last executing test programs:

485.217225ms ago: executing program 0 (id=8013):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$int_in(r1, 0x5452, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/3, 0x3}}], 0x1, 0x40, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', <r2=>0x0, 0x4, 0xfd, 0x5, 0x2, 0x50, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x40, 0xde, 0x3}})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], &(0x7f0000000340)='GPL\x00', 0x14, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
socket$netlink(0x10, 0x3, 0x8000000004)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r4, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0)

219.037833ms ago: executing program 0 (id=8025):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x8050)

160.140636ms ago: executing program 1 (id=8026):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x148, 0x4c, 0x2500, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xffffff00, 0x0, 0xff000000], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0x110, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x22}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x5, 0x1}, {0x2, 0x6, 0x2}, {0x4, 0x3, 0x6}, 0x2, 0xfffffe01}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6, 0x2}, {0x4, 0x4, 0x3}, 0xd792, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)

160.035642ms ago: executing program 2 (id=8027):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettaction={0x18, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14040800}, 0x0)

159.894319ms ago: executing program 2 (id=8028):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

110.08614ms ago: executing program 1 (id=8029):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007910000700000000620000000000000095107400000000008facdfd7ebdbdb0e342ddf85668c8bcb4a3dda2d612d16f1716a362aad118a81e75b9d7945e77d5b477e77d13d75e682617c0481090c83376431ed74668bd6d0550fa824e0e0b12f44f06fd54191bcad3808af6d77161268be5f07b8cc5cbf036c38d650"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x64}, 0x21)

109.928367ms ago: executing program 2 (id=8030):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000140)=0x36)

109.795915ms ago: executing program 0 (id=8031):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)={0x20, r0, 0x1, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x40090)

109.702538ms ago: executing program 2 (id=8032):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0x2, 0x0, 0x0, @empty, 0x5}}}, &(0x7f0000000300)=0x90)

60.930114ms ago: executing program 1 (id=8033):
unshare(0x2c060000)
unshare(0x24060400)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008, r0}, 0x6)

60.664095ms ago: executing program 0 (id=8034):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r5, {0xfff3, 0x5}, {0xffff, 0xfff1}, {0xb, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

60.507688ms ago: executing program 2 (id=8035):
unshare(0x400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0)

60.384099ms ago: executing program 1 (id=8036):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071114c00000000008510000002000000850000008a00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70)

3.024745ms ago: executing program 0 (id=8037):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x2c}}, 0x80)

2.827614ms ago: executing program 1 (id=8038):
syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@multicast, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @private=0xa010100, @random="57330377ba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0)

2.600326ms ago: executing program 2 (id=8039):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'})

2.290339ms ago: executing program 1 (id=8040):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0xd, 0x0, 0x80ffffff}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)

0s ago: executing program 0 (id=8041):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="04030000090000000000000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33)

kernel console output (not intermixed with test programs):

