last executing test programs:

3.152107586s ago: executing program 1 (id=6010):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@newtaction={0x6c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x200, 0x10000, 0x1, 0x3, 0xc2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)

3.101409703s ago: executing program 1 (id=6012):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}})

3.038230909s ago: executing program 1 (id=6014):
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "b7a34d", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x6, 0x2, 0x1, 0x7, 0x0, [@local]}]}}}}}, 0x0)

3.038104067s ago: executing program 1 (id=6015):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x40000000})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})

1.961005062s ago: executing program 2 (id=6021):
syz_emit_ethernet(0x76, &(0x7f0000000400)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @dstopts={0x67}]}}}}}}}, 0x0)

1.960619251s ago: executing program 2 (id=6023):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmmsg$sock(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1}, 0x80, 0x0}}], 0x2, 0x40508b1)

1.902393815s ago: executing program 2 (id=6024):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000)

1.436477082s ago: executing program 0 (id=6030):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x82316000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28)

1.372349465s ago: executing program 0 (id=6031):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080012400002000305001500580000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0)

1.29214596s ago: executing program 0 (id=6032):
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x0, [0x2be, 0x7, 0x7]}, 0x0)
r0 = socket(0xa, 0x3, 0x87)
sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x4}, 0x18, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)='r', 0x1}], 0x10}, 0x0)

1.228273216s ago: executing program 0 (id=6033):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r0)

149.976768ms ago: executing program 2 (id=6034):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

149.790557ms ago: executing program 0 (id=6035):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

89.547681ms ago: executing program 1 (id=6036):
syz_emit_ethernet(0xfef3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010020641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200", @ANYRES32], 0x0)

89.385181ms ago: executing program 2 (id=6037):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x4c040)

89.212514ms ago: executing program 1 (id=6038):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x76c2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

84.269983ms ago: executing program 0 (id=6039):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0)
close(r0)

0s ago: executing program 2 (id=6040):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
unshare(0x20000400)
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

