last executing test programs:

1.689482527s ago: executing program 0 (id=7290):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000001700))

1.689271587s ago: executing program 0 (id=7291):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf7a4d}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x58}}, 0x4000)

1.598526157s ago: executing program 0 (id=7293):
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0)

1.497293787s ago: executing program 0 (id=7295):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e00)={0xb4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_SYNPROXY={0x0, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x0, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x0, 0x1, 0x1, 0x0, 0x6a}, @CTA_SYNPROXY_ITS]}, @CTA_TUPLE_ORIG={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x0, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_SEQ_ADJ_REPLY={0x0, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x7ff}]}, @CTA_PROTOINFO={0x0, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x0, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x2, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x0, 0x5, {0x4, 0x3}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x72, 0x7}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x12, 0x7}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x9, 0x4}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x0, 0x2, 0xa}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x0, 0x2, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x18, 0x3}}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r4, &(0x7f0000004dc0)={&(0x7f0000000080), 0xc, &(0x7f0000003a80)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/24, 0x18}, {&(0x7f0000002800)=""/42, 0x2a}, {&(0x7f0000002840)=""/14, 0xe}, {&(0x7f0000002880)=""/46, 0x2e}, {&(0x7f00000028c0)=""/34, 0x22}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/161, 0xa1}, {&(0x7f00000039c0)=""/142, 0x8e}], 0x9, &(0x7f0000003b40)=[{0x18, 0x0, 0x0, ""/3}, {0xe8, 0x0, 0x0, ""/212}, {0xe8, 0x0, 0x0, ""/213}, {0x50, 0x0, 0x0, ""/62}, {0x1010, 0x0, 0x0, ""/4096}], 0x1248, 0x40}, 0x38, 0x12000)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10)
setsockopt$inet6_buf(r5, 0x29, 0x14, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={<r6=>0x0, 0x8, 0x1, [0x81, 0x40, 0x1, 0x3ff, 0xf273], [0x5, 0xf, 0x2, 0x2, 0x8, 0x7fffffffffffffff, 0x2, 0x5, 0x7f, 0x62c0, 0x2, 0x2c, 0x3, 0xfffffffffffffffd, 0x0, 0x4, 0x5, 0xde08, 0x8, 0xa, 0x7, 0x1, 0x3, 0x2, 0x5, 0x9, 0x3c00000000, 0x7, 0x1, 0xd5ac, 0x8, 0x2, 0x8000000000000001, 0x3, 0xa5e, 0x3ff, 0x0, 0xb, 0x3d, 0x1, 0x95, 0x4, 0x2, 0x8, 0x92, 0x100, 0xffffffffffffffff, 0x8001, 0x80, 0x7fff, 0x3, 0x401, 0x8, 0x4, 0x7ff, 0x1, 0x1, 0x8, 0x80000000, 0x80000000000, 0x4, 0x80000000, 0x8, 0x9, 0x1, 0x5, 0x0, 0x9, 0xfb, 0x3, 0x2, 0xffffffffffffffff, 0x6, 0xdd6, 0x3, 0x1, 0x3, 0x8, 0xe, 0x3c9, 0x1, 0x7, 0x7, 0x7, 0x5, 0xfffffffffffffff8, 0x4, 0x200, 0x2, 0x20000005, 0x8, 0xb, 0xffffffff, 0xc4, 0x6, 0x8, 0x9, 0xbd81, 0x0, 0x8, 0x7, 0xe8, 0x5c1, 0x7, 0x1af4, 0x8, 0x9, 0x0, 0x6c6, 0x9, 0x1, 0x1000, 0x7, 0x5, 0x9bb7, 0x22, 0x8a6, 0x4, 0x5, 0x8, 0x6]})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000007c0)={r6, "3744ea3cb396a62b58df00bba41c61d9"})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r7)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x400}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048080}, 0x40)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x800)

556.249275ms ago: executing program 0 (id=7311):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0010010900010073797a31000000002400048020000180070001006374000014000280080001400000000108000240000000300900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

499.860478ms ago: executing program 0 (id=7313):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060088480000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

368.984962ms ago: executing program 2 (id=7317):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

277.757621ms ago: executing program 2 (id=7318):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x52, &(0x7f0000000440)={&(0x7f0000000200)={0x64, r0, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xffffffff}}}]}, 0x64}}, 0x0)

275.134205ms ago: executing program 2 (id=7320):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf13d2630d10891cf0c8217c513384b8536012741f439818fa067448222aaea07d32f28b9996b4eecdd89a758e65e16199eff18b7b8732f6a1275b645df31f0e794aa8d0106dd3cf61ae3c1b470de91fa052ff09498a392a89fdd28053cf1f5b807e57ad37568fbdca440c8b3765a299736605cd0f5849d78926973e1f69028c65c2d268", 0x94}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmmsg(r1, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0)

196.834932ms ago: executing program 1 (id=7322):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0xff, 0x0, 0xffffffff], [0xffffffff, 0x0, 0x0, 0xff], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)

196.516868ms ago: executing program 2 (id=7323):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6)

196.269488ms ago: executing program 1 (id=7324):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20)

194.468029ms ago: executing program 2 (id=7325):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x78, 0xc, 0x8, 0xfffffffe, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56743, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x2, 0xfff1}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

140.222766ms ago: executing program 1 (id=7326):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x82}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

139.879681ms ago: executing program 2 (id=7327):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
syz_genetlink_get_family_id$nfc(0x0, r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x7c}}, 0x20000000)

139.606234ms ago: executing program 1 (id=7328):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

65.241947ms ago: executing program 1 (id=7329):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0)

0s ago: executing program 1 (id=7330):
socket$l2tp6(0xa, 0x2, 0x73)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

kernel console output (not intermixed with test programs):

