last executing test programs:

4.781453878s ago: executing program 0 (id=7236):
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0)

3.842523947s ago: executing program 0 (id=7258):
r0 = socket$kcm(0x2, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000028000000000001907864010100e00000010d0004000000bb00000008000000000000000000"], 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000020040034002b8008000100", @ANYRES32, @ANYBLOB="0400030019000000080003000400000008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080003000100000008001b"], 0x5c}, 0x1, 0x0, 0x0, 0xe21813e95b5a9820}, 0x0)
r2 = socket(0x2, 0x3, 0xff)
bind(r2, &(0x7f0000001040)=@isdn={0x22, 0x4, 0xc8, 0x6}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0xfc}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x410)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x7c37, 0x4)
sendto$inet(r2, 0x0, 0x0, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
getsockname$packet(r2, &(0x7f0000000f80)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000fc0)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000001000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x5e, r6})
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)

2.976254728s ago: executing program 0 (id=7261):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
close(0x3)

2.822226639s ago: executing program 1 (id=7267):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x805)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x8004)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800)

2.732808117s ago: executing program 1 (id=7268):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)

2.718062435s ago: executing program 1 (id=7270):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xa, 0x7ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50)

2.551893949s ago: executing program 2 (id=7273):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0)

2.5516842s ago: executing program 2 (id=7274):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/28, 0x1c}, 0x3}], 0x1, 0x60, 0x0)

2.44368199s ago: executing program 2 (id=7275):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_opts(r0, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1)

2.443517442s ago: executing program 2 (id=7276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

2.383848762s ago: executing program 2 (id=7277):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002ac0), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd)

2.04295524s ago: executing program 0 (id=7278):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='netdevsim0\x00'})

1.376673991s ago: executing program 1 (id=7279):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

2.585681ms ago: executing program 1 (id=7280):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x194, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x4000800)

2.335137ms ago: executing program 0 (id=7281):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="55fb"], 0x20)

2.108867ms ago: executing program 1 (id=7282):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd2b, 0x0, {0x36}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004011}, 0x200428c0)

1.971033ms ago: executing program 0 (id=7283):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 2 (id=7284):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="018d00008d00"})

kernel console output (not intermixed with test programs):