etlink: 168 bytes leftover after parsing attributes in process `syz.2.2482'.
[  138.551159][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2489'.
[  138.563298][T11641] pim6reg: entered allmulticast mode
[  138.604515][T11645] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2490'.
[  138.800367][T11662] netlink: 'syz.0.2496': attribute type 3 has an invalid length.
[  139.030306][T11691] tun0: tun_chr_ioctl cmd 2147767507
[  139.803277][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  139.807540][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  139.810464][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  139.813259][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  140.380297][T11783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.347378][T11809] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  141.352729][T11809] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  141.365639][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  141.417527][T11814] netlink: 'syz.0.2548': attribute type 4 has an invalid length.
[  142.230035][T11912] __nla_validate_parse: 4 callbacks suppressed
[  142.230046][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2590'.
[  142.256621][T11914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.456299][T11937] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2601'.
[  142.534415][T11941] wireguard0: entered promiscuous mode
[  142.539024][T11941] wireguard0: entered allmulticast mode
[  142.731204][T11947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2603'.
[  142.976864][T11961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2610'.
[  143.097496][T11967] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  143.372229][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'.
[  143.773406][T12042] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  143.787903][T12042] Bluetooth: MGMT ver 1.23
[  143.793309][T12042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2647'.
[  143.798993][T12042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2647'.
[  143.848415][T12050] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.138979][T12084] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  144.226433][T12089] hsr0 speed is unknown, defaulting to 1000
[  144.229405][T12089] lo speed is unknown, defaulting to 1000
[  144.455777][T12108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2673'.
[  144.463363][T12110] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  144.520635][T12119] xt_CT: You must specify a L4 protocol and not use inversions on it
[  144.803436][T12152] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2697'.
[  144.812832][T12152] netlink: zone id is out of range
[  144.814588][T12152] netlink: zone id is out of range
[  144.819025][T12152] netlink: zone id is out of range
[  144.821190][T12152] netlink: zone id is out of range
[  144.822944][T12152] netlink: zone id is out of range
[  144.826794][T12152] netlink: zone id is out of range
[  144.828432][T12152] netlink: zone id is out of range
[  144.830140][T12152] netlink: zone id is out of range
[  144.831801][T12152] netlink: zone id is out of range
[  144.845468][T12152] netlink: zone id is out of range
[  144.997926][T12180] netlink: 'syz.2.2709': attribute type 1 has an invalid length.
[  145.024236][T12180] 8021q: adding VLAN 0 to HW filter on device bond5
[  145.033588][T12180] vlan3: entered promiscuous mode
[  145.039653][T12180] bond5: entered promiscuous mode
[  145.041459][T12180] vlan3: entered allmulticast mode
[  145.043149][T12180] bond5: entered allmulticast mode
[  145.059262][T12180] bond5: (slave gretap0): making interface the new active one
[  145.065585][T12180] gretap0: entered promiscuous mode
[  145.067703][T12180] gretap0: entered allmulticast mode
[  145.078935][T12180] bond5: (slave gretap0): Enslaving as an active interface with an up link
[  145.141776][T12194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2715'.
[  145.284816][   T51] IPVS: starting estimator thread 0...
[  145.369754][T12217] xt_CT: No such helper "snmp"
[  145.396091][T12209] IPVS: using max 80 ests per chain, 192000 per kthread
[  145.443589][T12230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  145.520075][ T5854] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  145.535687][ T5854] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  145.538631][ T5854] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  145.541535][ T5854] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  145.845620][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  145.845820][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  146.311428][T12268] xt_CT: You must specify a L4 protocol and not use inversions on it
[  146.359109][T12270] netlink: 'syz.2.2745': attribute type 5 has an invalid length.
[  146.407301][T12272] netlink: 'syz.2.2746': attribute type 3 has an invalid length.
[  146.730231][T12292] netlink: 'syz.0.2755': attribute type 1 has an invalid length.
[  146.747808][T12292] bond3: entered promiscuous mode
[  146.749670][T12292] bond3: entered allmulticast mode
[  146.773615][T12292] bridge4: the hash_elasticity option has been deprecated and is always 16
[  146.778703][T12292] bond3: (slave bridge4): making interface the new active one
[  146.781246][T12292] bridge4: entered promiscuous mode
[  146.787874][T12292] bridge4: entered allmulticast mode
[  146.791860][T12292] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  146.882048][T12305] netlink: 'syz.0.2761': attribute type 1 has an invalid length.
[  146.905560][T12305] nbd: socks must be embedded in a SOCK_ITEM attr
[  146.907798][T12305] block nbd1: shutting down sockets
[  147.156553][T12329] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.168371][T12329] syzkaller0: entered promiscuous mode
[  147.183100][T12329] syzkaller0: entered allmulticast mode
[  147.202869][T12329] tipc: Resetting bearer <eth:syzkaller0>
[  147.208158][T12328] tipc: Resetting bearer <eth:syzkaller0>
[  147.240242][T12328] tipc: Disabling bearer <eth:syzkaller0>
[  147.444454][T12349] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.548707][T12361] netlink: 'syz.2.2788': attribute type 1 has an invalid length.
[  147.551518][T12361] __nla_validate_parse: 6 callbacks suppressed
[  147.551526][T12361] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2788'.
[  147.570041][T12363] syz.0.2790 (12363) used greatest stack depth: 18328 bytes left
[  147.627963][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2792'.
[  147.644194][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'.
[  147.731423][T12383] bridge0: port 1(gretap0) entered blocking state
[  147.733716][T12383] bridge0: port 1(gretap0) entered disabled state
[  147.737734][T12383] gretap0: entered allmulticast mode
[  147.756953][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2797'.
[  147.760144][T12384] netlink: 'syz.2.2797': attribute type 4 has an invalid length.
[  147.789654][T12388] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  147.822921][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'.
[  147.863223][T12396] netlink: 'syz.1.2805': attribute type 8 has an invalid length.
[  147.910644][T12400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2808'.
[  147.948781][T12404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2809'.
[  148.510196][T12454] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  148.560633][T12456] : renamed from batadv_slave_1
[  148.728293][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2844'.
[  148.769909][T12481] netlink: 'syz.2.2847': attribute type 10 has an invalid length.
[  148.798982][T12484] netlink: 'syz.2.2848': attribute type 1 has an invalid length.
[  148.844805][T12490] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2851'.
[  148.889502][T12495] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2853'.
[  149.035549][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  149.036418][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  149.491050][T12560] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  149.885016][T12600] team0 (unregistering): left promiscuous mode
[  149.946563][T12618] NCSI netlink: No device for ifindex 3088861696
[  150.072880][T12634] net_ratelimit: 19 callbacks suppressed
[  150.072892][T12634] openvswitch: netlink: IPv4 tun info is not correct
[  150.144734][T12639] hsr0 speed is unknown, defaulting to 1000
[  150.148363][T12639] lo speed is unknown, defaulting to 1000
[  150.939687][T12725] IPVS: length: 148 != 24
[  151.208682][T12767] sock: sock_timestamping_bind_phc: sock not bind to device
[  151.242023][T12772] validate_nla: 2 callbacks suppressed
[  151.242036][T12772] netlink: 'syz.0.2970': attribute type 1 has an invalid length.
[  151.257815][T12775] netlink: 'syz.1.2972': attribute type 2 has an invalid length.
[  151.260289][T12775] netlink: 'syz.1.2972': attribute type 8 has an invalid length.
[  151.961548][T12855] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  152.225580][T12876] batadv_slave_0: entered promiscuous mode
[  152.230430][T12876] batadv_slave_0: entered allmulticast mode
[  152.460102][T12901] netlink: 'syz.1.3023': attribute type 8 has an invalid length.
[  152.633230][T12922] netlink: 'syz.0.3033': attribute type 27 has an invalid length.
[  152.676672][T12929] __nla_validate_parse: 25 callbacks suppressed
[  152.676682][T12929] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3037'.
[  152.681636][T12929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3037'.
[  152.763073][T12937] smc: net device bond0 applied user defined pnetid SYZ2
[  152.766577][T12937] smc: net device bond0 erased user defined pnetid SYZ2
[  152.913703][T12950] hsr0 speed is unknown, defaulting to 1000
[  152.917354][T12950] lo speed is unknown, defaulting to 1000
[  153.004552][T12961] veth0_to_bridge: entered promiscuous mode
[  153.011686][T12960] veth0_to_bridge: left promiscuous mode
[  153.558528][T12993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3056'.
[  153.591915][T13012] tipc: Resetting bearer <ib:ip6gre0>
[  153.740076][T13012] tipc: Resetting bearer <eth:syzkaller0>
[  153.764977][ T5861] lo speed is unknown, defaulting to 1000
[  153.767090][ T5861] syz0: Port: 1 Link DOWN
[  153.769886][ T5721] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.775040][ T5721] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.780654][ T5861] lo speed is unknown, defaulting to 1000
[  153.780962][ T5721] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.788097][ T5721] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.231007][T13042] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  154.252110][T13044] openvswitch: netlink: IPv6 tunnel dst address is zero
[  154.577153][T13068] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.596961][T13068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.769018][T13090] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3100'.
[  154.771999][T13090] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  154.795861][T13092] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3102'.
[  154.799501][T13092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3102'.
[  154.802396][T13092] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3102'.
[  154.812211][T13092] netlink: 'syz.1.3102': attribute type 3 has an invalid length.
[  154.835396][T13092] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3102'.
[  154.850841][T13092] hsr0 speed is unknown, defaulting to 1000
[  154.853557][T13092] lo speed is unknown, defaulting to 1000
[  154.894126][T13100] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3106'.
[  154.898862][T13101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.902578][T13100] unsupported nlmsg_type 40
[  155.030888][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'.
[  155.127551][T13121] netlink: 'syz.2.3115': attribute type 21 has an invalid length.
[  155.429538][T13131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.733385][T13152] netlink: 'syz.1.3128': attribute type 10 has an invalid length.
[  157.669727][T13171] vlan4: entered promiscuous mode
[  157.798204][T13179] __nla_validate_parse: 2 callbacks suppressed
[  157.798216][T13179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3138'.
[  157.891321][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3142'.
[  157.894211][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3142'.
[  158.994251][T13236] veth9: entered allmulticast mode
[  159.243230][T13253] hsr0 speed is unknown, defaulting to 1000
[  159.259570][T13253] lo speed is unknown, defaulting to 1000
[  159.308131][T13264] netlink: 'syz.2.3176': attribute type 1 has an invalid length.
[  159.338027][T13264] 8021q: adding VLAN 0 to HW filter on device bond6
[  159.378724][T13264] bond6: (slave veth11): Enslaving as an active interface with a down link
[  159.396435][T13268] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3177'.
[  159.425478][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3178'.
[  159.460002][T13273] openvswitch: netlink: Message has 4 unknown bytes.
[  159.620725][ T5721] nci: nci_rsp_packet: unknown rsp opcode 0xe39
[  160.485143][T13303] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3191'.
[  160.494817][T13303] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3191'.
[  160.503435][T13303] rdma_rxe: rxe_newlink: failed to add lo
[  160.534790][T13303] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.539447][T13303] 8021q: adding VLAN 0 to HW filter on device team0
[  160.548644][T13303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.684777][T13329] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  160.726761][T13333] bridge_slave_1: entered promiscuous mode
[  160.729379][T13333] bridge_slave_1: left promiscuous mode
[  160.808241][ T5888] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.810969][ T5888] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.819981][ T5888] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.822697][ T5888] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.993322][T13345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3210'.
[  161.329825][T13362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.462688][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3220'.
[  161.889029][T13397] rdma_rxe: rxe_newlink: failed to add lo
[  161.950435][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'.
[  162.224814][T13412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.236337][ T5721] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  162.239179][ T5721] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  162.295721][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  162.712016][T13455] dummy0: mtu less than device minimum
[  162.765475][T13457] 8021q: adding VLAN 0 to HW filter on device bond4
[  162.775234][T13457] bond0: (slave bond4): Enslaving as an active interface with an up link
[  162.813364][T13466] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3256'.
[  162.820942][T13466] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3256'.
[  162.854418][T13472] openvswitch: netlink: Missing valid actions attribute.
[  162.858410][T13472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.867874][T13474] netlink: 'syz.2.3259': attribute type 1 has an invalid length.
[  162.944150][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'.
[  163.090384][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'.
[  163.247388][T13515] netlink: 'syz.1.3276': attribute type 2 has an invalid length.
[  163.357387][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3279'.