 filter on device bond9
[  191.900183][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2553'.
[  191.904007][T11730] bond9: entered allmulticast mode
[  191.912214][T11730] bond9: (slave dummy0): making interface the new active one
[  191.915041][T11730] dummy0: entered allmulticast mode
[  191.919945][T11730] bond9: (slave dummy0): Enslaving as an active interface with an up link
[  191.935079][T11726] block nbd2: server does not support multiple connections per device.
[  191.943630][T11726] block nbd2: shutting down sockets
[  192.462638][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2567'.
[  192.466818][T11767] netlink: 'syz.1.2567': attribute type 14 has an invalid length.
[  192.469987][T11767] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2567'.
[  193.945717][T11786] syzkaller1: entered promiscuous mode
[  193.948090][T11786] syzkaller1: entered allmulticast mode
[  195.078742][T11745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  195.197839][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'.
[  195.503788][T11831] netlink: 'syz.2.2590': attribute type 2 has an invalid length.
[  195.506809][T11831] netlink: 'syz.2.2590': attribute type 1 has an invalid length.
[  195.512054][T11831] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2590'.
[  195.858878][T11858] netlink: 'syz.2.2603': attribute type 21 has an invalid length.
[  195.864140][T11858] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2603'.
[  195.868655][T11858] netlink: 'syz.2.2603': attribute type 5 has an invalid length.
[  195.874308][T11858] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2603'.
[  196.213013][T11886] netlink: 'syz.1.2615': attribute type 1 has an invalid length.
[  196.562395][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2630'.
[  196.565904][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2630'.
[  196.569493][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2630'.
[  196.575230][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2630'.
[  196.675648][T11922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.684334][T11922] syzkaller0: entered promiscuous mode
[  196.687985][T11922] syzkaller0: entered allmulticast mode
[  196.719096][T11922] netlink: 'syz.0.2632': attribute type 10 has an invalid length.
[  196.750206][ T5645] Bluetooth: hci1: command 0x0406 tx timeout
[  196.756241][T11922] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  196.761344][ T5645] Bluetooth: hci0: command 0x0c20 tx timeout
[  196.769007][T11922] tipc: Resetting bearer <eth:syzkaller0>
[  196.815671][T11921] tipc: Resetting bearer <eth:syzkaller0>
[  196.848704][T11921] tipc: Disabling bearer <eth:syzkaller0>
[  196.862981][T11924] ip6_vti0 speed is unknown, defaulting to 1000
[  198.094246][T11987] bond6: entered promiscuous mode
[  198.097607][T11987] bond6: entered allmulticast mode
[  198.099770][T11987] 8021q: adding VLAN 0 to HW filter on device bond6
[  198.147124][T11990] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2660'.
[  198.468628][T12007] syzkaller0: entered promiscuous mode
[  198.470606][T12007] syzkaller0: entered allmulticast mode
[  198.975437][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'.
[  199.019039][T12028] netlink: 'syz.0.2677': attribute type 4 has an invalid length.
[  199.784326][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  200.027812][T12082] openvswitch: netlink: Missing key (keys=40, expected=80)
[  200.335071][T12107] netlink: 'syz.2.2714': attribute type 21 has an invalid length.
[  200.338305][T12107] __nla_validate_parse: 2 callbacks suppressed
[  200.338319][T12107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2714'.
[  200.461741][T12109] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2715'.
[  200.693362][T12127] nbd: socks must be embedded in a SOCK_ITEM attr
[  200.696119][T12127] block nbd2: shutting down sockets
[  200.910908][T12145] syzkaller1: tun_chr_ioctl cmd 2147767520
[  201.225628][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2748'.
[  201.291216][T12183] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048)
[  201.483076][T12199] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2759'.
[  201.523031][T12202] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  201.759432][T12227] netlink: 488 bytes leftover after parsing attributes in process `syz.0.2770'.
[  201.763991][T12227] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2770'.
[  201.778208][T12229] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  201.867143][T12235] ipt_REJECT: TCP_RESET invalid for non-tcp
[  202.203801][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2784'.
[  202.525103][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2792'.
[  203.307820][T12333] netlink: 'syz.0.2820': attribute type 1 has an invalid length.
[  203.483174][T12344] xt_ecn: cannot match TCP bits for non-tcp packets
[  203.617498][T12352] bond6: option lacp_active: invalid value (8)
[  203.622287][T12352] bond6 (unregistering): Released all slaves
[  203.906906][T12360] ip6erspan1: entered allmulticast mode
[  204.030727][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2834'.
[  204.074851][T12368] bond6: entered promiscuous mode
[  204.076855][T12368] 8021q: adding VLAN 0 to HW filter on device bond6
[  204.079222][T12368] bridge0: port 3(bond6) entered blocking state
[  204.081200][T12368] bridge0: port 3(bond6) entered disabled state
[  204.083849][T12368] bond6: entered allmulticast mode
[  204.086931][T12368] bridge0: port 3(bond6) entered blocking state
[  204.089186][T12368] bridge0: port 3(bond6) entered forwarding state
[  204.123978][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'.
[  204.654074][ T6832] bridge0: port 3(bond6) entered disabled state
[  204.694798][T12409] erspan0: entered promiscuous mode
[  204.750580][T12413] tipc: Invalid UDP bearer configuration
[  204.750609][T12413] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  205.039273][T12425] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.046450][T12425] 8021q: adding VLAN 0 to HW filter on device team0
[  205.054198][T12425] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.198721][T12435] netlink: 'syz.0.2866': attribute type 30 has an invalid length.
[  205.484120][T12425] veth1_to_hsr: left allmulticast mode
[  205.488469][T12425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  205.492899][T12425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.502450][T12425] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  205.616132][T12441] syzkaller0: entered promiscuous mode
[  205.628497][T12441] syzkaller0: entered allmulticast mode
[  205.684700][T12453] __nla_validate_parse: 3 callbacks suppressed
[  205.684711][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2872'.
[  206.192744][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:3840)
[  206.888483][T12496] netlink: 'syz.1.2895': attribute type 49 has an invalid length.
[  207.045863][T12508] syzkaller0: entered promiscuous mode
[  207.052244][T12508] syzkaller0: entered allmulticast mode
[  207.387695][T12497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2894'.
[  207.390814][T12497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2894'.
[  207.434028][T12529] : renamed from bridge_slave_0 (while UP)
[  207.710533][T12536] bond0: (slave dummy0): Releasing backup interface
[  207.727753][T12536] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  208.454564][T12568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2928'.
[  208.457496][T12568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2928'.
[  208.465110][T12568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2928'.
[  208.469335][T12568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2928'.
[  208.472786][T12568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2928'.
[  208.476287][T12568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2928'.
[  208.687999][T12582] netlink: 'syz.1.2935': attribute type 2 has an invalid length.
[  208.988016][T12599] openvswitch: netlink: IP tunnel dst address not specified
[  209.069471][T12608] netlink: 'syz.1.2947': attribute type 2 has an invalid length.
[  209.076749][T12608] netlink: 'syz.1.2947': attribute type 9 has an invalid length.
[  209.079874][T12608] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2947'.
[  209.171063][T12615] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  209.248321][T12619] syzkaller0: entered promiscuous mode
[  209.250526][T12619] syzkaller0: entered allmulticast mode
[  209.260306][T12619] 0: reclassify loop, rule prio 0, protocol 800
[  209.437155][T12632] netlink: 'syz.2.2956': attribute type 1 has an invalid length.
[  209.528161][T12638] syzkaller1: tun_chr_ioctl cmd 1074025677
[  209.530484][T12638] syzkaller1: linktype set to 780
[  210.415947][T12678] bridge0: port 1() entered disabled state
[  210.517073][T12678] bridge9: port 2(veth0_to_bond) entered disabled state
[  210.540723][T12678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.548184][T12678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.574207][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.579635][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.590501][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.598895][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.166926][T12696] netlink: 'syz.2.2983': attribute type 3 has an invalid length.
[  211.510938][T12704] SET target dimension over the limit!
[  212.038316][T12737] netlink: 'syz.0.3003': attribute type 1 has an invalid length.
[  212.042456][T12737] netlink: 'syz.0.3003': attribute type 1 has an invalid length.
[  212.121320][T12743] netlink: 'syz.1.3006': attribute type 1 has an invalid length.
[  212.131082][T12743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.138910][T12745] __nla_validate_parse: 4 callbacks suppressed
[  212.138975][T12745] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3007'.
[  212.146185][T12745] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3007'.
[  212.149538][T12745] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3007'.
[  212.154736][T12745] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3007'.
[  212.159256][T12745] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3007'.
[  212.284109][T12756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3013'.
[  212.737287][T12783] netlink: 'syz.1.3025': attribute type 11 has an invalid length.
[  212.740375][T12783] netlink: 'syz.1.3025': attribute type 5 has an invalid length.
[  212.744315][T12783] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.3025'.
[  213.111151][T12810] gtp0: entered promiscuous mode
[  213.114358][T12810] gtp0: entered allmulticast mode
[  213.237021][T12813] bond7: entered allmulticast mode
[  213.248973][T12819] macvlan2: entered promiscuous mode
[  213.254136][T12819] macvlan2: entered allmulticast mode
[  213.258234][T12819] bond7: entered promiscuous mode
[  213.261019][T12819] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  213.267981][T12819] bond7: left promiscuous mode
[  213.328382][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'.
[  213.382287][T12830] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  213.877489][T12858] unsupported nlmsg_type 40
[  215.458371][T12925] netlink: 'syz.1.3085': attribute type 10 has an invalid length.
[  215.784021][T12925] 8021q: adding VLAN 0 to HW filter on device team0
[  215.979029][T12929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3087'.
[  216.058993][T12933] netlink: 'syz.2.3088': attribute type 1 has an invalid length.
[  216.094632][T12937] netlink: 'syz.1.3091': attribute type 8 has an invalid length.
[  216.194580][T12945] netlink: 'syz.2.3095': attribute type 13 has an invalid length.
[  216.197809][T12945] netlink: 'syz.2.3095': attribute type 17 has an invalid length.
[  216.210083][T12945] erspan0: left promiscuous mode
[  216.225911][T12945] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.229361][T12945] 8021q: adding VLAN 0 to HW filter on device team0
[  216.235572][T12945] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.288149][T12945] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.293408][T12945] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.301312][T12945] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  216.316681][ T1126] bridge0: port 1() entered blocking state
[  216.319432][ T1126] bridge0: port 1() entered forwarding state
[  216.327548][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.329756][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.398210][    C0] bridge0: received packet on  with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:3840)
[  216.728628][T12975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3106'.
[  217.675664][T12981] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  218.358227][T13031] bond0: entered promiscuous mode
[  218.360459][T13031] bond_slave_0: entered promiscuous mode
[  218.370102][T13031] bond_slave_1: entered promiscuous mode
[  218.609989][T13047] __nla_validate_parse: 1 callbacks suppressed
[  218.610005][T13047] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.3137'.
[  218.741192][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3140'.
[  218.826680][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'.
[  219.038951][T13081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  219.112495][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.505876][T13107] batman_adv: batadv0: Interface deactivated: gretap1
[  219.539242][  T294] ip6_vti0 speed is unknown, defaulting to 1000
[  219.543280][  T294] syz2: Port: 1 Link DOWN
[  219.544918][ T8116] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 2816 - 0
[  219.556553][ T8116] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.562865][ T8116] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 2816 - 0
[  219.568211][ T8116] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.572512][  T294] ip6_vti0 speed is unknown, defaulting to 1000
[  219.578487][ T8116] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 2816 - 0
[  219.591399][ T8116] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.598823][ T8116] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 2816 - 0
[  219.603670][ T8116] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.670897][T13113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3164'.
[  219.717544][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3164'.
[  219.731064][T13117] ip6_vti0 speed is unknown, defaulting to 1000
[  219.867218][T13123] xt_limit: Overflow, try lower: 324382443/0
[  220.230033][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3173'.
[  220.265619][    C0] bridge0: received packet on  with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:3840)
[  220.318788][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3173'.
[  220.342158][T13150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.349281][T13150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.764388][T13125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  220.911016][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.157383][T13178] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  221.547873][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.102589][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.184277][ T6836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.189062][ T6836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.258664][T13264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3225'.
[  222.575000][T13285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3235'.
[  222.734801][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'.
[  222.737631][T13301] netlink: 'syz.0.3244': attribute type 29 has an invalid length.
[  222.741357][T13301] netlink: 'syz.0.3244': attribute type 29 has an invalid length.
[  223.007533][T13320] ip6_vti0 speed is unknown, defaulting to 1000
[  223.623985][T13336] bond8: option mode: invalid value (254)
[  223.628966][T13336] bond8 (unregistering): Released all slaves
[  223.785571][T13347] __nla_validate_parse: 4 callbacks suppressed
[  223.785588][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'.
[  223.815824][T13349] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  224.086244][T13366] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3268'.
[  224.357174][T13376] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  224.811447][T13395] netlink: 'syz.2.3280': attribute type 21 has an invalid length.
[  224.820484][T13395] netlink: 'syz.2.3280': attribute type 1 has an invalid length.
[  224.825019][T13395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3280'.
[  224.856964][T13399] net_ratelimit: 4 callbacks suppressed
[  224.856979][T13399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.984653][T13409] netlink: 18 bytes leftover after parsing attributes in process `syz.0.3286'.
[  224.984657][T13411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3287'.
[  225.036393][T13413] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3289'.
[  225.265156][T13434] team0: entered promiscuous mode
[  225.638791][T13468] netlink: 'syz.1.3313': attribute type 1 has an invalid length.
[  225.676485][T13468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3313'.
[  225.687278][T13468] 8021q: adding VLAN 0 to HW filter on device bond10
[  225.702973][T13468] 8021q: adding VLAN 0 to HW filter on device bond10
[  225.713734][T13468] bond10: (slave geneve3): making interface the new active one
[  225.719424][T13468] bond10: (slave geneve3): Enslaving as an active interface with an up link
[  225.725552][ T8840] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  225.737062][ T8116] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  225.741319][ T8116] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  225.744860][T13468] syz.1.3313 (13468) used greatest stack depth: 19744 bytes left
[  225.747930][ T8116] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  226.010434][T13492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3325'.
[  226.014229][T13492] netlink: 'syz.1.3325': attribute type 3 has an invalid length.
[  226.222361][T13509] netlink: 'syz.1.3334': attribute type 1 has an invalid length.
[  226.254094][T13509] bond11: (slave geneve4): making interface the new active one
[  226.258550][T13509] bond11: (slave geneve4): Enslaving as an active interface with an up link