he slave device specified does not support setting the MAC address
[  134.164014][ T8629] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[  134.170013][ T8629] bond1: (slave ipip0): making interface the new active one
[  134.172774][ T8629] ipip0: entered promiscuous mode
[  134.176895][ T8629] bond1: (slave ipip0): Enslaving as an active interface with an up link
[  134.410905][ T8647] netlink: 'syz.0.1295': attribute type 8 has an invalid length.
[  135.236708][   T54] Bluetooth: hci2: link tx timeout
[  135.246624][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.335482][ T8696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.354219][ T8696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.378865][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1325'.
[  135.424101][ T8707] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1326'.
[  135.448793][ T8696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.455939][ T8696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.621349][ T8696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.629440][ T8696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.753481][ T8696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.757872][ T8696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.932353][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.935734][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.939077][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.944691][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.952619][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.957905][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.967094][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.977600][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.001094][ T8719] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1331'.
[  136.236758][ T8736] macvlan0: entered promiscuous mode
[  136.244848][ T8736] netlink: 'syz.2.1340': attribute type 1 has an invalid length.
[  136.247707][ T8736] netlink: 'syz.2.1340': attribute type 2 has an invalid length.
[  136.484877][ T8764] net_ratelimit: 7 callbacks suppressed
[  136.484896][ T8764] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  136.955211][ T8794] __nla_validate_parse: 1 callbacks suppressed
[  136.955223][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'.
[  137.072469][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'.
[  137.075380][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1364'.
[  137.245021][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  137.294614][ T8816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1369'.
[  137.323032][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  138.012509][ T8839] xt_connbytes: Forcing CT accounting to be enabled
[  138.103213][ T8845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1383'.
[  138.193157][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  138.250645][ T8855] geneve3: entered promiscuous mode
[  138.262802][ T5630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.270356][ T5630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.284023][ T5630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.292891][ T5630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.314463][ T8858] netlink: 'syz.1.1389': attribute type 6 has an invalid length.
[  138.350120][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'.
[  138.356424][ T8856] netlink: 'syz.2.1387': attribute type 13 has an invalid length.
[  138.462740][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  138.488206][ T8864] netlink: 'syz.1.1391': attribute type 11 has an invalid length.
[  138.617067][ T8868] v: renamed from veth0_vlan
[  138.882324][  T803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  139.301822][ T8891] netlink: 'syz.2.1403': attribute type 18 has an invalid length.
[  139.305634][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'.
[  139.309675][ T8891] netlink: 'syz.2.1403': attribute type 18 has an invalid length.
[  139.318866][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'.
[  139.586843][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'.
[  139.597875][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'.
[  139.601863][ T8907] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  140.015945][ T8934] netlink: 'syz.0.1425': attribute type 1 has an invalid length.
[  140.721636][ T8971] batman_adv: batadv0: Adding interface: macvtap2
[  140.725018][ T8971] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  140.736725][ T8971] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active
[  140.751686][ T8971] batman_adv: batadv0: Removing interface: macvtap2
[  141.358923][ T8992] ipvlan3: entered allmulticast mode
[  141.360861][ T8992] syz_tun: entered allmulticast mode
[  141.393439][ T8995] netlink: 'syz.0.1449': attribute type 32 has an invalid length.
[  141.661115][ T9010] netlink: 'syz.0.1457': attribute type 20 has an invalid length.
[  141.664682][ T9010] netlink: 'syz.0.1457': attribute type 21 has an invalid length.
[  142.706018][ T9057] syzkaller0: entered promiscuous mode
[  142.708444][ T9057] syzkaller0: entered allmulticast mode
[  142.977577][ T9071] vti0: entered promiscuous mode
[  142.979707][ T9071] vti0: entered allmulticast mode
[  143.179452][ T9076] __nla_validate_parse: 4 callbacks suppressed
[  143.179468][ T9076] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1482'.
[  143.189500][ T9076] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1482'.
[  143.195274][ T9076] netlink: 'syz.2.1482': attribute type 5 has an invalid length.
[  143.199101][ T9076] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1482'.
[  143.450479][ T9083] bridge3: entered promiscuous mode
[  143.452691][ T9083] bridge3: entered allmulticast mode
[  143.463757][ T9083] syzkaller0: entered promiscuous mode
[  143.466012][ T9083] syzkaller0: entered allmulticast mode
[  143.664477][ T9064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  144.035950][ T9107] netlink: 'syz.1.1496': attribute type 34 has an invalid length.
[  145.124881][ T9148] netlink: 'syz.1.1514': attribute type 11 has an invalid length.
[  145.428728][ T9168] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1523'.
[  145.437525][ T9172] netlink: 'syz.0.1524': attribute type 1 has an invalid length.
[  145.489066][ T9172] bond5: entered promiscuous mode
[  145.491766][ T9172] 8021q: adding VLAN 0 to HW filter on device bond5
[  145.520043][ T9177] netlink: 495 bytes leftover after parsing attributes in process `syz.2.1526'.
[  145.550938][ T9172] 8021q: adding VLAN 0 to HW filter on device bond5
[  145.563736][ T9172] bond5: (slave ipip1): The slave device specified does not support setting the MAC address
[  145.569106][ T9172] bond5: (slave ipip1): Setting fail_over_mac to active for active-backup mode
[  145.576430][ T9172] bond5: (slave ipip1): making interface the new active one
[  145.579235][ T9172] ipip1: entered promiscuous mode
[  145.582486][ T9172] bond5: (slave ipip1): Enslaving as an active interface with an up link
[  146.027782][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'.
[  146.030758][ T9215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1545'.
[  146.037072][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'.
[  146.039948][ T9215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1545'.
[  146.108036][ T9218] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma?
[  146.143776][ T9220] netlink: 'syz.0.1547': attribute type 1 has an invalid length.
[  147.072122][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  147.544939][ T9281] veth0_to_hsr: entered promiscuous mode
[  147.549286][ T9281] veth0_to_hsr: left promiscuous mode
[  147.962766][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'.
[  148.371054][ T9316] __nla_validate_parse: 1 callbacks suppressed
[  148.371071][ T9316] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1588'.
[  148.570819][ T9325] netlink: 'syz.2.1592': attribute type 2 has an invalid length.
[  148.666345][ T9329] xt_TCPMSS: Only works on TCP SYN packets
[  148.708680][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1595'.
[  148.724437][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1595'.
[  148.729117][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1595'.
[  148.737562][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1595'.
[  148.908232][ T9346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1602'.
[  148.994626][   T11] block nbd0: Possible stuck request ffff88810aa90000: control (read@0,1024B). Runtime 60 seconds
[  148.998486][   T11] block nbd0: Possible stuck request ffff88810aa90200: control (read@1024,1024B). Runtime 60 seconds
[  149.002456][   T11] block nbd0: Possible stuck request ffff88810aa90400: control (read@2048,1024B). Runtime 60 seconds
[  149.006138][   T11] block nbd0: Possible stuck request ffff88810aa90600: control (read@3072,1024B). Runtime 60 seconds
[  149.322977][ T9379] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1617'.
[  149.601710][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1621'.
[  149.607754][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'.
[  149.791684][ T9402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1626'.
[  150.006438][ T9420] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  150.014652][ T9420] bond2 (unregistering): Released all slaves
[  150.052239][ T9416] block nbd1: server does not support multiple connections per device.
[  150.056890][ T9416] block nbd1: shutting down sockets
[  150.575317][ T9472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.588574][ T9504] netlink: 'syz.1.1674': attribute type 16 has an invalid length.
[  151.591872][ T9504] netlink: 'syz.1.1674': attribute type 17 has an invalid length.
[  151.848525][ T9520] syzkaller0: entered promiscuous mode
[  151.854431][ T9520] syzkaller0: entered allmulticast mode
[  151.908065][ T9526] erspan0: entered allmulticast mode
[  151.981583][ T9532] erspan0: left promiscuous mode
[  151.995395][ T9532] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.997783][ T9532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.002188][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.005099][ T9532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.043323][ T9532] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  152.060214][ T9532] macvlan0: left promiscuous mode
[  152.106345][ T9532] 8021q: adding VLAN 0 to HW filter on device bond1
[  152.111860][ T9532] bridge3: left promiscuous mode
[  152.116240][ T7680] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  152.135407][   T13] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  152.153346][   T13] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  152.160620][   T13] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  152.171191][   T13] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  152.306947][ T9558] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  152.306947][ T9558] Please contact the netfilter-devel mailing list or update your nftables rules.
[  152.314477][ T7681] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  152.410064][ T9562] bond6: option min_links: invalid value (18446744073709551612)
[  152.413451][ T9562] bond6: option min_links: allowed values 0 - 2147483647
[  152.419263][ T9562] bond6 (unregistering): Released all slaves
[  152.598504][ T9577] netlink: 'syz.2.1710': attribute type 1 has an invalid length.
[  152.821608][ T9595] syzkaller0: entered promiscuous mode
[  152.825613][ T9595] syzkaller0: entered allmulticast mode
[  152.836737][ T9591] xfrm0 speed is unknown, defaulting to 1000
[  153.769985][ T9632] __nla_validate_parse: 3 callbacks suppressed
[  153.770000][ T9632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1736'.
[  154.336180][ T9667] bridge_slave_0: Caught tx_queue_len zero misconfig
[  154.383026][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1750'.
[  154.829208][ T9687] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig
[  157.021826][ T9814] netlink: 'syz.0.1812': attribute type 3 has an invalid length.
[  157.801806][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'.
[  158.374352][ T9940] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1844'.
[  158.499850][ T9952] vxcan0: tx drop: invalid da for name 0x00000000000000c8
[  158.634767][ T9970] netlink: 'syz.1.1859': attribute type 30 has an invalid length.
[  158.714401][ T9970] netlink: 'syz.1.1859': attribute type 30 has an invalid length.
[  159.364710][T10030] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1886'.
[  159.465074][T10040] netlink: 'syz.0.1891': attribute type 6 has an invalid length.
[  159.544774][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'.
[  160.176675][T10086] syzkaller1: entered promiscuous mode
[  160.178367][T10086] syzkaller1: entered allmulticast mode
[  160.793915][T10131] syzkaller0: tun_chr_ioctl cmd 2147767520
[  161.632511][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'.
[  161.739494][T10158] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  161.836758][T10169] netlink: 'syz.0.1950': attribute type 31 has an invalid length.
[  161.936755][T10176] syzkaller0: entered promiscuous mode
[  161.942081][T10176] syzkaller0: entered allmulticast mode
[  162.017373][T10186] netlink: 'syz.2.1957': attribute type 1 has an invalid length.
[  163.787957][T10285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2000'.
[  163.833761][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2000'.
[  164.244893][T10301] syzkaller0: entered promiscuous mode
[  164.246777][T10301] syzkaller0: entered allmulticast mode
[  164.421634][T10316] bond0: Caught tx_queue_len zero misconfig
[  165.089851][T10377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2045'.
[  165.096986][T10377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2045'.
[  165.253151][T10384] block nbd1: server does not support multiple connections per device.
[  165.261699][T10384] block nbd1: shutting down sockets
[  165.508249][T10414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.527775][T10416] syzkaller0: entered promiscuous mode
[  165.529530][T10416] syzkaller0: entered allmulticast mode
[  166.051720][T10384] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  166.058393][T10384] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  166.090964][T10384] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  166.095635][T10384] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  166.226768][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'.
[  166.231180][T10436] netlink: 'syz.0.2067': attribute type 2 has an invalid length.
[  166.240875][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'.
[  166.245670][T10436] netlink: 'syz.0.2067': attribute type 2 has an invalid length.
[  166.345635][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'.
[  166.756705][T10469] netlink: 'syz.1.2083': attribute type 12 has an invalid length.
[  166.772463][T10469] netlink: 'syz.1.2083': attribute type 29 has an invalid length.
[  166.776114][T10469] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2083'.
[  166.781294][T10469] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2083'.
[  166.941773][T10478] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2088'.
[  167.157426][T10491] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.161589][T10491] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.329940][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2098'.
[  167.334120][T10504] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2098'.
[  167.566215][T10520] netlink: 'syz.1.2106': attribute type 30 has an invalid length.
[  167.599527][T10520] netlink: 'syz.1.2106': attribute type 30 has an invalid length.
[  167.603390][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.608001][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.614809][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.622356][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  168.138122][T10553] syzkaller0: entered promiscuous mode
[  168.141137][T10553] syzkaller0: entered allmulticast mode
[  168.244226][T10561] dummy0: Caught tx_queue_len zero misconfig
[  168.822769][T10592] tunl0: Caught tx_queue_len zero misconfig
[  168.942809][T10596] netlink: 'syz.2.2140': attribute type 4 has an invalid length.
[  169.032875][T10598] netlink: NAT attribute type 0 has unexpected length (1 != 0)
[  169.042461][T10598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.154642][T10695] openvswitch: netlink: Message has 4 unknown bytes.
[  170.220296][T10701] veth1_to_batadv: Caught tx_queue_len zero misconfig
[  170.340397][T10712] syzkaller1: entered promiscuous mode
[  170.342933][T10712] syzkaller1: entered allmulticast mode
[  170.354748][T10712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.642976][T10720] __nla_validate_parse: 9 callbacks suppressed
[  170.642986][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2200'.
[  172.146834][T10777] netlink: 'syz.2.2224': attribute type 21 has an invalid length.
[  172.148681][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'.
[  172.150069][T10777] netlink: 'syz.2.2224': attribute type 20 has an invalid length.
[  172.203489][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'.
[  172.207989][T10782] veth0_macvtap: left promiscuous mode
[  172.958929][T10823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2243'.
[  172.961781][T10823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2243'.
[  172.966737][T10823] netlink: 'syz.0.2243': attribute type 6 has an invalid length.
[  173.597050][T10852] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  173.621571][T10852] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  173.704890][T10859] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  174.023775][T10877] netlink: 'syz.2.2268': attribute type 21 has an invalid length.
[  174.348865][T10897] netlink: 'syz.2.2279': attribute type 13 has an invalid length.
[  174.425167][T10900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2280'.
[  174.432586][ T7682] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  174.846557][T10932] syzkaller0: entered promiscuous mode
[  174.848904][T10932] syzkaller0: entered allmulticast mode
[  174.853848][T10932] TC_ACT_REPEAT abuse ?
[  174.932267][ T7682] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  176.574087][T10962] syzkaller0: entered promiscuous mode
[  176.578559][T10962] syzkaller0: entered allmulticast mode
[  176.635411][T10973] syzkaller0: entered promiscuous mode
[  176.637379][T10973] syzkaller0: entered allmulticast mode
[  176.896983][T11000] netlink: 774 bytes leftover after parsing attributes in process `syz.1.2327'.
[  176.911136][T11000] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2327'.
[  177.095985][T10994] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  177.101300][T10994] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  177.259163][T11013] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2333'.
[  177.320903][T11020] ip_tables: iptables: counters copy to user failed while replacing table