[  163.581273][T13543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3289'.
[  163.614554][T13547] syzkaller1: tun_chr_ioctl cmd 1074025673
[  163.750816][T13555] bridge0: entered promiscuous mode
[  163.753368][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3296'.
[  163.861253][T13571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3301'.
[  163.864290][T13571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3301'.
[  163.869526][T13573] bridge0: entered allmulticast mode
[  163.871661][T13571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3301'.
[  164.275585][T13607] nbd: socks must be embedded in a SOCK_ITEM attr
[  164.300317][T13610] tipc: Can't bind to reserved service type 2
[  164.455195][T13631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.462902][T13631] syzkaller0: entered promiscuous mode
[  164.464809][T13631] syzkaller0: entered allmulticast mode
[  164.494557][T13631] tipc: Resetting bearer <eth:syzkaller0>
[  164.498220][T13637] netlink: 'syz.1.3331': attribute type 4 has an invalid length.
[  164.550554][T13647] netlink: 'syz.0.3336': attribute type 1 has an invalid length.
[  164.591221][T13647] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  165.124683][T13700] delete_channel: no stack
[  165.531322][T13723] dvmrp8: entered allmulticast mode
[  165.554887][T13721] dvmrp8: left allmulticast mode
[  165.915420][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  166.208786][T13760] xt_CT: You must specify a L4 protocol and not use inversions on it
[  166.456312][T13774] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  166.822245][T13788] IPVS: persistence engine module ip_vs_pe_ not found
[  166.850891][T13795] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  166.987570][T13815] xt_hashlimit: size too large, truncated to 1048576
[  167.055395][T13822] debugfs: Directory 'netdev:nicvf0' with parent 'phy5' already present!
[  167.078837][T13824] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  167.264851][T13849] netlink: 'syz.2.3415': attribute type 3 has an invalid length.
[  167.294199][T13853] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.443437][T13861] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.649144][T13877] veth1_to_team: entered allmulticast mode
[  167.651258][T13877] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  168.131352][T13894] lo: entered allmulticast mode
[  168.133471][T13894] lo: left allmulticast mode
[  168.377127][T13923] __nla_validate_parse: 15 callbacks suppressed
[  168.377138][T13923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3450'.
[  168.487233][T13939] netlink: 'syz.0.3457': attribute type 1 has an invalid length.
[  168.502234][T13939] bond5: entered promiscuous mode
[  168.504149][T13939] 8021q: adding VLAN 0 to HW filter on device bond5
[  168.526507][T13939] 8021q: adding VLAN 0 to HW filter on device bond6
[  168.529891][T13939] bond5: (slave bond6): making interface the new active one
[  168.532350][T13939] bond6: entered promiscuous mode
[  168.534839][T13939] bond5: (slave bond6): Enslaving as an active interface with an up link
[  168.593593][T13951] netlink: 'syz.0.3461': attribute type 1 has an invalid length.
[  168.598188][T13951] netlink: 'syz.0.3461': attribute type 2 has an invalid length.
[  168.690279][ T5888] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  168.704481][T13967] tipc: Resetting bearer <eth:syzkaller0>
[  168.774053][T13973] veth0_to_bond: entered allmulticast mode
[  169.503700][T13986] netlink: 'syz.2.3475': attribute type 1 has an invalid length.
[  169.508272][T13986] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3475'.
[  169.861892][T14023] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.047013][T14047] SET target dimension over the limit!
[  170.064071][T14049] netlink: 'syz.0.3501': attribute type 1 has an invalid length.
[  170.081391][T14049] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.3501'.
[  170.324264][T14066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3505'.
[  170.616182][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  170.620890][T14085] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  170.942503][T14121] netlink: 'syz.0.3529': attribute type 1 has an invalid length.
[  170.948977][T14117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3528'.
[  170.984530][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'.
[  170.987982][T14121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3529'.
[  171.047653][T14133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.053952][T14133] syzkaller0: entered promiscuous mode
[  171.056594][T14133] syzkaller0: entered allmulticast mode
[  171.076892][T14133] tipc: Resetting bearer <eth:syzkaller0>
[  171.093549][T14132] tipc: Resetting bearer <eth:syzkaller0>
[  171.108321][T14132] tipc: Disabling bearer <eth:syzkaller0>
[  171.168115][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  171.235696][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3543'.
[  171.317652][T14162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3548'.
[  171.353328][T14166] xfrm1: entered promiscuous mode
[  171.358493][T14166] xfrm1: entered allmulticast mode
[  171.369296][T14166] xt_hashlimit: size too large, truncated to 1048576
[  171.598030][T14199] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  171.601367][T14198] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  171.627881][T14202] syzkaller1: entered promiscuous mode
[  171.629733][T14202] syzkaller1: entered allmulticast mode
[  171.709457][T14211] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  171.743845][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3571'.
[  172.513704][T14319] gretap0: left allmulticast mode
[  172.515973][T14319] bridge0: port 1(gretap0) entered disabled state
[  172.802545][T14349] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  173.003224][T14369] tipc: Resetting bearer <eth:syzkaller0>
[  173.182983][T14383] ipt_ECN: cannot use operation on non-tcp rule
[  173.379292][T14410] netlink: 'syz.0.3664': attribute type 1 has an invalid length.
[  173.418392][T14416] __nla_validate_parse: 20 callbacks suppressed
[  173.418403][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3667'.
[  173.447415][T14420] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3669'.
[  173.516838][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  173.554867][T14432] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3675'.
[  173.676514][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  173.722986][T14451] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  174.414564][T14513] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  174.417516][T14515] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.424686][T14513] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  174.449174][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3714'.
[  174.484750][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3715'.
[  174.637833][T14539] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3725'.
[  174.642235][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3725'.
[  174.740694][T14551] vlan5: entered promiscuous mode
[  174.742462][T14551] vlan5: entered allmulticast mode
[  174.824957][T14563] netlink: 'syz.1.3737': attribute type 1 has an invalid length.
[  174.830994][T14563] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3737'.
[  175.029413][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3749'.
[  175.116466][T14597] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3754'.
[  175.317589][T14614] hsr0 speed is unknown, defaulting to 1000
[  175.320256][T14614] lo speed is unknown, defaulting to 1000
[  175.384560][T14628] netlink: 'syz.2.3767': attribute type 11 has an invalid length.
[  175.596159][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  175.669857][T14644] batman_adv: batadv0: Adding interface: ip6gretap1
[  175.672015][T14644] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.683995][T14644] batman_adv: batadv0: Interface activated: ip6gretap1
[  175.819042][T14658] netlink: 'syz.0.3780': attribute type 4 has an invalid length.
[  175.909676][T14669] hsr0 speed is unknown, defaulting to 1000
[  175.912427][T14669] lo speed is unknown, defaulting to 1000
[  176.662760][T14725] netlink: 'syz.1.3807': attribute type 3 has an invalid length.
[  176.665608][T14725] netlink: 'syz.1.3807': attribute type 1 has an invalid length.
[  176.683403][T14726] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  176.694165][T14726] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  176.981821][T14755] syz.0.3818 uses old SIOCAX25GETINFO
[  177.045786][T14755] ip6t_srh: unknown srh invflags 4449
[  177.332924][T14791] hsr0 speed is unknown, defaulting to 1000
[  177.343084][T14791] lo speed is unknown, defaulting to 1000
[  177.598158][T14807] dvmrp1: tun_chr_ioctl cmd 1074025677
[  177.600078][T14807] dvmrp1: linktype set to 773
[  177.618652][T14809] xt_hashlimit: size too large, truncated to 1048576
[  177.776060][T14822] netlink: 'syz.2.3839': attribute type 9 has an invalid length.
[  177.787730][T14822] macvlan0: entered promiscuous mode
[  177.789493][T14822] hsr0: entered promiscuous mode
[  177.791212][T14822] macvlan0: entered allmulticast mode
[  177.792998][T14822] hsr0: entered allmulticast mode
[  177.807314][T14822] hsr_slave_0: entered allmulticast mode
[  177.809508][T14822] hsr_slave_1: entered allmulticast mode
[  177.858893][T14826] Cannot find add_set index 3 as target
[  178.310468][T14858] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  178.351563][T14862] netlink: 'syz.1.3858': attribute type 7 has an invalid length.
[  178.423721][T14868] netlink: 'syz.1.3860': attribute type 1 has an invalid length.
[  178.435354][T14868] __nla_validate_parse: 19 callbacks suppressed
[  178.435366][T14868] netlink: 600 bytes leftover after parsing attributes in process `syz.1.3860'.
[  178.694280][T14884] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3869'.
[  178.697842][T14884] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3869'.
[  179.001454][T14922] netlink: 'syz.0.3885': attribute type 1 has an invalid length.
[  179.004805][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3884'.
[  179.119401][T14934] netlink: 'syz.0.3891': attribute type 4 has an invalid length.
[  179.239207][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3897'.
[  179.292100][T14953] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  179.446374][T14969] 8021q: adding VLAN 0 to HW filter on device bond8
[  179.527607][T14982] netlink: 'syz.2.3914': attribute type 83 has an invalid length.
[  179.734920][T14982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.737311][T15001] tipc: Resetting bearer <eth:syzkaller0>
[  179.974837][T15015] wireguard0: entered promiscuous mode
[  179.978598][T15015] wireguard0: entered allmulticast mode
[  180.301520][T15034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3936'.
[  180.451069][T15044] bond3: (slave batadv1): Releasing active interface
[  180.458366][T15044] bond5: (slave gretap0): Releasing active interface
[  180.461098][T15044] gretap0: left promiscuous mode
[  180.463206][T15044] gretap0: left allmulticast mode
[  180.467166][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  180.472690][T15044] bond6: (slave veth11): Releasing active interface
[  180.478904][T15044] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  180.482146][T15044] batman_adv: batadv0: Removing interface: ip6gretap1
[  180.512871][T15044] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  180.535618][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  180.819968][T15085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3960'.
[  180.906842][T15099] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3966'.
[  181.067308][T15122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3977'.
[  181.167044][T15137] team0: Mode changed to "activebackup"
[  181.177463][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  181.368423][T15161] SET target dimension over the limit!
[  181.618153][T15189] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4003'.
[  181.701198][T15196] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  181.917744][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  182.268315][T15226] hsr0 speed is unknown, defaulting to 1000
[  182.276311][T15226] lo speed is unknown, defaulting to 1000
[  182.737575][T15241] batadv_slave_0: left allmulticast mode
[  182.778345][T15243] hsr0 speed is unknown, defaulting to 1000
[  182.781260][T15243] lo speed is unknown, defaulting to 1000
[  183.580521][T15257] set match dimension is over the limit!
[  183.763026][T15270] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  183.777896][T15272] validate_nla: 1 callbacks suppressed
[  183.777909][T15272] netlink: 'syz.2.4032': attribute type 7 has an invalid length.
[  183.891190][T15270] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  184.092455][T15302] netlink: 'syz.1.4042': attribute type 1 has an invalid length.
[  184.095045][T15302] netlink: 'syz.1.4042': attribute type 2 has an invalid length.
[  184.097903][T15302] netlink: 'syz.1.4042': attribute type 8 has an invalid length.
[  184.100506][T15302] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.4042'.
[  184.114958][T15305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4043'.
[  184.125039][T15305] netlink: 'syz.0.4043': attribute type 6 has an invalid length.
[  184.168086][T15308] syz.1.4044: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  184.177397][T15308] CPU: 1 UID: 0 PID: 15308 Comm: syz.1.4044 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  184.177429][T15308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.177435][T15308] Call Trace:
[  184.177439][T15308]  <TASK>
[  184.177444][T15308]  dump_stack_lvl+0x189/0x250
[  184.177461][T15308]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.177471][T15308]  ? __pfx__printk+0x10/0x10
[  184.177482][T15308]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  184.177494][T15308]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  184.177504][T15308]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  184.177514][T15308]  warn_alloc+0x214/0x310
[  184.177522][T15308]  ? stack_depot_save_flags+0x40/0x900
[  184.177532][T15308]  ? __pfx_warn_alloc+0x10/0x10
[  184.177539][T15308]  ? kasan_save_track+0x4f/0x80
[  184.177548][T15308]  ? xskq_create+0x56/0x170
[  184.177555][T15308]  ? xsk_init_queue+0xb0/0x110
[  184.177566][T15308]  ? xsk_setsockopt+0x4dc/0x8d0
[  184.177575][T15308]  ? do_sock_setsockopt+0x17c/0x1b0
[  184.177583][T15308]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  184.177590][T15308]  ? do_syscall_64+0xfa/0x3b0
[  184.177597][T15308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.177607][T15308]  __vmalloc_node_range_noprof+0x125/0x12f0
[  184.177650][T15308]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  184.177663][T15308]  ? __kasan_kmalloc+0x93/0xb0
[  184.177674][T15308]  vmalloc_user_noprof+0xad/0xf0
[  184.177685][T15308]  ? xskq_create+0xbf/0x170
[  184.177692][T15308]  xskq_create+0xbf/0x170
[  184.177700][T15308]  xsk_init_queue+0xb0/0x110
[  184.177712][T15308]  xsk_setsockopt+0x4dc/0x8d0
[  184.177723][T15308]  ? __pfx_xsk_setsockopt+0x10/0x10
[  184.177734][T15308]  ? __pfx_aa_sk_perm+0x10/0x10
[  184.177748][T15308]  ? aa_sock_opt_perm+0x74/0x110
[  184.177755][T15308]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  184.177762][T15308]  ? __pfx_xsk_setsockopt+0x10/0x10