[  226.263902][ T8116] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  226.269232][T13509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3334'.
[  226.269271][ T8116] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  226.278653][ T8116] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  226.282434][T13509] 8021q: adding VLAN 0 to HW filter on device bond11
[  226.287335][ T8116] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  226.381287][T13518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  227.032645][T13575] dummy0: entered promiscuous mode
[  227.043544][T13575] batadv0: entered promiscuous mode
[  227.047266][T13575] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  227.053925][T13575] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  227.075542][T13576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3361'.
[  227.943301][    C0] bridge0: received packet on  with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:3840)
[  228.009758][T13629] bond12: option updelay: invalid value (18446744073709518847)
[  228.013399][T13629] bond12: option updelay: allowed values 0 - 2147483647
[  228.018021][T13629] bond12 (unregistering): Released all slaves
[  228.113197][T13637] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  228.120738][T13637] bond8 (unregistering): Released all slaves
[  228.137857][T13640] netem: change failed
[  228.299700][T13648] ip6_vti0 speed is unknown, defaulting to 1000
[  228.573078][T13671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.582963][T13669] ip6_vti0 speed is unknown, defaulting to 1000
[  229.104582][T13695] netlink: 'syz.0.3416': attribute type 11 has an invalid length.
[  230.163231][T13720] syzkaller1: entered promiscuous mode
[  230.165684][T13720] syzkaller1: entered allmulticast mode
[  230.820069][T13722] __nla_validate_parse: 5 callbacks suppressed
[  230.820082][T13722] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3428'.
[  231.261283][T13740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3437'.
[  231.434531][T13749] sctp: [Deprecated]: syz.1.3439 (pid 13749) Use of int in maxseg socket option.
[  231.434531][T13749] Use struct sctp_assoc_value instead
[  231.526972][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3443'.
[  231.561415][T13754] bond8: entered promiscuous mode
[  231.564215][T13754] 8021q: adding VLAN 0 to HW filter on device bond8
[  231.583350][T13756] syzkaller1: entered promiscuous mode
[  231.585961][T13756] syzkaller1: entered allmulticast mode
[  232.104001][T13791] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3460'.
[  232.226213][T13803] Dead loop on virtual device ip6_vti0 (net 44), fix it urgently!
[  232.500879][T13803] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.504016][T13803] bridge0: port 1() entered disabled state
[  232.733391][T13803] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.744322][T13803] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.033261][T13822] syzkaller0: entered promiscuous mode
[  233.035919][T13822] syzkaller0: entered allmulticast mode
[  233.926827][T13876] syzkaller0: entered promiscuous mode
[  233.929692][T13876] syzkaller0: entered allmulticast mode
[  234.189043][T13901] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.3507'.
[  234.236331][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3510'.
[  234.239533][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3510'.
[  234.247693][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3510'.
[  234.250989][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3510'.
[  234.566403][T13936] netlink: 'syz.1.3523': attribute type 1 has an invalid length.
[  234.568806][T13936] nbd: error processing sock list
[  234.575702][T13937] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3521'.
[  236.034705][T13982] syzkaller1: entered promiscuous mode
[  236.036445][T13982] syzkaller1: entered allmulticast mode
[  236.040713][T13982] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  236.080001][T13984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3539'.
[  236.475954][T13994] netlink: 'syz.0.3545': attribute type 1 has an invalid length.
[  236.514946][T13994] bond8: (slave bridge4): making interface the new active one
[  236.518618][T13994] bond8: (slave bridge4): Enslaving as an active interface with an up link
[  236.537309][T13994] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  236.996045][T14010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3551'.
[  237.000770][T14006] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  237.420984][T14032] ip6_vti0 speed is unknown, defaulting to 1000
[  238.238504][T14050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.398996][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3568'.
[  238.809471][T14057] netlink: 'syz.2.3571': attribute type 3 has an invalid length.
[  238.813246][T14057] netlink: 'syz.2.3571': attribute type 1 has an invalid length.
[  238.815967][T14057] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3571'.
[  238.818969][T14057] NCSI netlink: No device for ifindex 0
[  239.335675][T14091] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.3587'.
[  239.412694][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3591'.
[  239.416073][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3591'.
[  239.419735][T14100] netlink: 'syz.0.3591': attribute type 5 has an invalid length.
[  239.435755][ T8840] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  239.435866][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3591'.
[  239.440394][ T8840] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  239.447263][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3591'.
[  239.450995][ T8840] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  239.452241][T14100] netlink: 'syz.0.3591': attribute type 5 has an invalid length.
[  239.460225][ T8840] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  239.940399][T14140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.952259][T14133] syzkaller0: entered promiscuous mode
[  239.962900][T14133] syzkaller0: entered allmulticast mode
[  239.993868][T14133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3605'.
[  240.019992][T14133] tipc: Resetting bearer <eth:syzkaller0>
[  240.038621][T14132] tipc: Resetting bearer <eth:syzkaller0>
[  240.076989][T14132] tipc: Disabling bearer <eth:syzkaller0>
[  240.331410][T14159] syzkaller0: entered promiscuous mode
[  240.338815][T14159] syzkaller0: entered allmulticast mode
[  240.437580][T14167] sch_tbf: burst 0 is lower than device sit0 mtu (1280) !
[  240.631387][   T34] audit: type=1800 audit(1778621315.382:6): pid=14157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3610" name="memory.events" dev="tmpfs" ino=6298 res=0 errno=0
[  240.877039][T14195] IPv6: Can't replace route, no match found
[  241.130467][T14212] bond12: entered promiscuous mode
[  241.133633][T14212] 8021q: adding VLAN 0 to HW filter on device bond12
[  241.259808][T14223] netlink: 'syz.0.3639': attribute type 12 has an invalid length.
[  241.264004][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3639'.
[  241.266999][T14223] bond0: option primary_reselect: invalid value (191)
[  241.787675][T14249] netlink: 'syz.0.3652': attribute type 3 has an invalid length.
[  242.046310][T14267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3662'.
[  242.049736][T14267] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3662'.
[  242.081382][T14265] bond9 (unregistering): Released all slaves
[  242.155638][   T34] audit: type=1804 audit(1778621316.912:7): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3664" name="/newroot/1247/cgroup.controllers" dev="tmpfs" ino=6307 res=1 errno=0
[  242.163371][   T34] audit: type=1800 audit(1778621316.912:8): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3664" name="cgroup.controllers" dev="tmpfs" ino=6307 res=0 errno=0
[  242.272334][T14281] syzkaller0: entered promiscuous mode
[  242.279481][T14281] syzkaller0: entered allmulticast mode
[  242.348397][T14283] sctp: [Deprecated]: syz.1.3668 (pid 14283) Use of int in max_burst socket option deprecated.
[  242.348397][T14283] Use struct sctp_assoc_value instead
[  242.486420][T14288] xt_nfacct: accounting object `syz0' does not exist
[  242.619658][T14296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3672'.
[  242.634258][T14300] nbd: socks must be embedded in a SOCK_ITEM attr
[  242.730584][T14310] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3681'.
[  243.150349][T14354] vxcan3: entered promiscuous mode
[  243.299696][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3705'.
[  243.308712][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3705'.
[  243.316912][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3705'.
[  243.321120][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3705'.
[  243.325346][T14360] netlink: 'syz.0.3705': attribute type 6 has an invalid length.
[  243.892852][T14403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3726'.
[  244.191399][T14422] netlink: 'syz.0.3735': attribute type 39 has an invalid length.
[  244.346463][T14432] netlink: 'syz.2.3740': attribute type 1 has an invalid length.
[  244.877962][T14468] netlink: 'syz.0.3758': attribute type 1 has an invalid length.
[  244.888629][T14468] netlink: 'syz.0.3758': attribute type 2 has an invalid length.
[  244.936854][T14472] netlink: 'syz.0.3760': attribute type 61 has an invalid length.
[  245.655184][T14522] netlink: 'syz.1.3784': attribute type 7 has an invalid length.
[  245.668025][ T8116] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  245.671430][T14522] netlink: 'syz.1.3784': attribute type 7 has an invalid length.
[  245.675982][ T8116] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  245.680259][ T8116] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  245.685175][ T8116] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  246.493047][T14551] netlink: 'syz.0.3797': attribute type 13 has an invalid length.
[  246.507646][T14551] netlink: 'syz.0.3797': attribute type 13 has an invalid length.
[  246.583194][T14556] __nla_validate_parse: 9 callbacks suppressed
[  246.583209][T14556] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3799'.
[  246.907683][T14582] netlink: 'syz.2.3811': attribute type 6 has an invalid length.
[  247.248599][T14613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3825'.
[  247.454232][T14627] netlink: 'syz.2.3832': attribute type 10 has an invalid length.
[  247.474855][T14627] team0 (unregistering): Port device team_slave_0 removed
[  247.489206][T14627] team0 (unregistering): Port device team_slave_1 removed
[  247.648323][T14637] netlink: 'syz.2.3836': attribute type 2 has an invalid length.
[  247.661341][T14639] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  247.744423][T14643] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3839'.
[  247.818630][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3839'.
[  247.849226][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3839'.
[  247.920557][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3839'.
[  248.214845][T14676] syzkaller0: entered promiscuous mode
[  248.221765][T14676] syzkaller0: entered allmulticast mode
[  248.414129][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3857'.
[  248.437435][T14690] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3858'.
[  248.567762][T14698] ip6tnl3: entered allmulticast mode
[  248.572706][ T8840] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  248.579136][ T8840] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  248.592616][ T9929] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  248.601781][ T9929] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  248.619075][T14700] vlan3: entered promiscuous mode
[  248.931841][ T9929] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  249.022110][T14718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3869'.
[  249.176073][T14718] bond0: left promiscuous mode
[  249.178121][T14718] bond_slave_0: left promiscuous mode
[  249.180457][T14718] bond_slave_1: left promiscuous mode
[  249.193123][T14718] geneve2: left promiscuous mode
[  249.195736][T14718] erspan1: left promiscuous mode
[  249.197810][T14718] erspan1: left allmulticast mode
[  249.201759][T14718] ip6erspan1: left allmulticast mode
[  249.204244][T14718] gtp0: left promiscuous mode
[  249.206178][T14718] gtp0: left allmulticast mode
[  249.208324][T14718] bond7: left allmulticast mode
[  249.211814][T14718] bond8: left promiscuous mode
[  249.590450][T14706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  249.745794][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3873'.
[  250.152663][T14757] macvtap1: entered promiscuous mode
[  250.156148][T14757] dummy0: entered promiscuous mode
[  250.161091][T14757] macvtap1: entered allmulticast mode
[  250.163549][T14757] dummy0: entered allmulticast mode
[  250.175434][T14757] dummy0: left allmulticast mode
[  250.178377][T14757] dummy0: left promiscuous mode
[  250.180248][T14757] macvtap1: left promiscuous mode
[  250.182288][T14757] macvtap1: left allmulticast mode
[  250.787063][T14826] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  250.852640][T14836] ip6_vti0 speed is unknown, defaulting to 1000
[  251.143133][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  251.667401][T14886] __nla_validate_parse: 6 callbacks suppressed
[  251.667416][T14886] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3946'.
[  251.955505][T14894] v: renamed from dummy0 (while UP)
[  252.376915][T14907] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.436150][T14907] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.509790][T14907] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.552050][T14907] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.606672][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.635590][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.656747][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.682087][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  252.977213][T14925] openvswitch: netlink: Message has 4 unknown bytes.
[  252.982026][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  253.529077][T14948] nbd: must specify a size in bytes for the device
[  253.535003][T14948] block nbd0: NBD_DISCONNECT
[  253.537433][T14948] block nbd0: Send disconnect failed -110
[  253.539694][T14948] block nbd0: shutting down sockets
[  254.104917][T14983] netlink: 'syz.1.3990': attribute type 1 has an invalid length.
[  254.117874][T14983] netlink: 'syz.1.3990': attribute type 3 has an invalid length.
[  254.130290][T14983] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3990'.
[  254.151193][T14987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3993'.
[  254.184861][T14987] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  255.284042][T15024] syzkaller0: entered promiscuous mode
[  255.286194][T15024] syzkaller0: entered allmulticast mode
[  255.293649][T15024] TC_ACT_REPEAT abuse ?
[  255.324581][T15026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4008'.
[  255.476009][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4015'.
[  255.572187][T15048] netlink: 'syz.2.4019': attribute type 15 has an invalid length.
[  255.576949][T15048] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4019'.
[  255.629964][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4020'.
[  255.870439][T15070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4029'.
[  255.880808][T15071] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4030'.
[  255.896860][T15060] bond5: (slave syz_tun): Removing an active aggregator
[  255.906407][T15060] bond5: (slave syz_tun): Releasing backup interface
[  255.923653][T15060] : left allmulticast mode
[  255.925350][T15060] : left promiscuous mode
[  255.927304][T15060] bridge0: port 1() entered disabled state
[  255.935766][T15060] bridge_slave_1: left allmulticast mode
[  255.937654][T15060] bridge_slave_1: left promiscuous mode
[  255.939495][T15060] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.947192][T15060] bond6: left promiscuous mode
[  255.959310][T15060] veth0_to_bond: left allmulticast mode
[  255.961651][T15060] veth0_to_bond: left promiscuous mode
[  255.963934][T15060] bridge9: port 2(veth0_to_bond) entered disabled state
[  255.977471][T15060] bond0: (slave bond_slave_0): Releasing backup interface
[  255.987285][T15060] bond0: (slave bond_slave_1): Releasing backup interface
[  255.994335][T15060] batman_adv: batadv0: Removing interface: batadv_slave_0
[  256.000118][T15060] batman_adv: batadv0: Removing interface: batadv_slave_1
[  256.019160][T15060] bond1: (slave ip6erspan0): Releasing active interface
[  256.028384][T15060] bond2: (slave bridge3): Releasing backup interface
[  256.035849][T15060] veth5: left allmulticast mode
[  256.037968][T15060] veth5: left promiscuous mode
[  256.040187][T15060] bridge9: port 1(veth5) entered disabled state
[  256.052014][T15060] bond6: left allmulticast mode
[  256.057632][T15060] bridge0: port 3(bond6) entered disabled state
[  256.062965][T15082] vxcan0: tx address claim with different name
[  256.160905][T15089] netlink: 34 bytes leftover after parsing attributes in process `syz.0.4038'.
[  256.353517][T15111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.527838][T15134] netlink: get zone limit has 4 unknown bytes
[  256.537400][T15132] team0: entered promiscuous mode
[  256.539274][T15132] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  256.684786][T15151] __nla_validate_parse: 3 callbacks suppressed
[  256.684802][T15151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4069'.
[  256.767156][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4072'.
[  256.770734][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4072'.
[  256.775079][T15160] netlink: 'syz.2.4072': attribute type 13 has an invalid length.
[  256.958076][T15179] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.027422][T15179] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.110164][T15179] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.183280][T15179] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.204037][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4081'.
[  257.237363][T15195] netlink: 149 bytes leftover after parsing attributes in process `syz.2.4088'.
[  257.319597][T15200] vlan2: entered promiscuous mode
[  257.321755][T15200] gretap0: entered promiscuous mode
