835303][T27626]        nbd_init+0x168/0x1f0
[  471.837209][T27626]        do_one_initcall+0x250/0x870
[  471.839328][T27626]        do_initcall_level+0x104/0x190
[  471.841227][T27626]        do_initcalls+0x59/0xa0
[  471.842894][T27626]        kernel_init_freeable+0x2a6/0x3e0
[  471.844818][T27626]        kernel_init+0x1d/0x1d0
[  471.846322][T27626]        ret_from_fork+0x514/0xb70
[  471.847977][T27626]        ret_from_fork_asm+0x1a/0x30
[  471.849707][T27626] 
[  471.849707][T27626] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  471.852457][T27626]        fs_reclaim_acquire+0x71/0x100
[  471.854646][T27626]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  471.857103][T27626]        alloc_inode+0xb8/0x1b0
[  471.859001][T27626]        iget_locked+0x131/0x6a0
[  471.860699][T27626]        kernfs_get_inode+0x4f/0x780
[  471.862420][T27626]        kernfs_get_tree+0x5cd/0x980
[  471.864260][T27626]        sysfs_get_tree+0x46/0x110
[  471.866258][T27626]        vfs_get_tree+0x92/0x2a0
[  471.868255][T27626]        do_new_mount+0x341/0xd30
[  471.870305][T27626]        __se_sys_mount+0x31d/0x420
[  471.872434][T27626]        do_syscall_64+0x15f/0xf80
[  471.874525][T27626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.876694][T27626] 
[  471.876694][T27626] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  471.879432][T27626]        down_write+0x96/0x200
[  471.880974][T27626]        kernfs_remove_by_name_ns+0x4e/0x140
[  471.882967][T27626]        device_links_driver_bound+0x54f/0x14e0
[  471.885025][T27626]        driver_bound+0xd8/0x2e0
[  471.886652][T27626]        really_probe+0x789/0xaf0
[  471.888417][T27626]        __driver_probe_device+0x1ef/0x380
[  471.890731][T27626]        driver_probe_device+0x4f/0x240
[  471.892612][T27626]        __device_attach_driver+0x279/0x430
[  471.894521][T27626]        bus_for_each_drv+0x258/0x2f0
[  471.896265][T27626]        __device_attach+0x2c5/0x450
[  471.897968][T27626]        device_initial_probe+0xa1/0xd0
[  471.899767][T27626]        bus_probe_device+0x12a/0x220
[  471.901537][T27626]        device_add+0x7e9/0xbb0
[  471.903089][T27626]        faux_device_create_with_groups+0x189/0x290
[  471.905197][T27626]        regulator_dummy_init+0x19/0x40
[  471.907171][T27626]        regulator_init+0xca/0x110
[  471.908957][T27626]        do_one_initcall+0x250/0x870
[  471.910802][T27626]        do_initcall_level+0x104/0x190
[  471.912565][T27626]        do_initcalls+0x59/0xa0
[  471.914128][T27626]        kernel_init_freeable+0x2a6/0x3e0
[  471.915958][T27626]        kernel_init+0x1d/0x1d0
[  471.917692][T27626]        ret_from_fork+0x514/0xb70
[  471.919434][T27626]        ret_from_fork_asm+0x1a/0x30
[  471.921214][T27626] 
[  471.921214][T27626] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  471.924123][T27626]        __lock_acquire+0x15a5/0x2cf0
[  471.925921][T27626]        lock_acquire+0x106/0x350
[  471.927625][T27626]        down_read+0x47/0x2e0
[  471.929307][T27626]        kernfs_remove+0x35/0x80
[  471.930993][T27626]        __kobject_del+0xe1/0x330
[  471.932695][T27626]        kobject_del+0x45/0x60
[  471.934248][T27626]        cleanup_glue_dir+0x1a3/0x220
[  471.936281][T27626]        device_del+0x780/0x8f0
[  471.938083][T27626]        unregister_netdevice_many_notify+0x1d5f/0x22c0
[  471.940520][T27626]        unregister_netdevice_queue+0x31f/0x360