[  184.177772][T15308]  do_sock_setsockopt+0x17c/0x1b0
[  184.177782][T15308]  __x64_sys_setsockopt+0x13f/0x1b0
[  184.177792][T15308]  do_syscall_64+0xfa/0x3b0
[  184.177798][T15308]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.177805][T15308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.177811][T15308]  ? exc_page_fault+0x9f/0xf0
[  184.177818][T15308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.177825][T15308] RIP: 0033:0x7fad1078e9a9
[  184.177832][T15308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.177838][T15308] RSP: 002b:00007fad1155a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  184.177847][T15308] RAX: ffffffffffffffda RBX: 00007fad109b5fa0 RCX: 00007fad1078e9a9
[  184.177852][T15308] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  184.177856][T15308] RBP: 00007fad10810d69 R08: 0000000000000004 R09: 0000000000000000
[  184.177860][T15308] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.177864][T15308] R13: 0000000000000000 R14: 00007fad109b5fa0 R15: 00007ffc76d5e258
[  184.177874][T15308]  </TASK>
[  184.178339][T15308] Mem-Info:
[  184.323340][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4047'.
[  184.350963][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4048'.
[  184.397729][T15308] active_anon:6984 inactive_anon:0 isolated_anon:0
[  184.397729][T15308]  active_file:1027 inactive_file:38256 isolated_file:0
[  184.397729][T15308]  unevictable:1768 dirty:249 writeback:0
[  184.397729][T15308]  slab_reclaimable:10290 slab_unreclaimable:80387
[  184.397729][T15308]  mapped:19476 shmem:3582 pagetables:1081
[  184.397729][T15308]  sec_pagetables:0 bounce:0
[  184.397729][T15308]  kernel_misc_reclaimable:0
[  184.397729][T15308]  free:249610 free_pcp:26524 free_cma:0
[  184.426839][T15308] Node 0 active_anon:10752kB inactive_anon:0kB active_file:1968kB inactive_file:18896kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43508kB dirty:392kB writeback:0kB shmem:4572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7592kB pagetables:2772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  184.437516][T15308] Node 1 active_anon:18340kB inactive_anon:0kB active_file:2140kB inactive_file:134128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35756kB dirty:604kB writeback:0kB shmem:11048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4684kB pagetables:1620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  184.450421][T15308] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  184.490145][T15308] lowmem_reserve[]: 0 812 812 812 812
[  184.501712][T15308] Node 0 DMA32 free:280020kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10616kB inactive_anon:0kB active_file:1968kB inactive_file:18896kB unevictable:3536kB writepending:392kB present:1556484kB managed:831796kB mlocked:0kB bounce:0kB free_pcp:54016kB local_pcp:40652kB free_cma:0kB
[  184.552444][T15346] netlink: 'syz.0.4056': attribute type 1 has an invalid length.
[  184.555454][T15308] lowmem_reserve[]: 0 0 0 0 0
[  184.557062][T15308] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  184.557295][T15346] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4056'.
[  184.583199][T15308] lowmem_reserve[]: 0 0 854 854 854
[  184.585157][T15308] Node 1 Normal free:236780kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23936kB inactive_anon:0kB active_file:2140kB inactive_file:134128kB unevictable:3536kB writepending:632kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:53160kB local_pcp:19032kB free_cma:0kB
[  184.599876][T15308] lowmem_reserve[]: 0 0 0 0 0
[  184.601798][T15308] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  184.614061][T15308] Node 0 DMA32: 637*4kB (UME) 250*8kB (ME) 53*16kB (UM) 102*32kB (UME) 427*64kB (UM) 197*128kB (UME) 105*256kB (U) 40*512kB (U) 25*1024kB (UM) 5*2048kB (UME) 33*4096kB (UM) = 279572kB
[  184.627112][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4058'.
[  184.630200][T15308] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  184.635914][T15350] macsec1: entered promiscuous mode
[  184.635936][T15350] team0: entered promiscuous mode
[  184.635942][T15350] geneve0: entered promiscuous mode
[  184.636133][T15350] macsec1: entered allmulticast mode
[  184.636140][T15350] team0: entered allmulticast mode
[  184.636144][T15350] geneve0: entered allmulticast mode
[  184.636414][T15350] team0: Device macsec1 is already an upper device of the team interface
[  184.651191][T15308] Node 1 Normal: 593*4kB (U) 431*8kB (UME) 196*16kB (UME) 215*32kB (UME) 43*64kB (UE) 93*128kB (UME) 48*256kB (UM) 27*512kB (UM) 18*1024kB (UM) 3*2048kB (UM) 38*4096kB (UM) = 236828kB
[  184.657959][T15350] team0: left allmulticast mode
[  184.659574][T15350] geneve0: left allmulticast mode
[  184.661238][T15350] team0: left promiscuous mode
[  184.662855][T15350] geneve0: left promiscuous mode
[  184.669778][T15308] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  184.672722][T15308] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  184.676343][T15308] 44601 total pagecache pages
[  184.678095][T15308] 0 pages in swap cache
[  184.679549][T15308] Free swap  = 124996kB
[  184.681188][T15308] Total swap = 124996kB
[  184.682639][T15308] 786301 pages RAM
[  184.683996][T15308] 0 pages HighMem/MovableOnly
[  184.691315][T15308] 241104 pages reserved
[  184.692730][T15308] 0 pages cma reserved
[  184.827780][T15368] netlink: 'syz.2.4067': attribute type 1 has an invalid length.
[  184.848776][T15368] 8021q: adding VLAN 0 to HW filter on device bond8
[  185.064391][T15395] tipc: Resetting bearer <ib:ip6gre0>
[  185.137927][T15401] hsr0 speed is unknown, defaulting to 1000
[  185.142387][T15401] lo speed is unknown, defaulting to 1000
[  185.183981][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4083'.
[  185.191797][T15403] xt_CT: You must specify a L4 protocol and not use inversions on it
[  185.199474][T15404] team0: Port device geneve0 removed
[  185.204169][T15404] tipc: Resetting bearer <eth:syzkaller0>
[  185.208406][T15404] bond2: (slave veth3): Releasing active interface
[  185.212067][T15404] bond3: (slave bridge4): Releasing active interface
[  185.214333][T15404] bridge4: left promiscuous mode
[  185.216350][T15404] bridge4: left allmulticast mode
[  185.219699][T15404] bond4: (slave ip6gretap1): Releasing backup interface
[  185.223511][T15404] bond5: (slave bond6): Releasing backup interface
[  185.227562][T15404] bond6: left promiscuous mode
[  185.870182][T15427] netlink: 'syz.1.4094': attribute type 2 has an invalid length.
[  186.056807][T15447] netlink: 'syz.0.4104': attribute type 28 has an invalid length.
[  186.149003][T15456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4106'.
[  186.152076][T15456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4106'.
[  186.154966][T15456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4106'.
[  186.752295][T15520] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.756067][T15520] tipc: Resetting bearer <eth:syzkaller0>
[  186.920432][T15528] tc_dump_action: action bad kind
[  187.331702][T15570] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  187.401809][T15580] netlink: 'syz.0.4164': attribute type 10 has an invalid length.
[  187.404820][T15580] veth0_vlan: left promiscuous mode
[  187.425148][T15580] veth0_vlan: entered promiscuous mode
[  187.432214][T15580] team0: Device veth0_vlan failed to register rx_handler
[  187.450949][T15586] tipc: New replicast peer: 255.255.255.255
[  187.458336][T15586] tipc: Enabled bearer <udp:syz2>, priority 6
[  187.783919][T15623] openvswitch: netlink: Missing key (keys=40, expected=80)
[  188.573183][T15640] pim6reg1: entered promiscuous mode
[  188.574937][T15640] pim6reg1: entered allmulticast mode
[  188.759158][T15630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.875610][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  189.216339][T15677] __nla_validate_parse: 7 callbacks suppressed
[  189.216359][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4206'.
[  189.236099][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4206'.
[  189.239209][ T5888] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.242583][ T5888] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.252214][ T5888] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.255557][ T5888] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.359191][T15693] netlink: 'syz.2.4213': attribute type 1 has an invalid length.
[  189.573252][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4223'.
[  189.662201][T15728] netlink: 'syz.0.4225': attribute type 9 has an invalid length.
[  189.665111][T15728] netlink: 'syz.0.4225': attribute type 6 has an invalid length.
[  190.293940][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4237'.
[  190.366125][T15752] tun0: tun_chr_ioctl cmd 1074025677
[  190.367974][T15752] tun0: linktype set to 768
[  190.673826][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4247'.
[  190.681938][T15772] netlink: 'syz.1.4248': attribute type 11 has an invalid length.
[  190.692278][T15772] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4248'.
[  191.029885][T15800] sctp: [Deprecated]: syz.1.4262 (pid 15800) Use of int in maxseg socket option.
[  191.029885][T15800] Use struct sctp_assoc_value instead
[  191.068755][T15804] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4264'.
[  191.071747][T15804] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4264'.
[  191.094639][T15798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.108533][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4261'.
[  191.262103][T15819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4270'.
[  192.086801][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  192.090404][T15844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  192.115726][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  192.489009][T15892] netlink: 'syz.0.4301': attribute type 2 has an invalid length.
[  192.523474][T15895] bridge5: entered allmulticast mode
[  192.587256][T15906] netlink: 'syz.2.4307': attribute type 3 has an invalid length.
[  192.602105][T15906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.636197][T15911] netlink: 'syz.0.4310': attribute type 14 has an invalid length.
[  192.660854][T15911] netlink: 'syz.0.4310': attribute type 14 has an invalid length.
[  192.751282][T15930] netlink: 'syz.0.4318': attribute type 8 has an invalid length.
[  192.955556][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  193.373665][T15984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.588738][T16001] netlink: 'syz.1.4349': attribute type 3 has an invalid length.
[  194.047154][T16047] syzkaller1: entered promiscuous mode
[  194.049202][T16047] syzkaller1: entered allmulticast mode
[  194.419246][T16090] __nla_validate_parse: 16 callbacks suppressed
[  194.419258][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4391'.
[  194.568054][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  194.570818][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  194.577482][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  194.580203][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.139952][T16141] netlink: 566 bytes leftover after parsing attributes in process `syz.2.4410'.
[  195.549756][T16164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.555875][T16164] syzkaller0: entered promiscuous mode
[  195.565397][T16164] syzkaller0: entered allmulticast mode
[  195.621737][T16164] tipc: Resetting bearer <eth:syzkaller0>
[  195.627233][T16163] tipc: Resetting bearer <eth:syzkaller0>
[  195.679621][T16163] tipc: Disabling bearer <eth:syzkaller0>
[  195.772040][T16172] validate_nla: 1 callbacks suppressed
[  195.772052][T16172] netlink: 'syz.2.4422': attribute type 1 has an invalid length.
[  195.806586][T16175] openvswitch: netlink: Multiple metadata blocks provided
[  195.832474][T16172] bond9: (slave vti0): The slave device specified does not support setting the MAC address
[  195.855427][T16172] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  195.860546][T16172] bond9: (slave vti0): making interface the new active one
[  195.864353][T16172] bond9: (slave vti0): Enslaving as an active interface with an up link
[  196.989965][T16217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4442'.
[  197.579790][T16244] netlink: 'syz.2.4452': attribute type 3 has an invalid length.
[  197.582673][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4452'.
[  198.443222][T16244] netlink: 'syz.2.4452': attribute type 3 has an invalid length.
[  198.447267][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4452'.
[  198.562719][T16268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4463'.
[  198.567496][T16268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4463'.
[  198.570272][T16268] netlink: 'syz.0.4463': attribute type 6 has an invalid length.
[  198.573892][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4462'.
[  198.607785][T16274] netlink: 'syz.2.4464': attribute type 12 has an invalid length.
[  198.611225][T16274] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4464'.
[  198.627364][T16276] hsr0 speed is unknown, defaulting to 1000
[  198.630103][T16276] lo speed is unknown, defaulting to 1000
[  198.708022][T16281] hsr0 speed is unknown, defaulting to 1000
[  198.785444][T16281] lo speed is unknown, defaulting to 1000
[  198.942543][T16293] x_tables: duplicate underflow at hook 2
[  199.032221][T16293] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4471'.
[  200.400438][T16394] netlink: 'syz.1.4516': attribute type 1 has an invalid length.
[  200.477152][T16404] ipt_REJECT: TCP_RESET invalid for non-tcp
[  200.532819][T16410] __nla_validate_parse: 1 callbacks suppressed
[  200.532836][T16410] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4522'.
[  200.645587][T16423] netlink: 'syz.0.4530': attribute type 1 has an invalid length.
[  200.651172][T16423] netlink: 'syz.0.4530': attribute type 1 has an invalid length.
[  200.653953][T16425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4531'.
[  200.692398][T16427] hsr0 speed is unknown, defaulting to 1000
[  200.695086][T16427] lo speed is unknown, defaulting to 1000
[  200.911552][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4543'.
[  200.917014][T16452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.971537][T16457] netlink: 'syz.1.4545': attribute type 5 has an invalid length.
[  200.974090][T16457] netlink: 'syz.1.4545': attribute type 5 has an invalid length.
[  201.027205][T16459] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4546'.
[  201.485782][T16498] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4555'.
[  201.583610][T16505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4557'.
[  201.587066][T16505] openvswitch: netlink: Flow actions attr not present in new flow.
[  201.681315][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4564'.
[  201.696735][T16521] bridge0: port 1(erspan0) entered blocking state
[  201.699138][T16521] bridge0: port 1(erspan0) entered disabled state
[  201.701449][T16521] erspan0: entered allmulticast mode
[  201.704044][T16521] erspan0: entered promiscuous mode
[  201.709461][T16521] erspan0: left allmulticast mode
[  201.711240][T16521] erspan0: left promiscuous mode
[  201.713787][T16521] bridge0: port 1(erspan0) entered disabled state
[  201.784632][T16525] bridge3: the hash_elasticity option has been deprecated and is always 16
[  201.790112][T16525] bridge3: entered allmulticast mode
[  202.017204][T16559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4581'.
[  202.191478][T16559] hsr0 speed is unknown, defaulting to 1000