[  257.377343][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  257.407841][ T8840] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.428685][ T8840] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.454177][ T8840] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  258.235843][T15240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4104'.
[  258.653377][T15252] netlink: 1304 bytes leftover after parsing attributes in process `syz.0.4110'.
[  258.914792][T15277] netlink: 'syz.2.4121': attribute type 8 has an invalid length.
[  258.915438][T15275] xt_hashlimit: size too large, truncated to 1048576
[  259.104983][T15297] ip6_vti0 speed is unknown, defaulting to 1000
[  259.283539][T15301] netlink: 'syz.1.4125': attribute type 4 has an invalid length.
[  259.291932][T15301] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4125'.
[  259.738353][T15325] x_tables: unsorted entry at hook 2
[  260.286297][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4146'.
[  260.468218][T15353] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  260.470889][T15353] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  260.626332][T15348] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma?
[  260.662286][T15364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4155'.
[  260.757322][T15370] netlink: 'syz.0.4158': attribute type 1 has an invalid length.
[  260.777462][T15372] lo: entered allmulticast mode
[  260.779529][T15372] lo: left allmulticast mode
[  261.223765][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  261.861761][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  261.866494][T15392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  262.226681][T15446] __nla_validate_parse: 4 callbacks suppressed
[  262.226698][T15446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4193'.
[  262.234537][T15446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4193'.
[  262.248867][T15446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4193'.
[  262.253218][T15446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4193'.
[  262.256215][T15446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4193'.
[  262.259284][T15446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4193'.
[  262.273806][T15450] xt_l2tp: v2 sid > 0xffff: 8388608
[  262.387017][T15463] netlink: 'syz.2.4200': attribute type 1 has an invalid length.
[  262.389640][T15463] netlink: 'syz.2.4200': attribute type 6 has an invalid length.
[  262.394361][T15463] netlink: 'syz.2.4200': attribute type 7 has an invalid length.
[  262.399298][T15463] netlink: 'syz.2.4200': attribute type 1 has an invalid length.
[  262.453535][T15468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4203'.
[  262.524950][T15475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4206'.
[  262.915346][T15512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4219'.
[  262.938103][T15516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4221'.
[  263.216292][T15539] netlink: 'syz.1.4232': attribute type 32 has an invalid length.
[  264.620342][T15608] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  264.627451][T15608] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  264.672459][T15608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.757644][T15615] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  265.054966][T15638] netlink: 'syz.2.4276': attribute type 5 has an invalid length.
[  265.068154][T15639] netlink: 'syz.1.4277': attribute type 83 has an invalid length.
[  265.448309][T15664] bond9: (slave vcan1): refused to change device type
[  265.484010][T15673] netlink: 'syz.1.4293': attribute type 49 has an invalid length.
[  265.583013][T15673] ip6gretap0: entered promiscuous mode
[  265.587361][T15673] ip6gretap0: entered allmulticast mode
[  265.692052][ T9925] tipc: Node number set to 4278190080
[  265.775434][T15691] netlink: 'syz.2.4299': attribute type 4 has an invalid length.
[  265.795133][T15691] netlink: 'syz.2.4299': attribute type 4 has an invalid length.
[  265.807411][T15695] lo: MTU too low for tipc bearer
[  265.822734][T15695] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  265.923454][T15702] syzkaller1: entered promiscuous mode
[  265.933278][T15702] syzkaller1: entered allmulticast mode
[  265.936652][T15705] netlink: 'syz.0.4305': attribute type 11 has an invalid length.
[  266.202511][T15726] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  266.204945][T15726] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  266.384840][T15736] netlink: 'syz.2.4317': attribute type 1 has an invalid length.
[  266.388040][T15736] netlink: 'syz.2.4317': attribute type 1 has an invalid length.
[  266.404517][T15736] syzkaller1: entered promiscuous mode
[  266.407539][T15736] syzkaller1: entered allmulticast mode
[  266.554415][T15745] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  266.708407][T15759] 8021q: adding VLAN 0 to HW filter on device bond13
[  266.836891][T15773] syzkaller1: entered promiscuous mode
[  266.838567][T15773] syzkaller1: entered allmulticast mode
[  267.300186][T15807] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  267.304458][T15807] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  267.554548][T15829] batman_adv: batadv0: Adding interface: ipvlan3
[  267.556555][T15829] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  267.564857][T15829] batman_adv: batadv0: Interface activated: ipvlan3
[  267.860268][T15856] ieee802154 phy1 wpan1: encryption failed: -22
[  267.904503][T15859] __nla_validate_parse: 19 callbacks suppressed
[  267.904519][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4375'.
[  268.079866][T15870] tipc: New replicast peer: 255.255.255.255
[  268.089739][T15870] tipc: Enabled bearer <udp:syz2>, priority 10
[  268.332929][T15887] netlink: 'syz.2.4387': attribute type 41 has an invalid length.
[  268.645876][T15901] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4392'.
[  268.649499][T15901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4392'.
[  268.846021][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4396'.
[  268.849657][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4396'.
[  269.161048][T15918] netlink: 750 bytes leftover after parsing attributes in process `syz.1.4400'.
[  269.242442][T15920] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  269.248319][T15922] : renamed from veth0_to_bond
[  269.284143][T15924] netlink: 'syz.0.4403': attribute type 1 has an invalid length.
[  269.378859][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4408'.
[  269.401167][T15937] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4409'.
[  269.470142][T15943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4413'.
[  269.493455][T15943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4413'.
[  270.338688][T16018] erspan0: entered promiscuous mode
[  270.341092][T16018] macvtap0: entered promiscuous mode
[  270.345388][T16018] macvtap0: entered allmulticast mode
[  270.347625][T16018] erspan0: entered allmulticast mode
[  270.359389][T16018] erspan0: left allmulticast mode
[  270.361421][T16018] erspan0: left promiscuous mode
[  270.367728][T16018] macvtap0: left promiscuous mode
[  270.369874][T16018] macvtap0: left allmulticast mode
[  270.450294][T16026] validate_nla: 2 callbacks suppressed
[  270.450306][T16026] netlink: 'syz.1.4453': attribute type 5 has an invalid length.
[  270.596157][ T9928] hid-generic 0005:046D:0A0A.0001: item fetching failed at offset 0/1
[  270.600689][ T9928] hid-generic 0005:046D:0A0A.0001: probe with driver hid-generic failed with error -22
[  270.803947][T16060] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  271.094283][T16082] netlink: 'syz.0.4479': attribute type 1 has an invalid length.
[  271.100051][T16082] NCSI netlink: No device for ifindex 0
[  271.217690][T16090] syzkaller0: entered promiscuous mode
[  271.219687][T16090] syzkaller0: entered allmulticast mode
[  271.377987][T16094] netlink: 'syz.0.4485': attribute type 14 has an invalid length.
[  271.538813][T16099] netlink: 'syz.1.4487': attribute type 3 has an invalid length.
[  271.925937][T16083] syz.2.4480 (16083) used greatest stack depth: 19736 bytes left
[  272.706907][T16135] syzkaller1: entered promiscuous mode
[  272.722406][T16135] syzkaller1: entered allmulticast mode
[  272.835241][T16143] ipt_rpfilter: unknown options
[  272.953417][T16149] __nla_validate_parse: 17 callbacks suppressed
[  272.953434][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4509'.
[  272.965176][T16149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4509'.
[  272.973597][T16149] netlink: 'syz.2.4509': attribute type 20 has an invalid length.
[  273.412373][T16177] netlink: 'syz.0.4521': attribute type 29 has an invalid length.
[  273.415838][T16177] netlink: 'syz.0.4521': attribute type 29 has an invalid length.
[  273.419341][T16177] netlink: 508 bytes leftover after parsing attributes in process `syz.0.4521'.
[  273.897320][T16221] netlink: 'syz.0.4543': attribute type 1 has an invalid length.
[  274.362937][T16249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4556'.
[  274.440980][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4558'.
[  274.616861][T16263] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4562'.
[  274.880179][T16282] tipc: Can't bind to reserved service type 0
[  275.188722][   T34] audit: type=1804 audit(1778621349.942:9): pid=16325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4591" name="/newroot/1567/memory.events" dev="tmpfs" ino=7919 res=1 errno=0
[  275.213435][   T34] audit: type=1800 audit(1778621349.942:10): pid=16325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4591" name="memory.events" dev="tmpfs" ino=7919 res=0 errno=0
[  275.230881][   T34] audit: type=1804 audit(1778621349.942:11): pid=16325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4591" name="/newroot/1567/memory.events" dev="tmpfs" ino=7919 res=1 errno=0
[  275.258104][T16328] ip6_vti0 speed is unknown, defaulting to 1000
[  275.265982][T16331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4593'.
[  275.519032][T16345] syzkaller0: entered promiscuous mode
[  275.521431][T16345] syzkaller0: entered allmulticast mode
[  275.535146][T16345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.543316][T16344] tipc: Resetting bearer <eth:syzkaller0>
[  275.561792][T16344] tipc: Disabling bearer <eth:syzkaller0>
[  275.872320][T16367] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4609'.
[  275.930921][T16372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4612'.
[  275.942395][T16372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4612'.
[  275.989145][T16375] 8021q: adding VLAN 0 to HW filter on device bond10
[  276.127040][T16389] netlink: 'syz.2.4620': attribute type 2 has an invalid length.
[  276.131285][T16389] netlink: 'syz.2.4620': attribute type 2 has an invalid length.
[  276.346387][T16394] netem: change failed
[  276.976580][T16434] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  276.979553][T16434] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  277.015734][T16431] ip6_vti0 speed is unknown, defaulting to 1000
[  277.112456][T16442] netlink: 'syz.1.4641': attribute type 4 has an invalid length.
[  278.250504][T16509] __nla_validate_parse: 3 callbacks suppressed
[  278.250519][T16509] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4671'.
[  278.259884][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4671'.
[  278.264413][T16509] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4671'.
[  278.269562][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4671'.
[  278.272994][T16509] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4671'.
[  278.314046][T16517] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  279.142044][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  279.806692][T16571] syzkaller1: entered promiscuous mode
[  279.810967][T16571] syzkaller1: entered allmulticast mode
[  280.050306][T16575] ip6_vti0 speed is unknown, defaulting to 1000
[  280.558808][T16609] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4709'.
[  281.148354][T16644] ip6_vti0 speed is unknown, defaulting to 1000
[  281.250855][T16653] veth0: entered promiscuous mode
[  281.255780][T16653] veth0: left promiscuous mode
[  281.430572][T16661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4732'.
[  281.438025][T16661] netem: incorrect ge model size
[  281.444936][T16661] netem: change failed
[  281.476769][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4732'.
[  281.512245][T16661] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.555335][T16648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4725'.
[  281.608485][T16661] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.657279][T16661] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.899855][T16676] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.912162][T16676] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.961164][T16676] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  282.273437][T16680] batman_adv: batadv0: Interface deactivated: ipvlan3
[  282.283128][T16661] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  282.300259][ T8840] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.304104][ T8840] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  282.307319][ T8840] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  282.310700][ T8840] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.314790][ T8840] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  282.318031][ T8840] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  282.329209][ T8840] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.333549][ T8840] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  282.336936][ T8840] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  282.340295][ T8840] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.344799][ T8840] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  282.348022][ T8840] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  282.379551][ T8116] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  282.394722][ T8116] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  282.413900][ T8116] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  282.431111][ T8840] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  282.759697][T16705] syzkaller1: entered promiscuous mode
[  282.763552][T16705] syzkaller1: entered allmulticast mode
[  282.870061][T16707] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  283.160182][T16727] pim6reg1: entered allmulticast mode
[  283.299721][T16736] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  283.303876][T16736] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  283.349596][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4762'.
[  283.931129][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4776'.
[  284.202049][T16782] netlink: 'syz.2.4784': attribute type 1 has an invalid length.
[  284.205620][T16782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4784'.
[  284.458986][T16799] syzkaller0: entered promiscuous mode
[  284.461109][T16799] syzkaller0: entered allmulticast mode
[  284.583553][T16803] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4792'.
[  284.652858][T16807] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  285.173725][T16848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4812'.
[  285.178366][T16848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4812'.
[  285.556664][T16884] @0: renamed from bond_slave_1 (while UP)
[  285.693985][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4834'.
[  286.121756][ T9929] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  286.138212][T16917] team0: left promiscuous mode
[  286.146312][T16917] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  286.148990][T16917] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  286.152704][T16917] bond3: left promiscuous mode
[  286.154717][T16917] bridge2: left promiscuous mode
[  286.156947][T16917] vlan2: left allmulticast mode
[  286.159288][T16917] bond3: left allmulticast mode
[  286.161385][T16917] bridge2: left allmulticast mode
[  286.166252][T16917] ip6erspan0: left promiscuous mode
[  286.168687][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4847'.
[  286.172349][T16917] ip6erspan0: left allmulticast mode
[  286.175085][T16917] macvlan2: left promiscuous mode
[  286.177178][T16917] macvlan2: left allmulticast mode
[  286.179146][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4847'.
[  286.182502][T16917] xfrm1: left allmulticast mode
[  286.182721][T16917] bond6: left promiscuous mode
[  286.183101][T16917] team1: left promiscuous mode
[  286.189371][T16917] team1: left allmulticast mode
[  286.191893][T16917] team2: left promiscuous mode
[  286.194288][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4847'.
[  286.199651][T16917] team2: left allmulticast mode
[  286.202420][T16917] bond9: left allmulticast mode
[  286.204601][T16917] v: left allmulticast mode
[  286.207214][T16917] bond12: left promiscuous mode
[  286.822272][ T9929] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  286.908410][T16969] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  286.918474][T16969] bond9 (unregistering): Released all slaves
[  287.587836][T17013] xt_hashlimit: size too large, truncated to 1048576
[  287.703067][T17020] netlink: 'syz.2.4888': attribute type 1 has an invalid length.
[  288.208923][T17057] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  288.524646][T17076] __nla_validate_parse: 3 callbacks suppressed
[  288.524657][T17076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4905'.
[  288.529986][T17076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4905'.
[  288.610492][T17085] xt_socket: unknown flags 0x8
[  288.805742][T17103] netlink: 'syz.2.4918': attribute type 4 has an invalid length.
[  288.934643][T17112] syzkaller0: entered promiscuous mode
[  288.942030][T17112] syzkaller0: entered allmulticast mode
[  288.960352][T17112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.970116][T17111] tipc: Resetting bearer <eth:syzkaller0>
[  289.017181][T17111] tipc: Disabling bearer <eth:syzkaller0>
[  289.026017][T17118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4924'.
[  289.066466][T17120] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  289.072016][T17120] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  290.009230][T17176] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4950'.
[  290.019083][T17176] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4950'.