[  471.942806][T27626]        _cfg80211_unregister_wdev+0x155/0x570
[  471.944922][T27626]        ieee80211_if_remove+0x299/0x350
[  471.946898][T27626]        ieee80211_del_iface+0x19/0x30
[  471.948830][T27626]        cfg80211_remove_virtual_intf+0x221/0x3f0
[  471.950944][T27626]        genl_family_rcv_msg_doit+0x22a/0x330
[  471.953149][T27626]        genl_rcv_msg+0x61c/0x7a0
[  471.954946][T27626]        netlink_rcv_skb+0x232/0x4b0
[  471.956858][T27626]        genl_rcv+0x28/0x40
[  471.958423][T27626]        netlink_unicast+0x75c/0x8e0
[  471.960124][T27626]        netlink_sendmsg+0x813/0xb40
[  471.961858][T27626]        ____sys_sendmsg+0x972/0x9f0
[  471.963639][T27626]        ___sys_sendmsg+0x2a5/0x360
[  471.965346][T27626]        __x64_sys_sendmsg+0x1bd/0x2a0
[  471.967127][T27626]        do_syscall_64+0x15f/0xf80
[  471.968875][T27626]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.971109][T27626] 
[  471.971109][T27626] other info that might help us debug this:
[  471.971109][T27626] 
[  471.974455][T27626] Chain exists of:
[  471.974455][T27626]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  471.974455][T27626] 
[  471.978807][T27626]  Possible unsafe locking scenario:
[  471.978807][T27626] 
[  471.981414][T27626]        CPU0                    CPU1
[  471.983257][T27626]        ----                    ----
[  471.985134][T27626]   lock(gdp_mutex);
[  471.986466][T27626]                                lock(cpuhp_state-up);
[  471.988825][T27626]                                lock(gdp_mutex);
[  471.990972][T27626]   rlock(&root->kernfs_supers_rwsem);
[  471.992709][T27626] 
[  471.992709][T27626]  *** DEADLOCK ***
[  471.992709][T27626] 
[  471.995440][T27626] 4 locks held by syz.0.9500/27626:
[  471.997202][T27626]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  471.999981][T27626]  #1: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x8a0
[  472.003005][T27626]  #2: ffff88811ca10780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0x126/0x140
[  472.006281][T27626]  #3: ffffffff8f38dd80 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  472.009243][T27626] 
[  472.009243][T27626] stack backtrace:
[  472.011263][T27626] CPU: 0 UID: 0 PID: 27626 Comm: syz.0.9500 Not tainted syzkaller #0 PREEMPT(full) 
[  472.011274][T27626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  472.011279][T27626] Call Trace:
[  472.011283][T27626]  <TASK>
[  472.011288][T27626]  dump_stack_lvl+0xe8/0x150
[  472.011302][T27626]  print_circular_bug+0x2e1/0x300
[  472.011314][T27626]  check_noncircular+0x12e/0x150
[  472.011325][T27626]  __lock_acquire+0x15a5/0x2cf0
[  472.011337][T27626]  ? kernfs_remove+0x35/0x80
[  472.011347][T27626]  lock_acquire+0x106/0x350
[  472.011382][T27626]  ? kernfs_remove+0x35/0x80
[  472.011400][T27626]  down_read+0x47/0x2e0
[  472.011407][T27626]  ? kernfs_remove+0x35/0x80
[  472.011417][T27626]  kernfs_remove+0x35/0x80
[  472.011427][T27626]  __kobject_del+0xe1/0x330
[  472.011434][T27626]  kobject_del+0x45/0x60
[  472.011440][T27626]  cleanup_glue_dir+0x1a3/0x220
[  472.011449][T27626]  device_del+0x780/0x8f0
[  472.011458][T27626]  ? __pfx_device_del+0x10/0x10
[  472.011466][T27626]  ? netdev_unregister_kobject+0x344/0x450
[  472.011475][T27626]  unregister_netdevice_many_notify+0x1d5f/0x22c0