[  202.194239][T16559] lo speed is unknown, defaulting to 1000
[  202.505222][T16600] veth13: entered promiscuous mode
[  202.767532][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4607'.
[  202.779003][T16622] tipc: Enabled bearer <eth:gre0>, priority 10
[  202.789742][T16627] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4610'.
[  203.198405][T16663] netlink: 'syz.1.4627': attribute type 21 has an invalid length.
[  203.232957][T16665] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  203.240715][T16665] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  203.895622][   T10] tipc: Node number set to 4278321153
[  204.160892][T16675] netlink: 'syz.1.4632': attribute type 1 has an invalid length.
[  204.188136][T16675] 8021q: adding VLAN 0 to HW filter on device bond5
[  204.212252][T16675] bond5: (slave veth15): Enslaving as an active interface with a down link
[  204.226019][T16675] vlan1: entered allmulticast mode
[  204.227739][T16675] veth1: entered allmulticast mode
[  204.230021][T16675] bond5: (slave vlan1): Opening slave failed
[  204.260384][T16674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.620682][T16678] netlink: 'syz.0.4633': attribute type 10 has an invalid length.
[  204.625160][T16678] team0: Port device dummy0 added
[  204.629189][T16678] netlink: 'syz.0.4633': attribute type 10 has an invalid length.
[  204.634871][T16678] team0: Port device dummy0 removed
[  204.639198][T16678] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  204.711792][T16684] netlink: 'syz.0.4636': attribute type 2 has an invalid length.
[  204.723782][T16684] `: entered promiscuous mode
[  204.800069][T16690] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.868083][T16697] netlink: 'syz.1.4642': attribute type 5 has an invalid length.
[  204.916105][T16704] vlan2: entered promiscuous mode
[  205.000506][T16708] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  205.006014][T16708] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  205.010458][T16708] CPU: 1 UID: 0 PID: 16708 Comm: syz.0.4648 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  205.010470][T16708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.010476][T16708] Call Trace:
[  205.010480][T16708]  <TASK>
[  205.010483][T16708]  dump_stack_lvl+0x189/0x250
[  205.010501][T16708]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.010511][T16708]  ? __pfx__printk+0x10/0x10
[  205.010522][T16708]  ? kernfs_path_from_node+0x2c/0x260
[  205.010531][T16708]  ? kernfs_path_from_node+0x2c/0x260
[  205.010537][T16708]  ? kernfs_path_from_node+0x2c/0x260
[  205.010545][T16708]  ? kernfs_path_from_node+0x22c/0x260
[  205.010551][T16708]  ? kernfs_path_from_node+0x2c/0x260
[  205.010560][T16708]  sysfs_warn_dup+0x8e/0xa0
[  205.010572][T16708]  sysfs_do_create_link_sd+0xc0/0x110
[  205.010585][T16708]  device_add_class_symlinks+0x1cf/0x240
[  205.010597][T16708]  device_add+0x475/0xb50
[  205.010608][T16708]  wiphy_register+0x1ba6/0x28d0
[  205.010624][T16708]  ? __pfx_wiphy_register+0x10/0x10
[  205.010630][T16708]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  205.010643][T16708]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  205.010654][T16708]  ieee80211_register_hw+0x3443/0x40b0
[  205.010669][T16708]  ? ieee80211_register_hw+0x1401/0x40b0
[  205.010681][T16708]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  205.010691][T16708]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  205.010707][T16708]  ? __hrtimer_setup+0x187/0x210
[  205.010733][T16708]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  205.010744][T16708]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  205.010764][T16708]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  205.010770][T16708]  ? trace_kmalloc+0x1f/0xd0
[  205.010779][T16708]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  205.010789][T16708]  ? kstrndup+0xbf/0x160
[  205.010802][T16708]  hwsim_new_radio_nl+0xea4/0x1b10
[  205.010811][T16708]  ? __pfx___nla_validate_parse+0x10/0x10
[  205.010827][T16708]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  205.010840][T16708]  ? __nla_parse+0x40/0x60
[  205.010850][T16708]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  205.010866][T16708]  genl_family_rcv_msg_doit+0x215/0x300
[  205.010877][T16708]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  205.010892][T16708]  ? bpf_lsm_capable+0x9/0x20
[  205.010901][T16708]  ? security_capable+0x7e/0x2e0
[  205.010912][T16708]  genl_rcv_msg+0x60e/0x790
[  205.010923][T16708]  ? __pfx_genl_rcv_msg+0x10/0x10
[  205.010931][T16708]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  205.010944][T16708]  netlink_rcv_skb+0x208/0x470
[  205.010950][T16708]  ? __lock_acquire+0xab9/0xd20
[  205.010958][T16708]  ? __pfx_genl_rcv_msg+0x10/0x10
[  205.010966][T16708]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  205.010981][T16708]  ? down_read+0x1ad/0x2e0
[  205.010990][T16708]  genl_rcv+0x28/0x40
[  205.010998][T16708]  netlink_unicast+0x82f/0x9e0
[  205.011012][T16708]  ? __pfx_netlink_unicast+0x10/0x10
[  205.011022][T16708]  ? netlink_sendmsg+0x642/0xb30
[  205.011028][T16708]  ? skb_put+0x11b/0x210
[  205.011037][T16708]  netlink_sendmsg+0x805/0xb30
[  205.011048][T16708]  ? __pfx_netlink_sendmsg+0x10/0x10
[  205.011056][T16708]  ? aa_sock_msg_perm+0x94/0x160
[  205.011065][T16708]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  205.011072][T16708]  ? __pfx_netlink_sendmsg+0x10/0x10
[  205.011079][T16708]  __sock_sendmsg+0x21c/0x270
[  205.011091][T16708]  ____sys_sendmsg+0x505/0x830
[  205.011101][T16708]  ? __pfx_____sys_sendmsg+0x10/0x10
[  205.011114][T16708]  ? import_iovec+0x74/0xa0
[  205.011125][T16708]  ___sys_sendmsg+0x21f/0x2a0
[  205.011134][T16708]  ? __pfx____sys_sendmsg+0x10/0x10
[  205.011158][T16708]  ? __fget_files+0x2a/0x420
[  205.011164][T16708]  ? __fget_files+0x3a0/0x420
[  205.011174][T16708]  __x64_sys_sendmsg+0x19b/0x260
[  205.011184][T16708]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  205.011199][T16708]  ? do_syscall_64+0xbe/0x3b0
[  205.011209][T16708]  do_syscall_64+0xfa/0x3b0
[  205.011215][T16708]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.011222][T16708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.011229][T16708]  ? exc_page_fault+0x9f/0xf0
[  205.011236][T16708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.011243][T16708] RIP: 0033:0x7fe278f8e9a9
[  205.011251][T16708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.011257][T16708] RSP: 002b:00007fe279e76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  205.011266][T16708] RAX: ffffffffffffffda RBX: 00007fe2791b5fa0 RCX: 00007fe278f8e9a9
[  205.011270][T16708] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  205.011275][T16708] RBP: 00007fe279010d69 R08: 0000000000000000 R09: 0000000000000000
[  205.011279][T16708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.011282][T16708] R13: 0000000000000000 R14: 00007fe2791b5fa0 R15: 00007ffcc558bb18
[  205.011294][T16708]  </TASK>
[  205.175938][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  206.237749][T16742] __nla_validate_parse: 4 callbacks suppressed
[  206.237760][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4664'.
[  206.325151][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4668'.
[  206.339270][T16752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4668'.
[  206.679127][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4677'.
[  207.549259][T16804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4688'.
[  207.567568][T16802] netlink: 'syz.1.4686': attribute type 13 has an invalid length.
[  207.573781][T16802] netlink: 'syz.1.4686': attribute type 17 has an invalid length.
[  207.619029][T16802] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.624064][T16802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.633934][T16808] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4690'.
[  207.712155][T16798] hsr0 speed is unknown, defaulting to 1000
[  207.715549][T16798] lo speed is unknown, defaulting to 1000
[  207.738039][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4694'.
[  207.750833][T16802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4686'.
[  207.992417][T16833] IPVS: Scheduler module ip_vs_sip not found
[  207.994417][T16836] netlink: 'syz.2.4703': attribute type 1 has an invalid length.
[  208.005685][T16836] netlink: 'syz.2.4703': attribute type 3 has an invalid length.
[  208.008137][T16836] netlink: 'syz.2.4703': attribute type 1 has an invalid length.
[  208.010559][T16836] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4703'.
[  208.026840][T16836] NCSI netlink: No device for ifindex 0
[  208.161900][T16852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.266547][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4718'.
[  208.396703][T16887] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  208.450148][T16893] netlink: 'syz.0.4730': attribute type 6 has an invalid length.
[  208.630478][T16915] Cannot find set identified by id 1 to match
[  209.069211][T16962] syzkaller1: entered promiscuous mode
[  209.071722][T16962] syzkaller1: entered allmulticast mode
[  209.158861][T16966] Cannot find set identified by id 0 to match
[  209.758815][T16991] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  209.949934][T17003] netlink: 'syz.0.4781': attribute type 21 has an invalid length.
[  210.008314][T17007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.108441][T17014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  210.206459][T17025] team0: Device syz_tun failed to register rx_handler
[  210.327168][T17039] Cannot find del_set index 0 as target
[  210.369267][T17043] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  210.372777][T17043] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  210.851765][T17065] netlink: 'syz.2.4810': attribute type 1 has an invalid length.
[  211.105654][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  211.141590][T17086] syzkaller1: entered promiscuous mode
[  211.143456][T17086] syzkaller1: entered allmulticast mode
[  211.381536][T17105] __nla_validate_parse: 3 callbacks suppressed
[  211.381548][T17105] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4828'.
[  211.609878][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4839'.
[  211.673688][T17131] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4841'.
[  211.686114][T17131] netlink: 'syz.2.4841': attribute type 1 has an invalid length.
[  211.836548][ T5861] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  212.065839][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4856'.
[  212.126097][T17168] netlink: 'syz.2.4857': attribute type 15 has an invalid length.
[  212.579001][T17190] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4867'.
[  213.256439][T17237] ip6gretap0: entered promiscuous mode
[  213.258712][T17237] macsec1: entered promiscuous mode
[  213.260461][T17237] macsec1: entered allmulticast mode
[  213.262138][T17237] ip6gretap0: entered allmulticast mode
[  213.294106][T17241] veth0_vlan: entered allmulticast mode
[  213.296771][T17241] : renamed from vlan1
[  213.520725][T17266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4900'.
[  213.535065][T17269] netlink: 'syz.1.4901': attribute type 1 has an invalid length.
[  213.581172][T17272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4902'.
[  213.778960][T17290] netlink: 'syz.0.4909': attribute type 9 has an invalid length.
[  213.781827][T17290] netlink: 'syz.0.4909': attribute type 9 has an invalid length.
[  213.853550][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4912'.
[  213.858117][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4912'.
[  213.867025][T17296] geneve2: entered promiscuous mode
[  213.868884][T17296] geneve2: entered allmulticast mode
[  213.871565][ T5721] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.874536][ T5721] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.881550][ T5721] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.887035][ T5721] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.957139][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4915'.
[  214.031196][T17308] veth1_to_bond: entered allmulticast mode
[  214.033980][T17308] bond_slave_1: entered promiscuous mode
[  214.037395][T17307] bond_slave_1: left promiscuous mode
[  214.039275][T17307] veth1_to_bond: left allmulticast mode
[  214.174383][T17320] netlink: 'syz.0.4924': attribute type 15 has an invalid length.
[  214.559622][T17345] x_tables: duplicate entry at hook 2
[  214.715185][T17365] ipvlan1: entered promiscuous mode
[  214.768542][T17373] Cannot find add_set index 0 as target
[  214.919735][T17398] netlink: 'syz.0.4959': attribute type 1 has an invalid length.
[  214.958137][T17403] xt_recent: Unsupported userspace flags (00000048)
[  214.982085][T17407] netlink: zone id is out of range
[  214.983908][T17407] netlink: zone id is out of range
[  215.005166][T17407] netlink: set zone limit has 4 unknown bytes
[  215.371958][T17435] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3681748225/3681748227
[  215.379738][T17435] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3681748225/3681748227
[  215.382820][T17435] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3681748225/3681748227
[  215.454662][T17441] chnl_net:caif_netlink_parms(): no params data found
[  215.719340][T17460] netlink: 'syz.2.4988': attribute type 1 has an invalid length.
[  215.746368][T17462] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.927511][T17481] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  216.170808][T17507] netlink: zone id is out of range
[  216.173884][T17507] netlink: zone id is out of range
[  216.186006][T17507] netlink: zone id is out of range
[  216.187725][T17507] netlink: zone id is out of range
[  216.189419][T17507] netlink: zone id is out of range
[  216.191091][T17507] netlink: zone id is out of range
[  216.192774][T17507] netlink: zone id is out of range
[  216.208309][T17507] : entered promiscuous mode
[  216.437935][T17534] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  216.730600][T17548] __nla_validate_parse: 10 callbacks suppressed
[  216.730613][T17548] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5030'.
[  217.160453][T17573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5043'.
[  217.164205][T17575] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5042'.
[  217.457749][T17615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5062'.
[  217.473913][T17617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5063'.
[  217.662134][T17639] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5074'.
[  217.665649][T17639] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5074'.
[  217.675609][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  217.800915][T17650] netlink: 'syz.1.5079': attribute type 1 has an invalid length.
[  217.803540][T17650] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5079'.
[  217.961490][T17669] netlink: 'syz.2.5087': attribute type 2 has an invalid length.
[  218.003690][T17673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5090'.
[  218.011502][T17673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5090'.
[  218.185235][T17699] netlink: 'syz.2.5102': attribute type 12 has an invalid length.
[  218.672286][T17770] raw_sendmsg: syz.2.5136 forgot to set AF_INET. Fix it!
[  218.702041][T17773] syzkaller1: entered promiscuous mode
[  218.703915][T17773] syzkaller1: entered allmulticast mode
[  218.941186][T17806] pim6reg: entered allmulticast mode
[  218.943706][T17806] pim6reg: left allmulticast mode
[  219.245123][T17849] netlink: 'syz.1.5171': attribute type 1 has an invalid length.