[  290.045667][T17176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4950'.
[  290.383805][T17202] batadv0: entered promiscuous mode
[  290.390202][T17202] 8021q: adding VLAN 0 to HW filter on device macsec2
[  290.395574][T17202] batadv0: left promiscuous mode
[  290.412791][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4963'.
[  290.416216][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4963'.
[  290.418871][T17205] netlink: 'syz.0.4963': attribute type 12 has an invalid length.
[  290.422654][T17205] netlink: 'syz.0.4963': attribute type 13 has an invalid length.
[  290.481762][T17209] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4960'.
[  290.605048][T17219] netlink: 'syz.2.4969': attribute type 3 has an invalid length.
[  290.607692][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4969'.
[  290.641891][T17224] vti1: entered promiscuous mode
[  290.643645][T17224] vti1: entered allmulticast mode
[  290.681136][T17219] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  290.688259][T17228] tunl0: entered promiscuous mode
[  290.696892][T17228] netlink: 'syz.1.4971': attribute type 4 has an invalid length.
[  290.834112][T17239] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  290.934713][T17241] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  292.020416][T17284] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  292.197770][T17302] xt_hashlimit: size too large, truncated to 1048576
[  292.258658][T17308] xt_hashlimit: size too large, truncated to 1048576
[  292.276230][T17308] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  292.818814][T17362] netlink: 'syz.0.5026': attribute type 1 has an invalid length.
[  292.849733][T17354] infiniband syz0: set down
[  292.851133][T17354] infiniband syz0: added bridge_slave_1
[  292.860396][T17354] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  292.865988][T17354] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  292.871002][T17354] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  292.896227][T17354] RDS/IB: syz0: added
[  292.899248][T17354] smc: adding ib device syz0 with port count 1
[  292.901142][T17354] smc:    ib device syz0 port 1 has no pnetid
[  293.495995][T17390] netlink: 'syz.2.5039': attribute type 8 has an invalid length.
[  293.553037][T17394] __nla_validate_parse: 14 callbacks suppressed
[  293.553054][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5041'.
[  293.558999][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5041'.
[  293.566377][T17394] netlink: 'syz.2.5041': attribute type 12 has an invalid length.
[  293.569921][T17394] netlink: 'syz.2.5041': attribute type 11 has an invalid length.
[  294.158609][T17442] pim6reg1: entered promiscuous mode
[  294.161789][T17442] pim6reg1: entered allmulticast mode
[  294.295974][T17452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5068'.
[  294.354302][T17457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5069'.
[  294.393055][T17457] netlink: 'syz.0.5069': attribute type 10 has an invalid length.
[  294.939324][T17504] tipc: MTU too low for tipc bearer
[  295.118707][T17523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5097'.
[  295.261987][T17533] syzkaller0: entered promiscuous mode
[  295.264264][T17533] syzkaller0: entered allmulticast mode
[  296.275048][T17553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5111'.
[  296.398678][T17563] tc action pedit offset 20 out of bounds
[  296.402951][T17565] sctp: [Deprecated]: syz.1.5117 (pid 17565) Use of int in maxseg socket option.
[  296.402951][T17565] Use struct sctp_assoc_value instead
[  296.680999][T17588] bond9: (slave v): Releasing active interface
[  296.684596][T17588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  296.702990][T17588] ip6gre1: entered allmulticast mode
[  296.705738][T17588] team0: Device ip6gre1 failed to enter team mode
[  296.708506][T17588] team0: Device ip6gre1 failed to enter team mode
[  296.809578][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5129'.
[  296.892906][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5131'.
[  296.895980][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5131'.
[  296.898955][T17595] netlink: 58 bytes leftover after parsing attributes in process `syz.1.5131'.
[  296.912152][T17595] team0 (unregistering): Port device macvlan2 removed
[  296.982610][T17599] netlink: 'syz.2.5132': attribute type 7 has an invalid length.
[  296.993817][ T5719] bridge0: entered promiscuous mode
[  297.831289][T17655] netlink: 'syz.2.5159': attribute type 1 has an invalid length.
[  297.855197][T17655] bond11: entered promiscuous mode
[  297.857695][T17655] 8021q: adding VLAN 0 to HW filter on device bond11
[  297.879691][T17655] 8021q: adding VLAN 0 to HW filter on device bond11
[  297.882950][T17655] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  297.886284][T17655] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  297.893221][T17655] bond11: (slave ip6gre2): making interface the new active one
[  297.895735][T17655] ip6gre2: entered promiscuous mode
[  297.898266][T17655] bond11: (slave ip6gre2): Enslaving as an active interface with an up link
[  298.591227][T17693] netlink: 'syz.1.5175': attribute type 1 has an invalid length.
[  298.593775][T17693] netlink: 'syz.1.5175': attribute type 2 has an invalid length.
[  298.870039][T17701] __nla_validate_parse: 3 callbacks suppressed
[  298.870061][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5178'.
[  299.050583][T17704] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  299.067631][T17705] netlink: 'syz.0.5180': attribute type 3 has an invalid length.
[  299.163224][T17713] netlink: 'syz.1.5184': attribute type 1 has an invalid length.
[  299.169287][T17713] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5184'.
[  299.266018][T17723] xt_l2tp: invalid flags combination: 8
[  299.416602][T17738] bridge5: entered promiscuous mode
[  299.418293][T17738] bridge5: entered allmulticast mode
[  299.436035][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5194'.
[  299.474402][T17742] ip6tnl4: entered allmulticast mode
[  299.589171][T17738] bridge5: entered promiscuous mode
[  299.592619][T17738] bridge5: entered allmulticast mode
[  299.604761][T17757] netlink: 'syz.2.5197': attribute type 7 has an invalid length.
[  299.784806][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5203'.
[  300.008970][T17794] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5211'.
[  300.055513][T17796] netlink: 'syz.0.5214': attribute type 1 has an invalid length.
[  300.144368][T17804] xt_TCPMSS: Only works on TCP SYN packets
[  300.454533][T17826] netlink: 'syz.0.5224': attribute type 9 has an invalid length.
[  300.518019][T17837] netlink: 'syz.0.5224': attribute type 3 has an invalid length.
[  300.650134][T17851] nft_compat: unsupported protocol 0
[  300.679593][T17856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5237'.
[  300.709529][T17859] openvswitch: netlink: IP tunnel dst address not specified
[  300.715088][T17860] vlan0: entered promiscuous mode
[  300.870551][T17862] syz_tun: entered promiscuous mode
[  300.892891][T17862] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  300.901238][T17862] netlink: 41 bytes leftover after parsing attributes in process `syz.2.5239'.
[  300.905454][T17862] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5239'.
[  301.150962][T17875] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5243'.
[  301.221929][T17895] lo speed is unknown, defaulting to 1000
[  301.239197][T17895] lo speed is unknown, defaulting to 1000
[  301.253398][T17895] lo speed is unknown, defaulting to 1000
[  301.339208][T17902] xt_policy: too many policy elements
[  301.431274][T17895] infiniband sqz0: set active
[  301.433475][T17895] infiniband sqz0: added lo
[  301.434017][T17897] macsec1: entered promiscuous mode
[  301.448425][T17895] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  301.453187][T17895] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  301.458792][T17895] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  301.464389][ T9928] lo speed is unknown, defaulting to 1000
[  301.476574][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5256'.
[  301.484576][T17895] RDS/IB: sqz0: added
[  301.487571][T17895] smc: adding ib device sqz0 with port count 1
[  301.489690][T17895] smc:    ib device sqz0 port 1 has no pnetid
[  301.492098][ T9928] lo speed is unknown, defaulting to 1000
[  301.494656][T17895] lo speed is unknown, defaulting to 1000
[  301.592204][T17909] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address
[  301.596427][T17909] bond14: (slave vxcan1): Error -95 calling set_mac_address
[  301.666443][T17911] bond14: (slave gretap1): making interface the new active one
[  301.672566][T17911] bond14: (slave gretap1): Enslaving as an active interface with an up link
[  301.690465][T17909] macvlan3: entered promiscuous mode
[  301.692572][T17909] macvlan3: entered allmulticast mode
[  301.694976][T17909] bond14: entered promiscuous mode
[  301.696904][T17909] gretap1: entered promiscuous mode
[  301.702186][T17909] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  301.710062][T17909] bond14: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  301.718476][T17909] bond14: left promiscuous mode
[  301.720479][T17909] gretap1: left promiscuous mode
[  301.735909][T17895] lo speed is unknown, defaulting to 1000
[  301.790348][T17909] syz.1.5257 (17909) used greatest stack depth: 19192 bytes left
[  301.872865][T17913] syzkaller1: entered promiscuous mode
[  301.878404][T17913] syzkaller1: entered allmulticast mode
[  302.011870][T17895] lo speed is unknown, defaulting to 1000
[  302.031333][T17917] syzkaller1: entered promiscuous mode
[  302.031601][T17915] nbd0: detected capacity change from 0 to 63
[  302.034362][T17917] syzkaller1: entered allmulticast mode
[  302.040989][   T57] block nbd0: Receive control failed (result -104)
[  302.428034][T17941] validate_nla: 5 callbacks suppressed
[  302.428052][T17941] netlink: 'syz.2.5269': attribute type 6 has an invalid length.
[  302.436853][T17941] netlink: 'syz.2.5269': attribute type 6 has an invalid length.
[  303.186549][T17980] netlink: 'syz.1.5288': attribute type 8 has an invalid length.
[  303.193837][T17980] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  303.433166][T18000] SET target dimension over the limit!
[  303.763263][T18027] ip6_vti0 speed is unknown, defaulting to 1000
[  303.888563][T18034] netlink: 'syz.0.5313': attribute type 3 has an invalid length.
[  304.074463][T18044] syzkaller0: entered promiscuous mode
[  304.076368][T18044] syzkaller0: entered allmulticast mode
[  304.466266][T18077] netlink: 'syz.2.5333': attribute type 10 has an invalid length.
[  304.478820][T18077] bond0: (slave veth2): Enslaving as an active interface with a down link
[  304.711810][T18111] macsec0: entered allmulticast mode
[  304.714844][T18111] veth1_macvtap: entered allmulticast mode
[  304.717234][T18111] macsec0: left allmulticast mode
[  304.719087][T18111] veth1_macvtap: left allmulticast mode
[  304.831243][T18124] xt_CT: You must specify a L4 protocol and not use inversions on it
[  305.005792][T18144] netlink: 'syz.1.5366': attribute type 1 has an invalid length.
[  305.223931][T18162] smc: removing ib device syz2
[  305.310522][T18162] smbdirect: ib_dev[syz2] removed
[  305.446588][T18183] __nla_validate_parse: 8 callbacks suppressed
[  305.446604][T18183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5382'.
[  305.476076][T18183] netem: incorrect ge model size
[  305.481440][T18183] netem: change failed
[  305.819846][T18209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5393'.
[  306.241236][T18243] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5407'.
[  306.247554][T18243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5407'.
[  306.255628][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5407'.
[  306.385731][T18250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5410'.
[  306.582685][T18265] netlink: 'syz.2.5417': attribute type 8 has an invalid length.
[  306.585768][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5417'.
[  306.595624][T18265] veth1_to_team: entered promiscuous mode
[  306.598703][T18265] veth1_to_team: left promiscuous mode
[  306.758038][T18278] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5423'.
[  306.946923][T18288] netlink: 'syz.2.5427': attribute type 178 has an invalid length.
[  306.993879][T18290] netlink: 'syz.2.5428': attribute type 5 has an invalid length.
[  307.055733][T18294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5430'.
[  307.076518][T18296] netlink: 'syz.2.5431': attribute type 1 has an invalid length.
[  307.092122][T18296] 8021q: adding VLAN 0 to HW filter on device bond12
[  307.147451][T18296] bond12: (slave veth13): Enslaving as an active interface with a down link
[  307.180311][T18296] 8021q: adding VLAN 0 to HW filter on device batadv1
[  307.184397][T18296] bond12: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  310.397705][T18317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  310.475707][T18359] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5459'.
[  310.479348][T18359] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5459'.
[  310.483823][T18359] netlink: 'syz.0.5459': attribute type 5 has an invalid length.
[  310.487720][T18359] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5459'.
[  310.960051][T18405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5481'.
[  310.999779][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5482'.
[  311.008286][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5482'.
[  311.009165][T18411] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5485'.
[  311.013943][T18409] netlink: 58 bytes leftover after parsing attributes in process `syz.2.5482'.
[  311.171224][T18427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5491'.
[  311.217051][T18436] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  311.224002][T18436] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  311.246165][T18436] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.506914][T18469] netlink: 'syz.0.5509': attribute type 1 has an invalid length.
[  311.533511][T18469] 8021q: adding VLAN 0 to HW filter on device bond9
[  311.556966][T18469] bond9: (slave veth17): Enslaving as an active interface with a down link
[  311.576937][T18469] bond9: (slave veth19): Enslaving as an active interface with a down link
[  311.588220][T18469] bond9: entered allmulticast mode
[  312.560876][T18499] netlink: 5000 bytes leftover after parsing attributes in process `syz.1.5516'.
[  312.677068][T18505] : renamed from bond0
[  313.071862][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  313.224826][T18535] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  313.743151][T18570] netlink: 'syz.2.5550': attribute type 1 has an invalid length.
[  313.783620][T18570] bond13: entered promiscuous mode
[  313.789049][T18570] 8021q: adding VLAN 0 to HW filter on device bond13
[  313.824289][T18572] bond13: (slave veth15): making interface the new active one
[  313.826916][T18572] veth15: entered promiscuous mode
[  313.832926][T18572] bond13: (slave veth15): Enslaving as an active interface with an up link
[  314.664025][T18477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  314.906051][T18603] netlink: 'syz.0.5562': attribute type 21 has an invalid length.
[  314.909531][T18603] netlink: 'syz.0.5562': attribute type 4 has an invalid length.
[  314.912639][T18603] netlink: 'syz.0.5562': attribute type 3 has an invalid length.
[  314.956899][T18605]  (unregistering): Released all slaves
[  315.143512][T18612] bond10 (unregistering): Released all slaves
[  315.529620][T18642] openvswitch: netlink: Missing valid actions attribute.
[  315.541986][T18642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.028892][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810b089400: rx timeout, send abort
[  316.036034][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810b089400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  316.090475][T18656] sqz0: rxe_newlink: already configured on lo
[  316.529821][T18672] __nla_validate_parse: 6 callbacks suppressed
[  316.529832][T18672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5593'.
[  316.553749][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5594'.
[  317.262914][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5623'.
[  317.320209][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5628'.
[  317.457123][T18762] netlink: 364 bytes leftover after parsing attributes in process `syz.1.5634'.
[  317.469873][ T9942] lo speed is unknown, defaulting to 1000
[  318.451136][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5643'.
[  318.492927][T18786] netlink: 'syz.1.5645': attribute type 10 has an invalid length.
[  318.495544][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5643'.
[  318.496859][T18786] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5645'.
[  318.827147][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5657'.
[  319.039133][T18833] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  319.167324][T18835] IPVS: Scheduler module ip_vs_sip not found
[  319.608168][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5678'.
[  319.692805][T18869] xt_l2tp: invalid flags combination: 8
[  319.705962][T18864] netlink: 'syz.0.5678': attribute type 1 has an invalid length.
[  320.147677][T18885] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.168513][T18885] team0: left promiscuous mode
[  320.176617][T18885] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.200755][T18885] wireguard: wg2: Could not create IPv6 socket
[  320.212151][T18885] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  320.556682][T18909] netlink: 'syz.1.5696': attribute type 1 has an invalid length.
[  320.597898][T18909] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.636879][T18909] bond0: (slave geneve5): making interface the new active one
[  320.643260][T18909] bond0: (slave geneve5): Enslaving as an active interface with an up link
[  320.646580][ T8840] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.657771][ T8840] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.662757][ T8840] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.665371][ T8840] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.743597][T18919] ipt_rpfilter: unknown options