[  472.011484][T27626]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  472.011492][T27626]  ? call_rcu+0x644/0x890
[  472.011502][T27626]  unregister_netdevice_queue+0x31f/0x360
[  472.011513][T27626]  ? __pfx___up_read+0x10/0x10
[  472.011522][T27626]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  472.011532][T27626]  ? kernfs_remove_by_name_ns+0x101/0x140
[  472.011543][T27626]  ? kernfs_remove_by_name_ns+0x101/0x140
[  472.011552][T27626]  _cfg80211_unregister_wdev+0x155/0x570
[  472.011563][T27626]  ieee80211_if_remove+0x299/0x350
[  472.011573][T27626]  ieee80211_del_iface+0x19/0x30
[  472.011580][T27626]  cfg80211_remove_virtual_intf+0x221/0x3f0
[  472.011589][T27626]  genl_family_rcv_msg_doit+0x22a/0x330
[  472.011598][T27626]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  472.011607][T27626]  ? bpf_lsm_capable+0x9/0x20
[  472.011614][T27626]  ? security_capable+0x7e/0x2c0
[  472.011623][T27626]  genl_rcv_msg+0x61c/0x7a0
[  472.011630][T27626]  ? __pfx_genl_rcv_msg+0x10/0x10
[  472.011636][T27626]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  472.011644][T27626]  ? __pfx_nl80211_del_interface+0x10/0x10
[  472.011653][T27626]  ? __pfx_nl80211_post_doit+0x10/0x10
[  472.011660][T27626]  ? __pfx_ref_tracker_free+0x10/0x10
[  472.011672][T27626]  netlink_rcv_skb+0x232/0x4b0
[  472.011681][T27626]  ? __pfx_genl_rcv_msg+0x10/0x10
[  472.011689][T27626]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  472.011701][T27626]  ? down_read+0x270/0x2e0
[  472.011707][T27626]  ? genl_rcv+0xd/0x40
[  472.011713][T27626]  genl_rcv+0x28/0x40
[  472.011720][T27626]  netlink_unicast+0x75c/0x8e0
[  472.011730][T27626]  netlink_sendmsg+0x813/0xb40
[  472.011740][T27626]  ? __pfx_netlink_sendmsg+0x10/0x10
[  472.011749][T27626]  ? aa_sock_msg_perm+0xf1/0x1b0
[  472.011758][T27626]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  472.011767][T27626]  ____sys_sendmsg+0x972/0x9f0
[  472.011777][T27626]  ? __might_fault+0xaf/0x130
[  472.011787][T27626]  ? __pfx_____sys_sendmsg+0x10/0x10
[  472.011797][T27626]  ? import_iovec+0x73/0xa0
[  472.011807][T27626]  ___sys_sendmsg+0x2a5/0x360
[  472.011815][T27626]  ? __lock_acquire+0x6b5/0x2cf0
[  472.011822][T27626]  ? __pfx____sys_sendmsg+0x10/0x10
[  472.011832][T27626]  ? futex_wait+0x2a2/0x390
[  472.011845][T27626]  ? __fget_files+0x2a/0x420
[  472.011852][T27626]  ? __fget_files+0x3a0/0x420
[  472.011861][T27626]  __x64_sys_sendmsg+0x1bd/0x2a0
[  472.011870][T27626]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  472.011883][T27626]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.011890][T27626]  do_syscall_64+0x15f/0xf80
[  472.011900][T27626]  ? trace_irq_disable+0x3b/0x140
[  472.011910][T27626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.011917][T27626] RIP: 0033:0x7f82fcf9cdd9
[  472.011925][T27626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.011931][T27626] RSP: 002b:00007f82fdf00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  472.011940][T27626] RAX: ffffffffffffffda RBX: 00007f82fd215fa0 RCX: 00007f82fcf9cdd9
[  472.011945][T27626] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  472.011949][T27626] RBP: 00007f82fd032d69 R08: 0000000000000000 R09: 0000000000000000
[  472.011953][T27626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  472.011957][T27626] R13: 00007f82fd216038 R14: 00007f82fd215fa0 R15: 00007fff5e299318
[  472.011965][T27626]  </TASK>