[  219.727802][T17908] pimreg: entered allmulticast mode
[  219.754534][T17908] pimreg: left allmulticast mode
[  219.850074][T17919] syzkaller1: entered promiscuous mode
[  219.851957][T17919] syzkaller1: entered allmulticast mode
[  220.130653][T17929] net_ratelimit: 101 callbacks suppressed
[  220.130665][T17929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.235733][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  220.617193][T17979] bridge4: entered promiscuous mode
[  220.618921][T17979] bridge4: entered allmulticast mode
[  220.620980][T17981] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  220.625219][T17974] hsr0 speed is unknown, defaulting to 1000
[  220.629260][T17974] lo speed is unknown, defaulting to 1000
[  220.866650][T18005] netlink: 'syz.0.5239': attribute type 1 has an invalid length.
[  221.549000][   T33] audit: type=1804 audit(1753324638.311:2): pid=18082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5275" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=9035 res=1 errno=0
[  221.575620][   T33] audit: type=1800 audit(1753324638.311:3): pid=18082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5275" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=9035 res=0 errno=0
[  221.684546][T18105] vxcan0: entered promiscuous mode
[  222.560604][T18112] __nla_validate_parse: 16 callbacks suppressed
[  222.560622][T18112] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5288'.
[  222.567044][T18112] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5288'.
[  222.861721][T18158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5309'.
[  222.990344][T18174] tap0: tun_chr_ioctl cmd 1074025680
[  223.860341][T18193] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  223.979761][ T5830] Bluetooth: hci2: link tx timeout
[  223.981502][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.014455][T18207] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  224.024687][T18207] tipc: Resetting bearer <eth:syzkaller0>
[  224.080141][T18210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5330'.
[  224.087568][T18210] netlink: 'syz.1.5330': attribute type 4 has an invalid length.
[  224.090134][T18210] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5330'.
[  224.104571][T18210] : renamed from bond0 (while UP)
[  224.198640][T18230] netlink: 'syz.2.5342': attribute type 64 has an invalid length.
[  224.201227][T18230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5342'.
[  224.356808][T18249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5349'.
[  224.359741][T18249] openvswitch: netlink: EtherType 0 is less than min 600
[  224.405358][ T5830] Bluetooth: hci2: link tx timeout
[  224.408086][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.410692][ T5830] Bluetooth: hci2: link tx timeout
[  224.412449][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.418359][ T5830] Bluetooth: hci2: link tx timeout
[  224.420121][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.422721][ T5830] Bluetooth: hci2: link tx timeout
[  224.424454][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.427366][ T5830] Bluetooth: hci2: link tx timeout
[  224.429575][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.432239][ T5830] Bluetooth: hci2: link tx timeout
[  224.433987][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.439864][ T5830] Bluetooth: hci2: link tx timeout
[  224.441640][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.444507][ T5830] Bluetooth: hci2: link tx timeout
[  224.446386][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.449137][ T5830] Bluetooth: hci2: link tx timeout
[  224.450953][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.454674][ T5830] Bluetooth: hci2: link tx timeout
[  224.456671][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.461057][ T5830] Bluetooth: hci2: link tx timeout
[  224.462810][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.466602][ T5830] Bluetooth: hci2: link tx timeout
[  224.468440][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.526472][T18266] veth0: entered promiscuous mode
[  224.529796][T18266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5351'.
[  224.553639][T18266] veth0 (unregistering): left promiscuous mode
[  224.627532][T18238] hsr0 speed is unknown, defaulting to 1000
[  224.630229][T18238] lo speed is unknown, defaulting to 1000
[  224.784983][T18279] netlink: 'syz.0.5355': attribute type 1 has an invalid length.
[  224.799014][T18279] netlink: 'syz.0.5355': attribute type 2 has an invalid length.
[  224.801994][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5355'.
[  224.999715][T18289] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  225.003304][T18289] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  225.108336][T18295] netlink: 'syz.2.5363': attribute type 9 has an invalid length.
[  225.111128][T18295] netlink: 'syz.2.5363': attribute type 9 has an invalid length.
[  225.566850][T18358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5392'.
[  225.669701][T18369] Cannot find set identified by id 0 to match
[  225.698044][T18373] netlink: 'syz.0.5399': attribute type 1 has an invalid length.
[  225.700843][T18373] netlink: 'syz.0.5399': attribute type 2 has an invalid length.
[  225.995601][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  226.085875][T18419] netlink: 'syz.2.5419': attribute type 21 has an invalid length.
[  226.324032][T18448] netlink: 'syz.2.5427': attribute type 8 has an invalid length.
[  226.493488][T18470] xt_CT: You must specify a L4 protocol and not use inversions on it
[  226.521819][T18472] netlink: 'syz.0.5435': attribute type 3 has an invalid length.
[  226.871193][T18518] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  226.874442][T18518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.899523][T18521] netlink: 'syz.1.5450': attribute type 4 has an invalid length.
[  227.484476][T18591] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  227.579777][T18598] __nla_validate_parse: 20 callbacks suppressed
[  227.579789][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5483'.
[  227.698439][T18604] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5486'.
[  227.728790][T18609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5487'.
[  227.821891][T18615] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.836880][T18615] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.839343][T18615] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  227.843330][T18615] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  227.884730][T18617] gretap2: entered promiscuous mode
[  227.890840][T18617] bond0: (slave gretap2): making interface the new active one
[  227.893628][T18617] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  227.910459][T18615] macvlan0: entered promiscuous mode
[  227.912323][T18615] macvlan0: entered allmulticast mode
[  227.914496][T18615] bond0: entered promiscuous mode
[  227.917115][T18615] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  227.920629][T18615] bond0: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  227.924840][T18615] bond0: left promiscuous mode
[  228.257688][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5500'.
[  228.367532][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5506'.
[  228.438384][   T33] audit: type=1107 audit(1753324645.201:4): pid=18662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6FB'
[  228.467808][T18665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5513'.
[  228.470994][T18665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5513'.
[  228.509839][T18668] sctp: [Deprecated]: syz.2.5514 (pid 18668) Use of int in max_burst socket option.
[  228.509839][T18668] Use struct sctp_assoc_value instead
[  228.735798][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5524'.
[  228.782873][T18696] netlink: 'syz.1.5527': attribute type 11 has an invalid length.
[  228.786842][T18696] netlink: 'syz.1.5527': attribute type 11 has an invalid length.
[  228.789364][T18696] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5527'.
[  228.843336][T18698] sctp: [Deprecated]: syz.2.5528 (pid 18698) Use of struct sctp_assoc_value in delayed_ack socket option.
[  228.843336][T18698] Use struct sctp_sack_info instead
[  228.909102][T18705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5531'.
[  229.931136][T18761] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  230.120838][T18790] bridge0: failed insert local address into bridge forwarding table
[  230.124054][T18788] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  230.217927][T18802] team0: entered promiscuous mode
[  230.315865][T18802] team0 (unregistering): left promiscuous mode
[  231.847295][T18884] validate_nla: 6 callbacks suppressed
[  231.847308][T18884] netlink: 'syz.2.5610': attribute type 1 has an invalid length.
[  231.874859][T18884] 8021q: adding VLAN 0 to HW filter on device bond10
[  231.908174][T18884] 8021q: adding VLAN 0 to HW filter on device bond10
[  231.910555][T18884] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  231.921069][T18884] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  231.981595][T18895] bond10: (slave bridge6): Enslaving as an active interface with a down link
[  232.021700][T18893] netlink: 'syz.0.5613': attribute type 1 has an invalid length.
[  232.107542][T18908] netlink: 'syz.2.5617': attribute type 1 has an invalid length.
[  232.467771][T18951] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  233.400520][T19020] __nla_validate_parse: 5 callbacks suppressed
[  233.400532][T19020] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5663'.
[  233.581897][T19040] netlink: 'syz.1.5673': attribute type 6 has an invalid length.
[  233.620341][T19046] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5677'.
[  233.864191][T19067] pim6reg1: entered promiscuous mode
[  233.866187][T19067] pim6reg1: entered allmulticast mode
[  234.138246][T19087] netlink: 'syz.0.5694': attribute type 1 has an invalid length.
[  234.365024][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5711'.
[  234.377204][T19123] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  234.447394][T19126] hsr0 speed is unknown, defaulting to 1000
[  234.450126][T19126] lo speed is unknown, defaulting to 1000
[  234.466946][T19135] bond3: (slave veth9): Releasing backup interface
[  234.473449][T19135] : (slave bond4): Releasing backup interface
[  234.489550][T19135] bond5: (slave veth15): Releasing active interface
[  234.494755][T19135] bond0: (slave gretap2): Releasing active interface
[  234.509504][T19134] syzkaller1: entered promiscuous mode
[  234.511313][T19134] syzkaller1: entered allmulticast mode
[  234.547377][T19136] netlink: 'syz.0.5714': attribute type 29 has an invalid length.
[  234.550605][T19139] netlink: 'syz.0.5714': attribute type 29 has an invalid length.
[  234.612136][T19142] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  234.685897][T19150] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  234.688530][T19150] IPv6: NLM_F_CREATE should be set when creating new route
[  234.770956][T19158] netlink: 'syz.2.5727': attribute type 3 has an invalid length.
[  234.773556][T19158] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5727'.
[  234.847519][T19168] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  234.906443][T19172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5733'.
[  234.909417][T19172] netlink: 'syz.0.5733': attribute type 7 has an invalid length.
[  234.911998][T19172] netlink: 'syz.0.5733': attribute type 8 has an invalid length.
[  234.921949][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5733'.
[  234.948813][T19172] ip6gretap0: entered promiscuous mode
[  234.952635][T19172] syz_tun: entered promiscuous mode
[  234.957884][T19172] syz_tun: left promiscuous mode
[  234.960551][T19172] ip6gretap0: left promiscuous mode
[  235.166466][T19203] ksmbd: Unknown IPC event: 3, ignore.
[  235.396866][T19218] hsr0 speed is unknown, defaulting to 1000
[  235.399715][T19218] lo speed is unknown, defaulting to 1000
[  235.629288][T19227] No such timeout policy "syz1"
[  235.721227][T19235] ipt_REJECT: TCP_RESET invalid for non-tcp
[  235.816813][T19243] syzkaller1: entered promiscuous mode
[  235.818810][T19243] syzkaller1: entered allmulticast mode
[  236.139337][T19271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5775'.
[  236.158157][T19271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5775'.
[  236.261408][T19282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5781'.
[  236.290702][T19285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5782'.
[  236.421561][T19300] hsr0 speed is unknown, defaulting to 1000
[  236.425133][T19300] lo speed is unknown, defaulting to 1000
[  236.733122][T19328] hsr0 speed is unknown, defaulting to 1000
[  236.737418][T19328] lo speed is unknown, defaulting to 1000
[  236.807309][T19333] tipc: Resetting bearer <eth:syzkaller0>
[  236.877806][ T5721] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.880585][ T5721] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.883276][ T5721] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.897929][ T5721] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.088120][T19327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.262794][T19366] validate_nla: 4 callbacks suppressed
[  237.262805][T19366] netlink: 'syz.0.5817': attribute type 1 has an invalid length.
[  237.267352][T19366] netlink: 'syz.0.5817': attribute type 10 has an invalid length.
[  238.462651][T19442] netlink: 'syz.1.5841': attribute type 1 has an invalid length.
[  238.679438][T19461] netlink: 'syz.1.5847': attribute type 10 has an invalid length.
[  238.804803][T19471] __nla_validate_parse: 5 callbacks suppressed
[  238.804816][T19471] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5851'.
[  239.181199][T19523] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5872'.
[  239.288918][T19529] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  239.467651][T19543] netlink: 'syz.1.5881': attribute type 6 has an invalid length.
[  240.232214][T19605] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  240.234727][T19605] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  240.247231][T19605] tipc: Resetting bearer <eth:syzkaller0>
[  240.281114][T19608] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  240.500809][T19630] SET target dimension over the limit!
[  240.777856][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5925'.
[  241.747138][T19648] tipc: Resetting bearer <eth:syzkaller0>
[  241.747468][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5931'.
[  241.768269][T19648] hsr0: left allmulticast mode
[  241.769967][T19648] hsr_slave_0: left allmulticast mode
[  241.771871][T19648] hsr_slave_1: left allmulticast mode
[  241.773752][T19648] hsr0: left promiscuous mode
[  241.781159][T19648] ip6gretap0: left allmulticast mode
[  241.790767][ T5721] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.793621][ T5721] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.809681][   T51] syz2: Port: 1 Link DOWN
[  241.828172][ T5721] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.830915][ T5721] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.858737][T19658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.862346][T19660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.909217][T19664] netlink: 'syz.0.5935': attribute type 4 has an invalid length.
[  241.913241][T19658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.013374][T19674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5940'.