[  321.249450][ T5651] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  321.262418][T18936] netlink: 'syz.0.5708': attribute type 1 has an invalid length.
[  321.293873][T18936] 8021q: adding VLAN 0 to HW filter on device bond10
[  321.294134][ T5651] CPU: 1 UID: 0 PID: 5651 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  321.294147][ T5651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  321.294153][ T5651] Call Trace:
[  321.294157][ T5651]  <TASK>
[  321.294161][ T5651]  dump_stack_lvl+0xe8/0x150
[  321.294176][ T5651]  dump_header+0xd3/0x4c0
[  321.294191][ T5651]  oom_kill_process+0x3ab/0x970
[  321.294205][ T5651]  out_of_memory+0x106c/0x1410
[  321.294215][ T5651]  ? try_charge_memcg+0xbb9/0x1570
[  321.294228][ T5651]  ? __pfx___mutex_lock+0x10/0x10
[  321.294245][ T5651]  ? __pfx_out_of_memory+0x10/0x10
[  321.294253][ T5651]  ? do_raw_spin_unlock+0x4d/0x210
[  321.294270][ T5651]  try_charge_memcg+0xc77/0x1570
[  321.294290][ T5651]  ? __pfx_try_charge_memcg+0x10/0x10
[  321.294300][ T5651]  ? percpu_ref_tryget+0x15/0x180
[  321.294321][ T5651]  ? charge_memcg+0x23/0x2b0
[  321.294334][ T5651]  charge_memcg+0x1a2/0x2b0
[  321.294347][ T5651]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  321.294358][ T5651]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  321.294371][ T5651]  __swap_cache_prepare_and_add+0xdc/0x700
[  321.294383][ T5651]  ? page_rmappable_folio+0x9a/0x170
[  321.294400][ T5651]  swap_cache_alloc_folio+0xf1/0x240
[  321.294410][ T5651]  swap_cluster_readahead+0x523/0x670
[  321.294423][ T5651]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  321.294438][ T5651]  ? get_vma_policy+0x27b/0x3c0
[  321.294452][ T5651]  swapin_readahead+0x196/0xc50
[  321.294463][ T5651]  ? swap_table_get+0x1e/0x260
[  321.294473][ T5651]  ? __pfx_swapin_readahead+0x10/0x10
[  321.294483][ T5651]  ? swap_table_get+0x1e/0x260
[  321.294492][ T5651]  ? swap_table_get+0x1e/0x260
[  321.294499][ T5651]  ? swap_table_get+0x1e/0x260
[  321.294507][ T5651]  ? swap_table_get+0x216/0x260
[  321.294516][ T5651]  ? swap_cache_get_folio+0x2e4/0x2f0
[  321.294528][ T5651]  do_swap_page+0x555/0x5120
[  321.294540][ T5651]  ? __pte_offset_map+0x29/0x240
[  321.294550][ T5651]  ? __pte_offset_map+0x29/0x240
[  321.294564][ T5651]  ? do_swap_page+0x128/0x5120
[  321.294581][ T5651]  ? __pfx_do_swap_page+0x10/0x10
[  321.294589][ T5651]  ? __pte_offset_map+0x1ae/0x240
[  321.294600][ T5651]  ? pte_offset_map_rw_nolock+0xea/0x160
[  321.294611][ T5651]  handle_mm_fault+0x12d2/0x3170
[  321.294627][ T5651]  ? handle_mm_fault+0xee/0x3170
[  321.294644][ T5651]  ? __pfx_handle_mm_fault+0x10/0x10
[  321.294652][ T5651]  ? lock_vma_under_rcu+0x45a/0x500
[  321.294675][ T5651]  do_user_addr_fault+0xa73/0x1340
[  321.294687][ T5651]  ? rcu_is_watching+0x15/0xb0
[  321.294698][ T5651]  ? trace_page_fault_user+0x84/0x1e0
[  321.294708][ T5651]  exc_page_fault+0x6a/0xc0
[  321.294720][ T5651]  asm_exc_page_fault+0x26/0x30
[  321.294728][ T5651] RIP: 0033:0x7f107815d60e
[  321.294738][ T5651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  321.294745][ T5651] RSP: 002b:00007ffe3ca28918 EFLAGS: 00010246
[  321.294753][ T5651] RAX: 0000000000000000 RBX: 0000555571e56500 RCX: 00007f107815d60e
[  321.294759][ T5651] RDX: 00007ffe3ca28970 RSI: 0000000000000000 RDI: 0000000000000000
[  321.294764][ T5651] RBP: 00007ffe3ca289dc R08: 0000000000000000 R09: 0000000000000000
[  321.294768][ T5651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  321.294804][ T5651] R13: 00000000000927c0 R14: 000000000004e4c3 R15: 00007ffe3ca28a30
[  321.294819][ T5651]  </TASK>
[  321.294823][ T5651] memory: usage 307200kB, limit 307200kB, failcnt 1238
[  321.443591][T18936] veth21: entered allmulticast mode
[  321.453046][T18936] bond10: (slave veth21): Enslaving as an active interface with an up link
[  321.457983][ T5651] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[  321.465731][T18938] bond10 (unregistering): (slave veth21): Releasing backup interface
[  321.474532][T18938] bond10 (unregistering): Released all slaves
[  321.497061][ T5651] kmem: usage 304992kB, limit 9007199254740988kB, failcnt 0
[  321.508858][ T5651] Memory cgroup stats for /syz1:
[  321.509094][ T5651] cache 0
[  321.529131][ T5651] rss 0
[  321.543779][ T5651] rss_huge 0
[  321.545459][ T5651] shmem 0
[  321.546942][ T5651] mapped_file 0
[  321.549691][ T5651] dirty 0
[  321.550831][ T5651] writeback 0
[  321.555685][ T5651] workingset_refault_anon 2
[  321.558924][ T5651] workingset_refault_file 0
[  321.560293][ T5651] swap 16384
[  321.570459][ T5651] swapcached 32768
[  321.579339][ T5651] pgpgin 127745
[  321.580410][ T5651] pgpgout 127743
[  321.597465][ T5651] pgfault 254344
[  321.598574][ T5651] pgmajfault 1
[  321.605641][ T5651] inactive_anon 8192
[  321.606953][ T5651] active_anon 0
[  321.612247][ T5651] inactive_file 0
[  321.613576][ T5651] active_file 0
[  321.619025][ T5651] unevictable 0
[  321.622774][ T5651] hierarchical_memory_limit 314572800
[  321.624390][ T5651] hierarchical_memsw_limit 9223372036854771712
[  321.632022][ T5651] total_cache 0
[  321.633724][ T5651] total_rss 0
[  321.635495][ T5651] total_rss_huge 0
[  321.636991][ T5651] total_shmem 0
[  321.644490][ T5651] total_mapped_file 0
[  321.646094][ T5651] total_dirty 0
[  321.652160][ T5651] total_writeback 0
[  321.653764][ T5651] total_workingset_refault_anon 8
[  321.657396][ T5651] total_workingset_refault_file 0
[  321.670419][ T5651] total_swap 192512
[  321.675601][ T5651] total_swapcached 266240
[  321.683026][ T5651] total_pgpgin 167401
[  321.685603][ T5651] total_pgpgout 167397
[  321.692522][ T5651] total_pgfault 337233
[  321.694523][ T5651] total_pgmajfault 8
[  321.697765][ T5651] total_inactive_anon 8192
[  321.701174][ T5651] total_active_anon 8192
[  321.708042][ T5651] total_inactive_file 0
[  321.715630][ T5651] total_active_file 0
[  321.717438][ T5651] total_unevictable 0
[  321.719014][ T5651] anon_cost 0
[  321.728835][ T5651] file_cost 0
[  321.730155][ T5651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1/syz0,task=syz.1.5700,pid=18916,uid=0
[  321.746545][ T5651] Memory cgroup out of memory: Killed process 18916 (syz.1.5700) total-vm:102424kB, anon-rss:1244kB, file-rss:22824kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  322.032490][T18964] bond10: entered promiscuous mode
[  322.037975][T18969] __nla_validate_parse: 2 callbacks suppressed
[  322.037985][T18969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5722'.
[  322.053769][T18964] vcan1: entered promiscuous mode
[  322.057061][T18964] vcan1: entered allmulticast mode
[  322.063466][T18964] bond10: (slave vcan1): The slave device specified does not support setting the MAC address
[  322.074646][T18964] bond10: (slave vcan1): Error -95 calling set_mac_address
[  322.646978][T18995] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5730'.
[  322.688414][T18997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5733'.
[  323.428352][T19044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5754'.
[  323.503917][T19048] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode
[  323.904639][T19072] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5769'.
[  326.927197][T19126] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5792'.
[  326.930531][T19126] 0: renamed from hsr0
[  327.015590][T19126] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  327.025309][T19126] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  327.036154][T19126] 0: entered allmulticast mode
[  327.038100][T19126] hsr_slave_0: entered allmulticast mode
[  327.040083][T19126] hsr_slave_1: entered allmulticast mode
[  327.041200][T19132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5795'.
[  327.044533][T19126] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  327.369757][T19156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5807'.
[  327.793177][T19188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5821'.
[  327.796224][T19188] netlink: 'syz.0.5821': attribute type 30 has an invalid length.
[  327.843328][T19188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5821'.
[  327.846350][T19188] netlink: 'syz.0.5821': attribute type 30 has an invalid length.
[  327.936563][T19190] netlink: 'syz.0.5822': attribute type 12 has an invalid length.
[  328.035379][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5822'.
[  328.039983][T19191] macsec0: entered promiscuous mode
[  328.047582][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5822'.
[  328.054951][T19191] macsec0 (unregistering): left promiscuous mode
[  328.264592][T19193] : renamed from bond_slave_0
[  328.428404][T19200] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5826'.
[  328.664997][T19213] netlink: 'syz.1.5831': attribute type 6 has an invalid length.
[  329.106739][T19237] netlink: 'syz.1.5843': attribute type 12 has an invalid length.
[  329.292367][T19239] block nbd3: server does not support multiple connections per device.
[  329.297826][T19239] block nbd3: shutting down sockets
[  329.386563][T19246] netlink: 'syz.0.5846': attribute type 1 has an invalid length.
[  329.389825][T19246] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5846'.
[  329.419232][T19246] vti1: entered promiscuous mode
[  330.428910][T19280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5860'.
[  331.053679][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.058657][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.062987][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.066866][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.262713][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5891'.
[  331.518454][T19362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5898'.
[  331.659253][T19370] openvswitch: netlink: Unknown nsh attribute 0
[  331.925999][T19394] netlink: 'syz.1.5913': attribute type 62 has an invalid length.
[  332.061103][T19404] netlink: 'syz.1.5918': attribute type 18 has an invalid length.
[  332.072902][T19404] netlink: 'syz.1.5918': attribute type 18 has an invalid length.
[  332.150064][T19412] netlink: 'syz.0.5922': attribute type 29 has an invalid length.
[  332.267640][  T136] block nbd0: Possible stuck request ffff888105b60000: control (read@0,1024B). Runtime 30 seconds
[  332.272946][  T136] block nbd0: Possible stuck request ffff888105b60200: control (read@1024,1024B). Runtime 30 seconds
[  332.280572][  T136] block nbd0: Possible stuck request ffff888105b60400: control (read@2048,1024B). Runtime 30 seconds
[  332.285337][  T136] block nbd0: Possible stuck request ffff888105b60600: control (read@3072,1024B). Runtime 30 seconds
[  332.560028][T19444] nbd: couldn't find a device at index 2
[  332.688976][T19461] __nla_validate_parse: 7 callbacks suppressed
[  332.688986][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5948'.
[  332.766383][T19472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5952'.
[  332.779498][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5949'.
[  332.887163][T19475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  332.978774][T19485] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  332.992023][T19485] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  333.064974][T19491] validate_nla: 4 callbacks suppressed
[  333.064993][T19491] netlink: 'syz.1.5958': attribute type 1 has an invalid length.
[  333.256315][T19507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.315879][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5968'.
[  333.387861][T19519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5972'.
[  333.470256][T19525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5974'.
[  333.502036][T19525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5974'.
[  333.908367][T19550] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.5986'.
[  334.427280][ T6832] tipc: Resetting bearer <eth:syzkaller0>
[  334.673095][T19598] veth0: entered promiscuous mode
[  334.675422][T19598] veth0: left promiscuous mode
[  334.971283][T19626] : renamed from vlan0
[  335.259953][ T9942] hid-generic 0005:046D:0A0E.0002: item fetching failed at offset 0/1
[  335.270837][ T9942] hid-generic 0005:046D:0A0E.0002: probe with driver hid-generic failed with error -22
[  335.636093][T19662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6040'.
[  337.617664][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6046'.
[  337.741930][T19690] __nla_validate_parse: 1 callbacks suppressed
[  337.741942][T19690] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6050'.
[  337.890182][T19708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6059'.
[  337.911242][T19708] bond14: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  337.915902][T19708] bond14 (unregistering): Released all slaves
[  338.131059][T19721] tipc: Resetting bearer <eth:syzkaller0>
[  338.135213][T19721] tipc: Resetting bearer <eth:syzkaller0>
[  338.158275][T19721] netlink: 'syz.2.6064': attribute type 16 has an invalid length.
[  338.161345][T19721] netlink: 'syz.2.6064': attribute type 17 has an invalid length.
[  338.205524][T19721] syz_tun: left promiscuous mode
[  338.226887][T19721] veth0_macvtap: left promiscuous mode
[  338.229582][T19721] veth0_macvtap: entered promiscuous mode
[  338.237596][T19721] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  338.261281][ T5676] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.264326][ T5676] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.271047][T19727] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6067'.
[  338.290284][ T5676] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.302277][ T5676] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.576577][T19755] netlink: 'syz.0.6080': attribute type 12 has an invalid length.
[  338.581562][T19755] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.6080'.
[  338.665141][ T5676] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.667758][ T5676] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.670778][ T5676] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.677474][ T5676] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.973645][T19783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6092'.
[  339.384842][T19801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6100'.
[  339.523229][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6103'.
[  341.023443][T19839] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6118'.
[  341.783685][T19773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  341.964082][T19851] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.6122'.
[  342.086308][T19860] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6123'.
[  342.381796][T19888] netlink: 'syz.0.6135': attribute type 1 has an invalid length.
[  342.384245][T19888] netlink: 'syz.0.6135': attribute type 2 has an invalid length.
[  342.810595][T19934] __nla_validate_parse: 6 callbacks suppressed
[  342.810637][T19934] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6150'.
[  342.856592][T19933] netlink: 'syz.1.6156': attribute type 1 has an invalid length.
[  342.866200][T19936] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6157'.
[  342.869205][T19936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  342.964824][T19940] syzkaller0: entered promiscuous mode
[  342.968244][T19940] syzkaller0: entered allmulticast mode
[  343.009842][T19942] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  343.483804][T19990] bond0: (slave wlan0): Error: Device can not be enslaved while up
[  343.587650][T20002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6188'.
[  343.773939][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6196'.
[  343.836118][T20029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6200'.
[  343.843922][T20029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6200'.
[  343.980519][T20043] netlink: 'syz.1.6207': attribute type 21 has an invalid length.
[  343.983835][T20043] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6207'.
[  343.990838][T20043] netlink: 'syz.1.6207': attribute type 1 has an invalid length.
[  344.005285][T20043] xt_hashlimit: size too large, truncated to 1048576
[  344.166856][T20057] macsec3: entered promiscuous mode
[  344.522781][T20088] bridge9: entered promiscuous mode
[  345.264546][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6239'.
[  345.569315][T20135] ip6gre2: entered promiscuous mode
[  345.571157][T20135] ip6gre2: entered allmulticast mode
[  345.811447][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6262'.
[  345.920131][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6269'.
[  345.936342][T20174] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  345.945336][T20174] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  346.082961][T20185] bridge11: entered promiscuous mode
[  346.214801][T20194] xt_socket: unknown flags 0x50
[  346.285172][T20198] vlan0: entered promiscuous mode
[  346.286689][T20198] bridge0: entered promiscuous mode
[  346.582039][T20228] 8021q: adding VLAN 0 to HW filter on device bond15
[  346.594262][T20228] vlan0: entered promiscuous mode
[  346.595982][T20228] bond15: entered promiscuous mode
[  346.597840][T20228] vlan0: entered allmulticast mode
[  346.599477][T20228] bond15: entered allmulticast mode
[  346.608485][T20228] 8021q: adding VLAN 0 to HW filter on device batadv1
[  346.612488][T20228] batadv1: entered promiscuous mode
[  346.614569][T20228] batadv1: entered allmulticast mode
[  346.620659][T20228] bond15: (slave batadv1): Enslaving as an active interface with an up link
[  347.709837][T20320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  347.789104][T20329] syzkaller1: entered promiscuous mode
[  347.791018][T20329] syzkaller1: entered allmulticast mode
[  347.935342][T20337] __nla_validate_parse: 5 callbacks suppressed
[  347.935359][T20337] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6346'.
[  348.063514][T20348] : renamed from bond0
[  348.130739][T20355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6351'.
[  348.183741][T20361] x_tables: duplicate underflow at hook 2
[  348.341339][T20375] dvmrp6: left allmulticast mode
[  348.386846][T20375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6365'.
[  348.393151][T20375] nbd: must specify a device to reconfigure
[  348.464493][T20383] netlink: 'syz.1.6368': attribute type 1 has an invalid length.
[  348.488795][T20383] bond16: entered promiscuous mode
[  348.490847][T20383] 8021q: adding VLAN 0 to HW filter on device bond16