ttributes in process `syz.2.2599'.
[  215.187560][T11822] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2604'.
[  215.191178][T11822] tc_dump_action: action bad kind
[  215.206920][T11824] netlink: 'syz.1.2605': attribute type 1 has an invalid length.
[  215.252463][T11828] netlink: 'syz.0.2607': attribute type 4 has an invalid length.
[  215.255841][T11824] 8021q: adding VLAN 0 to HW filter on device bond5
[  215.324361][T11830] bond5: (slave veth7): Enslaving as an active interface with a down link
[  215.354901][T11824] 8021q: adding VLAN 0 to HW filter on device batadv1
[  215.361562][T11824] bond5: (slave batadv1): making interface the new active one
[  215.366970][T11824] batadv1: entered promiscuous mode
[  215.370291][T11824] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  215.409137][T11840] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2612'.
[  216.033380][T11915] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2642'.
[  216.088342][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'.
[  216.305190][T11938] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  216.467717][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2662'.
[  216.492016][T11955] bond6: entered promiscuous mode
[  216.496080][T11955] 8021q: adding VLAN 0 to HW filter on device bond6
[  216.516949][T11955] bridge3: entered promiscuous mode
[  216.529395][T11955] bond6: (slave bridge3): Enslaving as an active interface with an up link
[  216.540214][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2662'.
[  216.561510][T11955] bond6 (unregistering): (slave bridge3): Releasing backup interface
[  216.567109][T11955] bridge3: left promiscuous mode
[  216.573705][T11955] bond6 (unregistering): Released all slaves
[  216.672545][T11964] --map-set only usable from mangle table
[  216.777692][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'.
[  217.253861][T11674] net_ratelimit: 32 callbacks suppressed
[  217.253874][T11674] bond3: (slave syz_tun): failed to get link speed/duplex
[  217.363896][ T5472] bond3: (slave syz_tun): failed to get link speed/duplex
[  217.473933][ T5472] bond3: (slave syz_tun): failed to get link speed/duplex
[  217.583903][ T5472] bond3: (slave syz_tun): failed to get link speed/duplex
[  218.054067][ T6604] bond3: (slave syz_tun): failed to get link speed/duplex
[  218.164108][ T6604] bond3: (slave syz_tun): failed to get link speed/duplex
[  218.275831][ T6604] bond3: (slave syz_tun): failed to get link speed/duplex
[  218.322927][T12036] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2700'.
[  218.413865][ T5472] bond3: (slave syz_tun): failed to get link speed/duplex
[  218.523968][ T5472] bond3: (slave syz_tun): failed to get link speed/duplex
[  218.645639][T12056] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.655695][ T6604] bond3: (slave syz_tun): failed to get link speed/duplex
[  218.800219][T12064] sctp: [Deprecated]: syz.2.2712 (pid 12064) Use of int in maxseg socket option.
[  218.800219][T12064] Use struct sctp_assoc_value instead
[  218.881647][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2715'.
[  220.184192][T12116] netlink: 'syz.0.2735': attribute type 12 has an invalid length.
[  220.190041][T12116] netlink: 'syz.0.2735': attribute type 29 has an invalid length.
[  220.197257][T12116] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2735'.
[  220.203344][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2738'.
[  220.223222][T12120] vlan2: entered promiscuous mode
[  220.228842][T12120] bridge0: entered promiscuous mode
[  220.665628][T12159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.685857][T12161] netlink: 840 bytes leftover after parsing attributes in process `syz.1.2758'.
[  220.690499][T12159] tipc: Resetting bearer <eth:syzkaller0>
[  220.785075][T12167] x_tables: duplicate underflow at hook 2
[  221.273693][T12204] netlink: 'syz.2.2780': attribute type 8 has an invalid length.
[  221.370839][T12214] syzkaller1: entered promiscuous mode
[  221.374945][T12214] syzkaller1: entered allmulticast mode
[  221.407692][T12216] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.419600][T12216] bridge_slave_0 (unregistering): left allmulticast mode
[  221.421906][T12216] bridge_slave_0 (unregistering): left promiscuous mode
[  221.424847][T12216] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.435886][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2786'.
[  221.438411][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2786'.
[  221.727680][T12248] __nla_validate_parse: 3 callbacks suppressed
[  221.727698][T12248] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2799'.
[  221.847591][T12258] xt_hashlimit: size too large, truncated to 1048576
[  221.965193][T12270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.090907][T12278] syz_tun: entered allmulticast mode
[  222.102025][T12278] dvmrp8: entered allmulticast mode
[  222.110872][T12277] syz_tun: left allmulticast mode
[  222.373905][ T6604] net_ratelimit: 31 callbacks suppressed
[  222.373917][ T6604] bond3: (slave syz_tun): failed to get link speed/duplex
[  222.431928][T12297] netlink: 'syz.0.2822': attribute type 4 has an invalid length.
[  222.434722][T12297] netlink: 'syz.0.2822': attribute type 4 has an invalid length.
[  222.444734][T12297] netlink: 'syz.0.2822': attribute type 4 has an invalid length.
[  222.493903][ T5472] bond3: (slave syz_tun): failed to get link speed/duplex
[  222.613946][ T5472] bond3: (slave syz_tun): failed to get link speed/duplex
[  222.724656][ T5472] bond3: (slave syz_tun): failed to get link speed/duplex
[  222.844325][ T5662] bond3: (slave syz_tun): failed to get link speed/duplex
[  222.954556][ T5662] bond3: (slave syz_tun): failed to get link speed/duplex
[  223.076844][ T6604] bond3: (slave syz_tun): failed to get link speed/duplex
[  223.194509][ T6604] bond3: (slave syz_tun): failed to get link speed/duplex
[  223.290612][T12354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2847'.
[  223.348936][T12361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2849'.
[  223.364156][T12361] ip6gre1: entered promiscuous mode
[  223.365663][T12361] ip6gre1: entered allmulticast mode
[  223.373003][ T6604] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  223.377324][ T6604] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  223.396042][ T5660] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  223.397738][T12364] netlink: 'syz.1.2850': attribute type 5 has an invalid length.
[  223.398879][ T6604] bond3: (slave syz_tun): failed to get link speed/duplex
[  223.513933][ T5662] bond3: (slave syz_tun): failed to get link speed/duplex
[  223.665684][ T5660] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  224.034029][ T5660] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  225.090870][T12433] netlink: 'syz.1.2877': attribute type 2 has an invalid length.
[  225.381084][T12453] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2885'.
[  225.793715][T12479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.798948][T12479] syzkaller0: entered promiscuous mode
[  225.800692][T12479] syzkaller0: entered allmulticast mode
[  225.808764][T12479] tipc: Resetting bearer <eth:syzkaller0>
[  225.811840][T12479] tipc: Resetting bearer <eth:syzkaller0>
[  225.828873][T12479] tipc: Disabling bearer <eth:syzkaller0>
[  226.386918][T12529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2920'.
[  226.614481][T12555] syz.2.2932: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  226.620220][T12555] CPU: 1 UID: 0 PID: 12555 Comm: syz.2.2932 Not tainted syzkaller #0 PREEMPT(full) 
[  226.620239][T12555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.620251][T12555] Call Trace:
[  226.620258][T12555]  <TASK>
[  226.620264][T12555]  dump_stack_lvl+0xe8/0x150
[  226.620298][T12555]  warn_alloc+0x249/0x340
[  226.620322][T12555]  ? stack_trace_save+0xa9/0x100
[  226.620346][T12555]  ? __pfx_warn_alloc+0x10/0x10
[  226.620373][T12555]  ? kasan_save_track+0x4f/0x80
[  226.620392][T12555]  ? kasan_save_track+0x3e/0x80
[  226.620410][T12555]  ? __kasan_kmalloc+0x93/0xb0
[  226.620427][T12555]  ? __kmalloc_cache_noprof+0x31c/0x660
[  226.620447][T12555]  ? xskq_create+0x56/0x170
[  226.620468][T12555]  ? xsk_setsockopt+0x54c/0x990
[  226.620487][T12555]  ? do_sock_setsockopt+0x17c/0x1b0
[  226.620509][T12555]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  226.620530][T12555]  ? do_syscall_64+0x15f/0xf80
[  226.620548][T12555]  __vmalloc_node_range_noprof+0x132/0x1750
[  226.620588][T12555]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  226.620614][T12555]  ? __kasan_kmalloc+0x93/0xb0
[  226.620638][T12555]  vmalloc_user_noprof+0xad/0xe0
[  226.620681][T12555]  ? xskq_create+0xbf/0x170
[  226.620703][T12555]  xskq_create+0xbf/0x170
[  226.620728][T12555]  xsk_init_queue+0x8a/0xe0
[  226.620750][T12555]  xsk_setsockopt+0x54c/0x990
[  226.620771][T12555]  ? __pfx_xsk_setsockopt+0x10/0x10
[  226.620792][T12555]  ? __pfx_aa_sk_perm+0x10/0x10
[  226.620814][T12555]  ? aa_sock_opt_perm+0xff/0x1a0
[  226.620867][T12555]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  226.620889][T12555]  ? __pfx_xsk_setsockopt+0x10/0x10
[  226.620911][T12555]  do_sock_setsockopt+0x17c/0x1b0
[  226.620938][T12555]  __x64_sys_setsockopt+0x13d/0x1b0
[  226.620963][T12555]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.620981][T12555]  do_syscall_64+0x15f/0xf80
[  226.621000][T12555]  ? trace_irq_disable+0x3b/0x140
[  226.621023][T12555]  ? clear_bhb_loop+0x40/0x90
[  226.621042][T12555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.621058][T12555] RIP: 0033:0x7ffa0259cdd9
[  226.621074][T12555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.621088][T12555] RSP: 002b:00007ffa03407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  226.621105][T12555] RAX: ffffffffffffffda RBX: 00007ffa02815fa0 RCX: 00007ffa0259cdd9
[  226.621116][T12555] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  226.621131][T12555] RBP: 00007ffa02632d69 R08: 0000000000000004 R09: 0000000000000000
[  226.621141][T12555] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.621152][T12555] R13: 00007ffa02816038 R14: 00007ffa02815fa0 R15: 00007ffef1afefc8
[  226.621178][T12555]  </TASK>
[  226.621232][T12555] Mem-Info:
[  226.711990][T12555] active_anon:5490 inactive_anon:6 isolated_anon:0
[  226.711990][T12555]  active_file:10241 inactive_file:40370 isolated_file:0
[  226.711990][T12555]  unevictable:1768 dirty:108 writeback:0
[  226.711990][T12555]  slab_reclaimable:10684 slab_unreclaimable:112179
[  226.711990][T12555]  mapped:18146 shmem:2355 pagetables:979
[  226.711990][T12555]  sec_pagetables:0 bounce:0
[  226.711990][T12555]  kernel_misc_reclaimable:0
[  226.711990][T12555]  free:1095477 free_pcp:21569 free_cma:0
[  226.725178][T12555] Node 0 active_anon:12024kB inactive_anon:24kB active_file:20676kB inactive_file:28628kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38852kB dirty:172kB writeback:0kB shmem:4724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6680kB pagetables:2072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  226.736359][T12555] Node 1 active_anon:9936kB inactive_anon:0kB active_file:20288kB inactive_file:132852kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33732kB dirty:260kB writeback:0kB shmem:4696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6264kB pagetables:1660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  226.746612][T12555] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  226.759031][T12555] lowmem_reserve[]: 0 1587 2117 2117 2117
[  226.760774][T12555] Node 0 DMA32 free:1556916kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:172kB inactive_anon:0kB active_file:4100kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1625244kB mlocked:0kB bounce:0kB free_pcp:32344kB local_pcp:12932kB free_cma:0kB
[  226.773323][T12555] lowmem_reserve[]: 0 0 530 530 530
[  226.776711][T12555] Node 0 Normal free:22544kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11888kB inactive_anon:24kB active_file:16576kB inactive_file:28620kB unevictable:3536kB writepending:172kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:10324kB local_pcp:1288kB free_cma:0kB
[  226.786284][T12555] lowmem_reserve[]: 0 0 0 0 0
[  226.788357][T12555] Node 1 Normal free:2787088kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9936kB inactive_anon:0kB active_file:20288kB inactive_file:132852kB unevictable:3536kB writepending:260kB zspages:0kB present:3670012kB managed:3594680kB mlocked:0kB bounce:0kB free_pcp:44028kB local_pcp:11668kB free_cma:0kB
[  226.798931][T12555] lowmem_reserve[]: 0 0 0 0 0
[  226.800289][T12555] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  226.804572][T12555] Node 0 DMA32: 89*4kB (UM) 90*8kB (UE) 80*16kB (UE) 384*32kB (UM) 240*64kB (UM) 159*128kB (UE) 93*256kB (UM) 48*512kB (UME) 22*1024kB (UM) 13*2048kB (UME) 344*4096kB (UM) = 1556916kB
[  226.809260][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2937'.
[  226.812432][T12555] Node 0 Normal: 338*4kB (UM) 562*8kB (UM) 264*16kB (UM) 243*32kB (UM) 64*64kB (UM) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22456kB
[  226.819009][T12555] Node 1 Normal: 490*4kB (UME) 508*8kB (UME) 624*16kB (UME) 137*32kB (UM) 374*64kB (UME) 144*128kB (UME) 34*256kB (UME) 14*512kB (UM) 9*1024kB (UM) 6*2048kB (UME) 656*4096kB (UM) = 2787112kB
[  226.826089][T12566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2937'.
[  226.829499][T12555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  226.834399][T12555] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  226.837700][T12555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  226.841083][T12555] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  226.845430][T12555] 52966 total pagecache pages
[  226.847222][T12555] 0 pages in swap cache
[  226.848665][T12555] Free swap  = 124996kB
[  226.849879][T12555] Total swap = 124996kB
[  226.851083][T12555] 1834877 pages RAM
[  226.852575][T12555] 0 pages HighMem/MovableOnly
[  226.854414][T12555] 390268 pages reserved
[  226.855604][T12555] 0 pages cma reserved
[  226.865546][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2938'.
[  226.893455][T12572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2940'.
[  227.092050][T12588] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2947'.
[  227.434297][ T5662] net_ratelimit: 37 callbacks suppressed
[  227.434309][ T5662] bond3: (slave syz_tun): failed to get link speed/duplex
[  227.540215][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2953'.
[  227.543681][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2953'.
[  227.574146][ T6604] bond3: (slave syz_tun): failed to get link speed/duplex
[  227.694460][ T6604] bond3: (slave syz_tun): failed to get link speed/duplex
[  227.803985][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  228.045505][T12622] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.059961][ T6604] bond3: (slave syz_tun): failed to get link speed/duplex
[  228.174146][ T6604] bond3: (slave syz_tun): failed to get link speed/duplex
[  228.499264][T12642] macvlan0: entered promiscuous mode
[  228.502825][T12642] macvlan0: entered allmulticast mode
[  228.505098][T12642] gretap0: entered allmulticast mode
[  228.525093][T11674] bond3: (slave syz_tun): failed to get link speed/duplex
[  228.572706][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'.
[  228.580628][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'.
[  228.599200][T12650] netlink: 'syz.1.2972': attribute type 6 has an invalid length.
[  228.601803][T12650] IPv6: NLM_F_CREATE should be specified when creating new route
[  228.634021][ T5662] bond3: (slave syz_tun): failed to get link speed/duplex
[  228.666577][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'.
[  228.746016][ T5662] bond3: (slave syz_tun): failed to get link speed/duplex
[  228.865963][ T5662] bond3: (slave syz_tun): failed to get link speed/duplex
[  228.983870][ T5662] bond3: (slave syz_tun): failed to get link speed/duplex
[  229.250838][T12673] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.333477][T12673] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.338348][T12673] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.375546][T12673] geneve2: left promiscuous mode
[  229.379837][T12673] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  229.381947][T12673] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  229.386315][T12673] ip6tnl2: left allmulticast mode
[  229.395807][T12673] geneve5: left promiscuous mode
[  229.397329][T12673] geneve5: left allmulticast mode
[  229.399317][T12673] macvlan0: left promiscuous mode
[  229.400931][T12673] macvlan0: left allmulticast mode
[  229.405145][ T6604] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.408141][ T6604] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.421456][ T6604] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 38354 - 0
[  229.429029][ T6604] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0
[  229.435562][ T6604] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.441277][ T6604] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.445735][ T6604] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 38354 - 0
[  229.450913][ T6604] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0
[  229.463246][ T6604] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.466723][ T6604] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.472254][ T6604] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 38354 - 0
[  229.478655][ T6604] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0
[  229.484872][ T6604] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  229.493743][ T6604] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.496697][ T6604] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 38354 - 0
[  229.502775][ T6604] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0
[  229.898776][T12727] netlink: 'syz.2.3007': attribute type 142 has an invalid length.
[  230.012312][T12741] netlink: 'syz.0.3014': attribute type 4 has an invalid length.
[  230.015772][T12741] netlink: 'syz.0.3014': attribute type 4 has an invalid length.
[  230.077267][T12744] : renamed from lo
[  230.396632][T12770] netlink: 'syz.2.3028': attribute type 12 has an invalid length.