[  242.041510][T19676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5941'.
[  242.081298][T19678] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5942'.
[  242.090228][T19680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5943'.
[  242.154087][T19688] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.158804][T19688] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  242.162488][T19688] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  242.165771][T19688] tipc: Resetting bearer <eth:syzkaller0>
[  242.227413][T19694] syzkaller1: entered promiscuous mode
[  242.229252][T19694] syzkaller1: entered allmulticast mode
[  242.517785][T19723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5964'.
[  242.605429][T19726] rdma_rxe: rxe_newlink: failed to add veth1_to_bond
[  242.643739][T19728] netlink: 'syz.1.5966': attribute type 10 has an invalid length.
[  242.679243][T19735] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5969'.
[  242.832001][T19755] netlink: 'syz.0.5978': attribute type 21 has an invalid length.
[  243.470607][T19825] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.474922][ T5862] syz2: Port: 1 Link ACTIVE
[  243.480429][T19825] tipc: Resetting bearer <eth:syzkaller0>
[  243.507686][T19827] netlink: 'syz.2.6012': attribute type 2 has an invalid length.
[  243.524775][T19827] : entered promiscuous mode
[  243.779558][T19841] IPv6: NLM_F_REPLACE set, but no existing node found!
[  243.847988][T19847] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.988512][T19861] __nla_validate_parse: 2 callbacks suppressed
[  243.988523][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6028'.
[  244.192313][T19890] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  244.473053][T19907] hsr0 speed is unknown, defaulting to 1000
[  244.476862][T19907] lo speed is unknown, defaulting to 1000
[  244.810119][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6054'.
[  245.073258][T19937] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  245.113675][T19941] pim6reg9: entered allmulticast mode
[  245.242575][T19953] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6069'.
[  245.414768][T19971] netlink: 'syz.0.6077': attribute type 1 has an invalid length.
[  245.418420][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6077'.
[  245.421564][T19971] netlink: 45 bytes leftover after parsing attributes in process `syz.0.6077'.
[  245.501292][T19980] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6081'.
[  246.068056][T20009] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  246.264536][T20027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6103'.
[  246.378505][T20039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6109'.
[  246.381394][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6109'.
[  246.406195][T20039] netlink: 'syz.2.6109': attribute type 12 has an invalid length.
[  246.406910][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6110'.
[  246.408806][T20039] netlink: 'syz.2.6109': attribute type 11 has an invalid length.
[  246.462773][T20044] hsr0 speed is unknown, defaulting to 1000
[  246.476379][T20044] lo speed is unknown, defaulting to 1000
[  246.513876][T20048] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  246.741074][T20076] netlink: 'syz.2.6126': attribute type 83 has an invalid length.
[  246.875113][T20086] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  246.930751][T20096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.973371][T20102] vxcan1: entered allmulticast mode
[  246.977426][T20102] vxcan1: left allmulticast mode
[  247.100855][T20118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.698412][T20177] IPVS: Unknown mcast interface: macvlan0
[  248.489382][T20214] netlink: 'syz.2.6187': attribute type 4 has an invalid length.
[  248.492403][T20214] netlink: 'syz.2.6187': attribute type 4 has an invalid length.
[  248.503795][T20214] syzkaller1: entered promiscuous mode
[  248.505789][T20214] syzkaller1: entered allmulticast mode
[  248.958511][T20234] netlink: 'syz.2.6197': attribute type 1 has an invalid length.
[  248.961235][T20234] netlink: 'syz.2.6197': attribute type 1 has an invalid length.
[  249.010649][T20240] openvswitch: netlink: IP tunnel dst address not specified
[  249.230204][T20271] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.478756][T20305] __nla_validate_parse: 5 callbacks suppressed
[  249.478766][T20305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6220'.
[  249.562564][T20312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6232'.
[  249.713825][T20327] netlink: 'syz.2.6240': attribute type 1 has an invalid length.
[  250.157058][T20362] veth1_to_team: left allmulticast mode
[  250.159064][T20362] veth0_vlan: left allmulticast mode
[  250.160928][T20362] syzkaller0: left promiscuous mode
[  250.162660][T20362] syzkaller0: left allmulticast mode
[  250.174308][T20362] vlan3: left promiscuous mode
[  250.176313][T20362] bond5: left promiscuous mode
[  250.178014][T20362] vlan3: left allmulticast mode
[  250.179625][T20362] bond5: left allmulticast mode
[  250.181292][T20362] vlan4: left promiscuous mode
[  250.190987][T20362] veth9: left allmulticast mode
[  250.192733][T20362] macvlan0: left promiscuous mode
[  250.194675][T20362] macvlan0: left allmulticast mode
[  250.198428][T20362] bond9: (slave vti0): Releasing backup interface
[  250.201243][T20362] bridge3: left allmulticast mode
[  250.203011][T20362] veth13: left promiscuous mode
[  250.204726][T20362] macsec1: left promiscuous mode
[  250.209021][T20362] macsec1: left allmulticast mode
[  250.210866][T20362] ipvlan1: left promiscuous mode
[  250.212647][T20362] bridge4: left promiscuous mode
[  250.214345][T20362] bridge4: left allmulticast mode
[  250.217626][T20362] bond10: (slave bridge6): Releasing active interface
[  250.237988][T20370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6258'.
[  250.267266][T20375] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6260'.
[  250.302560][T20370] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  250.310289][T20370] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  250.329318][T20379] macvlan0: entered promiscuous mode
[  250.331116][T20379] macvlan0: entered allmulticast mode
[  250.333046][T20379] bond6: (slave macvlan0): Error -98 calling set_mac_address
[  250.588072][T20414] tipc: Resetting bearer <eth:gre0>
[  250.613607][T20421] netlink: 'syz.0.6281': attribute type 1 has an invalid length.
[  250.616581][T20421] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6281'.
[  250.622243][T20421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6281'.
[  250.784980][T20441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6291'.
[  250.817711][T20445] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  251.372603][T20494] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6314'.
[  251.422117][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'.
[  251.461330][T20508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6321'.
[  251.521733][T20518] netlink: 'syz.2.6326': attribute type 1 has an invalid length.
[  251.762694][T20545] xt_hashlimit: max too large, truncated to 1048576
[  251.769866][T20545] xt_hashlimit: overflow, rate too high: 0
[  251.899194][T20556] netlink: 'syz.1.6344': attribute type 9 has an invalid length.
[  251.914174][T20557] hsr0 speed is unknown, defaulting to 1000
[  251.923797][T20557] lo speed is unknown, defaulting to 1000
[  252.008805][T20568] netlink: 'syz.1.6349': attribute type 2 has an invalid length.
[  252.011576][T20568] netlink: 'syz.1.6349': attribute type 1 has an invalid length.
[  253.213500][T20628] sctp: [Deprecated]: syz.2.6375 (pid 20628) Use of int in max_burst socket option deprecated.
[  253.213500][T20628] Use struct sctp_assoc_value instead
[  253.420150][T20650] xt_hashlimit: size too large, truncated to 1048576
[  253.474616][T20655] tun0: tun_chr_ioctl cmd 1074812117
[  254.833220][T20745] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  254.837915][T20745] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  255.138719][T20753] __nla_validate_parse: 11 callbacks suppressed
[  255.138729][T20753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6434'.
[  255.192395][T20757] ip6gre2: entered allmulticast mode
[  255.356383][T20777] netlink: 844 bytes leftover after parsing attributes in process `syz.1.6445'.
[  255.398224][T20777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6445'.
[  255.552751][T20797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6453'.
[  255.574125][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6450'.
[  255.766615][T20818] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  255.818006][T20826] vlan0: entered promiscuous mode
[  255.819708][T20826] bridge0: entered promiscuous mode
[  255.838842][T20828] sctp: [Deprecated]: syz.2.6467 (pid 20828) Use of struct sctp_assoc_value in delayed_ack socket option.
[  255.838842][T20828] Use struct sctp_sack_info instead
[  255.943061][T20843] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6475'.
[  255.980381][T20840] hsr0 speed is unknown, defaulting to 1000
[  255.983814][T20840] lo speed is unknown, defaulting to 1000
[  256.191776][T20866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6483'.
[  256.195563][T20866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6483'.
[  256.258338][T20872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6485'.
[  256.331804][T20872] bridge10: port 1(veth1) entered blocking state
[  256.333963][T20872] bridge10: port 1(veth1) entered disabled state
[  256.336341][T20872] veth1: entered allmulticast mode
[  256.375716][T20872] veth1: entered promiscuous mode
[  256.382300][T20881] bridge10: port 2(veth0_to_bond) entered blocking state
[  256.398948][T20881] bridge10: port 2(veth0_to_bond) entered disabled state
[  256.401298][T20881] veth0_to_bond: entered allmulticast mode
[  256.404028][T20881] veth0_to_bond: entered promiscuous mode
[  256.421447][T20872] vlan2: entered allmulticast mode
[  256.423330][T20872] bridge10: port 3(vlan2) entered blocking state
[  256.436185][T20872] bridge10: port 3(vlan2) entered disabled state
[  256.439302][T20872] vlan2: entered promiscuous mode
[  256.443139][T20889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6491'.
[  256.447560][T20890] validate_nla: 2 callbacks suppressed
[  256.447573][T20890] netlink: 'syz.2.6492': attribute type 1 has an invalid length.
[  256.478661][T20890] bond11: entered promiscuous mode
[  256.485686][T20890] 8021q: adding VLAN 0 to HW filter on device bond11
[  256.508321][T20890] batadv2: entered promiscuous mode
[  256.510104][T20890] batadv2: entered allmulticast mode
[  256.512669][T20890] 8021q: adding VLAN 0 to HW filter on device batadv2
[  256.526646][T20890] bond11: (slave batadv2): making interface the new active one
[  256.533644][T20890] bond11: (slave batadv2): Enslaving as an active interface with an up link
[  256.764465][T20914] xt_CT: No such helper "syz0"
[  257.250922][T20965] Cannot find del_set index 286 as target
[  257.275947][T20968] netlink: 'syz.1.6520': attribute type 13 has an invalid length.
[  257.278530][T20968] netlink: 'syz.1.6520': attribute type 17 has an invalid length.
[  257.301159][T20968] 8021q: adding VLAN 0 to HW filter on device 
[  257.309098][T20968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  257.353829][T20961] hsr0 speed is unknown, defaulting to 1000
[  257.356893][T20961] lo speed is unknown, defaulting to 1000
[  257.661573][T20992] netlink: 'syz.1.6536': attribute type 10 has an invalid length.
[  257.780155][T21008] x_tables: unsorted entry at hook 3
[  257.922900][T21027] hsr0 speed is unknown, defaulting to 1000
[  257.926847][T21027] lo speed is unknown, defaulting to 1000
[  258.193620][T21051] openvswitch: netlink: Missing key (keys=40, expected=80)
[  258.238467][T21056] netlink: 'syz.2.6561': attribute type 10 has an invalid length.
[  258.394166][T21070] netlink: 'syz.2.6567': attribute type 1 has an invalid length.
[  258.431848][T21072] netlink: 'syz.1.6568': attribute type 3 has an invalid length.
[  259.061943][T21120] xt_limit: Overflow, try lower: 0/0
[  259.413069][T21146] netlink: 'syz.1.6603': attribute type 4 has an invalid length.
[  259.498958][ T5854] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  260.430641][T21196] xt_hashlimit: max too large, truncated to 1048576
[  260.637569][T21222] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  260.670937][T21229] __nla_validate_parse: 12 callbacks suppressed
[  260.670948][T21229] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6639'.
[  261.010792][T21277] netlink: 'syz.2.6662': attribute type 9 has an invalid length.
[  261.013350][T21277] netlink: 'syz.2.6662': attribute type 7 has an invalid length.
[  261.266998][T21308] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.6675'.
[  261.318658][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6672'.
[  261.371343][T21316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6679'.
[  261.468889][T21328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6685'.
[  261.471802][T21328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6685'.
[  261.517649][T21335] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  261.525966][T21335] syzkaller0: entered promiscuous mode
[  261.527753][T21335] syzkaller0: entered allmulticast mode
[  261.559559][T21342] validate_nla: 3 callbacks suppressed
[  261.559569][T21342] netlink: 'syz.1.6691': attribute type 23 has an invalid length.
[  261.942341][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6715'.
[  261.973962][T21397] netlink: 'syz.1.6717': attribute type 2 has an invalid length.
[  261.976668][T21397] netlink: 'syz.1.6717': attribute type 2 has an invalid length.
[  262.009950][T21403] netlink: 'syz.2.6720': attribute type 83 has an invalid length.
[  262.031017][T21405] caif0: entered allmulticast mode
[  262.037246][T21404] caif0: left allmulticast mode
[  262.042676][T21407] xt_policy: output policy not valid in PREROUTING and INPUT
[  262.100036][T21414] netlink: 'syz.1.6725': attribute type 1 has an invalid length.
[  262.626850][T21462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.769913][T21477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6755'.
[  262.794611][T21479] xt_ecn: cannot match TCP bits for non-tcp packets
[  262.853248][T21489] syzkaller0: left promiscuous mode
[  262.855005][T21489] syzkaller0: left allmulticast mode
[  262.880409][T21495] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  262.932016][T21499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.938182][T21499] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  263.049209][T21510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6772'.
[  263.300165][T21531] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6782'.
[  263.303311][T21531] netlink: zone id is out of range
[  263.305138][T21531] netlink: zone id is out of range
[  263.312289][T21531] netlink: zone id is out of range
[  263.315393][T21531] netlink: zone id is out of range
[  263.317017][T21531] netlink: zone id is out of range
[  263.318633][T21531] netlink: zone id is out of range
[  263.320306][T21531] netlink: zone id is out of range
[  263.322011][T21531] netlink: zone id is out of range
[  263.854614][T21560] netlink: 'syz.2.6794': attribute type 1 has an invalid length.
[  264.030122][T21576] gtp1: entered promiscuous mode
[  264.031786][T21576] gtp1: entered allmulticast mode
[  264.158051][T21590] xt_hashlimit: size too large, truncated to 1048576
[  264.283292][T21602] hsr0 speed is unknown, defaulting to 1000