[  348.524351][T20383] bond16: (slave bridge12): making interface the new active one
[  348.527301][T20383] bridge12: entered promiscuous mode
[  348.533557][T20383] bridge12: left promiscuous mode
[  348.809395][T20402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6377'.
[  348.928489][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6381'.
[  349.077154][T20422] netlink: 'syz.1.6386': attribute type 11 has an invalid length.
[  349.081095][T20422] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.6386'.
[  349.316285][T20432] ip6gretap1: entered promiscuous mode
[  349.321085][T20412] lo speed is unknown, defaulting to 1000
[  350.132173][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6402'.
[  350.420276][ T8116] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  350.426936][ T8116] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  350.433362][ T8116] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  350.439849][ T8116] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  350.553913][T20476] ip6tnl6: entered promiscuous mode
[  350.752655][T20494] netlink: 'syz.1.6420': attribute type 5 has an invalid length.
[  351.137833][T20538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6440'.
[  351.163990][T20538] ipvlan4: entered allmulticast mode
[  351.165955][T20538] gretap0: entered allmulticast mode
[  351.217764][T20544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6445'.
[  351.220607][T20544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6445'.
[  351.326270][T20558] syzkaller0: entered promiscuous mode
[  351.327959][T20558] syzkaller0: entered allmulticast mode
[  351.408101][T20566] xt_hashlimit: size too large, truncated to 1048576
[  351.896903][T20613] atomic_op ffff888174ffa198 conn xmit_atomic 0000000000000000
[  351.998421][T20617] hmac(sha2: entered promiscuous mode
[  352.230702][T20644] vlan0: entered promiscuous mode
[  352.377835][T20651] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.387076][T20651] bond0: option mode: unable to set because the bond device is up
[  352.454568][T20656] netlink: 'syz.2.6493': attribute type 1 has an invalid length.
[  352.547846][T20664] netlink: zone id is out of range
[  352.551203][T20664] netlink: zone id is out of range
[  352.553470][T20664] netlink: zone id is out of range
[  352.555241][T20664] netlink: zone id is out of range
[  352.557320][T20664] netlink: zone id is out of range
[  352.562848][T20664] netlink: zone id is out of range
[  352.565152][T20664] netlink: zone id is out of range
[  352.567123][T20664] netlink: zone id is out of range
[  352.569203][T20664] netlink: zone id is out of range
[  352.571228][T20664] netlink: zone id is out of range
[  352.822978][T20682] tipc: Resetting bearer <eth:syzkaller0>
[  353.044011][T20701] __nla_validate_parse: 16 callbacks suppressed
[  353.044021][T20701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6514'.
[  353.185447][T20709] netlink: 277 bytes leftover after parsing attributes in process `syz.2.6518'.
[  353.279603][T20720] veth27: entered allmulticast mode
[  353.295898][T20720] syzkaller0: entered promiscuous mode
[  353.297622][T20720] syzkaller0: entered allmulticast mode
[  353.348580][T20722] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.399371][T20725] sctp: [Deprecated]: syz.0.6525 (pid 20725) Use of int in maxseg socket option.
[  353.399371][T20725] Use struct sctp_assoc_value instead
[  353.408855][T20722] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6524'.
[  353.539350][T20732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6528'.
[  353.670499][T20744] batadv0: entered promiscuous mode
[  353.683147][T20744] gretap0: entered promiscuous mode
[  353.690679][T20744] hsr0: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  353.699932][T20744] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  353.712697][T20744] hsr0: entered allmulticast mode
[  353.714564][T20744] batadv0: entered allmulticast mode
[  353.824477][T20756] netlink: 'syz.1.6538': attribute type 1 has an invalid length.
[  353.827477][T20756] netlink: 'syz.1.6538': attribute type 1 has an invalid length.
[  353.830222][T20756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6538'.
[  353.836278][T20756] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6538'.
[  353.886131][T20760] netlink: 'syz.1.6540': attribute type 8 has an invalid length.
[  353.889555][T20760] netlink: 'syz.1.6540': attribute type 4 has an invalid length.
[  353.951251][   T34] audit: type=1804 audit(1778621428.702:12): pid=20764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6542" name="/newroot/2252/memory.events" dev="tmpfs" ino=11363 res=1 errno=0
[  353.960454][   T34] audit: type=1800 audit(1778621428.702:13): pid=20764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6542" name="memory.events" dev="tmpfs" ino=11363 res=0 errno=0
[  353.991158][T20764] bond17: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  354.003008][T20764] bond17 (unregistering): Released all slaves
[  354.167990][T20769] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6544'.
[  354.367070][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6549'.
[  354.417426][T20787] netlink: 'syz.2.6552': attribute type 11 has an invalid length.
[  354.654716][T20809] xt_TPROXY: Can be used only with -p tcp or -p udp
[  355.131298][T20839] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6576'.
[  355.300241][T20854] netlink: 'syz.2.6584': attribute type 9 has an invalid length.
[  355.601295][T20866] Bluetooth: hci1: too big key_count value 29096
[  356.224028][T20909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.277067][T20909] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  356.285773][T20909] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  356.294402][T20909] veth1_vlan: left promiscuous mode
[  356.307628][T20909] veth1_vlan: entered promiscuous mode
[  356.350883][  T294] syz0: Port: 1 Link ACTIVE
[  356.360781][ T8116] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  356.367925][ T8116] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  356.375485][ T8116] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.384320][ T8116] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  357.039653][T20935] netlink: 'syz.1.6621': attribute type 1 has an invalid length.
[  357.043745][T20935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6621'.
[  357.245981][T20948] netlink: 'syz.0.6628': attribute type 4 has an invalid length.
[  358.074139][T21005] netlink: 'syz.2.6653': attribute type 11 has an invalid length.
[  358.641758][T21053] net_ratelimit: 342 callbacks suppressed
[  358.641775][T21053] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  359.052746][T21073] __nla_validate_parse: 3 callbacks suppressed
[  359.052761][T21073] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6680'.
[  361.583863][T21048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  362.067476][T21138] batman_adv: batadv0: Adding interface: vlan5
[  362.069710][T21138] batman_adv: batadv0: The MTU of interface vlan5 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  362.078331][T21138] batman_adv: batadv0: Not using interface vlan5 (retrying later): interface not active
[  362.186230][T21143] tunl0: left promiscuous mode
[  362.240003][T21146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6711'.
[  362.305107][T21153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6713'.
[  362.349791][  T136] block nbd0: Possible stuck request ffff888105b60000: control (read@0,1024B). Runtime 60 seconds
[  362.354578][  T136] block nbd0: Possible stuck request ffff888105b60200: control (read@1024,1024B). Runtime 60 seconds
[  362.359233][  T136] block nbd0: Possible stuck request ffff888105b60400: control (read@2048,1024B). Runtime 60 seconds
[  362.363704][  T136] block nbd0: Possible stuck request ffff888105b60600: control (read@3072,1024B). Runtime 60 seconds
[  362.456767][T21143] 0: left allmulticast mode
[  362.458588][T21143] hsr_slave_0: left allmulticast mode
[  362.460719][T21143] hsr_slave_1: left allmulticast mode
[  362.478701][T21143] : left promiscuous mode
[  362.492322][T21143] tipc: Resetting bearer <eth:syzkaller0>
[  362.502501][T21143] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  362.505049][T21143] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  362.509167][T21143] mac80211_hwsim hwsim21 wlan0: left promiscuous mode
[  362.514216][T21143] vti1: left promiscuous mode
[  362.515809][T21143] vti1: left allmulticast mode
[  362.525144][T21143] bridge11: left promiscuous mode
[  362.533316][T21143] vlan0: left promiscuous mode
[  362.534929][T21143] bond15: left promiscuous mode
[  362.536563][T21143] batadv1: left promiscuous mode
[  362.538399][T21143] vlan0: left allmulticast mode
[  362.540048][T21143] bond15: left allmulticast mode
[  362.542221][T21143] batadv1: left allmulticast mode
[  362.545859][T21143] bond16: left promiscuous mode
[  362.554449][T21143] hsr0: left allmulticast mode
[  362.556040][T21143] batadv0: left allmulticast mode
[  362.566620][ T5719] syz0: Port: 1 Link DOWN
[  362.568878][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.575575][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  362.585459][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.592271][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  362.631992][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.639239][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  362.643673][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.646852][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  362.652252][T21161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6716'.
[  362.787725][T21173] netlink: 'syz.0.6719': attribute type 13 has an invalid length.
[  362.805450][T21173] netlink: 'syz.0.6719': attribute type 17 has an invalid length.
[  362.844303][T21173] 8021q: adding VLAN 0 to HW filter on device 
[  362.853159][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6719'.
[  362.866338][T21173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.877893][T21173] wireguard: wg2: Could not create IPv6 socket
[  362.879806][T21173] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  363.214496][T21186] lo speed is unknown, defaulting to 1000
[  363.258283][T21209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6733'.
[  363.822647][T21241] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.6749'.
[  364.414106][T21279] xt_l2tp: missing protocol rule (udp|l2tpip)
[  364.468511][T21283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6767'.
[  364.605036][T21297] atomic_op ffff888114bc1998 conn xmit_atomic 0000000000000000
[  364.721901][T21304] IPVS: Scheduler module ip_vs_sip not found
[  365.262422][T21339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6790'.
[  365.660260][T21361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6791'.
[  365.688504][T21361] erspan0: entered promiscuous mode
[  365.807134][T21369] netem: invalid attributes len -1
[  365.809149][T21369] netem: change failed
[  366.030902][T21381] netlink: 'syz.0.6798': attribute type 1 has an invalid length.
[  366.059483][T21381] bond11: (slave geneve3): making interface the new active one
[  366.066741][T21381] bond11: (slave geneve3): Enslaving as an active interface with an up link
[  366.070118][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  366.074319][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  366.077759][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  366.080966][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  366.327619][T21394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6802'.
[  366.466689][T21408] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  366.470191][T21408] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  366.473210][T21408] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  366.477601][T21408] tipc: Resetting bearer <eth:syzkaller0>
[  366.809281][T21442] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6823'.
[  366.856958][T21447] netlink: 'syz.1.6827': attribute type 3 has an invalid length.
[  366.860223][T21447] netlink: 'syz.1.6827': attribute type 3 has an invalid length.
[  366.865666][T21447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6827'.
[  367.008506][T21463] netlink: 'syz.2.6834': attribute type 1 has an invalid length.
[  367.022631][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  367.027688][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  367.033867][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  367.040388][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  367.163418][T21475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6841'.
[  367.180893][T21475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6841'.
[  367.192148][T21475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6841'.
[  367.636964][T21509] xt_hl: Unknown Hop Limit match mode: 206
[  367.720117][T21511] dvmrp0: entered allmulticast mode
[  368.015955][T21532] netlink: 'syz.1.6864': attribute type 1 has an invalid length.
[  368.019046][T21532] netlink: 1008 bytes leftover after parsing attributes in process `syz.1.6864'.
[  368.485996][T21568] 8021q: adding VLAN 0 to HW filter on device bond14
[  368.743704][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.806090][T21574] lo speed is unknown, defaulting to 1000
[  369.393309][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.404382][T21600] openvswitch: netlink: EtherType 50a is less than min 600
[  369.550933][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.860532][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.979687][T21631] __nla_validate_parse: 1 callbacks suppressed
[  369.979715][T21631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6909'.
[  370.165587][T21644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6914'.
[  370.465552][T21665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6924'.
[  370.747755][T21680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6928'.
[  371.201066][T21696] netlink: 'syz.0.6936': attribute type 1 has an invalid length.
[  371.210596][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6936'.
[  371.318180][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.328407][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6939'.
[  371.339767][T21702] SET target dimension over the limit!
[  371.480251][T21707] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  371.511074][T21707] bond17: (slave lo): Enslaving as an active interface with an up link
[  371.515132][T21707] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  371.613307][T21719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6946'.
[  371.734610][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6945'.
[  371.888040][T21734] xt_ecn: cannot match TCP bits for non-tcp packets
[  371.918130][T21736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6954'.
[  371.920882][T21736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6954'.
[  372.846817][T21801] dvmrp1: entered allmulticast mode
[  373.034247][T21804] lo speed is unknown, defaulting to 1000
[  375.630597][T21786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  375.916398][T21870] __nla_validate_parse: 2 callbacks suppressed
[  375.916435][T21870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7011'.
[  376.012769][T21874] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7013'.
[  376.440294][T21912] netlink: 'syz.0.7031': attribute type 21 has an invalid length.
[  376.445765][T21912] IPv6: NLM_F_CREATE should be specified when creating new route
[  376.448101][T21914] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  376.449307][T21912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  376.456408][T21912] IPv6: NLM_F_CREATE should be set when creating new route
[  376.459200][T21912] IPv6: NLM_F_CREATE should be set when creating new route
[  376.462039][T21912] IPv6: NLM_F_CREATE should be set when creating new route
[  376.468756][T21912] netlink: 'syz.0.7031': attribute type 21 has an invalid length.
[  376.472241][T21912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  376.649442][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7038'.
[  376.736003][T21934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.789290][T21939] netlink: 'syz.1.7042': attribute type 1 has an invalid length.
[  377.028190][T21952] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:16
[  377.109165][T21957] No such timeout policy "syz1"
[  377.332759][T21979] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y
[  377.332759][T21979] 3UH5rBn
[  377.464569][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7067'.
[  377.486341][T21993] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  377.524091][T21993] veth13: entered promiscuous mode
[  377.656036][T22003] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7073'.
[  377.708309][T22003] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  377.713136][T22003] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  377.837804][T22014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7078'.
[  377.907615][T22021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7078'.
[  377.917683][T22021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7078'.
[  377.998879][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7085'.
[  378.001792][T22028] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  378.253609][T22047] netlink: 'syz.1.7091': attribute type 1 has an invalid length.
[  378.256530][T22047] netlink: 276 bytes leftover after parsing attributes in process `syz.1.7091'.
[  378.343232][T22055] batadv_slave_1: entered promiscuous mode
[  378.348247][T22054] batadv_slave_1: left promiscuous mode
[  378.495253][T22071] sit4: entered allmulticast mode
[  378.821172][T22102] syzkaller0: entered promiscuous mode
[  378.826809][T22102] syzkaller0: entered allmulticast mode
[  379.234915][T22131] tun0: tun_chr_ioctl cmd 1074025675
[  379.237136][T22131] tun0: persist enabled
[  379.239384][T22131] tun0: tun_chr_ioctl cmd 1074025675
[  379.242041][T22131] tun0: persist enabled
[  379.244562][T22131] tun0: tun_chr_ioctl cmd 1074025673
[  379.385296][T22137] netlink: 'syz.1.7134': attribute type 11 has an invalid length.
[  379.733787][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  379.738467][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  379.746135][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  379.751809][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  379.948634][T22175] syzkaller1: entered allmulticast mode