[  230.416706][T12772] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  230.419560][T12772] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  230.925758][T12824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  230.928381][T12824] IPv6: NLM_F_CREATE should be set when creating new route
[  230.930838][T12824] IPv6: NLM_F_CREATE should be set when creating new route
[  231.071013][T12834] syzkaller0: entered promiscuous mode
[  231.077489][T12834] syzkaller0: entered allmulticast mode
[  231.319187][T12855] ip6erspan0: entered allmulticast mode
[  232.330264][ T5662] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  232.334186][ T5662] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  232.336919][ T5662] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  232.339911][ T5662] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  232.457404][T12910] netlink: 'syz.2.3094': attribute type 1 has an invalid length.
[  232.495784][T12910] bond5: (slave bridge5): making interface the new active one
[  232.499326][T12910] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  232.561374][T12912] __nla_validate_parse: 10 callbacks suppressed
[  232.561391][T12912] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3094'.
[  232.578604][T12912] bond5: entered promiscuous mode
[  232.580612][T12912] bridge5: entered promiscuous mode
[  232.593964][T12912] bond5: entered allmulticast mode
[  232.595918][T12912] bridge5: entered allmulticast mode
[  232.600792][T12912] 8021q: adding VLAN 0 to HW filter on device bond5
[  232.667538][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'.
[  232.749380][T12930] syzkaller0: entered promiscuous mode
[  232.754629][T12930] syzkaller0: entered allmulticast mode
[  232.883718][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3107'.
[  233.359749][T12960] batman_adv: batadv0: Adding interface: ipvlan2
[  233.361670][T12960] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.370622][T12960] batman_adv: batadv0: Interface activated: ipvlan2
[  233.407673][T12962] netlink: 'syz.2.3117': attribute type 1 has an invalid length.
[  233.409978][T12962] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3117'.
[  233.475164][T12965] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  233.479668][T12965] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  233.484716][T12965] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  233.489127][T12965] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  233.502605][T12965] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  233.522298][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3119'.
[  233.828471][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3137'.
[  233.850418][T13004] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.853258][T13004] 8021q: adding VLAN 0 to HW filter on device team0
[  233.859655][T13004] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.877594][T13004] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.880670][T13004] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.888470][T13004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  233.892116][T13004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  233.898479][T13004] net_ratelimit: 2 callbacks suppressed
[  233.898489][T13004] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  233.905690][T13006] netlink: 'syz.2.3138': attribute type 4 has an invalid length.
[  233.910024][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.912130][   T52] bridge0: port 1(bridge_slave_0) entered listening state
[  233.916076][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.918217][   T52] bridge0: port 2(bridge_slave_1) entered listening state
[  234.407491][T13065] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.410326][T13065] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  234.412925][T13065] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  234.514500][T13074] syzkaller1: entered promiscuous mode
[  234.519927][T13074] syzkaller1: entered allmulticast mode
[  234.540779][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3172'.
[  234.675849][T13091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3179'.
[  234.791274][T13101] netlink: 'syz.0.3184': attribute type 10 has an invalid length.
[  234.794028][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3184'.
[  234.797829][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3184'.
[  235.412562][T13140] netlink: 'syz.1.3201': attribute type 3 has an invalid length.
[  236.311057][T13191] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.313189][T13191] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.519192][T13191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.537507][T13191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.437650][T13271] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  237.439888][T13271] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  237.606206][T13294] __nla_validate_parse: 1 callbacks suppressed
[  237.606216][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3259'.
[  237.722855][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3263'.
[  237.729383][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3263'.
[  237.759761][T13311] syzkaller1: entered promiscuous mode
[  237.761486][T13311] syzkaller1: entered allmulticast mode
[  238.321406][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3281'.
[  238.405496][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3286'.
[  238.571692][T13373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3291'.
[  239.062132][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3313'.
[  239.069363][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'.
[  239.073870][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3313'.
[  239.078071][ T6580] IPVS: starting estimator thread 0...
[  239.082032][T13416] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3313'.
[  239.184931][T13419] IPVS: using max 43 ests per chain, 103200 per kthread
[  239.302917][T13437] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) !
[  239.603126][T13461] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  239.606045][T13461] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  239.897564][T13484] netlink: 'syz.0.3343': attribute type 1 has an invalid length.
[  240.377833][T13545] netlink: 'syz.0.3373': attribute type 1 has an invalid length.
[  240.400023][T13547] batadv_slave_1: entered promiscuous mode
[  240.402232][T13546] batadv_slave_1: left promiscuous mode
[  241.023616][T13605] netlink: 'syz.2.3401': attribute type 4 has an invalid length.
[  241.028786][T13605] netlink: 'syz.2.3401': attribute type 8 has an invalid length.
[  241.318007][T13629] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  241.320141][T13629] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  242.006084][T13674] netlink: 'syz.0.3430': attribute type 1 has an invalid length.
[  242.348560][T13704] netlink: 'syz.1.3447': attribute type 2 has an invalid length.
[  242.351151][T13704] netlink: 'syz.1.3447': attribute type 1 has an invalid length.
[  242.354209][T13704] netlink: 'syz.1.3447': attribute type 1 has an invalid length.
[  242.713650][T13714] ipvlan2: entered promiscuous mode
[  243.792853][T13764] sctp: [Deprecated]: syz.2.3473 (pid 13764) Use of int in maxseg socket option.
[  243.792853][T13764] Use struct sctp_assoc_value instead
[  243.978880][T13792] sock: sock_timestamping_bind_phc: sock not bind to device
[  244.033136][T13797] netlink: 'syz.0.3489': attribute type 1 has an invalid length.
[  244.037205][T13797] __nla_validate_parse: 20 callbacks suppressed
[  244.037214][T13797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3489'.
[  244.280659][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'.
[  244.294993][T13820] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  244.299051][T13820] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  244.401798][T13830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3501'.
[  244.561411][T13844] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3510'.
[  244.564161][T13844] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3510'.
[  244.566776][T13844] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3510'.
[  244.570567][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3509'.
[  245.217787][T13893] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3533'.
[  245.221248][T13893] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3533'.
[  245.737791][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3545'.
[  246.135281][T13928] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.680467][T14014] netlink: 'syz.0.3584': attribute type 5 has an invalid length.
[  249.077437][T14017] tun0: tun_chr_ioctl cmd 2147767507
[  249.995820][T14069] __nla_validate_parse: 5 callbacks suppressed
[  249.995831][T14069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3607'.
[  250.460106][T14071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.662796][T14077] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3611'.
[  251.369910][T14100] netlink: 'syz.0.3621': attribute type 1 has an invalid length.
[  251.388869][T14100] bond8: entered promiscuous mode
[  251.391019][T14100] 8021q: adding VLAN 0 to HW filter on device bond8
[  251.398327][T14100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3621'.
[  251.401814][T14100] bond8: entered allmulticast mode
[  251.420991][T14100] bond8: (slave bridge5): making interface the new active one
[  251.423930][T14100] bridge5: entered promiscuous mode
[  251.426117][T14100] bridge5: entered allmulticast mode
[  251.431271][T14100] bond8: (slave bridge5): Enslaving as an active interface with an up link
[  251.588196][T14114] sock: sock_set_timeout: `syz.2.3626' (pid 14114) tries to set negative timeout
[  251.625762][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3627'.
[  251.628659][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3627'.
[  251.631284][T14117] netlink: 'syz.1.3627': attribute type 18 has an invalid length.
[  251.665817][T14120] netlink: 'syz.2.3628': attribute type 8 has an invalid length.
[  251.817471][T14137] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3637'.
[  251.958724][T14149] pimreg: entered allmulticast mode
[  251.962063][T14149] pimreg: left allmulticast mode
[  252.420979][T14168] bond0: entered promiscuous mode
[  252.422908][T14168] bond_slave_0: entered promiscuous mode
[  252.428347][T14168] bond_slave_1: entered promiscuous mode
[  252.431693][T14168] batadv_slave_0: entered promiscuous mode
[  252.435021][T14168] batadv_slave_0: left promiscuous mode
[  252.439709][T14168] bond0: left promiscuous mode
[  252.442420][T14168] bond_slave_0: left promiscuous mode
[  252.452006][T14168] bond_slave_1: left promiscuous mode
[  252.557912][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3654'.
[  252.670180][T14188] syzkaller0: entered promiscuous mode
[  252.671924][T14188] syzkaller0: entered allmulticast mode
[  252.937076][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3666'.
[  252.978129][T14203] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  252.998091][T14203] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  254.789449][T14268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3693'.
[  254.857563][T14274] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.953020][T14281] syzkaller0: entered promiscuous mode
[  254.956463][T14281] syzkaller0: entered allmulticast mode
[  255.328498][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3715'.
[  255.471921][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'.
[  255.477047][T14328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3719'.
[  255.941244][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3736'.
[  255.944618][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3736'.
[  255.991948][T14371] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.461179][T14409] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3758'.
[  256.703430][T14425] syzkaller1: entered promiscuous mode
[  256.706160][T14425] syzkaller1: entered allmulticast mode
[  256.763069][T14429] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3768'.
[  257.371249][T14470] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  257.547677][T14484] netlink: 'syz.1.3791': attribute type 1 has an invalid length.
[  257.571923][T14484] 8021q: adding VLAN 0 to HW filter on device bond6
[  257.583382][T14491] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.598817][T14484] bond6: (slave veth11): Enslaving as an active interface with a down link
[  257.614585][T14484] bond6: (slave dummy0): making interface the new active one
[  257.622816][T14484] dummy0: entered promiscuous mode
[  257.627763][T14484] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  257.635363][T14484] netlink: 'syz.1.3791': attribute type 10 has an invalid length.
[  257.638214][T14484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3791'.
[  257.645777][T14484] bond6: (slave dummy0): Releasing active interface
[  257.787852][T14515] bond0: entered promiscuous mode
[  257.789331][T14515] bond_slave_0: entered promiscuous mode
[  257.792890][T14515] bond_slave_1: entered promiscuous mode
[  257.795609][T14515] batadv0: entered promiscuous mode
[  257.799238][T14515] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  257.805412][T14515] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  257.816457][T14515] 8021q: adding VLAN 0 to HW filter on device hsr1
[  257.821502][T14515] bond0: left promiscuous mode
[  257.822903][T14515] bond_slave_0: left promiscuous mode
[  257.825186][T14515] bond_slave_1: left promiscuous mode
[  257.828848][T14515] batadv0: left promiscuous mode
[  257.849095][T14521] smc: net device wlan0 applied user defined pnetid SYZ0
[  258.170935][T14551] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3822'.
[  258.378023][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3833'.
[  258.386352][T14573] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  258.394558][T14573] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  259.277110][T14622] netlink: 'syz.0.3853': attribute type 3 has an invalid length.
[  259.402717][   T33] audit: type=1800 audit(1778508618.393:4): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3860" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6540 res=0 errno=0
[  259.437169][T14638] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.199478][T14639] syzkaller0: mtu less than device minimum
[  261.271861][T14678] __nla_validate_parse: 6 callbacks suppressed
[  261.271872][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3879'.
[  261.279211][T14678] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3879'.
[  261.279953][T14680] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3881'.
[  261.356521][   T46] smc: removing ib device syz0
[  261.362725][T14680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.377507][T14680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.385896][T14680] bond0 (unregistering): Released all slaves
[  261.410588][T14690] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  261.434332][   T46] smbdirect: ib_dev[syz0] removed
[  261.511467][T14696] batadv0: entered promiscuous mode
[  261.516737][T14696] gretap0: entered promiscuous mode
[  261.521202][T14696] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  261.529478][T14696] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  261.532498][T14696] hsr1: entered allmulticast mode
[  261.536766][T14696] batadv0: entered allmulticast mode
[  261.539166][T14696] gretap0: entered allmulticast mode
[  261.619833][T14704] raw_sendmsg: syz.2.3893 forgot to set AF_INET. Fix it!
[  261.879530][T14722] hsr0: entered promiscuous mode
[  261.881829][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3901'.
[  261.890201][T14722] hsr_slave_0: left promiscuous mode
[  261.897023][T14722] hsr_slave_1: left promiscuous mode
[  261.900168][T14722] hsr0 (unregistering): left promiscuous mode
[  262.734864][T14786] pimreg: entered allmulticast mode
[  262.901451][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3939'.
[  262.905530][T14802] netlink: 'syz.1.3939': attribute type 1 has an invalid length.
[  262.908434][T14802] netlink: 568 bytes leftover after parsing attributes in process `syz.1.3939'.
[  262.921218][T14803] syz_tun: left promiscuous mode
[  262.936029][T14803] vlan2: left allmulticast mode
[  262.937939][T14803] geneve0: left allmulticast mode
[  262.940816][T14803] bond3: left promiscuous mode
[  262.942741][T14803] vlan3: left allmulticast mode
[  262.945843][T14803] bond3: left allmulticast mode
[  262.948007][T14803] geneve4: left promiscuous mode
[  262.951178][T14803] ip6erspan0: left allmulticast mode
[  262.959016][T14803] bond5: left promiscuous mode
[  262.960870][T14803] bridge5: left promiscuous mode
[  262.962900][T14803] bond5: left allmulticast mode
[  262.966012][T14803] bridge5: left allmulticast mode
[  262.981994][T14803] batman_adv: batadv0: Interface deactivated: ipvlan2
[  263.146626][T14812] pim6reg: entered allmulticast mode
[  263.148999][T14812] pim6reg: left allmulticast mode
[  263.817607][T14866] netlink: 'syz.1.3967': attribute type 2 has an invalid length.
[  263.955109][T14881] netlink: 364 bytes leftover after parsing attributes in process `syz.0.3974'.
[  264.131078][T14891] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  264.758614][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3988'.
[  264.887494][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3992'.
[  265.108430][T14938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4000'.
[  265.126020][T14938] nbd: must specify a device to reconfigure
[  266.186538][T14977] syzkaller0: entered promiscuous mode
[  266.188150][T14977] syzkaller0: entered allmulticast mode
[  266.596665][T15003] __nla_validate_parse: 1 callbacks suppressed
[  266.596683][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4028'.
[  266.680863][T15008] netlink: 'syz.2.4030': attribute type 2 has an invalid length.
[  266.687223][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4030'.
[  266.690791][T15008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  267.508618][T15080] tipc: Enabled bearer <ib:team0>, priority 12