[  177.440372][T11033] netlink: 'syz.2.2342': attribute type 1 has an invalid length.
[  177.490628][T11033] bridge5: entered promiscuous mode
[  177.501543][T11033] bond2: (slave bridge5): making interface the new active one
[  177.505033][T11033] bond2: (slave bridge5): Enslaving as an active interface with an up link
[  177.720910][T11046] netlink: 'syz.1.2347': attribute type 8 has an invalid length.
[  177.875141][T11057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2349'.
[  177.951041][T11060] tun0: tun_chr_ioctl cmd 2148553947
[  178.167660][T11072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2358'.
[  178.310399][T11076] : Caught tx_queue_len zero misconfig
[  178.463361][T11089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2367'.
[  178.575811][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'.
[  178.578619][T11099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.085452][   T11] block nbd0: Possible stuck request ffff88810aa90000: control (read@0,1024B). Runtime 90 seconds
[  179.089383][   T11] block nbd0: Possible stuck request ffff88810aa90200: control (read@1024,1024B). Runtime 90 seconds
[  179.093849][   T11] block nbd0: Possible stuck request ffff88810aa90400: control (read@2048,1024B). Runtime 90 seconds
[  179.097952][   T11] block nbd0: Possible stuck request ffff88810aa90600: control (read@3072,1024B). Runtime 90 seconds
[  179.305416][T11099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.434575][T11111] netlink: Failed to add %pK     helper -22
[  179.437118][T11111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.663682][T11124] ip_tables: iptables: counters copy to user failed while replacing table
[  180.197268][T11148] syzkaller0: entered promiscuous mode
[  180.199782][T11148] syzkaller0: entered allmulticast mode
[  180.638485][T11179] sch_tbf: burst 959 is lower than device syzkaller0 mtu (1500) !
[  180.787477][ T5042] udevd[5042]: worker [5596] /devices/virtual/block/nbd0 is taking a long time
[  180.798011][T11194] IPVS: rr: TCP 127.0.0.1:20480 - no destination available
[  180.896825][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'.
[  180.941647][T11203] netlink: 'syz.2.2420': attribute type 1 has an invalid length.
[  180.944905][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2420'.
[  180.948645][T11203] netlink: 'syz.2.2420': attribute type 1 has an invalid length.
[  181.632226][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  181.967515][T11223] netlink: 'syz.1.2430': attribute type 322 has an invalid length.
[  182.710610][T11213] syz.2.2425 (11213) used greatest stack depth: 19960 bytes left
[  183.074046][T11272] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  183.210051][T11278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2454'.
[  183.501518][T11300] netlink: 400 bytes leftover after parsing attributes in process `syz.0.2465'.
[  183.505758][T11300] netlink: 400 bytes leftover after parsing attributes in process `syz.0.2465'.
[  183.667460][T11319] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  183.820304][T11337] dummy0: entered promiscuous mode
[  183.828169][T11337] dummy0: left promiscuous mode
[  183.950109][T11349] syzkaller0: entered promiscuous mode
[  183.952769][T11349] syzkaller0: entered allmulticast mode
[  184.171236][T11376] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2499'.
[  184.176289][T11376] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  184.351210][T11390] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2506'.
[  184.954843][T11437] syz.1.2527: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  184.962958][T11437] CPU: 0 UID: 0 PID: 11437 Comm: syz.1.2527 Not tainted syzkaller #0 PREEMPT(full) 
[  184.962998][T11437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.963009][T11437] Call Trace:
[  184.963016][T11437]  <TASK>
[  184.963023][T11437]  dump_stack_lvl+0xe8/0x150
[  184.963051][T11437]  warn_alloc+0x24c/0x270
[  184.963072][T11437]  ? stack_depot_save_flags+0x33/0x7f0
[  184.963133][T11437]  ? __pfx_warn_alloc+0x10/0x10
[  184.963153][T11437]  ? kasan_save_track+0x3e/0x80
[  184.963171][T11437]  ? __kasan_kmalloc+0x93/0xb0
[  184.963192][T11437]  ? xsk_setsockopt+0x52a/0x960
[  184.963212][T11437]  ? do_sock_setsockopt+0x17c/0x1b0
[  184.963231][T11437]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  184.963249][T11437]  ? do_syscall_64+0x166/0x520
[  184.963264][T11437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.963287][T11437]  __vmalloc_node_range_noprof+0x12c/0x1730
[  184.963327][T11437]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  184.963348][T11437]  ? __kasan_kmalloc+0x93/0xb0
[  184.963369][T11437]  ? __kmalloc_cache_noprof+0x331/0x660
[  184.963387][T11437]  ? __kmalloc_cache_noprof+0x152/0x660
[  184.963407][T11437]  vmalloc_user_noprof+0xad/0xe0
[  184.963425][T11437]  ? xskq_create+0xbf/0x170
[  184.963448][T11437]  xskq_create+0xbf/0x170
[  184.963472][T11437]  xsk_init_queue+0x8a/0xe0
[  184.963495][T11437]  xsk_setsockopt+0x52a/0x960
[  184.963516][T11437]  ? __fget_files+0x2a/0x420
[  184.963537][T11437]  ? __pfx_xsk_setsockopt+0x10/0x10
[  184.963559][T11437]  ? __pfx_aa_sk_perm+0x10/0x10
[  184.963588][T11437]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  184.963602][T11437]  ? __pfx_xsk_setsockopt+0x10/0x10
[  184.963625][T11437]  do_sock_setsockopt+0x17c/0x1b0
[  184.963647][T11437]  __x64_sys_setsockopt+0x13d/0x1b0
[  184.963670][T11437]  do_syscall_64+0x166/0x520
[  184.963687][T11437]  ? trace_irq_disable+0x3b/0x140
[  184.963705][T11437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.963721][T11437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.963734][T11437] RIP: 0033:0x7ff01799e0d9
[  184.963746][T11437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.963758][T11437] RSP: 002b:00007ff018901028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  184.963772][T11437] RAX: ffffffffffffffda RBX: 00007ff017c25fa0 RCX: 00007ff01799e0d9
[  184.963783][T11437] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  184.963793][T11437] RBP: 00007ff017a35024 R08: 0000000000000004 R09: 0000000000000000
[  184.963803][T11437] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.963812][T11437] R13: 00007ff017c26038 R14: 00007ff017c25fa0 R15: 00007ffe05cf3228
[  184.963837][T11437]  </TASK>
[  184.963947][T11437] Mem-Info:
[  185.078859][T11443] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2527'.
[  185.083226][T11437] active_anon:5568 inactive_anon:0 isolated_anon:0
[  185.083226][T11437]  active_file:25 inactive_file:50642 isolated_file:0
[  185.083226][T11437]  unevictable:1000 dirty:79 writeback:0
[  185.083226][T11437]  slab_reclaimable:10454 slab_unreclaimable:89225
[  185.083226][T11437]  mapped:18245 shmem:1564 pagetables:971
[  185.083226][T11437]  sec_pagetables:0 bounce:0
[  185.083226][T11437]  kernel_misc_reclaimable:0
[  185.083226][T11437]  free:1126408 free_pcp:14821 free_cma:0
[  185.097597][T11437] Node 0 active_anon:9176kB inactive_anon:0kB active_file:100kB inactive_file:73176kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:36992kB dirty:208kB writeback:0kB shmem:3048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7072kB pagetables:2216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  185.108454][T11437] Node 1 active_anon:13096kB inactive_anon:0kB active_file:0kB inactive_file:129392kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:35988kB dirty:108kB writeback:0kB shmem:3208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5272kB pagetables:1668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  185.120976][T11437] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  185.130210][T11437] lowmem_reserve[]: 0 1582 2112 2112 2112
[  185.132148][T11437] Node 0 DMA32 free:1546788kB boost:0kB min:24972kB low:31212kB high:37452kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:18860kB unevictable:0kB writepending:196kB zspages:0kB present:2080636kB managed:1620792kB mlocked:0kB bounce:0kB free_pcp:16028kB local_pcp:16028kB free_cma:0kB
[  185.144124][T11437] lowmem_reserve[]: 0 0 530 530 530
[  185.147137][T11437] Node 0 Normal free:15644kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9040kB inactive_anon:0kB active_file:100kB inactive_file:54316kB unevictable:2000kB writepending:12kB zspages:0kB present:1572868kB managed:542744kB mlocked:0kB bounce:0kB free_pcp:3872kB local_pcp:3692kB free_cma:0kB
[  185.165013][T11437] lowmem_reserve[]: 0 0 0 0 0
[  185.165113][T11442] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  185.166614][T11437] Node 1 Normal free:2927712kB boost:0kB min:56380kB low:70472kB high:84564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13196kB inactive_anon:0kB active_file:0kB inactive_file:129392kB unevictable:2000kB writepending:108kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:39008kB local_pcp:27980kB free_cma:0kB
[  185.190181][T11437] lowmem_reserve[]: 0 0 0 0 0
[  185.191802][T11437] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  185.196339][T11437] Node 0 DMA32: 1*4kB (M) 0*8kB 4*16kB (UME) 77*32kB (UME) 57*64kB (UE) 18*128kB (UE) 21*256kB (UM) 18*512kB (UME) 10*1024kB (UE) 7*2048kB (UME) 366*4096kB (UM) = 1546788kB
[  185.202572][T11437] Node 0 Normal: 523*4kB (UME) 236*8kB (UME) 75*16kB (UME) 183*32kB (UME) 27*64kB (UME) 2*128kB (UE) 5*256kB (M) 3*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 15836kB
[  185.207941][T11437] Node 1 Normal: 796*4kB (UME) 268*8kB (M) 158*16kB (M) 176*32kB (UME) 242*64kB (UM) 124*128kB (UME) 40*256kB (UME) 10*512kB (UM) 4*1024kB (ME) 4*2048kB (UM) 697*4096kB (M) = 2927408kB
[  185.214920][T11437] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  185.218508][T11437] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  185.222529][T11437] 52231 total pagecache pages
[  185.224590][T11437] 0 pages in swap cache
[  185.226393][T11437] Free swap  = 124996kB
[  185.228200][T11437] Total swap = 124996kB
[  185.229966][T11437] 1834877 pages RAM
[  185.231569][T11437] 0 pages HighMem/MovableOnly
[  185.234536][T11437] 391482 pages reserved
[  185.236359][T11437] 0 pages cma reserved
[  185.577024][T11473] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2542'.
[  185.731909][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2548'.
[  185.857441][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2553'.
[  185.870062][T11499] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2553'.
[  186.675923][T11550] syzkaller1: entered promiscuous mode
[  186.677739][T11550] syzkaller1: entered allmulticast mode
[  187.596285][T11610] 0: reclassify loop, rule prio 0, protocol 03
[  187.836271][T11618] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2
[  187.939578][T11622] syzkaller0: entered promiscuous mode
[  187.944135][T11622] syzkaller0: entered allmulticast mode
[  188.160346][T11632] netlink: 'syz.1.2608': attribute type 10 has an invalid length.
[  188.256721][T11638] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  188.266823][T11638] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  188.408882][T11650] __nla_validate_parse: 3 callbacks suppressed
[  188.408898][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2617'.
[  188.431013][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'.
[  188.677212][T11670] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2627'.
[  188.988968][T11698] ieee802154 phy0 wpan0: encryption failed: -22
[  189.524690][T11744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2654'.
[  189.764955][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'.
[  189.769278][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'.
[  190.103167][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2676'.
[  190.107925][T11792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2676'.
[  190.132716][T11792] geneve4: entered promiscuous mode
[  190.142061][T11792] geneve4: entered allmulticast mode
[  190.223822][T11802] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2680'.
[  190.921489][T11843] syzkaller0: entered promiscuous mode
[  190.925912][T11843] syzkaller0: entered allmulticast mode
[  190.992832][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2701'.
[  191.199763][T11861] syzkaller0: entered promiscuous mode
[  191.207155][T11861] syzkaller0: entered allmulticast mode
[  191.288711][T11867] netlink: 'syz.0.2710': attribute type 1 has an invalid length.
[  191.339004][T11867] 8021q: adding VLAN 0 to HW filter on device bond6
[  191.381458][T11867] bond6: (slave geneve2): making interface the new active one
[  191.390417][T11867] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  192.025765][T11885] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.055530][T11890] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  194.436586][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  196.208936][T12010] netlink: 'syz.1.2754': attribute type 3 has an invalid length.
[  196.248531][T12014] netlink: zone id is out of range
[  196.254045][T12014] netlink: zone id is out of range
[  196.259522][T12014] netlink: get zone limit has 4 unknown bytes
[  196.530402][T12024] vxcan1: tx drop: invalid da for name 0x0000000001000000
[  197.838760][T12064] sock: sock_timestamping_bind_phc: sock not bind to device
[  197.969913][T12068] netlink: 'syz.2.2779': attribute type 49 has an invalid length.
[  198.909447][T12086] syz.1.2787: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  198.927719][T12086] CPU: 1 UID: 0 PID: 12086 Comm: syz.1.2787 Not tainted syzkaller #0 PREEMPT(full) 
[  198.927773][T12086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  198.927785][T12086] Call Trace:
[  198.927793][T12086]  <TASK>
[  198.927801][T12086]  dump_stack_lvl+0xe8/0x150
[  198.927829][T12086]  warn_alloc+0x24c/0x270
[  198.927847][T12086]  ? stack_depot_save_flags+0x33/0x7f0
[  198.927873][T12086]  ? __pfx_warn_alloc+0x10/0x10
[  198.927894][T12086]  ? kasan_save_track+0x3e/0x80
[  198.927913][T12086]  ? __kasan_kmalloc+0x93/0xb0
[  198.927933][T12086]  ? xsk_setsockopt+0x52a/0x960
[  198.927954][T12086]  ? do_sock_setsockopt+0x17c/0x1b0
[  198.927972][T12086]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  198.927991][T12086]  ? do_syscall_64+0x166/0x520
[  198.928007][T12086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.928029][T12086]  __vmalloc_node_range_noprof+0x12c/0x1730
[  198.928069][T12086]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  198.928090][T12086]  ? __kasan_kmalloc+0x93/0xb0
[  198.928110][T12086]  ? __kmalloc_cache_noprof+0x331/0x660
[  198.928130][T12086]  ? __kmalloc_cache_noprof+0x152/0x660
[  198.928150][T12086]  vmalloc_user_noprof+0xad/0xe0
[  198.928167][T12086]  ? xskq_create+0xbf/0x170
[  198.928187][T12086]  xskq_create+0xbf/0x170
[  198.928223][T12086]  xsk_init_queue+0x8a/0xe0
[  198.928250][T12086]  xsk_setsockopt+0x52a/0x960
[  198.928271][T12086]  ? __fget_files+0x2a/0x420
[  198.928294][T12086]  ? __pfx_xsk_setsockopt+0x10/0x10
[  198.928315][T12086]  ? __pfx_aa_sk_perm+0x10/0x10
[  198.928344][T12086]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  198.928360][T12086]  ? __pfx_xsk_setsockopt+0x10/0x10
[  198.928382][T12086]  do_sock_setsockopt+0x17c/0x1b0
[  198.928404][T12086]  __x64_sys_setsockopt+0x13d/0x1b0
[  198.928430][T12086]  do_syscall_64+0x166/0x520
[  198.928445][T12086]  ? trace_irq_disable+0x3b/0x140
[  198.928464][T12086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.928484][T12086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.928500][T12086] RIP: 0033:0x7ff01799e0d9
[  198.928517][T12086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.928529][T12086] RSP: 002b:00007ff018901028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  198.928547][T12086] RAX: ffffffffffffffda RBX: 00007ff017c25fa0 RCX: 00007ff01799e0d9
[  198.928558][T12086] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  198.928568][T12086] RBP: 00007ff017a35024 R08: 0000000000000004 R09: 0000000000000000
[  198.928577][T12086] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.928588][T12086] R13: 00007ff017c26038 R14: 00007ff017c25fa0 R15: 00007ffe05cf3228
[  198.928613][T12086]  </TASK>
[  198.928619][T12086] Mem-Info:
[  199.031129][T12095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2787'.
[  199.036362][T12086] active_anon:5568 inactive_anon:0 isolated_anon:0
[  199.036362][T12086]  active_file:34 inactive_file:50637 isolated_file:0
[  199.036362][T12086]  unevictable:1000 dirty:147 writeback:0
[  199.036362][T12086]  slab_reclaimable:9891 slab_unreclaimable:95325
[  199.036362][T12086]  mapped:18212 shmem:1566 pagetables:1003
[  199.036362][T12086]  sec_pagetables:0 bounce:0
[  199.036362][T12086]  kernel_misc_reclaimable:0
[  199.036362][T12086]  free:1118541 free_pcp:17409 free_cma:0
[  199.080048][T12086] Node 0 active_anon:9248kB inactive_anon:0kB active_file:136kB inactive_file:73192kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:37060kB dirty:284kB writeback:0kB shmem:3048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7136kB pagetables:2512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  199.098715][T12086] Node 1 active_anon:13020kB inactive_anon:0kB active_file:0kB inactive_file:129352kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:35972kB dirty:308kB writeback:0kB shmem:3216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5180kB pagetables:1556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  199.114552][T12086] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  199.127643][T12086] lowmem_reserve[]: 0 1582 2112 2112 2112
[  199.130518][T12086] Node 0 DMA32 free:1569932kB boost:0kB min:24972kB low:31212kB high:37452kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:18860kB unevictable:0kB writepending:192kB zspages:0kB present:2080636kB managed:1620792kB mlocked:0kB bounce:0kB free_pcp:11104kB local_pcp:0kB free_cma:0kB
[  199.154992][T12086] lowmem_reserve[]: 0 0 530 530 530
[  199.161217][T12086] Node 0 Normal free:61080kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9128kB inactive_anon:0kB active_file:136kB inactive_file:54332kB unevictable:2000kB writepending:96kB zspages:0kB present:1572868kB managed:542744kB mlocked:0kB bounce:0kB free_pcp:1436kB local_pcp:236kB free_cma:0kB
[  199.175861][T12086] lowmem_reserve[]: 0 0 0 0 0
[  199.178240][T12086] Node 1 Normal free:2827660kB boost:0kB min:56380kB low:70472kB high:84564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13020kB inactive_anon:0kB active_file:0kB inactive_file:129352kB unevictable:2000kB writepending:308kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:58248kB local_pcp:29344kB free_cma:0kB
[  199.180137][T12091] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  199.208987][T12086] lowmem_reserve[]: 0 0 0 0 0
[  199.246817][T12086] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  199.257384][T12086] Node 0 DMA32: 33*4kB (UM) 25*8kB (UME) 58*16kB (UME) 90*32kB (UME) 62*64kB (UME) 42*128kB (UME) 30*256kB (UE) 19*512kB (UE) 5*1024kB (U) 5*2048kB (UME) 372*4096kB (UM) = 1569964kB
[  199.265854][T12086] Node 0 Normal: 593*4kB (UME) 540*8kB (UME) 230*16kB (UME) 780*32kB (UME) 271*64kB (UME) 41*128kB (UME) 6*256kB (UM) 3*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 60996kB