[  380.008750][T22177] bond18: option primary_reselect: invalid value (133)
[  380.017502][T22177] bond18 (unregistering): Released all slaves
[  380.108482][T22186] syzkaller1: entered promiscuous mode
[  380.110496][T22186] syzkaller1: entered allmulticast mode
[  380.357717][ T5058] udevd[5058]: worker [17028] /devices/virtual/block/nbd0 is taking a long time
[  380.407324][T22201] xt_hl: Unknown TTL match mode: 237
[  380.997325][T22247] netlink: 'syz.0.7186': attribute type 1 has an invalid length.
[  381.060345][T22247] 8021q: adding VLAN 0 to HW filter on device bond12
[  381.720871][T22298] hmac(sha224: entered promiscuous mode
[  381.757044][T22304] __nla_validate_parse: 9 callbacks suppressed
[  381.757069][T22304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7213'.
[  382.056874][T22326] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7224'.
[  382.094654][T22328] netlink: 'syz.1.7223': attribute type 4 has an invalid length.
[  382.844162][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7237'.
[  383.152626][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7246'.
[  383.156284][T22378] openvswitch: netlink: Message has 2 unknown bytes.
[  383.258398][T22384] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7248'.
[  383.298607][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7251'.
[  383.345597][T22390] 8021q: adding VLAN 0 to HW filter on device bond13
[  383.490230][T22404] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7257'.
[  383.493831][T22404] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7257'.
[  383.628112][T22407] IPv6: Can't replace route, no match found
[  383.797867][T22421] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7265'.
[  383.964061][T22439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7274'.
[  384.135973][T22457] syzkaller0: entered promiscuous mode
[  384.137756][T22457] syzkaller0: entered allmulticast mode
[  384.287874][T22467] netlink: 'syz.0.7288': attribute type 10 has an invalid length.
[  384.294615][T22467] netlink: 'syz.0.7288': attribute type 10 has an invalid length.
[  384.609132][T22486] netlink: 'syz.0.7295': attribute type 11 has an invalid length.
[  385.186371][T22509] veth1_macvtap: left promiscuous mode
[  385.188643][T22509] macsec0: entered promiscuous mode
[  385.601661][T22528] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  385.805471][T22544] ip6t_rpfilter: unknown options
[  385.850645][T22550] netem: change failed
[  386.004914][T22560] netlink: 'syz.1.7330': attribute type 8 has an invalid length.
[  386.014231][T22560] veth1_to_team: entered promiscuous mode
[  386.017607][T22560] veth1_to_team: left promiscuous mode
[  386.037502][T22554] 
[  386.038492][T22554] ======================================================
[  386.041125][T22554] WARNING: possible circular locking dependency detected
[  386.044122][T22554] syzkaller #0 Not tainted
[  386.045931][T22554] ------------------------------------------------------
[  386.048682][T22554] syz.2.7327/22554 is trying to acquire lock:
[  386.051267][T22554] ffff888105b1aac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  386.055072][T22554] 
[  386.055072][T22554] but task is already holding lock:
[  386.058645][T22554] ffff888105b1a5a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450
[  386.062603][T22554] 
[  386.062603][T22554] which lock already depends on the new lock.
[  386.062603][T22554] 
[  386.065957][T22554] 
[  386.065957][T22554] the existing dependency chain (in reverse order) is:
[  386.068810][T22554] 
[  386.068810][T22554] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  386.071905][T22554]        blk_alloc_queue+0x546/0x680
[  386.073913][T22554]        __blk_mq_alloc_disk+0x197/0x390
[  386.075991][T22554]        nbd_dev_add+0x499/0xb50
[  386.077879][T22554]        nbd_init+0x168/0x1f0
[  386.079669][T22554]        do_one_initcall+0x250/0x870
[  386.081653][T22554]        do_initcall_level+0x104/0x190
[  386.083703][T22554]        do_initcalls+0x59/0xa0
[  386.085553][T22554]        kernel_init_freeable+0x2a6/0x3e0
[  386.087687][T22554]        kernel_init+0x1d/0x1d0
[  386.089748][T22554]        ret_from_fork+0x514/0xb70
[  386.091718][T22554]        ret_from_fork_asm+0x1a/0x30
[  386.093744][T22554] 
[  386.093744][T22554] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  386.096394][T22554]        fs_reclaim_acquire+0x71/0x100
[  386.098496][T22554]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  386.101915][T22554]        __alloc_skb+0x1d0/0x7d0
[  386.104368][T22554]        __ip6_append_data+0x2d3c/0x3f60
[  386.106876][T22554]        ip6_append_data+0x10f/0x280
[  386.109004][T22554]        rawv6_sendmsg+0x12d3/0x18e0
[  386.110714][T22554]        ____sys_sendmsg+0x80a/0x9f0
[  386.112641][T22554]        ___sys_sendmsg+0x2a5/0x360
[  386.114385][T22554]        __x64_sys_sendmsg+0x1bd/0x2a0
[  386.115997][T22554]        do_syscall_64+0x15f/0xf80
[  386.117451][T22554]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.119462][T22554] 
[  386.119462][T22554] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  386.122104][T22554]        lock_sock_nested+0x41/0x100
[  386.124057][T22554]        inet_shutdown+0x6a/0x390
[  386.126563][T22554]        nbd_mark_nsock_dead+0x2e9/0x560
[  386.128844][T22554]        recv_work+0x1c2e/0x1d40
[  386.130895][T22554]        process_scheduled_works+0xb5d/0x1860
[  386.133164][T22554]        worker_thread+0xa53/0xfc0
[  386.135124][T22554]        kthread+0x388/0x470
[  386.136860][T22554]        ret_from_fork+0x514/0xb70
[  386.138814][T22554]        ret_from_fork_asm+0x1a/0x30
[  386.140816][T22554] 
[  386.140816][T22554] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  386.143797][T22554]        __mutex_lock+0x1a3/0x1550
[  386.146232][T22554]        nbd_queue_rq+0x37b/0x1100
[  386.148165][T22554]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  386.150474][T22554]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  386.153232][T22554]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  386.155784][T22554]        blk_mq_run_hw_queue+0x348/0x4f0
[  386.158057][T22554]        blk_mq_dispatch_list+0xd16/0xe10
[  386.160137][T22554]        blk_mq_flush_plug_list+0x48d/0x570
[  386.162302][T22554]        __blk_flush_plug+0x3ed/0x4d0
[  386.164305][T22554]        __submit_bio+0x28d/0x580
[  386.166141][T22554]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  386.168011][T22554]        block_read_full_folio+0x599/0x830
[  386.170233][T22554]        filemap_read_folio+0x137/0x3b0
[  386.172287][T22554]        do_read_cache_folio+0x358/0x590
[  386.173983][T22554]        read_part_sector+0xb6/0x2b0
[  386.175633][T22554]        adfspart_check_ICS+0xb1/0x960
[  386.177252][T22554]        bdev_disk_changed+0x817/0x1770
[  386.179285][T22554]        blkdev_get_whole+0x380/0x510
[  386.181306][T22554]        bdev_open+0x31e/0xd30
[  386.183198][T22554]        blkdev_open+0x470/0x610
[  386.185078][T22554]        do_dentry_open+0x785/0x14e0
[  386.187240][T22554]        vfs_open+0x3b/0x340
[  386.189160][T22554]        path_openat+0x2e08/0x3860
[  386.191127][T22554]        do_file_open+0x23e/0x4a0
[  386.193005][T22554]        do_sys_openat2+0x113/0x200
[  386.194956][T22554]        __x64_sys_openat+0x138/0x170
[  386.196843][T22554]        do_syscall_64+0x15f/0xf80
[  386.198272][T22554]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.200443][T22554] 
[  386.200443][T22554] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  386.203001][T22554]        __mutex_lock+0x1a3/0x1550
[  386.204921][T22554]        nbd_queue_rq+0xc6/0x1100
[  386.206915][T22554]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  386.209461][T22554]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  386.212526][T22554]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  386.214974][T22554]        blk_mq_run_hw_queue+0x348/0x4f0
[  386.217097][T22554]        blk_mq_dispatch_list+0xd16/0xe10
[  386.219233][T22554]        blk_mq_flush_plug_list+0x48d/0x570
[  386.221480][T22554]        __blk_flush_plug+0x3ed/0x4d0
[  386.223727][T22554]        __submit_bio+0x28d/0x580
[  386.225816][T22554]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  386.228346][T22554]        block_read_full_folio+0x599/0x830
[  386.230564][T22554]        filemap_read_folio+0x137/0x3b0
[  386.232604][T22554]        do_read_cache_folio+0x358/0x590
[  386.234709][T22554]        read_part_sector+0xb6/0x2b0
[  386.236318][T22554]        adfspart_check_ICS+0xb1/0x960
[  386.238110][T22554]        bdev_disk_changed+0x817/0x1770
[  386.239779][T22554]        blkdev_get_whole+0x380/0x510
[  386.241840][T22554]        bdev_open+0x31e/0xd30
[  386.243691][T22554]        blkdev_open+0x470/0x610
[  386.245512][T22554]        do_dentry_open+0x785/0x14e0
[  386.247383][T22554]        vfs_open+0x3b/0x340
[  386.249032][T22554]        path_openat+0x2e08/0x3860
[  386.250994][T22554]        do_file_open+0x23e/0x4a0
[  386.253024][T22554]        do_sys_openat2+0x113/0x200
[  386.254942][T22554]        __x64_sys_openat+0x138/0x170
[  386.257044][T22554]        do_syscall_64+0x15f/0xf80
[  386.258776][T22554]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.260993][T22554] 
[  386.260993][T22554] -> #1 (set->srcu){.+.+}-{0:0}:
[  386.263354][T22554]        __synchronize_srcu+0xca/0x300
[  386.265705][T22554]        elevator_switch+0x1e8/0x7a0
[  386.267534][T22554]        elevator_change+0x2cc/0x450
[  386.269499][T22554]        elevator_set_default+0x36c/0x430
[  386.271301][T22554]        blk_register_queue+0x3e9/0x4e0
[  386.273136][T22554]        __add_disk+0x677/0xd50
[  386.274723][T22554]        add_disk_fwnode+0xfb/0x480
[  386.276338][T22554]        nbd_dev_add+0x72c/0xb50
[  386.277989][T22554]        nbd_init+0x168/0x1f0
[  386.279321][T22554]        do_one_initcall+0x250/0x870
[  386.281268][T22554]        do_initcall_level+0x104/0x190
[  386.283317][T22554]        do_initcalls+0x59/0xa0
[  386.285164][T22554]        kernel_init_freeable+0x2a6/0x3e0
[  386.287294][T22554]        kernel_init+0x1d/0x1d0
[  386.289088][T22554]        ret_from_fork+0x514/0xb70
[  386.291026][T22554]        ret_from_fork_asm+0x1a/0x30
[  386.293123][T22554] 
[  386.293123][T22554] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  386.296117][T22554]        __lock_acquire+0x15a5/0x2cf0
[  386.298171][T22554]        lock_acquire+0x106/0x350
[  386.300142][T22554]        __mutex_lock+0x1a3/0x1550
[  386.302107][T22554]        elevator_change+0x1b3/0x450
[  386.304299][T22554]        elevator_set_none+0xb5/0x140
[  386.306422][T22554]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  386.308884][T22554]        nbd_start_device+0x17f/0xb10
[  386.310963][T22554]        nbd_genl_connect+0x165b/0x1cf0
[  386.312993][T22554]        genl_family_rcv_msg_doit+0x22a/0x330
[  386.315328][T22554]        genl_rcv_msg+0x61c/0x7a0
[  386.317254][T22554]        netlink_rcv_skb+0x232/0x4b0
[  386.319203][T22554]        genl_rcv+0x28/0x40
[  386.320928][T22554]        netlink_unicast+0x75c/0x8e0
[  386.322934][T22554]        netlink_sendmsg+0x813/0xb40
[  386.324936][T22554]        ____sys_sendmsg+0x972/0x9f0
[  386.327059][T22554]        ___sys_sendmsg+0x2a5/0x360
[  386.328998][T22554]        __x64_sys_sendmsg+0x1bd/0x2a0
[  386.331056][T22554]        do_syscall_64+0x15f/0xf80
[  386.333008][T22554]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.335539][T22554] 
[  386.335539][T22554] other info that might help us debug this:
[  386.335539][T22554] 
[  386.339452][T22554] Chain exists of:
[  386.339452][T22554]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52
[  386.339452][T22554] 
[  386.344507][T22554]  Possible unsafe locking scenario:
[  386.344507][T22554] 
[  386.347213][T22554]        CPU0                    CPU1
[  386.349189][T22554]        ----                    ----
[  386.350989][T22554]   lock(&q->q_usage_counter(io)#52);
[  386.352868][T22554]                                lock(fs_reclaim);
[  386.355405][T22554]                                lock(&q->q_usage_counter(io)#52);
[  386.358186][T22554]   lock(&q->elevator_lock);
[  386.359746][T22554] 
[  386.359746][T22554]  *** DEADLOCK ***
[  386.359746][T22554] 
[  386.363021][T22554] 6 locks held by syz.2.7327/22554:
[  386.365311][T22554]  #0: ffffffff8fe3f9a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  386.368674][T22554]  #1: ffffffff8fe3f7e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  386.372029][T22554]  #2: ffff888105b861c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60
[  386.376331][T22554]  #3: ffff888105b860d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60
[  386.380483][T22554]  #4: ffff888105b1a5a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450
[  386.384565][T22554]  #5: ffff888105b1a5d8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  386.388678][T22554] 
[  386.388678][T22554] stack backtrace:
[  386.390915][T22554] CPU: 0 UID: 0 PID: 22554 Comm: syz.2.7327 Not tainted syzkaller #0 PREEMPT(full) 
[  386.390941][T22554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  386.390955][T22554] Call Trace:
[  386.390964][T22554]  <TASK>
[  386.390973][T22554]  dump_stack_lvl+0xe8/0x150
[  386.390994][T22554]  print_circular_bug+0x2e1/0x300
[  386.391016][T22554]  check_noncircular+0x12e/0x150
[  386.391037][T22554]  __lock_acquire+0x15a5/0x2cf0
[  386.391058][T22554]  ? elevator_change+0x1b3/0x450
[  386.391076][T22554]  lock_acquire+0x106/0x350
[  386.391089][T22554]  ? elevator_change+0x1b3/0x450
[  386.391113][T22554]  __mutex_lock+0x1a3/0x1550
[  386.391134][T22554]  ? elevator_change+0x1b3/0x450
[  386.391152][T22554]  ? rcu_is_watching+0x15/0xb0
[  386.391169][T22554]  ? work_grab_pending+0x3d1/0x990
[  386.391184][T22554]  ? elevator_change+0x1b3/0x450
[  386.391203][T22554]  ? __pfx___mutex_lock+0x10/0x10
[  386.391221][T22554]  ? enable_work+0x17f/0x230
[  386.391237][T22554]  ? lockdep_hardirqs_on+0x7a/0x110
[  386.391258][T22554]  ? __cancel_work_sync+0xf7/0x110
[  386.391274][T22554]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  386.391289][T22554]  elevator_change+0x1b3/0x450
[  386.391310][T22554]  elevator_set_none+0xb5/0x140
[  386.391329][T22554]  ? __pfx_elevator_set_none+0x10/0x10
[  386.391350][T22554]  ? xa_load+0x1db/0x210
[  386.391399][T22554]  blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  386.391422][T22554]  ? kernfs_add_one+0x477/0x5c0
[  386.391442][T22554]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  386.391460][T22554]  ? sysfs_add_file_mode_ns+0x259/0x300
[  386.391478][T22554]  nbd_start_device+0x17f/0xb10
[  386.391495][T22554]  ? device_create_file+0xf4/0x1b0
[  386.391511][T22554]  nbd_genl_connect+0x165b/0x1cf0
[  386.391525][T22554]  ? __pfx___nla_validate_parse+0x10/0x10
[  386.391549][T22554]  ? __pfx_nbd_genl_connect+0x10/0x10
[  386.391563][T22554]  ? rcu_is_watching+0x15/0xb0
[  386.391581][T22554]  ? trace_kmalloc+0x2a/0xf0
[  386.391597][T22554]  ? __nla_parse+0x40/0x60
[  386.391616][T22554]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  386.391632][T22554]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  386.391650][T22554]  genl_family_rcv_msg_doit+0x22a/0x330
[  386.391664][T22554]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  386.391680][T22554]  ? __lock_acquire+0x6b5/0x2cf0
[  386.391696][T22554]  genl_rcv_msg+0x61c/0x7a0
[  386.391710][T22554]  ? __pfx_genl_rcv_msg+0x10/0x10
[  386.391722][T22554]  ? __pfx_nbd_genl_connect+0x10/0x10
[  386.391735][T22554]  netlink_rcv_skb+0x232/0x4b0
[  386.391753][T22554]  ? __pfx_genl_rcv_msg+0x10/0x10
[  386.391765][T22554]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  386.391785][T22554]  ? down_read+0x270/0x2e0
[  386.391795][T22554]  ? genl_rcv+0xd/0x40
[  386.391805][T22554]  genl_rcv+0x28/0x40
[  386.391813][T22554]  netlink_unicast+0x75c/0x8e0
[  386.391828][T22554]  netlink_sendmsg+0x813/0xb40
[  386.391849][T22554]  ? __pfx_netlink_sendmsg+0x10/0x10
[  386.391875][T22554]  ? aa_sock_msg_perm+0xf1/0x1b0
[  386.391895][T22554]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  386.391915][T22554]  ____sys_sendmsg+0x972/0x9f0
[  386.391935][T22554]  ? __might_fault+0xaf/0x130
[  386.391954][T22554]  ? __pfx_____sys_sendmsg+0x10/0x10
[  386.391975][T22554]  ? import_iovec+0x73/0xa0
[  386.391994][T22554]  ___sys_sendmsg+0x2a5/0x360
[  386.392009][T22554]  ? __lock_acquire+0x6b5/0x2cf0
[  386.392020][T22554]  ? __pfx____sys_sendmsg+0x10/0x10
[  386.392036][T22554]  ? futex_wait+0x2a2/0x390
[  386.392056][T22554]  ? __fget_files+0x2a/0x420
[  386.392068][T22554]  ? __fget_files+0x3a0/0x420
[  386.392084][T22554]  __x64_sys_sendmsg+0x1bd/0x2a0
[  386.392099][T22554]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  386.392118][T22554]  ? rcu_is_watching+0x15/0xb0
[  386.392132][T22554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.392146][T22554]  do_syscall_64+0x15f/0xf80
[  386.392164][T22554]  ? trace_irq_disable+0x3b/0x140
[  386.392185][T22554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.392199][T22554] RIP: 0033:0x7f12dc19cdd9
[  386.392211][T22554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  386.392222][T22554] RSP: 002b:00007f12dd06f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  386.392236][T22554] RAX: ffffffffffffffda RBX: 00007f12dc415fa0 RCX: 00007f12dc19cdd9
[  386.392246][T22554] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004
[  386.392253][T22554] RBP: 00007f12dc232d69 R08: 0000000000000000 R09: 0000000000000000
[  386.392277][T22554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  386.392284][T22554] R13: 00007f12dc416038 R14: 00007f12dc415fa0 R15: 00007ffed2d5ded8
[  386.392300][T22554]  </TASK>
[  386.692056][T22554] nbd3: detected capacity change from 0 to 63
[  386.720941][ T9421] block nbd3: Receive control failed (result -104)
[  386.731961][   T56] block nbd3: Receive control failed (result -32)
[  392.422468][  T136] block nbd0: Possible stuck request ffff888105b60000: control (read@0,1024B). Runtime 90 seconds
[  392.426809][  T136] block nbd0: Possible stuck request ffff888105b60200: control (read@1024,1024B). Runtime 90 seconds
[  392.431134][  T136] block nbd0: Possible stuck request ffff888105b60400: control (read@2048,1024B). Runtime 90 seconds
[  392.435699][  T136] block nbd0: Possible stuck request ffff888105b60600: control (read@3072,1024B). Runtime 90 seconds