[  267.539185][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4066'.
[  267.584249][T15086] netlink: zone id is out of range
[  267.632014][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4071'.
[  267.635164][T15092] netlink: 'syz.0.4070': attribute type 1 has an invalid length.
[  267.797867][T15107] syzkaller1: entered allmulticast mode
[  267.810914][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4079'.
[  267.814491][T15110] netlink: 'syz.0.4079': attribute type 2 has an invalid length.
[  267.817204][T15110] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4079'.
[  268.068047][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4089'.
[  268.077421][T15129] 8021q: adding VLAN 0 to HW filter on device team0
[  268.101276][T15129] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.236964][T15129] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.251336][T15129] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.293257][T15129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  268.305163][T15129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  268.326148][T15129] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  268.342762][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.344893][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.395541][T15148] batadv_slave_1: entered promiscuous mode
[  268.434098][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  268.463364][T15148] batadv_slave_1: left promiscuous mode
[  268.472681][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4097'.
[  268.530499][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4099'.
[  269.054931][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4117'.
[  269.102551][T15203] netlink: 'syz.1.4119': attribute type 49 has an invalid length.
[  269.811464][T15239] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  269.825556][T15239] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  270.908977][T15334] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  270.911794][T15334] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  271.686427][T15392] netlink: 'syz.0.4195': attribute type 13 has an invalid length.
[  271.692414][T15392] netlink: 'syz.0.4195': attribute type 17 has an invalid length.
[  271.711413][T15391] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.857169][T15391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.896965][T15391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.994951][T15392] 8021q: adding VLAN 0 to HW filter on device team0
[  272.000856][T15392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.019842][T15392] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.022523][T15392] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.036572][T15392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.049432][T15392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.078849][T15392] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  272.193574][T15412] __nla_validate_parse: 3 callbacks suppressed
[  272.193590][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'.
[  272.207995][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'.
[  272.261198][T15416] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4205'.
[  272.272120][T15416] syzkaller0: entered promiscuous mode
[  272.283955][T15416] syzkaller0: entered allmulticast mode
[  272.296180][T15416] tc action pedit offset must be on 32 bit boundaries
[  272.299139][T15416] tc action pedit offset must be on 32 bit boundaries
[  272.301518][T15416] tc action pedit offset must be on 32 bit boundaries
[  272.305351][T15416] tc action pedit offset must be on 32 bit boundaries
[  272.307674][T15416] tc action pedit offset must be on 32 bit boundaries
[  272.310044][T15416] tc action pedit offset must be on 32 bit boundaries
[  272.312423][T15416] tc action pedit offset must be on 32 bit boundaries
[  272.314990][T15416] tc action pedit offset must be on 32 bit boundaries
[  272.317089][T15416] tc action pedit offset must be on 32 bit boundaries
[  272.319587][T15416] tc action pedit offset must be on 32 bit boundaries
[  272.321987][T15416] 0: reclassify loop, rule prio 0, protocol 800
[  272.502738][T15423] vlan5: entered promiscuous mode
[  272.712810][T15436] netlink: 'syz.2.4214': attribute type 1 has an invalid length.
[  272.716082][T15436] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4214'.
[  272.891713][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4218'.
[  272.972969][T15446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.019627][T15446] syzkaller0: entered promiscuous mode
[  273.021868][T15446] syzkaller0: entered allmulticast mode
[  273.024996][T15446] tipc: Resetting bearer <eth:syzkaller0>
[  273.042786][T15445] tipc: Resetting bearer <eth:syzkaller0>
[  273.507337][T15459] netlink: 'syz.1.4225': attribute type 27 has an invalid length.
[  275.174270][T15445] tipc: Disabling bearer <eth:syzkaller0>
[  275.437935][T15476] tipc: Resetting bearer <ib:team0>
[  275.668846][T15492] netlink: 'syz.2.4239': attribute type 8 has an invalid length.
[  275.676223][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4239'.
[  275.686880][T15492] veth1_to_team: entered promiscuous mode
[  275.691115][T15492] veth1_to_team: left promiscuous mode
[  276.099881][T15532] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  276.114868][T15532] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  276.240491][T15543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  277.303868][T15570] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4270'.
[  277.469834][   T56] block nbd2: Receive control failed (result -32)
[  277.598142][T15587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4277'.
[  277.723103][T15595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4282'.
[  277.730350][T15595] ip6tnl1: entered allmulticast mode
[  277.843382][T15600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4284'.
[  277.853959][T15600] netlink: 'syz.2.4284': attribute type 1 has an invalid length.
[  277.863255][T15600] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4284'.
[  277.925084][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4286'.
[  277.927692][T15604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4286'.
[  278.556267][T15615] netlink: 'syz.0.4291': attribute type 1 has an invalid length.
[  278.651631][T15615] 8021q: adding VLAN 0 to HW filter on device bond9
[  278.656334][T15615] bond0: (slave bond9): making interface the new active one
[  278.661441][T15615] bond0: (slave bond9): Enslaving as an active interface with an up link
[  278.669200][T15615] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4291'.
[  278.861185][T15628] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4295'.
[  279.279659][T15650] netlink: 'syz.1.4306': attribute type 1 has an invalid length.
[  279.510351][T15667] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4314'.
[  279.513152][T15667] netlink: 'syz.2.4314': attribute type 9 has an invalid length.
[  279.673183][T15675] netlink: 'syz.2.4318': attribute type 4 has an invalid length.
[  279.726374][T15680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  279.989140][T15699] tipc: Enabled bearer <ib:geneve0>, priority 10
[  280.954949][T15766] netlink: 'syz.2.4361': attribute type 10 has an invalid length.
[  280.966342][T15766] team0: Port device dummy0 added
[  281.025210][T15770] veth0: entered promiscuous mode
[  281.029878][T15770] bond0: entered promiscuous mode
[  281.051783][T15771] vxcan2: entered allmulticast mode
[  281.161117][T15765] bond0: left promiscuous mode
[  281.163252][T15765] veth0: left promiscuous mode
[  281.666569][T15810] netlink: 'syz.0.4382': attribute type 5 has an invalid length.
[  281.673583][T15810] geneve6: entered promiscuous mode
[  281.676202][T15811] netlink: 'syz.1.4381': attribute type 3 has an invalid length.
[  281.678474][T15810] geneve6: entered allmulticast mode
[  281.680995][ T5472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  281.684764][ T5472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  281.693680][ T5472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  281.696645][ T5472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  281.853687][T15823] xt_hashlimit: size too large, truncated to 1048576
[  282.680291][T15869] __nla_validate_parse: 10 callbacks suppressed
[  282.680308][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4406'.
[  282.718327][T15869] bond6: entered promiscuous mode
[  282.720352][T15869] 8021q: adding VLAN 0 to HW filter on device bond6
[  282.735004][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4408'.
[  282.746055][T15869] 8021q: adding VLAN 0 to HW filter on device bond6
[  282.748333][T15869] bond6: (slave vti1): The slave device specified does not support setting the MAC address
[  282.752068][T15869] bond6: (slave vti1): Error -95 calling set_mac_address
[  283.146705][T15897] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  283.160950][T15900] smc: net device lo applied user defined pnetid SYZ2
[  283.164681][T15900] smc: net device lo erased user defined pnetid SYZ2
[  284.141146][T15920] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4431'.
[  284.358695][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4439'.
[  284.367789][T15936] netlink: 'syz.1.4439': attribute type 22 has an invalid length.
[  284.381642][T15936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4439'.
[  284.459969][T15946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4444'.
[  284.467125][T15946] netlink: 'syz.2.4444': attribute type 8 has an invalid length.
[  284.469311][T15946] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  284.526684][T15944] block nbd3: server does not support multiple connections per device.
[  284.530315][T15944] block nbd3: shutting down sockets
[  284.556276][T15950] bridge0: port 3(vlan2) entered blocking state
[  284.559378][T15950] bridge0: port 3(vlan2) entered disabled state
[  284.561500][T15950] vlan2: entered allmulticast mode
[  284.563190][T15950] geneve0: entered allmulticast mode
[  284.569916][T15950] vlan2: entered promiscuous mode
[  284.573006][T15950] geneve0: entered promiscuous mode
[  284.629915][T15959] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  284.648519][T15959] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  284.721889][T15963] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4449'.
[  284.935021][T15976] netlink: 67 bytes leftover after parsing attributes in process `syz.1.4456'.
[  284.991010][T15980] netlink: 'syz.2.4457': attribute type 39 has an invalid length.
[  285.063983][T15984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4460'.
[  285.067067][T15984] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4460'.
[  285.529361][T15996] sctp: [Deprecated]: syz.2.4466 (pid 15996) Use of struct sctp_assoc_value in delayed_ack socket option.
[  285.529361][T15996] Use struct sctp_sack_info instead
[  286.494601][T16060] bridge0: port 1(syz_tun) entered blocking state
[  286.497246][T16060] bridge0: port 1(syz_tun) entered disabled state
[  286.499879][T16060] syz_tun: entered allmulticast mode
[  286.503483][T16060] syz_tun: entered promiscuous mode
[  288.010490][T16143] netlink: 'syz.2.4518': attribute type 3 has an invalid length.
[  288.706892][T16185] __nla_validate_parse: 5 callbacks suppressed
[  288.706909][T16185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4537'.
[  289.205473][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4540'.
[  289.842962][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4557'.
[  290.157633][T16273] netlink: 'syz.0.4560': attribute type 1 has an invalid length.
[  290.300541][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4578'.
[  290.484496][T16310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.061408][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4599'.
[  291.204808][T16342] openvswitch: netlink: IP tunnel dst address not specified
[  291.847510][T16360] bond7: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  292.162495][T16368] netlink: 'syz.0.4612': attribute type 13 has an invalid length.
[  292.218488][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4612'.
[  292.285055][T16369] bond3: (slave syz_tun): Removing an active aggregator
[  292.295852][T16369] bond3: (slave syz_tun): Releasing backup interface
[  292.510599][T16379] netlink: 'syz.0.4616': attribute type 1 has an invalid length.
[  292.513042][T16379] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4616'.
[  292.625254][T16385] veth0: Caught tx_queue_len zero misconfig
[  292.641073][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4620'.
[  292.644088][T16387] openvswitch: netlink: Invalid VLAN frame
[  292.707702][T16389] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4621'.
[  292.710340][T16389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4621'.
[  292.749785][T16393] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  292.753715][T16393] bond7 (unregistering): Released all slaves
[  293.404413][T16412] syzkaller1: entered promiscuous mode
[  293.406738][T16412] syzkaller1: entered allmulticast mode
[  294.146647][T16450] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  294.265674][T16460] __nla_validate_parse: 2 callbacks suppressed
[  294.265691][T16460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4650'.
[  294.505334][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4660'.
[  294.519241][T16482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4658'.
[  294.534617][T16484] x_tables: unsorted underflow at hook 2
[  295.097603][T16539] lo: Caught tx_queue_len zero misconfig
[  295.691007][T16577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4701'.
[  296.398544][T16610] netlink: 'syz.2.4714': attribute type 2 has an invalid length.
[  296.459198][T16614] netlink: 'syz.2.4716': attribute type 1 has an invalid length.
[  296.462258][T16614] netlink: 'syz.2.4716': attribute type 2 has an invalid length.
[  296.467676][T16614] netlink: 'syz.2.4716': attribute type 1 has an invalid length.
[  296.472236][T16614] netlink: 'syz.2.4716': attribute type 3 has an invalid length.
[  296.503553][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4717'.
[  296.508493][T16616] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  296.542762][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4718'.
[  296.616640][T16623] IPv6: sit1: Disabled Multicast RS
[  296.842097][T16640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4727'.
[  297.029554][T16654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4734'.
[  297.060613][T16656] batman_adv: batadv0: Adding interface: vlan0
[  297.062395][T16656] batman_adv: batadv0: The MTU of interface vlan0 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  297.069119][T16656] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active
[  297.290353][T16678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.377958][T16688] syzkaller1: entered promiscuous mode
[  297.379665][T16688] syzkaller1: entered allmulticast mode
[  297.691635][T16715] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4763'.
[  297.763207][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4768'.
[  297.791353][T16730] netlink: 'syz.2.4770': attribute type 3 has an invalid length.
[  297.821208][T16727] bond8: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  297.827481][T16727] bond8: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[  297.892544][T16740] netlink: 'syz.1.4776': attribute type 1 has an invalid length.
[  297.978706][   T33] audit: type=1107 audit(1778508656.973:5): pid=16748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  298.252517][T16783] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[  298.330022][T16787] bond10: option downdelay: invalid value (18446744073709547521)
[  298.332304][T16787] bond10: option downdelay: allowed values 0 - 2147483647
[  298.342625][T16787] bond10 (unregistering): Released all slaves
[  298.373661][T16794] 8021q: adding VLAN 0 to HW filter on device bond9
[  298.668357][T16833] batman_adv: batadv0: Adding interface: ipvlan3
[  298.670647][T16833] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  298.679281][T16833] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  298.701665][T16837] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  298.707053][T16835] netlink: 'syz.1.4820': attribute type 3 has an invalid length.
[  299.570779][T16844] syzkaller1: entered promiscuous mode
[  299.581775][T16844] syzkaller1: entered allmulticast mode
[  300.504503][T16934] __nla_validate_parse: 5 callbacks suppressed
[  300.504514][T16934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4863'.
[  300.707711][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4869'.
[  301.117496][T16974] netlink: 'syz.1.4880': attribute type 9 has an invalid length.
[  301.120314][T16974] netlink: 'syz.1.4880': attribute type 11 has an invalid length.
[  301.122813][T16974] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.4880'.
[  301.385127][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4890'.
[  301.524309][T17006] hma(kX: entered promiscuous mode
[  301.563474][T17011] netlink: 'syz.1.4897': attribute type 1 has an invalid length.
[  301.601686][T17011] gretap3: entered allmulticast mode
[  301.608557][T17011] bond10: (slave gretap3): making interface the new active one
[  301.611839][T17011] bond10: (slave gretap3): Enslaving as an active interface with an up link
[  301.624401][T17011] syz.1.4897 (17011) used greatest stack depth: 18720 bytes left
[  301.693627][T17025] netlink: 'syz.1.4904': attribute type 22 has an invalid length.
[  301.699514][T17025] bond0: option ad_select: invalid value (16)
[  301.719920][T17028] netlink: 'syz.2.4905': attribute type 33 has an invalid length.
[  302.896343][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4929'.
[  302.901565][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4929'.
[  302.904375][T17084] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  303.617945][T17112] tipc: Can't bind to reserved service type 0
[  303.852828][T17127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.322445][T17158] tunl0: Caught tx_queue_len zero misconfig