[  199.274014][T12086] Node 1 Normal: 1235*4kB (UME) 670*8kB (UME) 163*16kB (UME) 509*32kB (UME) 108*64kB (UME) 55*128kB (UME) 21*256kB (UM) 8*512kB (ME) 4*1024kB (UM) 3*2048kB (M) 675*4096kB (M) = 2827660kB
[  199.282538][T12086] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  199.287364][T12086] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  199.291629][T12086] 52239 total pagecache pages
[  199.294378][T12086] 0 pages in swap cache
[  199.296505][T12086] Free swap  = 124996kB
[  199.298825][T12086] Total swap = 124996kB
[  199.311786][T12086] 1834877 pages RAM
[  199.332230][T12086] 0 pages HighMem/MovableOnly
[  199.334591][T12086] 391482 pages reserved
[  199.336611][T12086] 0 pages cma reserved
[  199.691777][T12134] xfrm0 speed is unknown, defaulting to 1000
[  200.111112][T12151] geneve1: entered promiscuous mode
[  200.131078][T12151] geneve1: entered allmulticast mode
[  200.252552][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2809'.
[  200.297123][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'.
[  200.409140][T12173] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  200.558978][T12184] openvswitch: netlink: Missing valid actions attribute.
[  200.561356][T12184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.290826][T12193] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2826'.
[  201.621318][T12221] bond2: entered promiscuous mode
[  201.626691][T12221] 8021q: adding VLAN 0 to HW filter on device bond2
[  201.685963][T12229] ip_tables: iptables: counters copy to user failed while replacing table
[  201.702845][T12231] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2841'.
[  201.710557][T12231] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2841'.
[  201.771322][T12236] Bluetooth: MGMT ver 1.23
[  201.779573][T12239] netlink: 598 bytes leftover after parsing attributes in process `syz.0.2845'.
[  202.041419][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2854'.
[  202.162378][T12258] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002
[  202.167228][T12258] netlink: 'syz.2.2856': attribute type 13 has an invalid length.
[  202.264549][ T7682] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  202.668617][T12290] ip_tables: iptables: counters copy to user failed while replacing table
[  203.155894][ T7681] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  203.251019][T12324] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[  203.274129][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.422720][T12336] ip_tunnel_core: Dead loop on virtual device ipip0 (net 26), fix it urgently!
[  203.428811][T12336] ip_tunnel_core: Dead loop on virtual device ipip0 (net 26), fix it urgently!
[  203.433612][T12336] ip_tunnel_core: Dead loop on virtual device ipip0 (net 26), fix it urgently!
[  203.438185][T12336] ip_tunnel_core: Dead loop on virtual device ipip0 (net 26), fix it urgently!
[  203.444075][T12336] ip_tunnel_core: Dead loop on virtual device ipip0 (net 26), fix it urgently!
[  203.448828][T12336] ip_tunnel_core: Dead loop on virtual device ipip0 (net 26), fix it urgently!
[  203.453355][T12336] ip_tunnel_core: Dead loop on virtual device ipip0 (net 26), fix it urgently!
[  203.478561][ T5702] IPVS: starting estimator thread 0...
[  203.574044][T12342] IPVS: using max 40 ests per chain, 96000 per kthread
[  205.625677][T12336] syz.1.2888 (12336) used greatest stack depth: 17304 bytes left
[  205.722250][T12405] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2916'.
[  207.274124][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2944'.
[  207.868485][T12500] pimreg: tun_chr_ioctl cmd 1074025677
[  207.871078][T12500] pimreg: linktype set to 6
[  208.889905][T12554] netlink: 'syz.0.2982': attribute type 1 has an invalid length.
[  209.162262][   T11] block nbd0: Possible stuck request ffff88810aa90000: control (read@0,1024B). Runtime 120 seconds
[  209.165745][   T11] block nbd0: Possible stuck request ffff88810aa90200: control (read@1024,1024B). Runtime 120 seconds
[  209.170272][   T11] block nbd0: Possible stuck request ffff88810aa90400: control (read@2048,1024B). Runtime 120 seconds
[  209.176003][   T11] block nbd0: Possible stuck request ffff88810aa90600: control (read@3072,1024B). Runtime 120 seconds
[  209.765065][T12610] netlink: 'syz.1.3009': attribute type 10 has an invalid length.
[  210.136847][T12634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3020'.
[  210.140969][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3020'.
[  210.286195][T12647] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3025'.
[  210.336867][T12651] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.3029'.
[  210.382736][T12656] netlink: 'syz.0.3031': attribute type 1 has an invalid length.
[  210.386472][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'.
[  210.572036][T12672] syzkaller0: entered promiscuous mode
[  210.574424][T12672] syzkaller0: entered allmulticast mode
[  210.776244][T12684] bond5: entered allmulticast mode
[  210.778489][T12684] ipip1: entered allmulticast mode
[  210.782357][T12683] bond5: left allmulticast mode
[  210.784162][T12683] ipip1: left allmulticast mode
[  210.975398][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3051'.
[  210.979335][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3051'.
[  210.990544][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3051'.
[  210.997079][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3051'.
[  211.012224][T12704] netlink: 'syz.0.3053': attribute type 1 has an invalid length.
[  211.048038][T12708] netlink: 'syz.0.3055': attribute type 63 has an invalid length.
[  211.267810][T12724] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  211.479515][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3066'.
[  211.810986][   T33] audit: type=1800 audit(1787562368.896:2): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3068" name="memory.events" dev="tmpfs" ino=5092 res=0 errno=0
[  211.869783][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3070'.
[  211.874137][T12750] bond0: Unable to set up delay as MII monitoring is disabled
[  211.959666][T12752] sctp: [Deprecated]: syz.0.3071 (pid 12752) Use of struct sctp_assoc_value in delayed_ack socket option.
[  211.959666][T12752] Use struct sctp_sack_info instead
[  212.012241][T12754] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3072'.
[  212.021206][T12754] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3072'.
[  212.653284][T12786] syzkaller0: entered promiscuous mode
[  212.656080][T12786] syzkaller0: entered allmulticast mode
[  212.665193][T12786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.676683][T12786] tipc: Resetting bearer <eth:syzkaller0>
[  212.687877][T12785] tipc: Resetting bearer <eth:syzkaller0>
[  212.711848][T12785] tipc: Disabling bearer <eth:syzkaller0>
[  212.938614][T12795] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3091'.
[  212.943817][T12795] netlink: 'syz.1.3091': attribute type 1 has an invalid length.
[  213.078228][T12804] pim6reg: entered allmulticast mode
[  213.086048][T12804] pim6reg: left allmulticast mode
[  213.231486][T12814] gtp0: entered promiscuous mode
[  213.234088][T12814] gtp0: entered allmulticast mode
[  213.290704][T12818] netlink: 'syz.1.3104': attribute type 5 has an invalid length.
[  214.255502][T12887] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  214.259114][T12887] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  214.345305][T12887] net_ratelimit: 25 callbacks suppressed
[  214.345325][T12887] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  214.823390][T12915] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  214.968257][T12923] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  215.228441][T12939] xt_cgroup: invalid path, errno=-2
[  215.446607][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3162'.
[  215.449834][T12952] netlink: 'syz.1.3162': attribute type 31 has an invalid length.
[  215.453328][T12952] netlink: 'syz.1.3162': attribute type 31 has an invalid length.
[  215.686869][T12968] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.703872][T12968] bond9: (slave bond0): making interface the new active one
[  215.709972][T12968] bond9: (slave bond0): Enslaving as an active interface with an up link
[  215.719290][T12978] netlink: 'syz.0.3170': attribute type 4 has an invalid length.
[  215.762261][T12978] .`: renamed from bond0 (while UP)
[  216.277321][T13010] syzkaller1: entered promiscuous mode
[  216.280505][T13010] syzkaller1: entered allmulticast mode
[  216.496652][T13017] netlink: 'syz.0.3189': attribute type 49 has an invalid length.
[  218.398481][T13092] __nla_validate_parse: 6 callbacks suppressed
[  218.398492][T13092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3223'.
[  219.417001][T13146] syzkaller0: entered promiscuous mode
[  219.419377][T13146] syzkaller0: entered allmulticast mode
[  219.430901][T13146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.439977][T13146] tipc: Resetting bearer <eth:syzkaller0>
[  219.450692][T13145] tipc: Resetting bearer <eth:syzkaller0>
[  219.470877][T13145] tipc: Disabling bearer <eth:syzkaller0>
[  219.705714][T13156] netlink: 'syz.2.3253': attribute type 25 has an invalid length.
[  219.709192][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3253'.
[  219.714258][T13156] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  219.937168][T13170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  220.132884][T13184] No such timeout policy "syz1"
[  220.344290][T13209] syzkaller0: entered promiscuous mode
[  220.346256][T13209] syzkaller0: entered allmulticast mode
[  220.349392][T13209] 0: reclassify loop, rule prio 0, protocol 700
[  220.470253][T13220] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  220.529764][T13226] gretap1: entered promiscuous mode
[  221.649605][T13272] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3300'.
[  221.829821][T13287] openvswitch: netlink: Unknown key attributes 1
[  222.407197][T13323] netlink: 'syz.0.3325': attribute type 10 has an invalid length.
[  222.912529][T13346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3333'.
[  223.123047][T13339] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.126712][T13339] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.425837][T13339] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.643865][T13339] bond1: left allmulticast mode
[  223.649904][T13339] veth5: left allmulticast mode
[  223.654161][T13339] gre1: left promiscuous mode
[  223.676815][T13339] bond2: left promiscuous mode
[  223.694041][T13339] bridge2: left promiscuous mode
[  223.698323][T13339] bridge2: left allmulticast mode
[  223.723501][T13339] vti0: left promiscuous mode
[  223.730527][T13339] vti0: left allmulticast mode
[  223.733843][T13339] bond5: left promiscuous mode
[  223.739482][T13339] ipip1: left promiscuous mode
[  223.773533][T13339] gretap1: left promiscuous mode
[  223.793512][ T5630] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.796920][ T7683] xfrm0 speed is unknown, defaulting to 1000
[  223.807988][ T5630] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.812423][ T7683] syz0: Port: 1 Link DOWN
[  223.819655][ T5630] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.824459][ T5630] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.830840][ T5630] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.839999][ T5630] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.844713][ T5630] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.850719][ T5630] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.857448][ T7681] xfrm0 speed is unknown, defaulting to 1000
[  224.096404][T13381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3346'.
[  224.116866][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3347'.
[  224.596175][T13408] xt_hashlimit: size too large, truncated to 1048576
[  224.631703][T13412] syzkaller1: entered promiscuous mode
[  224.633656][T13412] syzkaller1: entered allmulticast mode
[  225.030784][T13443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3374'.
[  225.101809][T13448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  225.161798][T13450] netlink: 'syz.2.3376': attribute type 1 has an invalid length.
[  225.225888][T13450] veth5: entered allmulticast mode
[  225.248930][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3376'.
[  225.369581][T13465] ip_tables: iptables: counters copy to user failed while replacing table
[  225.572633][T13476] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3387'.
[  225.725288][T13480] xt_hashlimit: size too large, truncated to 1048576
[  225.863744][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'.
[  225.995372][T13490] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3393'.
[  226.005236][T13490] netlink: 'syz.2.3393': attribute type 9 has an invalid length.
[  226.013671][T13490] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3393'.
[  226.017344][T13490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3393'.
[  226.038410][T13492] pim6reg1: entered allmulticast mode
[  226.287477][T13510] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  226.334339][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3405'.
[  226.620166][T13539] team0: entered promiscuous mode
[  226.623427][T13539] team_slave_0: entered promiscuous mode
[  226.626582][T13539] team_slave_1: entered promiscuous mode
[  226.629146][T13539] team0: entered allmulticast mode
[  226.631357][T13539] team_slave_0: entered allmulticast mode
[  226.634488][T13539] team_slave_1: entered allmulticast mode
[  226.637878][T13539] 8021q: adding VLAN 0 to HW filter on device team0
[  226.859073][T13564] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  227.272559][T13569] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.277580][T13569] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.347082][T13569] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.351671][T13569] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.447520][T13569] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.453927][T13569] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.548810][T13569] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.553098][T13569] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.722677][ T5630] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  227.728897][ T5630] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.737877][ T5630] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  227.743607][ T5630] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.792871][ T5630] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  227.797612][ T5630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.842350][ T5630] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  227.847584][ T5630] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.945253][T13603] syzkaller1: tun_chr_ioctl cmd 1074025677
[  227.947836][T13603] syzkaller1: linktype set to 773
[  228.143892][T13609] Bluetooth: ISO socket layer initialized
[  228.161289][T13614] syzkaller0: entered promiscuous mode
[  228.163867][T13614] syzkaller0: entered allmulticast mode
[  228.224577][T13615] sock: sock_timestamping_bind_phc: sock not bind to device
[  228.723377][T13625] xt_hashlimit: size too large, truncated to 1048576
[  229.160722][T13643] syzkaller0: entered promiscuous mode
[  229.164099][T13643] syzkaller0: entered allmulticast mode
[  229.571872][T13658] ip6tnl0: Caught tx_queue_len zero misconfig
[  230.142556][T13692] A link change request failed with some changes committed already. Interface 04 may have been left with an inconsistent configuration, please check.
[  230.242996][T13701] vxcan3: entered promiscuous mode
[  230.275354][T13704] netlink: 'syz.2.3490': attribute type 1 has an invalid length.
[  230.341375][T13704] bond5: (slave bridge7): Enslaving as a backup interface with an up link
[  230.366371][T13704] macvlan1: entered promiscuous mode
[  230.369246][T13704] macvlan1: entered allmulticast mode
[  230.373188][T13704] bond5: entered promiscuous mode
[  230.378619][T13704] bridge7: entered promiscuous mode
[  230.385246][T13704] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  230.401138][T13704] bond5: left promiscuous mode
[  230.406646][T13704] bridge7: left promiscuous mode
[  230.617228][T13730] netlink: 'syz.1.3501': attribute type 16 has an invalid length.
[  230.620980][T13730] netlink: 'syz.1.3501': attribute type 30 has an invalid length.
[  230.950615][T13751] Unknown options in mask 6
[  231.044543][T13757] tipc: New replicast peer: 255.255.255.255
[  231.047728][T13757] tipc: Enabled bearer <udp:syz2>, priority 10
[  231.153509][T13765] __nla_validate_parse: 3 callbacks suppressed
[  231.153526][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3517'.
[  231.278213][T13775] No such timeout policy "syz1"
[  231.798907][T13816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3536'.
[  232.182304][ T7683] tipc: Node number set to 2308586320
[  232.283931][T13849] netlink: 'syz.2.3543': attribute type 2 has an invalid length.
[  232.286963][T13849] netlink: 'syz.2.3543': attribute type 2 has an invalid length.
[  232.351677][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3542'.
[  232.360416][T13852] syzkaller0: entered promiscuous mode
[  232.363264][T13852] syzkaller0: entered allmulticast mode
[  232.370954][T13852] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  232.391206][T13850] bond3: option lacp_active: invalid value (5)
[  232.403142][T13850] bond3 (unregistering): Released all slaves
[  232.574314][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3545'.
[  232.637606][T13861] vlan2: entered promiscuous mode
[  232.639556][T13861] macvlan0: entered promiscuous mode
[  232.737920][T13873] netlink: zone id is out of range
[  232.741423][T13873] netlink: get zone limit has 4 unknown bytes
[  232.790883][T13879] GUP no longer grows the stack in syz.0.3555 (13879): 200000003000-20000000a000 (200000001000)
[  232.798639][T13879] CPU: 1 UID: 0 PID: 13879 Comm: syz.0.3555 Not tainted syzkaller #0 PREEMPT(full) 
[  232.798660][T13879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.798669][T13879] Call Trace:
[  232.798676][T13879]  <TASK>
[  232.798684][T13879]  dump_stack_lvl+0xe8/0x150
[  232.798710][T13879]  __get_user_pages+0x238c/0x2720
[  232.798732][T13879]  ? __gup_longterm_locked+0xc3b/0x15c0
[  232.798756][T13879]  ? __gup_longterm_locked+0xc3b/0x15c0
[  232.798777][T13879]  __gup_longterm_locked+0xd52/0x15c0
[  232.798794][T13879]  ? lock_acquire+0x106/0x350
[  232.798828][T13879]  gup_fast_fallback+0x1d92/0x20e0
[  232.798851][T13879]  ? lockdep_hardirqs_on+0x7b/0x110
[  232.798890][T13879]  ? __pfx_gup_fast_fallback+0x10/0x10
[  232.798917][T13879]  ? is_valid_gup_args+0x11f/0x200
[  232.798942][T13879]  ? get_user_pages_fast+0x4d/0xb0
[  232.798967][T13879]  __iov_iter_get_pages_alloc+0x378/0xa40
[  232.798995][T13879]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  232.799022][T13879]  iov_iter_get_pages2+0x5e/0xa0
[  232.799046][T13879]  __se_sys_vmsplice+0x7b5/0x1660
[  232.799073][T13879]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  232.799094][T13879]  ? __pfx_futex_wake+0x10/0x10