[  305.503625][T17206] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  305.511642][T17206] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  306.043829][T17238] smc: net device wlan0 erased user defined pnetid SYZ0
[  306.918902][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5011'.
[  307.166035][T17287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5016'.
[  307.168830][T17287] vlan0: entered promiscuous mode
[  307.206827][T17291] netlink: 'syz.2.5018': attribute type 10 has an invalid length.
[  307.209110][T17291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5018'.
[  307.216831][T17291] team0: Port device geneve1 added
[  307.219869][ T5662] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.223683][ T5662] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.226790][ T5662] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.233586][T17293] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  307.242059][ T5662] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.416129][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5026'.
[  307.846424][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5038'.
[  308.466686][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5054'.
[  308.558184][T17377] syzkaller1: entered allmulticast mode
[  308.678632][T17388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.954357][T17401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5061'.
[  309.083499][T17406] netlink: 'syz.0.5067': attribute type 9 has an invalid length.
[  309.156935][T17407] netlink: 'syz.0.5067': attribute type 3 has an invalid length.
[  309.165864][T17407] netlink: 'syz.0.5067': attribute type 3 has an invalid length.
[  309.868883][T17418] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5072'.
[  310.012220][T17420] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.022034][T17428] netlink: 'syz.1.5076': attribute type 3 has an invalid length.
[  310.035675][T17429] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.5074'.
[  310.191792][T17420] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.210135][T17420] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.338144][T17432] syzkaller1: entered promiscuous mode
[  310.340004][T17432] syzkaller1: entered allmulticast mode
[  310.343401][T11674] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[  310.346978][T11674] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[  310.350586][T11674] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[  310.355080][T11674] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[  310.667008][T17458] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  310.935411][T17476] xt_policy: neither incoming nor outgoing policy selected
[  310.967439][T17478] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  310.971297][T17478] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  310.977039][T17478] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  311.179729][T17504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5102'.
[  311.183128][T17504] netem: incorrect ge model size
[  311.189890][T17504] netem: change failed
[  311.795618][T17537] netlink: 'syz.1.5110': attribute type 4 has an invalid length.
[  311.802013][T17537] netlink: 'syz.1.5110': attribute type 4 has an invalid length.
[  311.866272][T11674] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  311.870238][T11674] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  311.874918][T11674] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  311.880397][T11674] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  311.972285][T17547] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  311.974940][T17547] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  312.027884][T17553] __nla_validate_parse: 6 callbacks suppressed
[  312.027900][T17553] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5115'.
[  312.227967][T17569] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5124'.
[  312.231772][T17569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5124'.
[  312.241067][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5124'.
[  312.300302][T17574] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 3, id = 0
[  312.406764][T17579] netlink: 'syz.1.5128': attribute type 13 has an invalid length.
[  312.411674][T17579] netlink: 'syz.1.5128': attribute type 17 has an invalid length.
[  312.460699][T17579] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.464339][T17579] 8021q: adding VLAN 0 to HW filter on device team0
[  312.466897][T17579] tipc: Resetting bearer <ib:team0>
[  312.469274][T17579] tipc: Resetting bearer <ib:team0>
[  312.471397][T17579] dummy0: left promiscuous mode
[  312.479457][T17579] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.511533][T17579] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.535195][T17579] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.546184][T17579] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  312.557092][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.559568][ T1113] bridge0: port 1(bridge_slave_0) entered listening state
[  312.572765][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.575417][ T1113] bridge0: port 2(bridge_slave_1) entered listening state
[  313.840537][T17633] netlink: 'syz.1.5153': attribute type 1 has an invalid length.
[  313.872706][T17633] 8021q: adding VLAN 0 to HW filter on device bond11
[  313.896911][T17633] vlan3: entered allmulticast mode
[  313.901030][T17633] bond11: entered allmulticast mode
[  313.930207][T17633] bond11: (slave geneve3): making interface the new active one
[  313.939008][T17633] geneve3: entered allmulticast mode
[  313.945561][T17633] bond11: (slave geneve3): Enslaving as an active interface with an up link
[  313.948710][T11674] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.955867][T11674] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.962911][T17639] veth0_macvtap: Caught tx_queue_len zero misconfig
[  313.975966][T11674] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.982624][T11674] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.048246][T17645] ipip3: entered promiscuous mode
[  314.747147][T17679] syzkaller0: entered promiscuous mode
[  314.748810][T17679] syzkaller0: entered allmulticast mode
[  314.936623][T17690] netlink: 'syz.0.5177': attribute type 3 has an invalid length.
[  315.067495][T17700] bond0: entered promiscuous mode
[  315.075140][T17700] batadv0: entered promiscuous mode
[  315.085226][T17700] debugfs: 'hsr1' already exists in 'hsr'
[  315.087776][T17700] Cannot create hsr debugfs directory
[  315.090131][T17700] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  315.093508][T17700] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  315.098967][T17700] 8021q: adding VLAN 0 to HW filter on device hsr1
[  315.236274][T17708] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5185'.
[  315.270452][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5186'.
[  315.306627][T17712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5187'.
[  316.847565][T17761] xt_hashlimit: overflow, try lower: 18446744073709551615/32
[  317.328394][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5221'.
[  317.340944][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5221'.
[  317.402456][T17795] team_slave_1: Caught tx_queue_len zero misconfig
[  317.727535][T17801] netlink: 'syz.2.5226': attribute type 1 has an invalid length.
[  317.760076][T17803] netlink: 'syz.2.5227': attribute type 10 has an invalid length.
[  317.768120][T17803] team0: Port device dummy0 removed
[  317.772787][T17803] dummy0: entered promiscuous mode
[  317.833547][T17809] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5230'.
[  318.392431][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5243'.
[  318.673453][T17849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5249'.
[  318.691488][T17849] bond12: option primary_reselect: invalid value (133)
[  318.699220][T17849] bond12 (unregistering): Released all slaves
[  318.902395][T17863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5256'.
[  320.017495][T17942] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  320.032284][T17942] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  320.071631][T17944] bond10: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  320.078638][T17944] bond10 (unregistering): Released all slaves
[  320.266814][T17955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5294'.
[  320.670037][T17961] syzkaller0: entered promiscuous mode
[  320.674322][T17961] syzkaller0: entered allmulticast mode
[  320.899119][T17965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5299'.
[  320.972722][T17969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5300'.
[  321.346588][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5305'.
[  321.363863][T17983] netlink: 'syz.1.5305': attribute type 1 has an invalid length.
[  321.827812][T17993] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  321.831682][T17993] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  322.129966][T18028] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.132878][T18028] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.190706][T18028] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.195077][T18028] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.272408][T18028] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.282764][T18028] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.294818][T18045] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  322.297207][T18045] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  322.335915][T18028] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.343733][T18028] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.360837][T18050] __nla_validate_parse: 3 callbacks suppressed
[  322.360969][T18050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5335'.
[  322.447355][T11674] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  322.451094][T11674] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.488205][T11674] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  322.492589][T11674] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.513044][T11674] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  322.517587][T11674] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.547097][T11674] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  322.550308][T11674] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.570278][T18064] netlink: 'syz.0.5342': attribute type 8 has an invalid length.
[  322.631039][T18066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.833229][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5350'.
[  322.839766][T18080] netlink: 'syz.0.5350': attribute type 13 has an invalid length.
[  322.842789][T18080] netlink: 'syz.0.5350': attribute type 17 has an invalid length.
[  322.862739][T18080] batman_adv: batadv0: Interface activated: vlan0
[  322.911201][T18080] 8021q: adding VLAN 0 to HW filter on device team0
[  322.921551][T18080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.960501][T18080] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.965454][T18080] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.974366][T18080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  322.977957][T18080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  322.986156][T18080] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  322.997153][T18081] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.808361][T18098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5357'.
[  324.616341][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5371'.
[  324.643728][T18129] macvtap0: entered promiscuous mode
[  324.646139][T18129] macvtap0: entered allmulticast mode
[  324.649379][T18129] dummy0: entered allmulticast mode
[  324.657709][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5371'.
[  324.666993][T18129] dummy0: left allmulticast mode
[  324.671322][T18129] macvtap0: left promiscuous mode
[  324.673165][T18129] macvtap0: left allmulticast mode
[  325.359779][T18176] bond0: (slave bond9): making interface the new active one
[  325.838514][T18208] netlink: 'syz.1.5407': attribute type 10 has an invalid length.
[  325.956964][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5409'.
[  326.061700][T18223] syzkaller0: entered promiscuous mode
[  326.063725][T18223] syzkaller0: entered allmulticast mode
[  326.765756][T18270] can: request_module (can-proto-0) failed.
[  327.101376][T18287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5440'.
[  327.398251][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5449'.
[  327.423028][T18309] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  327.425757][T18309] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  327.804515][T18349] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  327.906332][T18359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.045797][ T6575] e1000 0000:00:03.0 eth0: Reset adapter
[  330.275233][ T6575] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  341.893016][T18451] IPv6: NLM_F_CREATE should be specified when creating new route
[  342.035902][T18458] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.043242][T18458] syzkaller0: entered promiscuous mode
[  342.048081][T18458] syzkaller0: entered allmulticast mode
[  342.072381][T18458] tipc: Resetting bearer <eth:syzkaller0>
[  342.096469][T18457] tipc: Resetting bearer <eth:syzkaller0>
[  342.111298][T18457] tipc: Disabling bearer <eth:syzkaller0>
[  342.444695][ T5608] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  342.450060][ T5608] CPU: 1 UID: 0 PID: 5608 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  342.450074][ T5608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.450080][ T5608] Call Trace:
[  342.450084][ T5608]  <TASK>
[  342.450088][ T5608]  dump_stack_lvl+0xe8/0x150
[  342.450103][ T5608]  dump_header+0xd3/0x4c0
[  342.450117][ T5608]  oom_kill_process+0x3ab/0x970
[  342.450130][ T5608]  out_of_memory+0x106c/0x1410
[  342.450140][ T5608]  ? try_charge_memcg+0xbb9/0x1570
[  342.450152][ T5608]  ? __pfx___mutex_lock+0x10/0x10
[  342.450164][ T5608]  ? __pfx_out_of_memory+0x10/0x10
[  342.450173][ T5608]  ? do_raw_spin_unlock+0xf5/0x210
[  342.450189][ T5608]  try_charge_memcg+0xc77/0x1570
[  342.450208][ T5608]  ? __pfx_try_charge_memcg+0x10/0x10
[  342.450218][ T5608]  ? percpu_ref_tryget+0x15/0x180
[  342.450238][ T5608]  ? charge_memcg+0x23/0x2b0
[  342.450249][ T5608]  charge_memcg+0x1a2/0x2b0
[  342.450261][ T5608]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  342.450271][ T5608]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  342.450289][ T5608]  __swap_cache_prepare_and_add+0xdc/0x700
[  342.450307][ T5608]  ? page_rmappable_folio+0x9a/0x170
[  342.450331][ T5608]  swap_cache_alloc_folio+0xf1/0x240
[  342.450347][ T5608]  swap_cluster_readahead+0x355/0x670
[  342.450390][ T5608]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  342.450417][ T5608]  ? get_vma_policy+0x27b/0x3c0
[  342.450440][ T5608]  swapin_readahead+0x196/0xc50
[  342.450457][ T5608]  ? swap_table_get+0x1e/0x260
[  342.450473][ T5608]  ? __pfx_swapin_readahead+0x10/0x10
[  342.450490][ T5608]  ? swap_table_get+0x1e/0x260
[  342.450503][ T5608]  ? swap_table_get+0x1e/0x260
[  342.450516][ T5608]  ? swap_table_get+0x1e/0x260
[  342.450532][ T5608]  ? swap_table_get+0x216/0x260
[  342.450549][ T5608]  ? swap_cache_get_folio+0x2e4/0x2f0
[  342.450570][ T5608]  do_swap_page+0x555/0x5120
[  342.450588][ T5608]  ? __pte_offset_map+0x29/0x240
[  342.450605][ T5608]  ? __pte_offset_map+0x29/0x240
[  342.450627][ T5608]  ? do_swap_page+0x128/0x5120
[  342.450642][ T5608]  ? __pfx_do_swap_page+0x10/0x10
[  342.450653][ T5608]  ? __pte_offset_map+0x1ae/0x240
[  342.450670][ T5608]  ? pte_offset_map_rw_nolock+0xea/0x160
[  342.450688][ T5608]  handle_mm_fault+0x12d2/0x3170
[  342.450716][ T5608]  ? handle_mm_fault+0xee/0x3170
[  342.450738][ T5608]  ? __pfx_handle_mm_fault+0x10/0x10
[  342.450753][ T5608]  ? lock_vma_under_rcu+0x45a/0x500
[  342.450790][ T5608]  do_user_addr_fault+0xa73/0x1340
[  342.450811][ T5608]  ? rcu_is_watching+0x15/0xb0
[  342.450826][ T5608]  ? trace_page_fault_user+0x84/0x1e0
[  342.450842][ T5608]  exc_page_fault+0x6a/0xc0
[  342.450864][ T5608]  asm_exc_page_fault+0x26/0x30
[  342.450877][ T5608] RIP: 0033:0x7f016ef5d60e
[  342.450892][ T5608] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  342.450904][ T5608] RSP: 002b:00007ffc5c7488a8 EFLAGS: 00010246
[  342.450917][ T5608] RAX: 0000000000000000 RBX: 000055558d5b4500 RCX: 00007f016ef5d60e
[  342.450927][ T5608] RDX: 00007ffc5c748900 RSI: 0000000000000000 RDI: 0000000000000000
[  342.450936][ T5608] RBP: 00007ffc5c74896c R08: 0000000000000000 R09: 0000000000000000
[  342.450943][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  342.450951][ T5608] R13: 00000000000927c0 R14: 00000000000535a5 R15: 00007ffc5c7489c0
[  342.450972][ T5608]  </TASK>
[  342.450977][ T5608] memory: usage 307200kB, limit 307200kB, failcnt 2455
[  342.605601][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  342.608377][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  342.631151][ T5608] memory+swap: usage 307288kB, limit 9007199254740988kB, failcnt 0
[  342.633405][ T5608] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  342.665643][ T5608] Memory cgroup stats for /syz0:
[  342.665822][ T5608] cache 0
[  342.668215][ T5608] rss 0
[  342.669162][ T5608] rss_huge 0
[  342.670152][ T5608] shmem 0
[  342.671002][ T5608] mapped_file 0
[  342.672175][ T5608] dirty 0
[  342.673215][ T5608] writeback 0
[  342.683900][ T5608] workingset_refault_anon 5
[  342.686207][ T5608] workingset_refault_file 0
[  342.688478][ T5608] swap 90112
[  342.689730][ T5608] swapcached 131072
[  342.694215][ T5608] pgpgin 122507
[  342.695602][ T5608] pgpgout 122502
[  342.699558][ T5608] pgfault 294556
[  342.700933][ T5608] pgmajfault 1
[  342.705856][ T5608] inactive_anon 0
[  342.707265][ T5608] active_anon 20480
[  342.712083][ T5608] inactive_file 0
[  342.715605][ T5608] active_file 0
[  342.717196][ T5608] unevictable 0
[  342.719367][ T5608] hierarchical_memory_limit 314572800
[  342.722960][ T5608] hierarchical_memsw_limit 9223372036854771712