[  232.799157][T13879]  do_syscall_64+0x166/0x520
[  232.799174][T13879]  ? trace_irq_disable+0x3b/0x140
[  232.799194][T13879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.799214][T13879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.799228][T13879] RIP: 0033:0x7fee1c79e0d9
[  232.799243][T13879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.799257][T13879] RSP: 002b:00007fee1d5c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  232.799274][T13879] RAX: ffffffffffffffda RBX: 00007fee1ca25fa0 RCX: 00007fee1c79e0d9
[  232.799285][T13879] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[  232.799295][T13879] RBP: 00007fee1c835024 R08: 0000000000000000 R09: 0000000000000000
[  232.799304][T13879] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  232.799312][T13879] R13: 00007fee1ca26038 R14: 00007fee1ca25fa0 R15: 00007fff0450cbb8
[  232.799336][T13879]  </TASK>
[  233.167347][T13903] ieee802154 phy0 wpan0: encryption failed: -22
[  233.504394][T13941] bond6 (unregistering): Released all slaves
[  233.765953][T13974] ip_tables: iptables: counters copy to user failed while replacing table
[  233.919205][T13985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3595'.
[  234.018440][T13988] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  234.874614][T14030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3613'.
[  235.027659][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3621'.
[  235.038931][T14046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3621'.
[  235.047809][T14046] tc_dump_action: action bad kind
[  235.198030][T14060] ipip2: entered promiscuous mode
[  235.282210][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3635'.
[  235.468015][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3642'.
[  235.517811][T14092] bond3: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  235.523797][T14092] bond3 (unregistering): Released all slaves
[  235.539637][T14098] bond9: (slave .`): Releasing backup interface
[  235.580654][T14098] bridge_slave_0: left allmulticast mode
[  235.593774][T14098] bridge_slave_0: left promiscuous mode
[  235.601696][T14098] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.620726][T14098] bridge_slave_1: left allmulticast mode
[  235.627583][T14098] bridge_slave_1: left promiscuous mode
[  235.633498][T14098] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.658062][T14098] .`: (slave bond_slave_0): Releasing backup interface
[  235.670487][T14098] .`: (slave bond_slave_1): Releasing backup interface
[  235.681253][T14098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.693668][T14098] bond5: (slave ipip1): Releasing backup interface
[  235.706682][T14098] bond6: (slave geneve2): Releasing active interface
[  235.728674][T14116] netlink: 'syz.2.3652': attribute type 6 has an invalid length.
[  235.855925][T14128] syzkaller0: entered promiscuous mode
[  235.858164][T14128] syzkaller0: entered allmulticast mode
[  236.237007][T14136] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  238.956628][T14247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3711'.
[  238.959661][T14247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3711'.
[  239.166921][T14267] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3720'.
[  239.234274][   T11] block nbd0: Possible stuck request ffff88810aa90000: control (read@0,1024B). Runtime 150 seconds
[  239.241343][   T11] block nbd0: Possible stuck request ffff88810aa90200: control (read@1024,1024B). Runtime 150 seconds
[  239.246383][   T11] block nbd0: Possible stuck request ffff88810aa90400: control (read@2048,1024B). Runtime 150 seconds
[  239.253200][   T11] block nbd0: Possible stuck request ffff88810aa90600: control (read@3072,1024B). Runtime 150 seconds
[  239.316813][T14281] syzkaller0: entered promiscuous mode
[  239.319121][T14281] syzkaller0: entered allmulticast mode
[  239.678219][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3734'.
[  239.726935][T14302] syzkaller1: entered promiscuous mode
[  239.729223][T14302] syzkaller1: entered allmulticast mode
[  243.060643][T14326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  243.160207][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'.
[  243.367688][T14362] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  243.392443][T14362] 8021q: adding VLAN 0 to HW filter on device bond2
[  243.395763][T14362] 8021q: adding VLAN 0 to HW filter on device bond3
[  243.402849][T14362] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  243.414409][ T7681] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  244.032203][ T7681] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  244.865919][T14424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3788'.
[  244.869962][T14424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3788'.
[  245.079598][T14438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3794'.
[  245.085374][T14438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3794'.
[  245.196637][T14443] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  245.212841][ T7681] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  245.319321][T14450] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  245.552488][ T7681] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  245.604793][T14449] tipc: Resetting bearer <eth:syzkaller0>
[  245.637063][T14449] tipc: Disabling bearer <eth:syzkaller0>
[  245.745082][   T33] audit: type=1804 audit(1787562402.836:3): pid=14464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3803" name="/newroot/1145/cgroup.controllers" dev="tmpfs" ino=5792 res=1 errno=0
[  245.759854][   T33] audit: type=1800 audit(1787562402.836:4): pid=14464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3803" name="cgroup.controllers" dev="tmpfs" ino=5792 res=0 errno=0
[  246.042834][T14485] xt_nfacct: accounting object `syz0' does not exist
[  246.148830][T14490] netlink: 'syz.2.3817': attribute type 1 has an invalid length.
[  246.395323][T14513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.440904][T14518] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3829'.
[  246.579354][T14531] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3834'.
[  246.584608][T14531] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3834'.
[  246.827754][T14548] openvswitch: netlink: Duplicate key (type 0).
[  246.882659][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'.
[  246.886434][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3843'.
[  246.889357][T14552] netlink: 'syz.0.3843': attribute type 6 has an invalid length.
[  246.900427][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'.
[  246.903794][T14552] netlink: 'syz.0.3843': attribute type 6 has an invalid length.
[  246.914507][ T5630] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  246.919252][ T5630] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  246.924728][ T5630] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  246.928401][ T5630] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  247.036781][T14560] syzkaller1: entered promiscuous mode
[  247.039366][T14560] syzkaller1: entered allmulticast mode
[  247.480215][T14576] xfrm0 speed is unknown, defaulting to 1000
[  247.560474][T14581] netlink: 'syz.1.3855': attribute type 39 has an invalid length.
[  248.222235][T14611] syzkaller0: entered promiscuous mode
[  248.229401][T14611] syzkaller0: entered allmulticast mode
[  248.245654][T14611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.266857][T14611] tipc: Resetting bearer <eth:syzkaller0>
[  248.281310][T14608] tipc: Resetting bearer <eth:syzkaller0>
[  248.304797][T14608] tipc: Disabling bearer <eth:syzkaller0>
[  248.707352][T14654] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  248.851370][T14665] bond0: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  248.858337][T14665] bond0 (unregistering): Released all slaves
[  249.024896][T14683] netlink: 'syz.2.3901': attribute type 12 has an invalid length.
[  249.028853][T14683] netlink: 'syz.2.3901': attribute type 12 has an invalid length.
[  249.064123][T14686] netlink: 'syz.0.3903': attribute type 1 has an invalid length.
[  249.110771][T14686] bond0: entered promiscuous mode
[  249.113391][T14686] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.930580][T14686] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.937011][T14686] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  249.943222][T14686] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  249.961009][T14686] bond0: (slave ip6gre1): making interface the new active one
[  249.964295][T14686] ip6gre1: entered promiscuous mode
[  249.968272][T14686] bond0: (slave ip6gre1): Enslaving as an active interface with an up link
[  250.086882][T14709] Cannot find del_set index 1 as target
[  250.119443][T14711] netlink: 'syz.1.3914': attribute type 1 has an invalid length.
[  250.126073][T14711] __nla_validate_parse: 11 callbacks suppressed
[  250.126083][T14711] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3914'.
[  250.140624][T14715] bridge0: port 3(vlan4) entered blocking state
[  250.142794][T14711] netlink: 'syz.1.3914': attribute type 1 has an invalid length.
[  250.146969][T14715] bridge0: port 3(vlan4) entered disabled state
[  250.149854][T14715] vlan4: entered allmulticast mode
[  250.152219][T14715] geneve0: entered allmulticast mode
[  250.152480][T14711] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3914'.
[  250.158315][T14715] vlan4: entered promiscuous mode
[  250.160528][T14715] geneve0: entered promiscuous mode
[  250.218653][T14719] Bluetooth: hci0: unsupported parameter 5135
[  250.221288][T14719] Bluetooth: hci0: unsupported parameter 8192
[  250.224995][T14719] Bluetooth: hci0: unsupported parameter 5135
[  250.227211][T14721] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3919'.
[  250.227643][T14719] Bluetooth: hci0: unsupported parameter 8192
[  250.363539][T14729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3922'.
[  250.777374][T14735] set match dimension is over the limit!
[  251.388007][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3929'.
[  251.390888][T14747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3929'.
[  251.398271][T14747] geneve3: entered promiscuous mode
[  251.400453][T14747] geneve3: entered allmulticast mode
[  251.832827][T14791] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3946'.
[  251.869540][T14793] ipt_REJECT: TCP_RESET invalid for non-tcp
[  252.872086][T14807] dvmrp8: entered allmulticast mode
[  253.005167][T14817] tc action pedit offset 0 out of bounds
[  253.845077][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'.
[  253.855733][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'.
[  254.016101][T14838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  254.028959][T14849] block nbd0: Unsupported socket: should be TCP or UNIX.
[  254.262893][T14875] netlink: 'syz.0.3985': attribute type 1 has an invalid length.
[  254.542708][T14909] netlink: 198796 bytes leftover after parsing attributes in process `syz.2.4001'.
[  254.547307][T14909] netlink: 'syz.2.4001': attribute type 2 has an invalid length.
[  254.628084][T14911] xfrm0 speed is unknown, defaulting to 1000
[  254.828675][T14937] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  255.144390][T14966] __nla_validate_parse: 3 callbacks suppressed
[  255.144402][T14966] netlink: 34 bytes leftover after parsing attributes in process `syz.2.4026'.
[  255.191709][T14963] xt_CT: No such helper "pptp"
[  255.355025][T14971] bond6 (unregistering): Released all slaves
[  255.407705][T14976] syz.2.4028 (14976) used obsolete PPPIOCDETACH ioctl
[  255.490940][T14980] xt_CT: You must specify a L4 protocol and not use inversions on it
[  255.872139][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  255.880293][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  256.652534][T15012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.657136][T15012] syzkaller0: entered promiscuous mode
[  256.662327][T15012] syzkaller0: entered allmulticast mode
[  256.672449][T15012] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  257.380032][T15017] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  257.398156][T15018] tipc: Resetting bearer <eth:syzkaller0>
[  257.419850][T15011] tipc: Resetting bearer <eth:syzkaller0>
[  257.429916][T15022] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4047'.
[  257.461512][T15011] tipc: Disabling bearer <eth:syzkaller0>
[  257.586913][T15040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4056'.
[  258.432345][T15067] syzkaller0: entered promiscuous mode
[  258.442232][T15067] syzkaller0: entered allmulticast mode
[  258.459960][T15069] netlink: 'syz.1.4068': attribute type 1 has an invalid length.
[  258.633969][T15082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4074'.
[  258.777727][T15093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.804353][T15097] netlink: 'syz.0.4082': attribute type 1 has an invalid length.
[  258.834824][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'.
[  259.996381][T15172] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4116'.
[  260.044053][T15178] openvswitch: netlink: IP tunnel dst address not specified
[  260.093657][T15180] netlink: 'syz.0.4120': attribute type 32 has an invalid length.
[  260.096724][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4120'.
[  260.124323][T15180] bond10: option coupled_control: invalid value (10)
[  260.127545][T15180] bond10 (unregistering): Released all slaves
[  260.243439][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4122'.
[  260.482197][T15204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4129'.
[  260.640828][T15205] block nbd1: Receive control failed (result -32)
[  260.644738][   T55] block nbd1: Receive control failed (result -32)
[  260.946094][T15232] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002
[  261.054282][T15236] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2
[  261.096007][T15242] netlink: 'syz.0.4147': attribute type 361 has an invalid length.
[  261.168640][T15250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4151'.
[  261.574771][T15290] wg2 speed is unknown, defaulting to 1000
[  261.581403][T15290] wg2 speed is unknown, defaulting to 1000
[  261.612308][T15290] wg2 speed is unknown, defaulting to 1000
[  261.615749][T15290] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  261.621398][T15290] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  261.628674][T15290] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  261.639965][T15290] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  261.661022][T15290] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  261.737327][T15290] wg2 speed is unknown, defaulting to 1000
[  261.742588][T15290] wg2 speed is unknown, defaulting to 1000
[  261.746896][T15290] wg2 speed is unknown, defaulting to 1000
[  262.765528][T15372] netlink: 'syz.2.4197': attribute type 13 has an invalid length.
[  262.895685][T15377] can: request_module (can-proto-3) failed.
[  262.972917][T15384] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4202'.
[  263.255485][T15405] ip_tables: iptables: counters copy to user failed while replacing table
[  263.405280][T15426] netlink: 'syz.2.4221': attribute type 1 has an invalid length.
[  263.466596][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4224'.
[  263.473739][T15434] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4224'.
[  263.575819][T15445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4229'.
[  263.585802][T15448] netlink: NAT attribute has 4 unknown bytes
[  263.591119][T15448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.637779][T15452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4231'.
[  263.967863][T15480] sit0: left promiscuous mode
[  263.985823][T15480] team0: left promiscuous mode
[  263.988030][T15480] team_slave_0: left promiscuous mode
[  263.990369][T15480] team_slave_1: left promiscuous mode
[  263.999568][T15480] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.040318][T15484] netlink: 'syz.0.4246': attribute type 1 has an invalid length.
[  264.043208][T15480] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.048706][T15480] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.060960][T15480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  264.065709][T15480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  264.070930][T15480] 8021q: adding VLAN 0 to HW filter on device hsr0
[  264.075270][T15480] veth1_vlan: left promiscuous mode
[  264.078840][T15480] v: left promiscuous mode
[  264.082662][T15480] v: entered promiscuous mode
[  264.086753][T15480] veth1_vlan: entered promiscuous mode
[  264.165595][T15480] macvtap1: left promiscuous mode
[  264.173529][T15480] bond1: left promiscuous mode
[  264.175726][T15480] ipip0: left promiscuous mode
[  264.182851][T15480] geneve3: left promiscuous mode
[  264.191386][T15480] geneve4: left promiscuous mode
[  264.195078][T15480] bond2: left promiscuous mode
[  264.201247][T15480] 8021q: adding VLAN 0 to HW filter on device eth0
[  264.209203][T15480] 8021q: adding VLAN 0 to HW filter on device eth1
[  264.217525][T15480] 8021q: adding VLAN 0 to HW filter on device eth2
[  264.222348][T15480] 8021q: adding VLAN 0 to HW filter on device eth3
[  264.238027][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.241183][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.246860][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.249987][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.310051][T15484] 8021q: adding VLAN 0 to HW filter on device bond10
[  264.320403][T15486] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  264.326695][T15488] bond10: entered promiscuous mode
[  264.328678][T15488] bond10: entered allmulticast mode
[  264.343753][T15489] macvlan0: entered promiscuous mode
[  264.345889][T15489] macvlan0: entered allmulticast mode
[  264.349389][T15489] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  264.382225][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  264.386654][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  264.860560][T15517] IPVS: Scheduler module ip_vs_sip not found
[  265.066661][T15540] syzkaller0: entered promiscuous mode
[  265.070309][T15540] syzkaller0: entered allmulticast mode
[  265.206297][T15549] gretap1: entered allmulticast mode
[  265.517292][T15573] nftables ruleset with unbound set
[  265.797672][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4295'.
[  266.420417][T15617] netlink: 'syz.1.4303': attribute type 1 has an invalid length.
[  266.445410][T15617] 8021q: adding VLAN 0 to HW filter on device bond3
[  266.467858][T15617] bond3: (slave gretap2): Enslaving as a backup interface with an up link
[  266.475710][T15617] netlink: 'syz.1.4303': attribute type 10 has an invalid length.
[  266.478540][T15617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4303'.
[  266.562400][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  266.693811][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  267.101836][T15665] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.105081][T15670] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4328'.