[  342.730863][T18483] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  342.733584][T18483] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  342.739834][ T5608] total_cache 0
[  342.741142][ T5608] total_rss 0
[  342.747376][ T5608] total_rss_huge 0
[  342.752565][ T5608] total_shmem 0
[  342.756889][ T5608] total_mapped_file 0
[  342.758089][ T5608] total_dirty 0
[  342.759083][ T5608] total_writeback 0
[  342.760362][ T5608] total_workingset_refault_anon 5
[  342.761798][ T5608] total_workingset_refault_file 0
[  342.763613][ T5608] total_swap 90112
[  342.775034][ T5608] total_swapcached 131072
[  342.778621][ T5608] total_pgpgin 122507
[  342.779791][ T5608] total_pgpgout 122502
[  342.784553][ T5608] total_pgfault 294556
[  342.785804][ T5608] total_pgmajfault 1
[  342.787544][ T5608] total_inactive_anon 0
[  342.788735][ T5608] total_active_anon 20480
[  342.794275][ T5608] total_inactive_file 0
[  342.798653][ T5608] total_active_file 0
[  342.800150][ T5608] total_unevictable 0
[  342.801387][ T5608] anon_cost 0
[  342.806267][ T5608] file_cost 0
[  342.807269][ T5608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5483,pid=18430,uid=0
[  342.816546][ T5608] Memory cgroup out of memory: Killed process 18430 (syz.0.5483) total-vm:104208kB, anon-rss:1244kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  342.947548][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5510'.
[  343.074925][T18502] syz_tun: left allmulticast mode
[  343.078235][T18502] syz_tun: left promiscuous mode
[  343.084369][T18502] bridge0: port 1(syz_tun) entered disabled state
[  343.091014][T18502] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  343.112242][T18502] ip6gre1: entered allmulticast mode
[  343.121051][T18502] team0: Device ip6gre1 is of different type
[  343.456966][T18526] netlink: 'syz.2.5527': attribute type 1 has an invalid length.
[  343.463443][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5527'.
[  343.495401][T18530] vcan0: tx drop: invalid da for name 0x0000000000000002
[  343.566428][T18537] netlink: 'syz.1.5533': attribute type 3 has an invalid length.
[  343.594596][T18540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.020132][T18564] netlink: 1100 bytes leftover after parsing attributes in process `syz.0.5545'.
[  344.070944][T18567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5546'.
[  344.281624][T18586] syzkaller0: entered promiscuous mode
[  344.291519][T18586] syzkaller0: entered allmulticast mode
[  344.299727][T18586] tcf_pedit_act: 7 callbacks suppressed
[  344.299738][T18586] tc action pedit offset must be on 32 bit boundaries
[  344.564633][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5560'.
[  344.576679][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5560'.
[  345.284097][T18647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5582'.
[  345.343020][T18649] netlink: 'syz.1.5583': attribute type 1 has an invalid length.
[  345.346189][T18649] netlink: 'syz.1.5583': attribute type 1 has an invalid length.
[  345.402420][T18651] gre2: entered allmulticast mode
[  346.100838][T18676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5594'.
[  346.708488][T18723] syzkaller0: entered promiscuous mode
[  346.710681][T18723] syzkaller0: entered allmulticast mode
[  347.121259][T18750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5629'.
[  347.623213][T18802] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  347.803736][T18817] xt_hashlimit: size too large, truncated to 1048576
[  348.366653][T18856] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5675'.
[  348.482212][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5682'.
[  348.609582][T18890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5693'.
[  349.484108][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5726'.
[  349.867181][T18994] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5739'.
[  349.870397][T18994] netlink: 'syz.2.5739': attribute type 1 has an invalid length.
[  350.147616][T19015] batman_adv: batadv0: Interface deactivated: vlan0
[  350.498697][T19015] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.532326][T19015] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.808401][T19062] syzkaller1: entered promiscuous mode
[  350.810779][T19062] syzkaller1: entered allmulticast mode
[  351.091548][T19080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5780'.
[  351.566149][T19116] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  351.573019][T19116] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  351.780694][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5803'.
[  351.835586][T19137] netlink: 'syz.1.5804': attribute type 1 has an invalid length.
[  351.839913][T19137] netlink: 'syz.1.5804': attribute type 1 has an invalid length.
[  351.950032][T19149] netlink: 'syz.1.5810': attribute type 2 has an invalid length.
[  351.952268][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5810'.
[  351.966564][T19151] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5811'.
[  351.983601][T19153] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5812'.
[  352.737801][T19200] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  352.932247][T19228] IPVS: Unknown mcast interface: vcan0
[  353.112187][T19243] netlink: 'syz.1.5851': attribute type 1 has an invalid length.
[  353.147368][T19243] bond12: entered promiscuous mode
[  353.149056][T19243] bond12: entered allmulticast mode
[  353.150945][T19243] 8021q: adding VLAN 0 to HW filter on device bond12
[  353.170197][T19243] bridge4: entered promiscuous mode
[  353.172001][T19243] bridge4: entered allmulticast mode
[  353.174264][T19243] bond12: (slave bridge4): Enslaving as a backup interface with an up link
[  353.189480][T19243] bridge5: entered promiscuous mode
[  353.192936][T19243] bridge5: entered allmulticast mode
[  353.196645][T19243] bond12: (slave bridge5): Enslaving as a backup interface with a down link
[  353.253987][ T5662] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  353.389672][T11674] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  353.741653][T19317] __nla_validate_parse: 2 callbacks suppressed
[  353.741664][T19317] netlink: 1484 bytes leftover after parsing attributes in process `syz.1.5883'.
[  353.747624][T19317] netlink: 1484 bytes leftover after parsing attributes in process `syz.1.5883'.
[  353.897232][T19332] batman_adv: batadv0: Interface activated: vlan0
[  353.910939][T19332] 8021q: adding VLAN 0 to HW filter on device team0
[  353.920273][T19332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.937731][T19337] netlink: 'syz.1.5893': attribute type 21 has an invalid length.
[  353.941836][T19337] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5893'.
[  353.959195][T19332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.962211][T19332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.967497][T19332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  353.971185][T19332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  353.977058][T19332] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  353.986171][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.988341][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.002346][T19337] netlink: 'syz.1.5893': attribute type 5 has an invalid length.
[  354.006069][T19337] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5893'.
[  354.249357][T19354] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5900'.
[  354.255706][T19354] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5900'.
[  354.270960][T19354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5900'.
[  356.717023][T19341] syzkaller0: entered promiscuous mode
[  356.718714][T19341] syzkaller0: entered allmulticast mode
[  357.066727][T19387] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5915'.
[  357.312315][T19414] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  357.429370][T19426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5933'.
[  357.444320][T19426] nbd0: detected capacity change from 63 to 0
[  357.446643][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5933'.
[  357.637195][T19445] sctp: [Deprecated]: syz.1.5941 (pid 19445) Use of int in maxseg socket option.
[  357.637195][T19445] Use struct sctp_assoc_value instead
[  358.336926][T19500] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  358.341213][T19500] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  358.583251][T19532] Cannot find add_set index 0 as target
[  359.495262][T19574] openvswitch: netlink: Message has 496 unknown bytes.
[  359.503843][T19574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.549895][T19576] netlink: 'syz.2.6000': attribute type 61 has an invalid length.
[  359.967852][T19606] tipc: Invalid UDP bearer configuration
[  359.967878][T19606] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  360.164313][T19625] dummy0: mtu less than device minimum
[  360.206042][T19629] __nla_validate_parse: 1 callbacks suppressed
[  360.206059][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6026'.
[  360.213155][T19629] netlink: 'syz.1.6026': attribute type 1 has an invalid length.
[  360.219591][T19629] netlink: 'syz.1.6026': attribute type 2 has an invalid length.
[  360.428805][T19651] xt_hashlimit: size too large, truncated to 1048576
[  360.957266][T19692] netlink: 'syz.1.6055': attribute type 1 has an invalid length.
[  361.568349][T19730] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6072'.
[  361.575718][T19730] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  362.194078][T19758] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  362.199851][T19758] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  362.242686][T19764] netlink: 'syz.0.6087': attribute type 1 has an invalid length.
[  362.247876][T19764] netlink: 'syz.0.6087': attribute type 1 has an invalid length.
[  362.453024][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6096'.
[  362.482395][T19791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6097'.
[  363.178654][T19817] sctp: [Deprecated]: syz.2.6109 (pid 19817) Use of int in maxseg socket option.
[  363.178654][T19817] Use struct sctp_assoc_value instead
[  363.301828][T19827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6114'.
[  363.430560][T19837] Cannot find add_set index 0 as target
[  364.399366][T19900] netlink: 'syz.1.6145': attribute type 4 has an invalid length.
[  364.409126][T19900] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6145'.
[  364.804929][T19934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.858808][T19967] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6177'.
[  365.897095][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6177'.
[  365.903200][T19967] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.916829][T19967] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.296243][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6192'.
[  367.145059][   T33] audit: type=1804 audit(1778508726.133:6): pid=20077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6217" name="/newroot/2126/memory.events" dev="tmpfs" ino=10721 res=1 errno=0
[  367.153200][   T33] audit: type=1800 audit(1778508726.143:7): pid=20077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6217" name="memory.events" dev="tmpfs" ino=10721 res=0 errno=0
[  367.188680][T20077] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  367.199631][T20077] bond13 (unregistering): Released all slaves
[  367.218017][T20084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  367.220192][T20084] IPv6: NLM_F_CREATE should be set when creating new route
[  367.222496][T20084] IPv6: NLM_F_CREATE should be set when creating new route
[  367.392627][T20103] sit0: entered promiscuous mode
[  367.400989][T20103] netlink: 'syz.0.6227': attribute type 1 has an invalid length.
[  367.408613][T20103] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6227'.
[  367.462594][T20109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.468412][T20109] syzkaller0: entered promiscuous mode
[  367.472224][T20109] syzkaller0: entered allmulticast mode
[  367.496775][T20109] tipc: Resetting bearer <eth:syzkaller0>
[  367.504712][T20108] tipc: Resetting bearer <eth:syzkaller0>
[  367.524532][T20108] tipc: Disabling bearer <eth:syzkaller0>
[  367.534650][T20115] ip6erspan1: entered allmulticast mode
[  367.539524][T20117] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  367.623440][T20117] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  367.632779][T20117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6233'.
[  367.883126][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6251'.
[  367.886041][T20156] netlink: 356 bytes leftover after parsing attributes in process `syz.0.6251'.
[  367.991332][T20163] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  368.841884][T20182] netlink: 'syz.2.6264': attribute type 4 has an invalid length.
[  368.861516][T20182] netlink: 'syz.2.6264': attribute type 4 has an invalid length.
[  369.137014][T20210] netlink: 6188 bytes leftover after parsing attributes in process `syz.2.6276'.
[  369.139716][T20210] netlink: 6188 bytes leftover after parsing attributes in process `syz.2.6276'.
[  369.169154][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6275'.
[  369.484982][T20231] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) !
[  369.792076][T20240] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.798597][T20240] 8021q: adding VLAN 0 to HW filter on device team0
[  369.801592][T20240] geneve1: entered promiscuous mode
[  369.810489][T20240] tipc: Resetting bearer <eth:batadv0>
[  369.812974][T20240] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.864091][T20240] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  369.879287][ T6588] syz1: Port: 1 Link ACTIVE
[  370.191374][T20265] openvswitch: netlink: IP tunnel TTL not specified.
[  370.758453][T20292] debugfs: 'netdev:syzkaller0' already exists in 'phy7'
[  370.927470][T20298] __nla_validate_parse: 3 callbacks suppressed
[  370.927487][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6316'.
[  370.954345][T20298] : entered promiscuous mode
[  370.962785][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6316'.
[  370.983210][T20298] openvswitch: : Dropping previously announced user features
[  371.194717][T20312] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  371.196670][T20312] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  372.248660][T20341] netlink: 'syz.2.6332': attribute type 1 has an invalid length.
[  372.273484][T20344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6336'.
[  372.296618][T20341] 8021q: adding VLAN 0 to HW filter on device bond7
[  372.317329][T20334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6332'.
[  372.677022][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.679694][    C0] bridge0: topology change detected, propagating
[  372.682317][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.686599][    C0] bridge0: topology change detected, propagating
[  372.705434][T20374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6351'.
[  372.738935][T20374] bond14: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  372.746909][T20374] bond14 (unregistering): Released all slaves
[  373.003579][T20394] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6357'.
[  373.109064][   T56] block nbd4: Receive control failed (result -32)
[  373.412136][T20437] netlink: zone id is out of range
[  373.415498][T20437] netlink: zone id is out of range
[  373.417022][T20437] netlink: zone id is out of range
[  373.418498][T20437] netlink: zone id is out of range
[  373.420036][T20437] netlink: zone id is out of range
[  373.421705][T20437] netlink: zone id is out of range
[  373.423275][T20437] netlink: zone id is out of range
[  373.425969][T20437] netlink: zone id is out of range
[  373.427681][T20437] netlink: zone id is out of range
[  373.599826][T20456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6386'.
[  373.730882][T20463] xt_hashlimit: size too large, truncated to 1048576
[  373.782087][T20465] netlink: 'syz.0.6389': attribute type 1 has an invalid length.
[  373.784515][T20465] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6389'.
[  375.186595][T20554] geneve4: entered promiscuous mode
[  375.240722][T20559] netlink: 296 bytes leftover after parsing attributes in process `syz.1.6419'.
[  375.375028][T20573] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6426'.
[  375.578608][T20588] vlan4: entered allmulticast mode
[  375.582226][T20588] veth0_to_bond: entered allmulticast mode
[  375.590889][T20591] netlink: 'syz.2.6435': attribute type 1 has an invalid length.
[  375.699328][T20595] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  375.704974][T20595] bond8 (unregistering): Released all slaves
[  376.208175][T20652] netlink: 'syz.1.6464': attribute type 1 has an invalid length.
[  376.238346][T20652] 8021q: adding VLAN 0 to HW filter on device bond14
[  376.255130][T20652] bond14: (slave ip6gretap2): making interface the new active one
[  376.259554][T20652] bond14: (slave ip6gretap2): Enslaving as an active interface with an up link
[  376.743109][T20686] __nla_validate_parse: 5 callbacks suppressed
[  376.743129][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6481'.
[  377.754595][T20720] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6495'.
[  377.757050][T20720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6495'.
[  377.760069][T20720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6495'.
[  378.094127][T20745] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6507'.
[  379.182613][T20831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6546'.
[  379.242115][T20833] net_ratelimit: 347 callbacks suppressed
[  379.242134][T20833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  379.471387][T20845] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  379.614320][T20851] netlink: 'syz.1.6556': attribute type 1 has an invalid length.
[  379.617254][T20851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  379.625829][T20853] sock: sock_timestamping_bind_phc: sock not bind to device
[  379.664346][T20857] netlink: 'syz.1.6559': attribute type 1 has an invalid length.
[  379.674442][T20857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6559'.
[  380.072998][T20890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6572'.
[  380.129618][T20894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6574'.
[  380.357106][T20910] bridge0: entered allmulticast mode
[  380.362659][T20910] pim6reg: entered allmulticast mode
[  380.560879][T20934] gre1: entered allmulticast mode
[  381.085327][T20971] bond11: entered allmulticast mode
[  381.087244][T20971] 8021q: adding VLAN 0 to HW filter on device bond11
[  381.302059][T20978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6608'.
[  381.309231][T20978] ip6gre1: entered promiscuous mode
[  381.310921][T20978] ip6gre1: entered allmulticast mode
[  381.342214][T20980] IPVS: Error connecting to the multicast addr
[  381.787461][T21027] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  381.790274][T21027] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  381.792395][T21027] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  381.839880][T21035] netlink: 'syz.1.6635': attribute type 4 has an invalid length.
[  382.170466][T21068] __nla_validate_parse: 2 callbacks suppressed
[  382.170476][T21068] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6652'.
[  383.221740][T21091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6661'.
[  383.586521][T21111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  383.595995][T21111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  383.903960][T21115] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6672'.
[  383.909420][T21115] syzkaller0: entered promiscuous mode
[  383.911606][T21115] syzkaller0: entered allmulticast mode
[  383.923576][T21115] tcf_pedit_act: 7 callbacks suppressed
[  383.923594][T21115] tc action pedit 'at' offset 8666 out of bounds
[  383.929395][T21115] tc action pedit 'at' offset 8666 out of bounds
[  383.931709][T21115] tc action pedit 'at' offset 8666 out of bounds
[  383.934106][T21115] tc action pedit 'at' offset 8666 out of bounds
[  383.936433][T21115] tc action pedit 'at' offset 8666 out of bounds
[  383.938748][T21115] tc action pedit 'at' offset 8666 out of bounds
[  383.941017][T21115] tc action pedit 'at' offset 8666 out of bounds
[  383.943279][T21115] tc action pedit 'at' offset 8666 out of bounds
[  383.945660][T21115] tc action pedit 'at' offset 8666 out of bounds
[  383.947948][T21115] tc action pedit 'at' offset 8666 out of bounds
[  383.950269][T21115] TC_ACT_REPEAT abuse ?
[  384.887270][T21190] netlink: 'syz.2.6709': attribute type 5 has an invalid length.
[  384.919077][T21192] tun0: tun_chr_ioctl cmd 2147767507
[  385.519326][T21234] x_tables: duplicate entry at hook 2
[  385.570293][T21236] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  385.573086][T21236] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  385.825250][T21254] tipc: Resetting bearer <ib:team0>
[  385.857606][T21254] tipc: Resetting bearer <eth:syzkaller0>
[  385.909966][ T5662] bond12: (slave bridge4): link status up again after 0 ms
[  385.915984][ T5662] bond12: (slave bridge4): failed to get link speed/duplex
[  386.024479][ T5662] bond12: (slave bridge4): failed to get link speed/duplex
[  386.028207][T21272] netlink: 'syz.0.6746': attribute type 1 has an invalid length.
[  386.134191][ T6604] bond12: (slave bridge4): failed to get link speed/duplex
[  386.247594][ T6604] bond12: (slave bridge4): failed to get link speed/duplex
[  386.367547][ T6604] bond12: (slave bridge4): failed to get link speed/duplex
[  386.474037][T11674] bond12: (slave bridge4): failed to get link speed/duplex
[  386.520121][T21299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6758'.
[  386.583927][ T5662] bond12: (slave bridge4): failed to get link speed/duplex
[  386.693954][ T5662] bond12: (slave bridge4): failed to get link speed/duplex
[  386.770039][T21322] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6764'.
[  386.779591][T21322] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6764'.
[  386.783348][T21322] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  387.736106][T21377] netlink: 'syz.1.6789': attribute type 8 has an invalid length.
[  387.758523][T21379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6791'.
[  387.761395][T21379] netlink: 'syz.2.6791': attribute type 29 has an invalid length.
[  387.770027][T21379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6791'.
[  388.165541][T21406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6802'.
[  389.606339][T21446] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.608634][T21446] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.637797][T21446] tipc: Resetting bearer <ib:team0>
[  389.795877][T21446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  389.911142][T21441] bridge_slave_0 (unregistering): left allmulticast mode
[  389.915916][T21441] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.934573][ T6604] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.937064][ T6604] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.939823][ T6604] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.942686][ T6604] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.279189][T21493] geneve1: left promiscuous mode
[  390.288973][T21493] team0: entered promiscuous mode
[  390.290931][T21493] geneve1: entered promiscuous mode
[  391.019681][T21521] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6850'.
[  391.022924][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6850'.
[  391.451068][T21553] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6866'.
[  391.460184][T21555] netlink: 'syz.2.6867': attribute type 2 has an invalid length.
[  391.655242][T21576] bond0: Caught tx_queue_len zero misconfig
[  392.012767][T21604] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  392.210570][T21620] tipc: Resetting bearer <ib:geneve0>
[  392.219142][T21620] tipc: Resetting bearer <eth:syzkaller0>
[  394.003961][T21689] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  394.422044][T21709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6934'.
[  394.504833][T21713] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6936'.
[  394.507432][T21713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6936'.
[  394.694452][T21723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6940'.
[  394.868403][T21723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6940'.
[  394.967910][T21733] netlink: 456 bytes leftover after parsing attributes in process `syz.0.6945'.
[  395.022591][T21737] netlink: 'syz.0.6947': attribute type 1 has an invalid length.
[  395.034321][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6947'.
[  395.325653][T21763] net_ratelimit: 17 callbacks suppressed
[  395.325666][T21763] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  396.296331][T21823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6985'.
[  396.319139][T21823] netlink: 'syz.1.6985': attribute type 82 has an invalid length.
[  396.510358][T21839] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  396.524287][T21839] CPU: 0 UID: 0 PID: 21839 Comm: syz.1.6992 Not tainted syzkaller #0 PREEMPT(full) 
[  396.524340][T21839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  396.524353][T21839] Call Trace:
[  396.524384][T21839]  <TASK>
[  396.524394][T21839]  dump_stack_lvl+0xe8/0x150
[  396.524421][T21839]  sysfs_warn_dup+0x8e/0xa0
[  396.524445][T21839]  sysfs_do_create_link_sd+0xc0/0x110
[  396.524471][T21839]  device_add_class_symlinks+0x1cf/0x240
[  396.524522][T21839]  device_add+0x475/0xbb0
[  396.524546][T21839]  wiphy_register+0x1fb1/0x2fe0
[  396.524579][T21839]  ? __pfx_wiphy_register+0x10/0x10
[  396.524597][T21839]  ? __pfx_netdev_run_todo+0x10/0x10
[  396.524617][T21839]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  396.524663][T21839]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  396.524696][T21839]  ieee80211_register_hw+0x3c53/0x4910
[  396.524726][T21839]  ? ieee80211_register_hw+0x1941/0x4910
[  396.524770][T21839]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  396.524792][T21839]  ? __asan_memset+0x22/0x50
[  396.524814][T21839]  ? __hrtimer_setup+0x1b7/0x260
[  396.524836][T21839]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  396.524862][T21839]  mac80211_hwsim_new_radio+0x3327/0x57e0
[  396.524910][T21839]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  396.524932][T21839]  ? kstrndup+0xbf/0x160
[  396.524956][T21839]  hwsim_new_radio_nl+0xe20/0x26e0
[  396.524978][T21839]  ? unwind_next_frame+0xa6/0x2550
[  396.525012][T21839]  ? is_bpf_text_address+0x26/0x2b0
[  396.525040][T21839]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  396.525059][T21839]  ? __kernel_text_address+0xd/0x30
[  396.525082][T21839]  ? unwind_get_return_address+0x4d/0x90
[  396.525104][T21839]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  396.525130][T21839]  ? arch_stack_walk+0xfb/0x150
[  396.525171][T21839]  ? stack_trace_save+0xa9/0x100
[  396.525196][T21839]  ? __pfx_stack_trace_save+0x10/0x10
[  396.525225][T21839]  ? stack_depot_save_flags+0x33/0x810
[  396.525261][T21839]  ? __nla_validate_parse+0x2480/0x2dc0
[  396.525286][T21839]  ? ____sys_sendmsg+0x972/0x9f0
[  396.525328][T21839]  ? ___sys_sendmsg+0x2a5/0x360
[  396.525370][T21839]  ? __pfx___nla_validate_parse+0x10/0x10
[  396.525413][T21839]  ? rcu_is_watching+0x15/0xb0
[  396.525436][T21839]  ? trace_kmalloc+0x2a/0xf0
[  396.525465][T21839]  ? __nla_parse+0x40/0x60
[  396.525522][T21839]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  396.525545][T21839]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  396.525572][T21839]  genl_family_rcv_msg_doit+0x22a/0x330
[  396.525599][T21839]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  396.525631][T21839]  ? bpf_lsm_capable+0x9/0x20
[  396.525648][T21839]  ? security_capable+0x7e/0x2c0
[  396.525676][T21839]  genl_rcv_msg+0x61c/0x7a0
[  396.525701][T21839]  ? __pfx_genl_rcv_msg+0x10/0x10
[  396.525721][T21839]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  396.525755][T21839]  netlink_rcv_skb+0x232/0x4b0
[  396.525781][T21839]  ? __pfx_genl_rcv_msg+0x10/0x10
[  396.525802][T21839]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  396.525841][T21839]  ? down_read+0x270/0x2e0
[  396.525859][T21839]  ? genl_rcv+0xd/0x40
[  396.525879][T21839]  genl_rcv+0x28/0x40
[  396.525895][T21839]  netlink_unicast+0x75c/0x8e0
[  396.525926][T21839]  netlink_sendmsg+0x813/0xb40
[  396.525957][T21839]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.525986][T21839]  ? aa_sock_msg_perm+0xf1/0x1b0
[  396.526010][T21839]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  396.526035][T21839]  ____sys_sendmsg+0x972/0x9f0
[  396.526061][T21839]  ? __might_fault+0xaf/0x130
[  396.526090][T21839]  ? __pfx_____sys_sendmsg+0x10/0x10
[  396.526123][T21839]  ? import_iovec+0x73/0xa0
[  396.526158][T21839]  ___sys_sendmsg+0x2a5/0x360
[  396.526185][T21839]  ? __lock_acquire+0x6b5/0x2cf0
[  396.526209][T21839]  ? __pfx____sys_sendmsg+0x10/0x10
[  396.526242][T21839]  ? futex_wait+0x2a2/0x390
[  396.526288][T21839]  ? __fget_files+0x2a/0x420
[  396.526310][T21839]  ? __fget_files+0x3a0/0x420
[  396.526339][T21839]  __x64_sys_sendmsg+0x1bd/0x2a0
[  396.526367][T21839]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  396.526401][T21839]  ? rcu_is_watching+0x15/0xb0
[  396.526430][T21839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.526450][T21839]  do_syscall_64+0x15f/0xf80
[  396.526466][T21839]  ? trace_irq_disable+0x3b/0x140
[  396.526518][T21839]  ? clear_bhb_loop+0x40/0x90
[  396.526541][T21839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.526556][T21839] RIP: 0033:0x7f869d59cdd9
[  396.526574][T21839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  396.526590][T21839] RSP: 002b:00007f869e3d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  396.526611][T21839] RAX: ffffffffffffffda RBX: 00007f869d815fa0 RCX: 00007f869d59cdd9
[  396.526624][T21839] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  396.526635][T21839] RBP: 00007f869d632d69 R08: 0000000000000000 R09: 0000000000000000
[  396.526647][T21839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.526657][T21839] R13: 00007f869d816038 R14: 00007f869d815fa0 R15: 00007ffe68f01c48
[  396.526686][T21839]  </TASK>
[  397.143018][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7005'.
[  397.266731][T21878] syzkaller0: mtu less than device minimum
[  397.269032][T21879] netlink: 'syz.2.7010': attribute type 1 has an invalid length.
[  397.271868][T21879] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7010'.
[  397.276906][T21879] netlink: 'syz.2.7010': attribute type 1 has an invalid length.
[  397.531189][T21905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  397.533938][T21905] IPv6: NLM_F_CREATE should be set when creating new route
[  397.536546][T21905] IPv6: NLM_F_CREATE should be set when creating new route
[  397.652487][T21914] nbd: nbd2 already in use
[  399.742174][T22034] __nla_validate_parse: 7 callbacks suppressed
[  399.742218][T22034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7083'.
[  400.064046][T22060] block nbd5: server does not support multiple connections per device.
[  400.069425][T22060] block nbd5: shutting down sockets
[  400.281956][T22083] netlink: 'syz.0.7106': attribute type 1 has an invalid length.
[  400.286490][T22083] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7106'.
[  400.452210][T22097] netlink: 'syz.1.7114': attribute type 2 has an invalid length.
[  400.540903][T22107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7119'.
[  400.754057][T22125] xt_time: invalid argument - start or stop time greater than 23:59:59
[  400.782199][T22127] netlink: 'syz.1.7131': attribute type 2 has an invalid length.
[  401.398884][T22154] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  401.586504][T22174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7151'.
[  401.952924][T22210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7168'.
[  402.040129][T22221] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7174'.
[  402.420550][T22240] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  402.471905][T22240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7182'.
[  403.048158][T22263] netlink: 'syz.1.7193': attribute type 1 has an invalid length.
[  403.051065][T22263] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7193'.
[  403.055599][T22263] netlink: 'syz.1.7193': attribute type 1 has an invalid length.
[  403.058500][T22263] netlink: 634 bytes leftover after parsing attributes in process `syz.1.7193'.
[  403.267478][T22278] veth1_to_hsr: entered allmulticast mode
[  403.269674][T22278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7199'.
[  403.697515][T22311] syzkaller1: entered promiscuous mode
[  403.699624][T22311] syzkaller1: entered allmulticast mode
[  403.908551][T22324] netlink: 'syz.1.7221': attribute type 6 has an invalid length.
[  404.017101][T22335] netlink: 'syz.1.7226': attribute type 1 has an invalid length.
[  404.279092][T22363] tipc: Resetting bearer <eth:batadv0>
[  404.284343][T22363] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  405.150414][T22405] netlink: 'syz.0.7258': attribute type 3 has an invalid length.
[  405.158802][T22405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  405.182140][T22405] __nla_validate_parse: 6 callbacks suppressed
[  405.182165][T22405] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7258'.
[  405.295540][T22408] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  405.298223][T22408] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  406.073565][T22424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7263'.
[  406.097825][T22427] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7264'.
[  406.118930][T22429] netlink: 'syz.2.7265': attribute type 39 has an invalid length.
[  406.157424][ T6594] syz1: Port: 1 Link DOWN
[  406.159861][   T85] smbdirect: ib_dev[syz1] removed
[  406.537617][T22453] netlink: 'syz.2.7276': attribute type 3 has an invalid length.
[  407.268434][T22438] syz.1.7270 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  407.274009][T22438] CPU: 0 UID: 0 PID: 22438 Comm: syz.1.7270 Not tainted syzkaller #0 PREEMPT(full) 
[  407.274022][T22438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  407.274028][T22438] Call Trace:
[  407.274032][T22438]  <TASK>
[  407.274037][T22438]  dump_stack_lvl+0xe8/0x150
[  407.274052][T22438]  dump_header+0xd3/0x4c0
[  407.274066][T22438]  oom_kill_process+0x3ab/0x970
[  407.274080][T22438]  out_of_memory+0x106c/0x1410
[  407.274089][T22438]  ? try_charge_memcg+0xbb9/0x1570
[  407.274102][T22438]  ? __pfx___mutex_lock+0x10/0x10
[  407.274114][T22438]  ? __pfx_out_of_memory+0x10/0x10
[  407.274138][T22438]  ? do_raw_spin_unlock+0xf5/0x210
[  407.274155][T22438]  try_charge_memcg+0xc77/0x1570
[  407.274181][T22438]  ? __pfx_try_charge_memcg+0x10/0x10
[  407.274191][T22438]  ? percpu_ref_tryget+0x15/0x180
[  407.274210][T22438]  ? charge_memcg+0x23/0x2b0
[  407.274222][T22438]  charge_memcg+0x1a2/0x2b0
[  407.274234][T22438]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  407.274244][T22438]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  407.274257][T22438]  __swap_cache_prepare_and_add+0xdc/0x700
[  407.274269][T22438]  ? page_rmappable_folio+0x9a/0x170
[  407.274285][T22438]  swap_cache_alloc_folio+0xf1/0x240
[  407.274296][T22438]  swap_cluster_readahead+0x355/0x670
[  407.274309][T22438]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  407.274324][T22438]  ? get_vma_policy+0x27b/0x3c0
[  407.274336][T22438]  swapin_readahead+0x196/0xc50
[  407.274347][T22438]  ? swap_table_get+0x1e/0x260
[  407.274372][T22438]  ? __pfx_swapin_readahead+0x10/0x10
[  407.274382][T22438]  ? swap_table_get+0x1e/0x260
[  407.274390][T22438]  ? swap_table_get+0x1e/0x260
[  407.274398][T22438]  ? swap_table_get+0x1e/0x260
[  407.274406][T22438]  ? swap_table_get+0x216/0x260
[  407.274415][T22438]  ? swap_cache_get_folio+0x2e4/0x2f0
[  407.274427][T22438]  do_swap_page+0x555/0x5120
[  407.274439][T22438]  ? __pte_offset_map+0x29/0x240
[  407.274449][T22438]  ? __pte_offset_map+0x29/0x240
[  407.274461][T22438]  ? do_swap_page+0x128/0x5120
[  407.274470][T22438]  ? __pfx_do_swap_page+0x10/0x10
[  407.274478][T22438]  ? __pte_offset_map+0x1ae/0x240
[  407.274488][T22438]  ? pte_offset_map_rw_nolock+0xea/0x160
[  407.274499][T22438]  handle_mm_fault+0x12d2/0x3170