[  267.218912][T15680] netlink: 'syz.1.4333': attribute type 2 has an invalid length.
[  267.224378][T15680] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.4333'.
[  267.526201][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4345'.
[  267.597273][T15717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4350'.
[  267.600749][T15717] netlink: 580 bytes leftover after parsing attributes in process `syz.0.4350'.
[  267.648157][T15719] netlink: 'syz.1.4351': attribute type 1 has an invalid length.
[  267.650769][T15719] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.4351'.
[  267.690790][T15728] netlink: 'syz.0.4355': attribute type 9 has an invalid length.
[  267.792840][T15740] syzkaller1: entered promiscuous mode
[  267.795052][T15740] syzkaller1: entered allmulticast mode
[  268.432537][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  268.672169][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  269.109031][T15787] vxcan1: tx drop: invalid da for name 0x0000000000000003
[  269.317555][   T11] block nbd0: Possible stuck request ffff88810aa90000: control (read@0,1024B). Runtime 180 seconds
[  269.322266][   T11] block nbd0: Possible stuck request ffff88810aa90200: control (read@1024,1024B). Runtime 180 seconds
[  269.327874][   T11] block nbd0: Possible stuck request ffff88810aa90400: control (read@2048,1024B). Runtime 180 seconds
[  269.334137][   T11] block nbd0: Possible stuck request ffff88810aa90600: control (read@3072,1024B). Runtime 180 seconds
[  269.508083][T15812] ipip2: left promiscuous mode
[  269.543101][T15812] bond0: left promiscuous mode
[  269.548450][T15812] ip6gre1: left promiscuous mode
[  269.590336][T15812] bond10: left promiscuous mode
[  269.594735][T15812] bond10: left allmulticast mode
[  269.599358][T15825] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  269.612527][ T5630] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  269.621064][ T5630] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  269.624786][ T5630] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  269.628277][ T5630] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  269.728572][T15831] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4400'.
[  269.994667][T15839] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4404'.
[  270.377756][T15848] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  270.831851][T15875] netlink: 'syz.1.4419': attribute type 2 has an invalid length.
[  271.520840][T15909] x_tables: duplicate underflow at hook 2
[  271.780590][T15923] netlink: 'syz.1.4441': attribute type 1 has an invalid length.
[  271.783866][T15923] netlink: 'syz.1.4441': attribute type 2 has an invalid length.
[  271.823785][ T5042] udevd[5042]: worker [5596] /devices/virtual/block/nbd0 timeout; kill it
[  271.837652][ T5042] udevd[5042]: seq 10544 '/devices/virtual/block/nbd0' killed
[  271.854530][    C1] ip_tunnel_core: Dead loop on virtual device ipip0 (net 26), fix it urgently!
[  272.204984][T15937] netlink: 'syz.0.4447': attribute type 1 has an invalid length.
[  272.242641][    C1] ip_tunnel_core: Dead loop on virtual device ipip0 (net 26), fix it urgently!
[  272.417613][T15951] __nla_validate_parse: 1 callbacks suppressed
[  272.417624][T15951] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4454'.
[  273.143726][T15996] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  273.148840][T15996] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  273.200301][T16003] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4479'.
[  273.488415][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4485'.
[  274.450983][T16074] xt_TPROXY: Can be used only with -p tcp or -p udp
[  274.514387][T16076] syz.2.4506: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  274.519137][T16076] CPU: 0 UID: 0 PID: 16076 Comm: syz.2.4506 Not tainted syzkaller #0 PREEMPT(full) 
[  274.519152][T16076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.519158][T16076] Call Trace:
[  274.519164][T16076]  <TASK>
[  274.519169][T16076]  dump_stack_lvl+0xe8/0x150
[  274.519189][T16076]  warn_alloc+0x24c/0x270
[  274.519203][T16076]  ? stack_depot_save_flags+0x33/0x7f0
[  274.519226][T16076]  ? __pfx_warn_alloc+0x10/0x10
[  274.519239][T16076]  ? kasan_save_track+0x3e/0x80
[  274.519251][T16076]  ? __kasan_kmalloc+0x93/0xb0
[  274.519263][T16076]  ? xsk_setsockopt+0x52a/0x960
[  274.519276][T16076]  ? do_sock_setsockopt+0x17c/0x1b0
[  274.519288][T16076]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  274.519298][T16076]  ? do_syscall_64+0x166/0x520
[  274.519309][T16076]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.519322][T16076]  __vmalloc_node_range_noprof+0x12c/0x1730
[  274.519349][T16076]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  274.519361][T16076]  ? __kasan_kmalloc+0x93/0xb0
[  274.519372][T16076]  ? __kmalloc_cache_noprof+0x331/0x660
[  274.519384][T16076]  ? __kmalloc_cache_noprof+0x152/0x660
[  274.519395][T16076]  vmalloc_user_noprof+0xad/0xe0
[  274.519405][T16076]  ? xskq_create+0xbf/0x170
[  274.519419][T16076]  xskq_create+0xbf/0x170
[  274.519433][T16076]  xsk_init_queue+0x8a/0xe0
[  274.519446][T16076]  xsk_setsockopt+0x52a/0x960
[  274.519491][T16076]  ? __fget_files+0x2a/0x420
[  274.519513][T16076]  ? __pfx_xsk_setsockopt+0x10/0x10
[  274.519533][T16076]  ? __pfx_aa_sk_perm+0x10/0x10
[  274.519562][T16076]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  274.519576][T16076]  ? __pfx_xsk_setsockopt+0x10/0x10
[  274.519595][T16076]  do_sock_setsockopt+0x17c/0x1b0
[  274.519616][T16076]  __x64_sys_setsockopt+0x13d/0x1b0
[  274.519638][T16076]  do_syscall_64+0x166/0x520
[  274.519654][T16076]  ? trace_irq_disable+0x3b/0x140
[  274.519674][T16076]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.519694][T16076]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.519709][T16076] RIP: 0033:0x7f388179e0d9
[  274.519723][T16076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.519738][T16076] RSP: 002b:00007f38825b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  274.519755][T16076] RAX: ffffffffffffffda RBX: 00007f3881a25fa0 RCX: 00007f388179e0d9
[  274.519767][T16076] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  274.519777][T16076] RBP: 00007f3881835024 R08: 0000000000000004 R09: 0000000000000000
[  274.519787][T16076] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.519797][T16076] R13: 00007f3881a26038 R14: 00007f3881a25fa0 R15: 00007fff71bb9fb8
[  274.519822][T16076]  </TASK>
[  274.519829][T16076] Mem-Info:
[  274.622278][T16076] active_anon:5659 inactive_anon:0 isolated_anon:0
[  274.622278][T16076]  active_file:52 inactive_file:50649 isolated_file:0
[  274.622278][T16076]  unevictable:1000 dirty:190 writeback:0
[  274.622278][T16076]  slab_reclaimable:10858 slab_unreclaimable:89054
[  274.622278][T16076]  mapped:18254 shmem:1588 pagetables:1034
[  274.622278][T16076]  sec_pagetables:0 bounce:0
[  274.622278][T16076]  kernel_misc_reclaimable:0
[  274.622278][T16076]  free:1116925 free_pcp:21936 free_cma:0
[  274.632552][T16085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4506'.
[  274.637062][T16076] Node 0 active_anon:9440kB inactive_anon:0kB active_file:204kB inactive_file:73296kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:37108kB dirty:344kB writeback:0kB shmem:3096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7424kB pagetables:2308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  274.656504][T16076] Node 1 active_anon:13196kB inactive_anon:0kB active_file:4kB inactive_file:129300kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:35908kB dirty:416kB writeback:0kB shmem:3256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5332kB pagetables:1728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  274.668952][T16076] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  274.676871][T16080] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  274.681783][T16076] lowmem_reserve[]: 0 1582 2112 2112 2112
[  274.686422][T16076] Node 0 DMA32 free:1549196kB boost:0kB min:24972kB low:31212kB high:37452kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:12kB inactive_file:18852kB unevictable:0kB writepending:224kB zspages:0kB present:2080636kB managed:1620792kB mlocked:0kB bounce:0kB free_pcp:30256kB local_pcp:16904kB free_cma:0kB
[  274.698685][T16076] lowmem_reserve[]: 0 0 530 530 530
[  274.700436][T16076] Node 0 Normal free:15256kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9596kB inactive_anon:0kB active_file:192kB inactive_file:54444kB unevictable:2000kB writepending:120kB zspages:0kB present:1572868kB managed:542744kB mlocked:0kB bounce:0kB free_pcp:3380kB local_pcp:3188kB free_cma:0kB
[  274.711105][T16076] lowmem_reserve[]: 0 0 0 0 0
[  274.713684][T16076] Node 1 Normal free:2887316kB boost:0kB min:56380kB low:70472kB high:84564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13196kB inactive_anon:0kB active_file:4kB inactive_file:129300kB unevictable:2000kB writepending:416kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:54712kB local_pcp:27820kB free_cma:0kB
[  274.725734][T16076] lowmem_reserve[]: 0 0 0 0 0
[  274.727737][T16076] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  274.734207][T16076] Node 0 DMA32: 79*4kB (UME) 64*8kB (UME) 41*16kB (UME) 28*32kB (UME) 53*64kB (UME) 10*128kB (UME) 22*256kB (UME) 7*512kB (U) 3*1024kB (U) 5*2048kB (UME) 371*4096kB (UM) = 1549196kB
[  274.741244][T16076] Node 0 Normal: 460*4kB (UM) 239*8kB (UME) 188*16kB (UME) 113*32kB (UME) 33*64kB (UM) 18*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 15304kB
[  274.747300][T16076] Node 1 Normal: 571*4kB (UME) 593*8kB (UM) 512*16kB (UM) 477*32kB (UM) 342*64kB (UME) 240*128kB (UME) 110*256kB (UME) 30*512kB (UME) 14*1024kB (UME) 3*2048kB (UME) 669*4096kB (M) = 2887316kB
[  274.753828][T16076] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  274.757341][T16076] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  274.764106][T16076] 52289 total pagecache pages
[  274.766467][T16076] 0 pages in swap cache
[  274.768148][T16076] Free swap  = 124996kB
[  274.769850][T16076] Total swap = 124996kB
[  274.771547][T16076] 1834877 pages RAM
[  274.773242][T16076] 0 pages HighMem/MovableOnly
[  274.775141][T16076] 391482 pages reserved
[  274.776829][T16076] 0 pages cma reserved
[  275.161216][T16124] netlink: Conntrack attr has 4 unknown bytes
[  275.161230][T16122] syzkaller1: entered promiscuous mode
[  275.166031][T16122] syzkaller1: entered allmulticast mode
[  275.249993][T16131] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4529'.
[  275.267982][T16131] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.270339][T16131] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.297070][T16131] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4529'.
[  275.300318][T16131] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.303225][T16131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.306952][T16131] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.309195][T16131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.317992][T16131] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4529'.
[  275.321608][T16131] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.323906][T16131] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.361627][T16135] syzkaller0: entered promiscuous mode
[  275.364512][T16135] syzkaller0: entered allmulticast mode
[  276.257828][T16211] syzkaller0: entered promiscuous mode
[  276.260057][T16211] syzkaller0: entered allmulticast mode
[  276.352208][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  276.992249][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  277.121831][T16270] netlink: 'syz.0.4591': attribute type 3 has an invalid length.
[  277.511684][T16287] syzkaller1: entered promiscuous mode
[  277.514844][T16287] syzkaller1: entered allmulticast mode
[  278.644478][T16346] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4625'.
[  278.687135][T16350] IPv6: NLM_F_CREATE should be specified when creating new route
[  278.739638][T16354] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4629'.
[  278.744597][T16354] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  278.748360][T16354] openvswitch: netlink: Message has 208 unknown bytes.
[  279.044308][T16388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4643'.
[  279.125406][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4646'.
[  279.349525][T16397] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.435733][T16397] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  279.550877][T16415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4654'.
[  279.568884][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4654'.
[  279.734691][T16426] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4659'.
[  279.876143][T16430] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  279.879898][T16430] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  279.937896][T16437] xt_l2tp: v2 tid > 0xffff: 37482740
[  280.038166][T16441] syzkaller0: entered promiscuous mode
[  280.040606][T16441] syzkaller0: entered allmulticast mode
[  280.507044][T16454] netlink: 'syz.2.4671': attribute type 5 has an invalid length.
[  281.801161][T16536] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4706'.
[  281.928397][T16543] bridge_slave_0: left allmulticast mode
[  281.930925][T16543] bridge_slave_0: left promiscuous mode
[  281.939863][T16543] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.962814][T16543] bridge_slave_1: left allmulticast mode
[  281.970841][T16543] bridge_slave_1: left promiscuous mode
[  281.979147][T16543] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.991597][T16543] vlan4: left promiscuous mode
[  281.999482][T16543] geneve0: left promiscuous mode
[  282.016870][T16543] bond0: (slave bond_slave_0): Releasing backup interface
[  282.046812][T16543] bond0: (slave bond_slave_1): Releasing backup interface
[  282.077463][T16543] team0: Port device team_slave_0 removed
[  282.098401][T16543] team0: Port device team_slave_1 removed
[  282.107389][T16543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.122950][T16543] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.133679][T16543] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  282.158316][T16552] syzkaller0: entered promiscuous mode
[  282.160935][T16552] syzkaller0: entered allmulticast mode
[  282.170976][T16552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.177364][T16551] tipc: Resetting bearer <eth:syzkaller0>
[  282.207858][T16551] tipc: Disabling bearer <eth:syzkaller0>
[  282.266822][T16567] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  282.269832][T16567] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  282.341850][T16571] ip_tunnel_core: Dead loop on virtual device ipip0 (net 26), fix it urgently!
[  282.357667][T16573] IPv6: NLM_F_CREATE should be specified when creating new route
[  283.121025][T16603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4734'.
[  283.382202][T16622] syzkaller0: entered promiscuous mode
[  283.388881][T16622] syzkaller0: entered allmulticast mode
[  283.557077][T16639] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4749'.
[  283.943606][T16678] netlink: 71 bytes leftover after parsing attributes in process `syz.0.4768'.
[  284.106181][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4774'.
[  285.501475][T16738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  286.004862][T16761] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4805'.
[  286.007971][T16761] gretap0: entered promiscuous mode
[  286.011296][T16761] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4805'.
[  286.015246][T16761] 0{X: renamed from gretap0
[  286.020097][T16761] 0{X: left promiscuous mode
[  286.021789][T16761] 0{X: entered allmulticast mode
[  286.025930][T16761] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  286.065019][T16765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4807'.
[  286.085734][T16763] syzkaller0: entered promiscuous mode
[  286.087759][T16763] syzkaller0: entered allmulticast mode
[  286.237368][T16774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4811'.
[  286.244319][T16774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4811'.
[  286.247254][T16774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4811'.
[  286.278022][T16778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4804'.
[  286.283030][T16778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4804'.
[  286.421557][T16794] bridge7: entered allmulticast mode
[  286.535872][T16804] trusted_key: syz.2.4825 sent an empty control message without MSG_MORE.
[  286.648241][T16815] syzkaller0: entered promiscuous mode
[  286.650539][T16815] syzkaller0: entered allmulticast mode
[  287.271660][T16861] syzkaller0: entered promiscuous mode
[  287.273537][T16861] syzkaller0: entered allmulticast mode
[  287.679089][T16884] syzkaller0: entered promiscuous mode
[  287.680911][T16884] syzkaller0: entered allmulticast mode
[  288.564887][T16925] netlink: 'syz.1.4878': attribute type 12 has an invalid length.
[  288.568099][T16925] netlink: 'syz.1.4878': attribute type 29 has an invalid length.
[  288.571027][T16925] netlink: 'syz.1.4878': attribute type 1 has an invalid length.
[  288.577069][T16925] netlink: 'syz.1.4878': attribute type 2 has an invalid length.
[  289.039320][T16955] netlink: 'syz.2.4893': attribute type 4 has an invalid length.
[  289.042763][T16955] __nla_validate_parse: 12 callbacks suppressed
[  289.042774][T16955] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4893'.
[  289.811095][T16962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.963012][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4900'.
[  291.580939][T17048] syzkaller0: entered promiscuous mode
[  291.582978][T17048] syzkaller0: entered allmulticast mode
[  291.690054][T17052] sit: Src spoofed 172.30.0.1/200:0:100:e0:ebc7:a1e0:ff5b:efe1 -> 224.0.0.1/fdbc:66e4:d7:e833:6de:422b:4a81:99b
[  291.722269][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  292.093903][T17088] hsr0: entered promiscuous mode
[  292.187209][T17086] hsr0: left promiscuous mode
[  292.701386][T17134] bond4 (unregistering): Released all slaves
[  292.992629][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  293.238054][T17172] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.247699][T17172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4994'.
[  294.219310][T17236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.450361][T17279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5035'.
[  295.455336][T17279] bridge_slave_0: default FDB implementation only supports local addresses
[  295.471807][T17278] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5036'.
[  295.497294][T17278] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5036'.
[  296.227969][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5055'.
[  296.267041][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5055'.
[  296.276048][T17323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5057'.
[  296.280111][T17323] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5057'.
[  296.327670][T17327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5059'.