[  407.274533][T22438]  ? handle_mm_fault+0xee/0x3170
[  407.274547][T22438]  ? __pfx_handle_mm_fault+0x10/0x10
[  407.274555][T22438]  ? lock_vma_under_rcu+0x45a/0x500
[  407.274577][T22438]  do_user_addr_fault+0xa73/0x1340
[  407.274589][T22438]  ? rcu_is_watching+0x15/0xb0
[  407.274599][T22438]  ? trace_page_fault_user+0x84/0x1e0
[  407.274608][T22438]  exc_page_fault+0x6a/0xc0
[  407.274621][T22438]  asm_exc_page_fault+0x26/0x30
[  407.274629][T22438] RIP: 0033:0x7f869d471508
[  407.274638][T22438] Code: 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 e1 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 49 83 c5 01 <45> 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f 60 00 0f 84 4a 02 00 00
[  407.274645][T22438] RSP: 002b:00007ffe68f01ce0 EFLAGS: 00010202
[  407.274654][T22438] RAX: 000000110c238000 RBX: ffffffff81d7a684 RCX: 0000000000000000
[  407.274660][T22438] RDX: 0000000000000684 RSI: 0000000000001e9a RDI: 0000000000000001
[  407.274664][T22438] RBP: 0000000000000000 R08: 00007f869d800000 R09: 00007f869d802000
[  407.274669][T22438] R10: 0000000081d7a688 R11: 0000000000000000 R12: 00007f869d816038
[  407.274674][T22438] R13: 0000000000000002 R14: ffffffff81d7a684 R15: 00007f869e345720
[  407.274680][T22438]  ? __sys_bpf+0xa4/0x950
[  407.274692][T22438]  ? __sys_bpf+0xa4/0x950
[  407.274707][T22438]  </TASK>
[  407.279737][T22438] memory: usage 307188kB, limit 307200kB, failcnt 3303
[  407.384483][T22438] memory+swap: usage 307296kB, limit 9007199254740988kB, failcnt 0
[  407.386766][T22438] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0
[  407.388756][T22438] Memory cgroup stats for /syz1:
[  407.388815][T22438] cache 4096
[  407.391096][T22438] rss 0
[  407.393191][T22438] rss_huge 0
[  407.394830][T22438] shmem 0
[  407.395731][T22438] mapped_file 0
[  407.396798][T22438] dirty 0
[  407.397678][T22438] writeback 0
[  407.398638][T22438] workingset_refault_anon 15
[  407.399940][T22438] workingset_refault_file 50
[  407.401254][T22438] swap 110592
[  407.402146][T22438] swapcached 229376
[  407.403189][T22438] pgpgin 227324
[  407.404183][T22438] pgpgout 227315
[  407.405217][T22438] pgfault 477186
[  407.406273][T22438] pgmajfault 10
[  407.407926][T22438] inactive_anon 0
[  407.409187][T22438] active_anon 32768
[  407.410451][T22438] inactive_file 0
[  407.411567][T22438] active_file 4096
[  407.412695][T22438] unevictable 0
[  407.413708][T22438] hierarchical_memory_limit 314572800
[  407.415761][T22438] hierarchical_memsw_limit 9223372036854771712
[  407.417794][T22438] total_cache 4096
[  407.419095][T22438] total_rss 0
[  407.420107][T22438] total_rss_huge 0
[  407.421178][T22438] total_shmem 0
[  407.422182][T22438] total_mapped_file 0
[  407.423370][T22438] total_dirty 0
[  407.424575][T22438] total_writeback 0
[  407.425866][T22438] total_workingset_refault_anon 15
[  407.427412][T22438] total_workingset_refault_file 50
[  407.429246][T22438] total_swap 110592
[  407.430438][T22438] total_swapcached 229376
[  407.431731][T22438] total_pgpgin 227324
[  407.432923][T22438] total_pgpgout 227315
[  407.434296][T22438] total_pgfault 477189
[  407.435804][T22438] total_pgmajfault 10
[  407.437171][T22438] total_inactive_anon 0
[  407.438416][T22438] total_active_anon 32768
[  407.439740][T22438] total_inactive_file 0
[  407.440950][T22438] total_active_file 4096
[  407.442183][T22438] total_unevictable 0
[  407.443361][T22438] anon_cost 0
[  407.444459][T22438] file_cost 0
[  407.445544][T22438] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7270,pid=22438,uid=0
[  407.450178][T22438] Memory cgroup out of memory: Killed process 22438 (syz.1.7270) total-vm:102232kB, anon-rss:1252kB, file-rss:21708kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  407.646221][T22460] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7279'.
[  409.005255][ T6576] 
[  409.006211][ T6576] ======================================================
[  409.008524][ T6576] WARNING: possible circular locking dependency detected
[  409.010684][ T6576] syzkaller #0 Not tainted
[  409.012404][ T6576] ------------------------------------------------------
[  409.014805][ T6576] kworker/0:7/6576 is trying to acquire lock:
[  409.016555][ T6576] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  409.019190][ T6576] 
[  409.019190][ T6576] but task is already holding lock:
[  409.021287][ T6576] ffffffff90175ee0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  409.024210][ T6576] 
[  409.024210][ T6576] which lock already depends on the new lock.
[  409.024210][ T6576] 
[  409.027044][ T6576] 
[  409.027044][ T6576] the existing dependency chain (in reverse order) is:
[  409.029524][ T6576] 
[  409.029524][ T6576] -> #9 (uevent_sock_mutex){+.+.}-{4:4}:
[  409.031612][ T6576]        __mutex_lock+0x1a3/0x1550
[  409.033055][ T6576]        kobject_uevent_net_broadcast+0x27e/0x560
[  409.034860][ T6576]        kobject_uevent_env+0x55c/0x9e0
[  409.036458][ T6576]        device_add+0x557/0xbb0
[  409.037833][ T6576]        device_create+0x269/0x300
[  409.039285][ T6576]        msr_device_create+0x33/0x50
[  409.040781][ T6576]        cpuhp_invoke_callback+0x445/0x860
[  409.042721][ T6576]        cpuhp_thread_fun+0x36b/0x780
[  409.044268][ T6576]        smpboot_thread_fn+0x541/0xa50
[  409.045816][ T6576]        kthread+0x388/0x470
[  409.047157][ T6576]        ret_from_fork+0x514/0xb70
[  409.048677][ T6576]        ret_from_fork_asm+0x1a/0x30
[  409.050279][ T6576] 
[  409.050279][ T6576] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[  409.052707][ T6576]        cpuhp_thread_fun+0x127/0x780
[  409.054651][ T6576]        smpboot_thread_fn+0x541/0xa50
[  409.056631][ T6576]        kthread+0x388/0x470
[  409.058295][ T6576]        ret_from_fork+0x514/0xb70
[  409.060095][ T6576]        ret_from_fork_asm+0x1a/0x30
[  409.061988][ T6576] 
[  409.061988][ T6576] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  409.064755][ T6576]        cpus_read_lock+0x42/0x160
[  409.066608][ T6576]        static_key_slow_inc+0x12/0x30
[  409.068569][ T6576]        udp_tunnel_encap_enable+0x86/0xb0
[  409.070672][ T6576]        udp_lib_setsockopt+0x2da/0x6b0
[  409.072651][ T6576]        udpv6_setsockopt+0x67/0xb0
[  409.074536][ T6576]        do_sock_setsockopt+0x17c/0x1b0
[  409.076496][ T6576]        __x64_sys_setsockopt+0x13d/0x1b0
[  409.078559][ T6576]        do_syscall_64+0x15f/0xf80
[  409.080423][ T6576]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.082755][ T6576] 
[  409.082755][ T6576] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  409.085547][ T6576]        lock_sock_nested+0x41/0x100
[  409.087473][ T6576]        inet_shutdown+0x6a/0x390
[  409.089325][ T6576]        nbd_mark_nsock_dead+0x2e9/0x560
[  409.091247][ T6576]        sock_shutdown+0x15e/0x260
[  409.092961][ T6576]        nbd_clear_sock+0x24/0x170
[  409.094499][ T6576]        nbd_config_put+0x2dd/0x580
[  409.096038][ T6576]        nbd_genl_connect+0x19d5/0x1cf0
[  409.097834][ T6576]        genl_family_rcv_msg_doit+0x22a/0x330
[  409.100004][ T6576]        genl_rcv_msg+0x61c/0x7a0
[  409.101840][ T6576]        netlink_rcv_skb+0x232/0x4b0
[  409.103704][ T6576]        genl_rcv+0x28/0x40
[  409.105266][ T6576]        netlink_unicast+0x75c/0x8e0
[  409.107164][ T6576]        netlink_sendmsg+0x813/0xb40
[  409.109074][ T6576]        ____sys_sendmsg+0x972/0x9f0
[  409.110978][ T6576]        ___sys_sendmsg+0x2a5/0x360
[  409.112848][ T6576]        __x64_sys_sendmsg+0x1bd/0x2a0
[  409.114789][ T6576]        do_syscall_64+0x15f/0xf80
[  409.116258][ T6576]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.118049][ T6576] 
[  409.118049][ T6576] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  409.120202][ T6576]        __mutex_lock+0x1a3/0x1550
[  409.121660][ T6576]        nbd_queue_rq+0x37b/0x1100
[  409.123417][ T6576]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  409.125282][ T6576]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  409.127387][ T6576]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  409.129530][ T6576]        blk_mq_run_hw_queue+0x348/0x4f0
[  409.131370][ T6576]        blk_mq_dispatch_list+0xd16/0xe10
[  409.133439][ T6576]        blk_mq_flush_plug_list+0x48d/0x570
[  409.135579][ T6576]        __blk_flush_plug+0x3ed/0x4d0
[  409.137520][ T6576]        __submit_bio+0x28d/0x580
[  409.139323][ T6576]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  409.141538][ T6576]        block_read_full_folio+0x599/0x830
[  409.143631][ T6576]        filemap_read_folio+0x137/0x3b0
[  409.145640][ T6576]        do_read_cache_folio+0x358/0x590
[  409.147692][ T6576]        read_part_sector+0xb6/0x2b0
[  409.149576][ T6576]        adfspart_check_ICS+0xb1/0x960
[  409.151493][ T6576]        bdev_disk_changed+0x817/0x1770
[  409.153644][ T6576]        blkdev_get_whole+0x380/0x510
[  409.155669][ T6576]        bdev_open+0x31e/0xd30
[  409.157508][ T6576]        blkdev_open+0x470/0x610
[  409.158987][ T6576]        do_dentry_open+0x785/0x14e0
[  409.160578][ T6576]        vfs_open+0x3b/0x340
[  409.161839][ T6576]        path_openat+0x2e08/0x3860
[  409.163360][ T6576]        do_file_open+0x23e/0x4a0
[  409.164908][ T6576]        do_sys_openat2+0x113/0x200
[  409.166639][ T6576]        __x64_sys_openat+0x138/0x170
[  409.168387][ T6576]        do_syscall_64+0x15f/0xf80
[  409.169837][ T6576]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.171804][ T6576] 
[  409.171804][ T6576] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  409.174087][ T6576]        __mutex_lock+0x1a3/0x1550
[  409.175706][ T6576]        nbd_queue_rq+0xc6/0x1100
[  409.177202][ T6576]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  409.179057][ T6576]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  409.181154][ T6576]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  409.183156][ T6576]        blk_mq_run_hw_queue+0x348/0x4f0
[  409.184958][ T6576]        blk_mq_dispatch_list+0xd16/0xe10
[  409.186808][ T6576]        blk_mq_flush_plug_list+0x48d/0x570
[  409.188527][ T6576]        __blk_flush_plug+0x3ed/0x4d0
[  409.190115][ T6576]        __submit_bio+0x28d/0x580
[  409.191678][ T6576]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  409.193542][ T6576]        block_read_full_folio+0x599/0x830
[  409.195247][ T6576]        filemap_read_folio+0x137/0x3b0
[  409.196869][ T6576]        do_read_cache_folio+0x358/0x590
[  409.198604][ T6576]        read_part_sector+0xb6/0x2b0
[  409.200123][ T6576]        adfspart_check_ICS+0xb1/0x960
[  409.201670][ T6576]        bdev_disk_changed+0x817/0x1770
[  409.203185][ T6576]        blkdev_get_whole+0x380/0x510
[  409.204775][ T6576]        bdev_open+0x31e/0xd30
[  409.206189][ T6576]        blkdev_open+0x470/0x610
[  409.207682][ T6576]        do_dentry_open+0x785/0x14e0
[  409.209218][ T6576]        vfs_open+0x3b/0x340
[  409.210584][ T6576]        path_openat+0x2e08/0x3860
[  409.212161][ T6576]        do_file_open+0x23e/0x4a0
[  409.213753][ T6576]        do_sys_openat2+0x113/0x200
[  409.215270][ T6576]        __x64_sys_openat+0x138/0x170
[  409.216987][ T6576]        do_syscall_64+0x15f/0xf80
[  409.218516][ T6576]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.220435][ T6576] 
[  409.220435][ T6576] -> #3 (set->srcu){.+.+}-{0:0}:
[  409.222494][ T6576]        __synchronize_srcu+0xca/0x300
[  409.224060][ T6576]        elevator_switch+0x1e8/0x7a0
[  409.225961][ T6576]        elevator_change+0x2cc/0x450
[  409.227872][ T6576]        elevator_set_default+0x36c/0x430
[  409.229930][ T6576]        blk_register_queue+0x3e9/0x4e0
[  409.231884][ T6576]        __add_disk+0x677/0xd50
[  409.233391][ T6576]        add_disk_fwnode+0xfb/0x480
[  409.234836][ T6576]        nbd_dev_add+0x72c/0xb50
[  409.236260][ T6576]        nbd_init+0x168/0x1f0
[  409.237675][ T6576]        do_one_initcall+0x250/0x870
[  409.239324][ T6576]        do_initcall_level+0x104/0x190
[  409.241113][ T6576]        do_initcalls+0x59/0xa0
[  409.242498][ T6576]        kernel_init_freeable+0x2a6/0x3e0
[  409.244098][ T6576]        kernel_init+0x1d/0x1d0
[  409.245543][ T6576]        ret_from_fork+0x514/0xb70
[  409.247022][ T6576]        ret_from_fork_asm+0x1a/0x30
[  409.248543][ T6576] 
[  409.248543][ T6576] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  409.250880][ T6576]        __mutex_lock+0x1a3/0x1550
[  409.252449][ T6576]        elevator_change+0x1b3/0x450
[  409.253988][ T6576]        elevator_set_none+0xb5/0x140
[  409.255590][ T6576]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  409.257453][ T6576]        nbd_start_device+0x17f/0xb10
[  409.259160][ T6576]        nbd_genl_connect+0x165b/0x1cf0
[  409.260877][ T6576]        genl_family_rcv_msg_doit+0x22a/0x330
[  409.262680][ T6576]        genl_rcv_msg+0x61c/0x7a0
[  409.264159][ T6576]        netlink_rcv_skb+0x232/0x4b0
[  409.265969][ T6576]        genl_rcv+0x28/0x40
[  409.267312][ T6576]        netlink_unicast+0x75c/0x8e0
[  409.268944][ T6576]        netlink_sendmsg+0x813/0xb40
[  409.270590][ T6576]        ____sys_sendmsg+0x972/0x9f0
[  409.272113][ T6576]        ___sys_sendmsg+0x2a5/0x360
[  409.273568][ T6576]        __x64_sys_sendmsg+0x1bd/0x2a0
[  409.275097][ T6576]        do_syscall_64+0x15f/0xf80
[  409.276608][ T6576]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.278479][ T6576] 
[  409.278479][ T6576] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  409.281063][ T6576]        blk_alloc_queue+0x546/0x680
[  409.282574][ T6576]        __blk_mq_alloc_disk+0x197/0x390
[  409.284148][ T6576]        nbd_dev_add+0x499/0xb50
[  409.285589][ T6576]        nbd_init+0x168/0x1f0
[  409.287069][ T6576]        do_one_initcall+0x250/0x870
[  409.288698][ T6576]        do_initcall_level+0x104/0x190
[  409.290260][ T6576]        do_initcalls+0x59/0xa0
[  409.291795][ T6576]        kernel_init_freeable+0x2a6/0x3e0
[  409.293481][ T6576]        kernel_init+0x1d/0x1d0
[  409.294884][ T6576]        ret_from_fork+0x514/0xb70
[  409.296474][ T6576]        ret_from_fork_asm+0x1a/0x30
[  409.298177][ T6576] 
[  409.298177][ T6576] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  409.300763][ T6576]        __lock_acquire+0x15a5/0x2cf0
[  409.302384][ T6576]        lock_acquire+0x106/0x350
[  409.304022][ T6576]        fs_reclaim_acquire+0x71/0x100
[  409.305792][ T6576]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  409.307800][ T6576]        __alloc_skb+0x27d/0x7d0
[  409.309421][ T6576]        alloc_uevent_skb+0x7d/0x230
[  409.311058][ T6576]        kobject_uevent_net_broadcast+0x2fa/0x560
[  409.313003][ T6576]        kobject_uevent_env+0x55c/0x9e0
[  409.314620][ T6576]        rfkill_uevent_work+0x64/0x190
[  409.316245][ T6576]        process_scheduled_works+0xb5d/0x1860
[  409.318105][ T6576]        worker_thread+0xa53/0xfc0
[  409.319672][ T6576]        kthread+0x388/0x470
[  409.321168][ T6576]        ret_from_fork+0x514/0xb70
[  409.322728][ T6576]        ret_from_fork_asm+0x1a/0x30
[  409.324229][ T6576] 
[  409.324229][ T6576] other info that might help us debug this:
[  409.324229][ T6576] 
[  409.327285][ T6576] Chain exists of:
[  409.327285][ T6576]   fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex
[  409.327285][ T6576] 
[  409.331393][ T6576]  Possible unsafe locking scenario:
[  409.331393][ T6576] 
[  409.333593][ T6576]        CPU0                    CPU1
[  409.335178][ T6576]        ----                    ----
[  409.336783][ T6576]   lock(uevent_sock_mutex);
[  409.338146][ T6576]                                lock(cpuhp_state-up);
[  409.340178][ T6576]                                lock(uevent_sock_mutex);
[  409.342260][ T6576]   lock(fs_reclaim);
[  409.343522][ T6576] 
[  409.343522][ T6576]  *** DEADLOCK ***
[  409.343522][ T6576] 
[  409.346242][ T6576] 4 locks held by kworker/0:7/6576:
[  409.348122][ T6576]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  409.351708][ T6576]  #1: ffffc9000564fc40 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  409.355424][ T6576]  #2: ffffffff900df2c0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x2e/0x190
[  409.358491][ T6576]  #3: ffffffff90175ee0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  409.361706][ T6576] 
[  409.361706][ T6576] stack backtrace:
[  409.363498][ T6576] CPU: 0 UID: 0 PID: 6576 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) 
[  409.363510][ T6576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  409.363517][ T6576] Workqueue: events rfkill_uevent_work
[  409.363532][ T6576] Call Trace:
[  409.363537][ T6576]  <TASK>
[  409.363542][ T6576]  dump_stack_lvl+0xe8/0x150
[  409.363553][ T6576]  print_circular_bug+0x2e1/0x300
[  409.363564][ T6576]  check_noncircular+0x12e/0x150
[  409.363575][ T6576]  __lock_acquire+0x15a5/0x2cf0
[  409.363584][ T6576]  ? ret_from_fork_asm+0x1a/0x30
[  409.363596][ T6576]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  409.363606][ T6576]  lock_acquire+0x106/0x350
[  409.363614][ T6576]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  409.363626][ T6576]  fs_reclaim_acquire+0x71/0x100
[  409.363637][ T6576]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  409.363647][ T6576]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  409.363656][ T6576]  ? __alloc_skb+0x27d/0x7d0
[  409.363666][ T6576]  ? __alloc_skb+0x186/0x7d0
[  409.363681][ T6576]  __alloc_skb+0x27d/0x7d0
[  409.363698][ T6576]  alloc_uevent_skb+0x7d/0x230
[  409.363718][ T6576]  kobject_uevent_net_broadcast+0x2fa/0x560
[  409.363743][ T6576]  kobject_uevent_env+0x55c/0x9e0
[  409.363754][ T6576]  rfkill_uevent_work+0x64/0x190
[  409.363765][ T6576]  ? process_scheduled_works+0xa70/0x1860
[  409.363774][ T6576]  process_scheduled_works+0xb5d/0x1860
[  409.363786][ T6576]  ? __pfx_process_scheduled_works+0x10/0x10
[  409.363795][ T6576]  ? assign_work+0x3d5/0x5e0
[  409.363803][ T6576]  worker_thread+0xa53/0xfc0
[  409.363815][ T6576]  kthread+0x388/0x470
[  409.363825][ T6576]  ? __pfx_worker_thread+0x10/0x10
[  409.363832][ T6576]  ? __pfx_kthread+0x10/0x10
[  409.363841][ T6576]  ret_from_fork+0x514/0xb70
[  409.363849][ T6576]  ? __pfx_ret_from_fork+0x10/0x10
[  409.363857][ T6576]  ? __switch_to+0xc79/0x1410
[  409.363868][ T6576]  ? __pfx_kthread+0x10/0x10
[  409.363877][ T6576]  ret_from_fork_asm+0x1a/0x30
[  409.363889][ T6576]  </TASK>