[  296.358220][T17329] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  296.518683][T17343] sctp: [Deprecated]: syz.2.5066 (pid 17343) Use of struct sctp_assoc_value in delayed_ack socket option.
[  296.518683][T17343] Use struct sctp_sack_info instead
[  296.782077][T17369] tipc: Can't bind to reserved service type 0
[  297.133964][T17401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5094'.
[  297.454491][T17421] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  297.463757][ T7683] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  298.348013][T17485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5131'.
[  298.442671][ T7683] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  299.181821][T17546] gre2: entered allmulticast mode
[  299.248892][T17552] netlink: 'syz.2.5162': attribute type 49 has an invalid length.
[  299.359552][T17562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  299.387754][T17562] team0: Mode changed to "random"
[  299.392925][   T11] block nbd0: Possible stuck request ffff88810aa90000: control (read@0,1024B). Runtime 210 seconds
[  299.397266][   T11] block nbd0: Possible stuck request ffff88810aa90200: control (read@1024,1024B). Runtime 210 seconds
[  299.401531][   T11] block nbd0: Possible stuck request ffff88810aa90400: control (read@2048,1024B). Runtime 210 seconds
[  299.406330][   T11] block nbd0: Possible stuck request ffff88810aa90600: control (read@3072,1024B). Runtime 210 seconds
[  300.053123][T17601] netlink: 'syz.1.5178': attribute type 5 has an invalid length.
[  300.332664][T17616] tipc: Invalid UDP bearer configuration
[  300.332696][T17616] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  300.444447][T17624] block nbd0: reconnected socket
[  300.446617][T17624] nbd: socks must be embedded in a SOCK_ITEM attr
[  300.457912][   T56] block nbd0: Receive control failed (result -32)
[  300.874713][T17666] __nla_validate_parse: 7 callbacks suppressed
[  300.874726][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5209'.
[  300.880040][T17666] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5209'.
[  300.933288][T17673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5212'.
[  300.982195][T17679] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  301.116242][T17693] dummy0: entered allmulticast mode
[  301.125891][T17692] dummy0: left allmulticast mode
[  301.181288][T17695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5223'.
[  301.286800][T17704] syzkaller0: entered promiscuous mode
[  301.288539][T17704] syzkaller0: entered allmulticast mode
[  301.441357][T17715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5232'.
[  301.454509][T17715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5232'.
[  301.605492][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5238'.
[  301.607748][T17730] tunl0: Caught tx_queue_len zero misconfig
[  301.754568][T17745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5247'.
[  301.793703][T17751] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5248'.
[  301.796768][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5248'.
[  301.850272][T17756] netlink: 'syz.0.5253': attribute type 1 has an invalid length.
[  301.854970][T17756] netlink: 'syz.0.5253': attribute type 7 has an invalid length.
[  301.858083][T17756] netlink: 'syz.0.5253': attribute type 8 has an invalid length.
[  301.864352][T17756] syzkaller0: entered promiscuous mode
[  301.872164][T17756] syzkaller0: entered allmulticast mode
[  302.703932][T17779] netlink: 'syz.0.5263': attribute type 8 has an invalid length.
[  302.742388][T17781] netlink: 'syz.0.5264': attribute type 24 has an invalid length.
[  302.745125][T17781] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode active-backup(1)
[  305.054845][T17881] syzkaller0: entered promiscuous mode
[  305.062227][T17881] syzkaller0: entered allmulticast mode
[  305.071845][T17881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.082280][T17881] tipc: Resetting bearer <eth:syzkaller0>
[  305.088712][T17880] tipc: Resetting bearer <eth:syzkaller0>
[  305.110923][T17880] tipc: Disabling bearer <eth:syzkaller0>
[  305.841239][T17909] xfrm0 speed is unknown, defaulting to 1000
[  306.073496][T17909] wg2 speed is unknown, defaulting to 1000
[  306.236370][T17923] netlink: 'syz.1.5325': attribute type 2 has an invalid length.
[  306.239621][T17923] __nla_validate_parse: 5 callbacks suppressed
[  306.239634][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5325'.
[  306.423929][T17933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5330'.
[  306.489356][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5332'.
[  306.526589][T17935] 8021q: adding VLAN 0 to HW filter on device bond7
[  306.538514][T17939] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5330'.
[  306.543500][T17933] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5330'.
[  306.920423][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5341'.
[  306.926153][T17962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5342'.
[  306.936253][T17962] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  307.189676][T17974] gre0: entered promiscuous mode
[  307.202876][T17974] gre0: entered allmulticast mode
[  307.206507][T17976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5349'.
[  307.211100][T17974] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  307.361446][T17990] smc: net device lo applied user defined pnetid SYZ0
[  307.877583][T18036] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5378'.
[  307.885894][T18036] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5378'.
[  309.352534][T18135] openvswitch: netlink: Key type 226 is out of range max 32
[  310.118306][T18183] netlink: 'syz.0.5445': attribute type 10 has an invalid length.
[  312.551141][T18253] __nla_validate_parse: 16 callbacks suppressed
[  312.551166][T18253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5472'.
[  313.767663][T18333] bond8 (unregistering): Released all slaves
[  314.021396][T18348] x_tables: unsorted entry at hook 3
[  314.208151][T18367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5526'.
[  314.260467][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5529'.
[  314.315283][T18377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5531'.
[  314.370341][T18377] bridge7: port 1(veth3) entered blocking state
[  314.378192][T18377] bridge7: port 1(veth3) entered disabled state
[  314.381101][T18377] veth3: entered allmulticast mode
[  314.386019][T18377] veth3: entered promiscuous mode
[  314.413139][T18377] bridge7: port 2(veth5) entered blocking state
[  314.417049][T18377] bridge7: port 2(veth5) entered disabled state
[  314.421407][T18377] veth5: entered allmulticast mode
[  314.428365][T18377] veth5: entered promiscuous mode
[  314.920437][T18418] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[  315.530149][T18441] netlink: 516 bytes leftover after parsing attributes in process `syz.2.5560'.
[  315.598624][T18448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5563'.
[  315.656921][T18454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5566'.
[  315.695313][T18456] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  316.086740][T18482] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  316.366592][T18508] ip_tunnel_core: Dead loop on virtual device ipip0 (net 26), fix it urgently!
[  316.420397][T18512] syzkaller0: entered promiscuous mode
[  316.423042][T18512] syzkaller0: entered allmulticast mode
[  316.625906][T18529] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5600'.
[  316.713716][T18537] netlink: 'syz.1.5604': attribute type 1 has an invalid length.
[  316.721531][T18537] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5604'.
[  317.315068][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  317.471853][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5628'.
[  317.494422][T18587] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  318.745028][T18628] __nla_validate_parse: 1 callbacks suppressed
[  318.745049][T18628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5646'.
[  318.822486][ T5649] bond3: (slave gretap2): link status up again after 0 ms
[  318.828537][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  318.866432][T18638] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5651'.
[  318.877529][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5651'.
[  318.892283][T18638] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  318.944271][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  319.064561][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  319.182422][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  319.311542][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5666'.
[  319.384083][T18673] syzkaller0: entered promiscuous mode
[  319.386962][T18673] syzkaller0: entered allmulticast mode
[  319.757083][T18693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5677'.
[  319.914761][T18703] geneve3: entered promiscuous mode
[  319.932451][ T5649] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.938556][ T5649] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.946808][ T5649] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.958600][ T5649] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.014011][T18709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5685'.
[  320.063679][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5687'.
[  320.071469][T18711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5687'.
[  320.170949][T18719] syzkaller0: entered promiscuous mode
[  320.175158][T18719] syzkaller0: entered allmulticast mode
[  320.450952][T18742] x_tables: duplicate underflow at hook 3
[  320.569215][T18752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5705'.
[  320.772226][   T13] net_ratelimit: 14 callbacks suppressed
[  320.772246][   T13] bond3: (slave gretap2): failed to get link speed/duplex
[  320.884812][T18775] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5717'.
[  320.892206][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  320.946418][T18781] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  321.011309][T18785] syzkaller0: entered promiscuous mode
[  321.015037][T18785] syzkaller0: entered allmulticast mode
[  321.022676][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  321.133302][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  321.205386][T18798] syzkaller1: entered promiscuous mode
[  321.207440][T18798] syzkaller1: entered allmulticast mode
[  321.272428][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  321.354110][T18808] netlink: 'syz.0.5733': attribute type 5 has an invalid length.
[  321.382818][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  321.492449][   T13] bond3: (slave gretap2): failed to get link speed/duplex
[  321.604245][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  321.720307][T18843] netlink: 'syz.2.5746': attribute type 11 has an invalid length.
[  321.762359][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  322.032410][T18863] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma?
[  322.259147][T18876] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  322.435241][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  323.203143][T18961] netlink: 'syz.0.5801': attribute type 13 has an invalid length.
[  323.722224][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  323.830592][T18999] xfrm0 speed is unknown, defaulting to 1000
[  323.976615][T19011] __nla_validate_parse: 9 callbacks suppressed
[  323.976637][T19011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5824'.
[  324.024324][T18999] wg2 speed is unknown, defaulting to 1000
[  324.820144][T19050] xfrm0 speed is unknown, defaulting to 1000
[  324.998703][T19050] wg2 speed is unknown, defaulting to 1000
[  325.864091][ T5649] net_ratelimit: 36 callbacks suppressed
[  325.864114][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  325.966749][T19102] 0: reclassify loop, rule prio 0, protocol 03
[  326.022733][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  326.059588][T19110] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5863'.
[  326.132053][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  326.230836][T19129] syzkaller0: entered promiscuous mode
[  326.234193][T19129] syzkaller0: entered allmulticast mode
[  326.322128][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  326.443792][   T13] bond3: (slave gretap2): failed to get link speed/duplex
[  326.554183][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  326.664922][   T13] bond3: (slave gretap2): failed to get link speed/duplex
[  326.772247][   T13] bond3: (slave gretap2): failed to get link speed/duplex
[  326.882202][   T13] bond3: (slave gretap2): failed to get link speed/duplex
[  327.246422][T19235] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5920'.
[  329.474439][   T11] block nbd0: Possible stuck request ffff88810aa90000: control (read@0,1024B). Runtime 240 seconds
[  329.485191][   T11] block nbd0: Possible stuck request ffff88810aa90200: control (read@1024,1024B). Runtime 240 seconds
[  329.489724][   T11] block nbd0: Possible stuck request ffff88810aa90400: control (read@2048,1024B). Runtime 240 seconds
[  329.494555][   T11] block nbd0: Possible stuck request ffff88810aa90600: control (read@3072,1024B). Runtime 240 seconds
[  329.500220][   T11] block nbd0: Dead connection, failed to find a fallback
[  329.508638][   T11] block nbd0: shutting down sockets
[  329.515328][   T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.520735][   T11] Buffer I/O error on dev nbd0, logical block 3, async page read
[  329.524432][   T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.528383][   T11] Buffer I/O error on dev nbd0, logical block 2, async page read
[  329.531558][   T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.539369][   T11] Buffer I/O error on dev nbd0, logical block 1, async page read
[  329.543578][   T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  329.547658][   T11] Buffer I/O error on dev nbd0, logical block 0, async page read
[  329.555334][T19265] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  329.563567][T19265] Buffer I/O error on dev nbd0, logical block 0, async page read
[  329.566952][T19265] Buffer I/O error on dev nbd0, logical block 1, async page read
[  329.570117][T19265] Buffer I/O error on dev nbd0, logical block 2, async page read
[  329.573966][T19265] Buffer I/O error on dev nbd0, logical block 3, async page read
[  329.582340][T19265] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  329.586906][T19265] Buffer I/O error on dev nbd0, logical block 0, async page read
[  329.589836][T19265] Buffer I/O error on dev nbd0, logical block 1, async page read
[  329.594113][T19265] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  329.598490][T19265] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  329.603109][T19265] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  329.607285][T19265] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  329.613564][ T5596] ldm_validate_partition_table(): Disk read failed.
[  329.623351][ T5596] Dev nbd0: unable to read RDB block 0
[  329.627033][ T5596]  nbd0: unable to read partition table
[  329.645780][ T5042] udevd[5042]: worker [5596] terminated by signal 9 (Killed)
[  329.648914][ T5042] udevd[5042]: worker [5596] failed while handling '/devices/virtual/block/nbd0'
[  330.409751][T19269] ip6gre3: entered allmulticast mode
[  330.902337][   T13] net_ratelimit: 33 callbacks suppressed
[  330.902360][   T13] bond3: (slave gretap2): failed to get link speed/duplex
[  331.023980][   T12] bond3: (slave gretap2): failed to get link speed/duplex
[  331.027870][T19302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5949'.
[  331.132748][   T12] bond3: (slave gretap2): failed to get link speed/duplex
[  331.242129][   T13] bond3: (slave gretap2): failed to get link speed/duplex
[  331.344232][T19323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.354554][   T12] bond3: (slave gretap2): failed to get link speed/duplex
[  331.462608][   T13] bond3: (slave gretap2): failed to get link speed/duplex
[  331.506958][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5965'.
[  331.572925][   T12] bond3: (slave gretap2): failed to get link speed/duplex
[  331.682143][   T12] bond3: (slave gretap2): failed to get link speed/duplex
[  331.767795][T19357] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5971'.
[  331.812510][   T12] bond3: (slave gretap2): failed to get link speed/duplex
[  331.887273][T19363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5974'.
[  331.890986][T19363] tc_dump_action: action bad kind
[  332.068819][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5978'.
[  332.072738][T19373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5978'.
[  332.116891][T19375] syz_tun: entered allmulticast mode
[  332.143770][T19375] pim6reg: entered allmulticast mode
[  332.154652][T19375] pim6reg: left allmulticast mode
[  332.160326][T19375] syz_tun: left allmulticast mode
[  332.228432][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5981'.
[  332.233128][T19379] netlink: 'syz.2.5981': attribute type 30 has an invalid length.
[  332.284656][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5981'.
[  332.288458][T19382] netlink: 'syz.2.5981': attribute type 30 has an invalid length.
[  332.646996][T19415] netlink: 'syz.2.5997': attribute type 4 has an invalid length.
[  332.652221][T19415] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5997'.
[  332.921364][T19430] raw_sendmsg: syz.1.6004 forgot to set AF_INET. Fix it!
[  333.114065][T19445] xt_CONNSECMARK: invalid mode: 3
[  336.033145][ T5649] net_ratelimit: 12 callbacks suppressed
[  336.033157][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  336.142502][   T12] bond3: (slave gretap2): failed to get link speed/duplex
[  336.232994][T19505] 
[  336.233942][T19505] ======================================================
[  336.236503][T19505] WARNING: possible circular locking dependency detected
[  336.239102][T19505] syzkaller #0 Not tainted
[  336.240939][T19505] ------------------------------------------------------
[  336.243632][T19505] syz.2.6040/19505 is trying to acquire lock:
[  336.246020][T19505] ffff8881012d4210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0
[  336.250135][T19505] 
[  336.250135][T19505] but task is already holding lock:
[  336.252849][T19505] ffff8881012d4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  336.256158][T19505] 
[  336.256158][T19505] which lock already depends on the new lock.
[  336.256158][T19505] 
[  336.259782][T19505] 
[  336.259782][T19505] the existing dependency chain (in reverse order) is:
[  336.262912][T19505] 
[  336.262912][T19505] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  336.265882][T19505]        down_write+0x96/0x200
[  336.267700][T19505]        kernfs_add_one+0x41/0x6f0
[  336.269600][T19505]        kernfs_create_dir_ns+0x1a1/0x230
[  336.271627][T19505]        internal_create_group+0x440/0x1180
[  336.273998][T19505]        cpuhp_invoke_callback+0x434/0x810
[  336.276091][T19505]        cpuhp_issue_call+0x3f0/0x750
[  336.278104][T19505]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[  336.280421][T19505]        __cpuhp_setup_state+0x3f/0x60
[  336.282416][T19505]        do_one_initcall+0x250/0x870
[  336.284529][T19505]        do_initcall_level+0x10a/0x1a0
[  336.286644][T19505]        do_initcalls+0x59/0xa0
[  336.288364][T19505]        kernel_init_freeable+0x29d/0x3e0
[  336.290375][T19505]        kernel_init+0x22/0x1d0
[  336.292130][T19505]        ret_from_fork+0x514/0xb70
[  336.294164][T19505]        ret_from_fork_asm+0x1a/0x30
[  336.296176][T19505] 
[  336.296176][T19505] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  336.299096][T19505] 
[  336.299096][T19505] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  336.302329][T19505]        cpus_read_lock+0x42/0x160
[  336.304135][T19505]        static_key_slow_inc+0x12/0x30
[  336.306199][T19505]        nbd_genl_reconfigure+0x1301/0x1e80
[  336.308406][T19505]        genl_family_rcv_msg_doit+0x233/0x340
[  336.310680][T19505]        genl_rcv_msg+0x614/0x7a0
[  336.312562][T19505]        netlink_rcv_skb+0x226/0x4a0
[  336.314651][T19505]        genl_rcv+0x28/0x40
[  336.316312][T19505]        netlink_unicast+0x7bd/0x940
[  336.318327][T19505]        netlink_sendmsg+0x813/0xb40
[  336.320208][T19505]        sock_sendmsg_nosec+0x13a/0x180
[  336.322189][T19505]        ____sys_sendmsg+0x54e/0x850
[  336.324217][T19505]        ___sys_sendmsg+0x2a5/0x360
[  336.326194][T19505]        __x64_sys_sendmsg+0x1b1/0x290
[  336.328193][T19505]        do_syscall_64+0x166/0x520
[  336.330158][T19505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.332475][T19505] 
[  336.332475][T19505] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  336.335327][T19505]        __mutex_lock+0x19d/0x1550
[  336.337325][T19505]        nbd_queue_rq+0x373/0x1150
[  336.339157][T19505]        blk_mq_dispatch_rq_list+0x499/0x1990
[  336.341317][T19505]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  336.343938][T19505]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  336.346397][T19505]        blk_mq_run_work_fn+0x16c/0x300
[  336.348355][T19505]        process_scheduled_works+0xa88/0x14c0
[  336.350724][T19505]        worker_thread+0xa47/0xfb0
[  336.353022][T19505]        kthread+0x38b/0x480
[  336.354813][T19505]        ret_from_fork+0x514/0xb70
[  336.356704][T19505]        ret_from_fork_asm+0x1a/0x30
[  336.358726][T19505] 
[  336.358726][T19505] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  336.361300][T19505]        __mutex_lock+0x19d/0x1550
[  336.363234][T19505]        nbd_queue_rq+0xc1/0x1150
[  336.365246][T19505]        blk_mq_dispatch_rq_list+0x499/0x1990
[  336.367472][T19505]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  336.369864][T19505]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  336.372207][T19505]        blk_mq_run_work_fn+0x16c/0x300
[  336.374371][T19505]        process_scheduled_works+0xa88/0x14c0
[  336.376675][T19505]        worker_thread+0xa47/0xfb0
[  336.378630][T19505]        kthread+0x38b/0x480
[  336.380308][T19505]        ret_from_fork+0x514/0xb70
[  336.382156][T19505]        ret_from_fork_asm+0x1a/0x30
[  336.384238][T19505] 
[  336.384238][T19505] -> #4 (set->srcu){.+.+}-{0:0}:
[  336.386818][T19505]        __synchronize_srcu+0xc9/0x2f0
[  336.388862][T19505]        elevator_switch+0x1e8/0x7b0
[  336.390837][T19505]        elevator_change+0x2fa/0x480
[  336.392796][T19505]        elevator_set_default+0x375/0x440
[  336.394982][T19505]        blk_register_queue+0x3f3/0x4e0
[  336.396909][T19505]        __add_disk+0x6cb/0xe30
[  336.398801][T19505]        add_disk_fwnode+0x100/0x3a0
[  336.400720][T19505]        nbd_dev_add+0x733/0xb60
[  336.402626][T19505]        nbd_init+0x15f/0x1e0
[  336.404286][T19505]        do_one_initcall+0x250/0x870
[  336.406181][T19505]        do_initcall_level+0x10a/0x1a0
[  336.408297][T19505]        do_initcalls+0x59/0xa0
[  336.410126][T19505]        kernel_init_freeable+0x29d/0x3e0
[  336.412254][T19505]        kernel_init+0x22/0x1d0
[  336.414133][T19505]        ret_from_fork+0x514/0xb70
[  336.415960][T19505]        ret_from_fork_asm+0x1a/0x30
[  336.418013][T19505] 
[  336.418013][T19505] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  336.420751][T19505]        __mutex_lock+0x19d/0x1550
[  336.422667][T19505]        elevator_change+0x1af/0x480
[  336.424719][T19505]        elevator_set_none+0xb5/0x140
[  336.426745][T19505]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  336.429061][T19505]        nbd_start_device+0x189/0xb30
[  336.431180][T19505]        nbd_genl_connect+0x1597/0x1c10
[  336.433265][T19505]        genl_family_rcv_msg_doit+0x233/0x340
[  336.435433][T19505]        genl_rcv_msg+0x614/0x7a0
[  336.437220][T19505]        netlink_rcv_skb+0x226/0x4a0
[  336.439052][T19505]        genl_rcv+0x28/0x40
[  336.440661][T19505]        netlink_unicast+0x7bd/0x940
[  336.442620][T19505]        netlink_sendmsg+0x813/0xb40
[  336.444681][T19505]        sock_sendmsg_nosec+0x13a/0x180
[  336.446833][T19505]        ____sys_sendmsg+0x54e/0x850
[  336.448698][T19505]        ___sys_sendmsg+0x2a5/0x360
[  336.450584][T19505]        __x64_sys_sendmsg+0x1b1/0x290
[  336.452623][T19505]        do_syscall_64+0x166/0x520
[  336.454563][T19505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.456912][T19505] 
[  336.456912][T19505] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  336.460806][T19505]        blk_alloc_queue+0x544/0x690
[  336.462807][T19505]        __blk_mq_alloc_disk+0x194/0x390
[  336.464998][T19505]        nbd_dev_add+0x494/0xb60
[  336.466978][T19505]        nbd_init+0x15f/0x1e0
[  336.468691][T19505]        do_one_initcall+0x250/0x870
[  336.470581][T19505]        do_initcall_level+0x10a/0x1a0
[  336.472616][T19505]        do_initcalls+0x59/0xa0
[  336.474566][T19505]        kernel_init_freeable+0x29d/0x3e0
[  336.476811][T19505]        kernel_init+0x22/0x1d0
[  336.478631][T19505]        ret_from_fork+0x514/0xb70
[  336.480463][T19505]        ret_from_fork_asm+0x1a/0x30
[  336.482417][T19505] 
[  336.482417][T19505] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  336.485169][T19505]        fs_reclaim_acquire+0x71/0x100
[  336.487159][T19505]        kmem_cache_alloc_noprof+0x64/0x5f0
[  336.489430][T19505]        __kernfs_iattrs+0xdd/0x380
[  336.491323][T19505]        kernfs_iop_setattr+0xe6/0x3f0
[  336.493372][T19505]        notify_change+0xbba/0xea0
[  336.495258][T19505]        do_truncate+0x1c2/0x250
[  336.497189][T19505]        path_openat+0x15b5/0x1d60
[  336.498976][T19505]        do_file_open+0x23e/0x4a0
[  336.500777][T19505]        do_sys_openat2+0x115/0x200
[  336.502673][T19505]        __x64_sys_openat+0x138/0x170
[  336.504823][T19505]        do_syscall_64+0x166/0x520
[  336.506828][T19505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.509178][T19505] 
[  336.509178][T19505] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  336.512230][T19505]        __lock_acquire+0x1520/0x2cf0
[  336.514263][T19505]        lock_acquire+0x106/0x350
[  336.516106][T19505]        down_write+0x96/0x200
[  336.517814][T19505]        kernfs_link_sibling+0x4c7/0x5a0
[  336.519981][T19505]        kernfs_add_one+0x2db/0x6f0
[  336.521848][T19505]        kernfs_create_dir_ns+0x1a1/0x230
[  336.524112][T19505]        sysfs_create_dir_ns+0x12f/0x2a0
[  336.526104][T19505]        kobject_add_internal+0x622/0xcd0
[  336.528277][T19505]        kobject_add+0x163/0x240
[  336.530153][T19505]        device_add+0x3fa/0xb80
[  336.532120][T19505]        netdev_register_kobject+0x197/0x350
[  336.534363][T19505]        register_netdevice+0x1433/0x1eb0
[  336.536405][T19505]        ppp_dev_configure+0x8b1/0xb10
[  336.538329][T19505]        ppp_nl_newlink+0x252/0x2f0
[  336.540399][T19505]        rtnl_newlink_create+0x310/0xb00
[  336.542603][T19505]        rtnl_newlink+0x167f/0x1bd0
[  336.544449][T19505]        rtnetlink_rcv_msg+0x802/0xc00
[  336.546379][T19505]        netlink_rcv_skb+0x226/0x4a0
[  336.548268][T19505]        netlink_unicast+0x7bd/0x940
[  336.550380][T19505]        netlink_sendmsg+0x813/0xb40
[  336.552542][T19505]        sock_sendmsg_nosec+0x13a/0x180
[  336.554551][T19505]        ____sys_sendmsg+0x54e/0x850
[  336.556433][T19505]        ___sys_sendmsg+0x2a5/0x360
[  336.558302][T19505]        __x64_sys_sendmsg+0x1b1/0x290
[  336.560459][T19505]        do_syscall_64+0x166/0x520
[  336.562458][T19505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.564765][T19505] 
[  336.564765][T19505] other info that might help us debug this:
[  336.564765][T19505] 
[  336.568354][T19505] Chain exists of:
[  336.568354][T19505]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  336.568354][T19505] 
[  336.573945][T19505]  Possible unsafe locking scenario:
[  336.573945][T19505] 
[  336.576779][T19505]        CPU0                    CPU1
[  336.578683][T19505]        ----                    ----
[  336.580627][T19505]   lock(&root->kernfs_rwsem);
[  336.582335][T19505]                                lock(cpuhp_state_mutex);
[  336.584661][T19505]                                lock(&root->kernfs_rwsem);
[  336.587082][T19505]   lock(&root->kernfs_iattr_rwsem);
[  336.588802][T19505] 
[  336.588802][T19505]  *** DEADLOCK ***
[  336.588802][T19505] 
[  336.591417][T19505] locks held by syz.2.6040/19505: 4, last CPU#1:
[  336.593611][T19505]  #0: ffffffff9058ba78 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  336.596984][T19505]  #1: ffffffff90035040 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  336.599857][T19505]  #2: ffffffff8f7efb00 (ppp_mutex){+.+.}-{4:4}, at: ppp_nl_newlink+0x118/0x2f0
[  336.602747][T19505]  #3: ffff8881012d4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  336.605890][T19505] 
[  336.605890][T19505] stack backtrace:
[  336.607787][T19505] CPU: 1 UID: 0 PID: 19505 Comm: syz.2.6040 Not tainted syzkaller #0 PREEMPT(full) 
[  336.607800][T19505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  336.607807][T19505] Call Trace:
[  336.607813][T19505]  <TASK>
[  336.607819][T19505]  dump_stack_lvl+0xe8/0x150
[  336.607834][T19505]  print_circular_bug+0x2e1/0x300
[  336.607845][T19505]  check_noncircular+0x12e/0x150
[  336.607856][T19505]  __lock_acquire+0x1520/0x2cf0
[  336.607870][T19505]  ? __lock_acquire+0x683/0x2cf0
[  336.607883][T19505]  ? kernfs_link_sibling+0x4c7/0x5a0
[  336.607892][T19505]  lock_acquire+0x106/0x350
[  336.607904][T19505]  ? kernfs_link_sibling+0x4c7/0x5a0
[  336.607914][T19505]  down_write+0x96/0x200
[  336.607923][T19505]  ? kernfs_link_sibling+0x4c7/0x5a0
[  336.607931][T19505]  ? __pfx_down_write+0x10/0x10
[  336.607939][T19505]  ? kernfs_root+0x1c/0x230
[  336.607953][T19505]  ? kernfs_root+0x1c/0x230
[  336.607964][T19505]  ? kernfs_root+0x1c/0x230
[  336.607976][T19505]  ? kernfs_root+0x1ea/0x230
[  336.607989][T19505]  kernfs_link_sibling+0x4c7/0x5a0
[  336.608001][T19505]  kernfs_add_one+0x2db/0x6f0
[  336.608009][T19505]  kernfs_create_dir_ns+0x1a1/0x230
[  336.608019][T19505]  sysfs_create_dir_ns+0x12f/0x2a0
[  336.608031][T19505]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  336.608042][T19505]  ? do_raw_spin_unlock+0x4d/0x200
[  336.608052][T19505]  kobject_add_internal+0x622/0xcd0
[  336.608064][T19505]  kobject_add+0x163/0x240
[  336.608074][T19505]  ? __pfx_kobject_add+0x10/0x10
[  336.608083][T19505]  ? kobject_put+0x50f/0x550
[  336.608093][T19505]  ? get_device_parent+0x366/0x3a0
[  336.608107][T19505]  device_add+0x3fa/0xb80
[  336.608118][T19505]  netdev_register_kobject+0x197/0x350
[  336.608133][T19505]  register_netdevice+0x1433/0x1eb0
[  336.608147][T19505]  ? __pfx_register_netdevice+0x10/0x10
[  336.608158][T19505]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  336.608167][T19505]  ? full_name_hash+0x92/0xe0
[  336.608181][T19505]  ppp_dev_configure+0x8b1/0xb10
[  336.608195][T19505]  ppp_nl_newlink+0x252/0x2f0
[  336.608206][T19505]  ? __pfx_ppp_nl_newlink+0x10/0x10
[  336.608217][T19505]  rtnl_newlink_create+0x310/0xb00
[  336.608229][T19505]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  336.608240][T19505]  ? __pfx___mutex_lock+0x10/0x10
[  336.608250][T19505]  ? ns_capable+0x89/0xe0
[  336.608260][T19505]  rtnl_newlink+0x167f/0x1bd0
[  336.608272][T19505]  ? __pfx_rtnl_newlink+0x10/0x10
[  336.608280][T19505]  ? do_syscall_64+0x166/0x520
[  336.608288][T19505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.608303][T19505]  ? kasan_quarantine_put+0xbb/0x1f0
[  336.608312][T19505]  ? lockdep_hardirqs_on+0x7b/0x110
[  336.608321][T19505]  ? nlmon_xmit+0xb0/0x100
[  336.608336][T19505]  ? kmem_cache_free+0x182/0x650
[  336.608351][T19505]  ? __lock_acquire+0x683/0x2cf0
[  336.608363][T19505]  ? __dev_queue_xmit+0x29b/0x3820
[  336.608376][T19505]  ? __local_bh_enable_ip+0xd6/0x140
[  336.608386][T19505]  ? lockdep_hardirqs_on+0x7b/0x110
[  336.608395][T19505]  ? __dev_queue_xmit+0x29b/0x3820
[  336.608406][T19505]  ? __local_bh_enable_ip+0xd6/0x140
[  336.608414][T19505]  ? __dev_queue_xmit+0x29b/0x3820
[  336.608431][T19505]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  336.608446][T19505]  ? __pfx_rtnl_newlink+0x10/0x10
[  336.608455][T19505]  rtnetlink_rcv_msg+0x802/0xc00
[  336.608465][T19505]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  336.608503][T19505]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  336.608514][T19505]  ? ref_tracker_free+0x689/0x830
[  336.608531][T19505]  ? __pfx_ref_tracker_free+0x10/0x10
[  336.608545][T19505]  netlink_rcv_skb+0x226/0x4a0
[  336.608559][T19505]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  336.608568][T19505]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  336.608580][T19505]  ? netlink_deliver_tap+0x2e/0x1b0
[  336.608591][T19505]  ? netlink_deliver_tap+0x2e/0x1b0
[  336.608602][T19505]  netlink_unicast+0x7bd/0x940
[  336.608613][T19505]  netlink_sendmsg+0x813/0xb40
[  336.608626][T19505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  336.608637][T19505]  ? aa_sock_msg_perm+0xf6/0x1c0
[  336.608651][T19505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  336.608662][T19505]  sock_sendmsg_nosec+0x13a/0x180
[  336.608674][T19505]  ____sys_sendmsg+0x54e/0x850
[  336.608686][T19505]  ? __pfx_____sys_sendmsg+0x10/0x10
[  336.608697][T19505]  ? import_iovec+0x73/0xa0
[  336.608706][T19505]  ___sys_sendmsg+0x2a5/0x360
[  336.608715][T19505]  ? __lock_acquire+0x683/0x2cf0
[  336.608727][T19505]  ? __pfx____sys_sendmsg+0x10/0x10
[  336.608737][T19505]  ? futex_wait+0x2a2/0x390
[  336.608752][T19505]  ? __fget_files+0x2a/0x420
[  336.608763][T19505]  ? __fget_files+0x3a2/0x420
[  336.608775][T19505]  __x64_sys_sendmsg+0x1b1/0x290
[  336.608785][T19505]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  336.608799][T19505]  do_syscall_64+0x166/0x520
[  336.608807][T19505]  ? trace_irq_disable+0x3b/0x140
[  336.608818][T19505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.608828][T19505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.608836][T19505] RIP: 0033:0x7f388179e0d9
[  336.608846][T19505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  336.608855][T19505] RSP: 002b:00007f38825b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  336.608865][T19505] RAX: ffffffffffffffda RBX: 00007f3881a25fa0 RCX: 00007f388179e0d9
[  336.608872][T19505] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  336.608878][T19505] RBP: 00007f3881835024 R08: 0000000000000000 R09: 0000000000000000
[  336.608884][T19505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.608890][T19505] R13: 00007f3881a26038 R14: 00007f3881a25fa0 R15: 00007fff71bb9fb8
[  336.608901][T19505]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  336.882738][   T12] bond3: (slave gretap2): failed to get link speed/duplex
[  337.082557][   T12] bond3: (slave gretap2): failed to get link speed/duplex
[  337.165977][ T5649] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.192162][   T12] bond3: (slave gretap2): failed to get link speed/duplex
[  337.207283][ T5649] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.275383][ T5649] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.302670][ T5703] bond3: (slave gretap2): failed to get link speed/duplex
[  337.325360][ T5649] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.438515][ T5649] bond0 (unregistering): (slave ip6gre1): Releasing backup interface
[  337.463846][ T1107] smc: removing ib device syz0
[  337.481814][ T1107] smbdirect: ib_dev[syz0] removed
[  337.696908][ T5649] .` (unregistering): Released all slaves
[  337.705026][ T5649] bond1 (unregistering): Released all slaves
[  337.719986][ T5649] bond2 (unregistering): Released all slaves
[  337.734988][ T5649] bond3 (unregistering): Released all slaves
[  337.742756][ T5649] bond4 (unregistering): Released all slaves
[  337.750146][ T5649] bond5 (unregistering): Released all slaves
[  337.765880][ T5649] bond6 (unregistering): Released all slaves
[  337.773206][ T5649] bond7 (unregistering): Released all slaves
[  337.780242][ T5649] bond8 (unregistering): Released all slaves
[  337.787914][ T5649] bond9 (unregistering): Released all slaves
[  337.808587][ T5649] bond0 (unregistering): Released all slaves
[  337.816719][ T5649] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface
[  337.821073][ T5649] bond10 (unregistering): Released all slaves
[  337.834820][ T5649] bond11 (unregistering): Released all slaves
[  337.841314][ T5649] bond12 (unregistering): Released all slaves
[  337.852662][ T5703] bond3: (slave gretap2): failed to get link speed/duplex
[  337.916108][ T5649] tipc: Disabling bearer <udp:syz2>
[  337.924463][ T5649] tipc: Left network mode
[  337.982134][   T12] bond3: (slave gretap2): failed to get link speed/duplex
[  338.012282][ T5338] 8021q: adding VLAN 0 to HW filter on device eth1
[  338.102536][ T5703] bond3: (slave gretap2): failed to get link speed/duplex
[  338.213572][ T5703] bond3: (slave gretap2): failed to get link speed/duplex
[  338.243169][ T5338] 8021q: adding VLAN 0 to HW filter on device eth2
[  338.399461][ T5338] 8021q: adding VLAN 0 to HW filter on device eth3
[  338.776928][ T1107] smbdirect: ib_dev[syz2] removed
[  338.803748][ T5338] 8021q: adding VLAN 0 to HW filter on device eth4
[  339.106052][ T5649] IPVS: stop unused estimator thread 0...
[  341.072290][ T5630] net_ratelimit: 23 callbacks suppressed
[  341.072317][ T5630] bond3: (slave gretap2): failed to get link speed/duplex
[  341.192219][T19535] bond3: (slave gretap2): failed to get link speed/duplex
[  341.302451][ T5630] bond3: (slave gretap2): failed to get link speed/duplex
[  341.412227][T19535] bond3: (slave gretap2): failed to get link speed/duplex
[  341.522258][ T5630] bond3: (slave gretap2): failed to get link speed/duplex
[  341.632685][ T5630] bond3: (slave gretap2): failed to get link speed/duplex
[  341.742230][ T5630] bond3: (slave gretap2): failed to get link speed/duplex
[  341.852208][ T5630] bond3: (slave gretap2): failed to get link speed/duplex
[  341.962432][ T5630] bond3: (slave gretap2): failed to get link speed/duplex
[  342.072167][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
[  346.182104][ T5649] net_ratelimit: 36 callbacks suppressed
[  346.182122][ T5649] bond3: (slave gretap2): failed to get link speed/duplex