[  264.304355][T21605] netlink: 'syz.2.6809': attribute type 13 has an invalid length.
[  264.327208][T21602] lo speed is unknown, defaulting to 1000
[  264.667729][T21634] ipt_ECN: cannot use operation on non-tcp rule
[  264.753661][T21636] syzkaller0: entered allmulticast mode
[  264.760278][T21636] syzkaller0 (unregistering): left allmulticast mode
[  265.344562][T21683] netlink: 'syz.2.6838': attribute type 27 has an invalid length.
[  265.372006][T21687] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  265.884221][T21741] hsr0 speed is unknown, defaulting to 1000
[  265.889091][T21741] lo speed is unknown, defaulting to 1000
[  265.921022][T21746] __nla_validate_parse: 7 callbacks suppressed
[  265.921032][T21746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6865'.
[  266.490833][T21791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6883'.
[  267.454794][T21815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6894'.
[  267.464726][T21815] hsr_slave_0: left promiscuous mode
[  267.473224][T21815] hsr_slave_1: left promiscuous mode
[  267.567299][T21818] hsr0 speed is unknown, defaulting to 1000
[  267.570482][T21818] lo speed is unknown, defaulting to 1000
[  267.782641][T21839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6905'.
[  268.139841][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6915'.
[  268.858043][T21893] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6932'.
[  268.907611][T21895] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  268.932094][T21895] tipc: Resetting bearer <eth:syzkaller0>
[  268.945853][T21894] tipc: Resetting bearer <eth:syzkaller0>
[  269.893160][T21894] tipc: Disabling bearer <eth:syzkaller0>
[  269.983690][T21916] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  270.020932][T21916] tipc: Resetting bearer <eth:syzkaller0>
[  270.029884][T21915] tipc: Resetting bearer <eth:syzkaller0>
[  271.011518][T21915] tipc: Disabling bearer <eth:syzkaller0>
[  271.127652][T21933] netlink: 'syz.0.6949': attribute type 28 has an invalid length.
[  271.315098][T21955] netlink: 788 bytes leftover after parsing attributes in process `syz.2.6959'.
[  272.029566][T21964] netlink: 'syz.0.6960': attribute type 1 has an invalid length.
[  272.057842][T21964] bond10: (slave geneve3): making interface the new active one
[  272.067595][T21964] bond10: (slave geneve3): Enslaving as an active interface with an up link
[  272.070889][ T5888] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  272.074465][T21964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6960'.
[  272.080983][ T5888] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  272.086108][T21964] 8021q: adding VLAN 0 to HW filter on device bond10
[  272.088766][ T5888] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  272.092517][T21968] smc: removing ib device syz0
[  272.096377][ T5888] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  272.223651][T21973] delete_channel: no stack
[  272.379829][T21983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6970'.
[  272.540663][T21990] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  272.546500][T21990] syzkaller0: entered promiscuous mode
[  272.550624][T21990] syzkaller0: entered allmulticast mode
[  272.758419][T22001] netlink: 'syz.0.6978': attribute type 13 has an invalid length.
[  272.830330][T22008] x_tables: unsorted underflow at hook 4
[  273.087810][   T33] audit: type=1800 audit(1753324689.841:5): pid=22025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6987" name="memory.events" dev="tmpfs" ino=11774 res=0 errno=0
[  273.097258][T22037] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6995'.
[  274.273298][T22089] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  274.377887][T22100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7021'.
[  275.166672][T22125] netlink: 'syz.2.7032': attribute type 1 has an invalid length.
[  275.169265][T22125] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7032'.
[  275.175334][T22125] netlink: 'syz.2.7032': attribute type 1 has an invalid length.
[  275.178008][T22125] netlink: 'syz.2.7032': attribute type 2 has an invalid length.
[  275.352006][T22147] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7042'.
[  275.413301][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7048'.
[  275.429312][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7048'.
[  275.442322][T22159] ip6tnl3: entered promiscuous mode
[  275.444083][T22159] ip6tnl3: entered allmulticast mode
[  275.508178][T22171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7054'.
[  275.655819][T22194] netlink: 'syz.1.7065': attribute type 1 has an invalid length.
[  275.671678][T22194] bond8 (unregistering): Released all slaves
[  275.747474][T22207] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  275.750924][T22207] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  276.339046][T22258] __nla_validate_parse: 4 callbacks suppressed
[  276.339056][T22258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7095'.
[  276.344030][T22258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7095'.
[  276.473535][T22277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7105'.
[  276.477066][T22277] net_ratelimit: 76 callbacks suppressed
[  276.477073][T22277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.550642][T22288] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  276.619121][T22296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7114'.
[  276.622028][T22296] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7114'.
[  276.726777][T22313] xt_l2tp: v2 doesn't support IP mode
[  276.784986][T22322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7126'.
[  276.799358][T22325] tap0: tun_chr_ioctl cmd 21731
[  276.842110][T22331] pim6reg1: entered promiscuous mode
[  276.843927][T22331] pim6reg1: entered allmulticast mode
[  276.947908][T22335] bridge0: entered promiscuous mode
[  276.949626][T22335] bridge0: entered allmulticast mode
[  277.004208][T22343] rdma_rxe: rxe_newlink: failed to add macvlan1
[  277.276926][T22384] xt_hashlimit: size too large, truncated to 1048576
[  277.306775][T22387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7154'.
[  277.355173][T22369] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7147'.
[  277.379479][T22369] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  277.384179][T22369] bond0 (unregistering): Released all slaves
[  277.394627][T22390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7155'.
[  277.399506][T22390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7155'.
[  277.813718][T22433] IPVS: Scheduler module ip_vs_sip not found
[  278.002883][T22458] tipc: New replicast peer: 0.0.0.0
[  278.005182][T22458] tipc: Enabled bearer <udp:syz2>, priority 6
[  278.294501][T22495] netlink: 'syz.1.7205': attribute type 4 has an invalid length.
[  278.396553][T22511] netlink: 'syz.0.7213': attribute type 19 has an invalid length.
[  278.420962][T22516] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  278.473429][T22524] netem: change failed
[  278.571147][T22530] hsr0 speed is unknown, defaulting to 1000
[  278.809024][T22549] bond_slave_1: entered allmulticast mode
[  278.815696][T22549] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  279.104010][T22582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.109022][T22582] syzkaller0: MTU too low for tipc bearer
[  279.110938][T22582] tipc: Disabling bearer <eth:syzkaller0>
[  279.245120][T22594] IPVS: Error connecting to the multicast addr
[  279.306634][T22597] netlink: 'syz.2.7252': attribute type 1 has an invalid length.
[  280.070364][T22661] netlink: 'syz.1.7275': attribute type 10 has an invalid length.
[  280.215478][T22679] xt_CT: You must specify a L4 protocol and not use inversions on it
[  280.320763][T22689] hsr0 speed is unknown, defaulting to 1000
[  281.410002][T22763] netlink: 'syz.1.7317': attribute type 1 has an invalid length.
[  281.412733][T22763] __nla_validate_parse: 21 callbacks suppressed
[  281.412740][T22763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7317'.
[  281.891773][T22805] hsr0 speed is unknown, defaulting to 1000
[  281.990416][T22821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7341'.
[  282.118860][T22834] erspan0: entered promiscuous mode
[  282.294464][T22858] netlink: 'syz.1.7360': attribute type 178 has an invalid length.
[  282.395664][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  282.472371][T22881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7370'.
[  282.476757][T22881] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7370'.
[  282.723637][T22901] netlink: 'syz.0.7379': attribute type 1 has an invalid length.
[  282.726431][T22901] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7379'.
[  284.062011][T22977] 8021q: adding VLAN 0 to HW filter on device bond12
[  284.776926][T22983] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7414'.
[  284.846159][T22985] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7415'.
[  284.880335][T22987] netlink: 134820 bytes leftover after parsing attributes in process `syz.0.7416'.
[  284.933157][T22985]  (unregistering): Released all slaves
[  286.176261][T23079] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7446'.
[  286.333733][T23106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7457'.
[  286.442819][T23120] netem: change failed
[  286.575807][T23127] netlink: 'syz.2.7464': attribute type 1 has an invalid length.
[  286.578872][T23127] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7464'.
[  286.584630][T23127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7464'.
[  287.467882][T23175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7484'.
[  287.470739][T23175] netlink: 'syz.1.7484': attribute type 30 has an invalid length.
[  287.488998][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  287.491873][T23175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7484'.
[  287.494763][T23175] netlink: 'syz.1.7484': attribute type 30 has an invalid length.
[  287.499495][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  287.502114][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  287.504730][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.605601][T23191] pim6reg1: entered promiscuous mode
[  287.607382][T23191] pim6reg1: entered allmulticast mode
[  287.749505][T23213] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.812629][T23222] netlink: 'syz.2.7507': attribute type 1 has an invalid length.
[  287.815158][T23222] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7507'.
[  287.819702][T23222] netlink: 'syz.2.7507': attribute type 1 has an invalid length.
[  287.822264][T23222] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7507'.
[  287.843683][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7505'.
[  288.073759][T23248] SET target dimension over the limit!
[  288.183478][T23264] netlink: 'syz.1.7524': attribute type 4 has an invalid length.
[  288.186253][T23264] netlink: 'syz.1.7524': attribute type 17 has an invalid length.
[  288.225768][T23268] netlink: 'syz.1.7526': attribute type 9 has an invalid length.
[  288.374167][T23278] hsr0 speed is unknown, defaulting to 1000
[  288.560377][T23301] netlink: 'syz.2.7541': attribute type 1 has an invalid length.
[  288.578424][T23301] 8021q: adding VLAN 0 to HW filter on device bond14
[  288.653758][T23310] netlink: 'syz.2.7545': attribute type 6 has an invalid length.
[  288.743425][T23319] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  288.764812][T23319] bond8: entered promiscuous mode
[  288.766679][T23319] bond8: entered allmulticast mode
[  288.768692][T23319] 8021q: adding VLAN 0 to HW filter on device bond8
[  289.051541][T23358] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  289.698847][T23377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7574'.
[  289.877868][T23387] bridge0: entered allmulticast mode
[  290.159488][T23421] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7595'.
[  290.162778][T23421] NCSI netlink: No device for ifindex 246
[  290.191681][T23428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7599'.
[  290.409644][T23457] siw: device registration error -23
[  291.248119][T23562] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  291.396899][T23578] vlan0: entered allmulticast mode
[  291.398921][T23578] gretap0: entered allmulticast mode
[  291.573727][T23596] bond12: entered promiscuous mode
[  291.580239][T23596] 8021q: adding VLAN 0 to HW filter on device bond12
[  291.589618][T23596] 8021q: adding VLAN 0 to HW filter on device bond12
[  291.593519][T23596] bond12: (slave vcan0): The slave device specified does not support setting the MAC address
[  291.600033][T23596] bond12: (slave vcan0): Error -95 calling set_mac_address
[  291.659054][T23603] syzkaller1: entered promiscuous mode
[  291.660867][T23603] syzkaller1: entered allmulticast mode
[  291.763475][T23615] validate_nla: 4 callbacks suppressed
[  291.763484][T23615] netlink: 'syz.1.7685': attribute type 1 has an invalid length.
[  291.795470][T23618] __nla_validate_parse: 5 callbacks suppressed
[  291.795478][T23618] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.7686'.
[  291.800558][T23618] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.7686'.
[  291.804382][T23615] 8021q: adding VLAN 0 to HW filter on device bond9
[  291.815604][T23615] bond9: (slave gretap3): making interface the new active one
[  291.818843][T23615] bond9: (slave gretap3): Enslaving as an active interface with an up link
[  291.845614][T23615] syz.1.7685 (23615) used greatest stack depth: 17848 bytes left
[  291.946728][T23640] hsr0 speed is unknown, defaulting to 1000
[  292.160084][T23672] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7713'.
[  292.172363][T23675] netlink: 'syz.2.7714': attribute type 2 has an invalid length.
[  292.310879][T23686] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7719'.
[  292.320843][T23686] netlink: 'syz.1.7719': attribute type 1 has an invalid length.
[  292.337354][T23686] 8021q: adding VLAN 0 to HW filter on device bond10
[  292.358067][T23686] bond10: (slave gretap4): making interface the new active one
[  292.365787][T23686] bond10: (slave gretap4): Enslaving as an active interface with an up link
[  292.532695][T23713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7731'.
[  292.608589][T23717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7733'.
[  292.612686][T23717] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  292.647855][T23729] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode
[  292.657300][T23729] bond9: (slave gretap3): Releasing active interface
[  292.669230][T23729] bond10: (slave gretap4): Releasing active interface
[  292.688097][T23729] netlink: 'syz.1.7736': attribute type 10 has an invalid length.
[  292.829405][T23739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7741'.
[  292.959744][T23748] hsr0 speed is unknown, defaulting to 1000
[  293.493640][T23762] v: renamed from ip6_vti0
[  293.674614][T23772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7753'.
[  293.694589][T23772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7753'.
[  293.865856][T23787] netlink: 'syz.2.7759': attribute type 83 has an invalid length.
[  294.148804][T23805] xt_socket: unknown flags 0x8
[  294.535651][T23834] netlink: 'syz.2.7780': attribute type 12 has an invalid length.
[  294.740422][T23856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7792'.
[  295.075111][T23905] netlink: 'syz.2.7802': attribute type 16 has an invalid length.
[  295.078081][T23905] netlink: 'syz.2.7802': attribute type 17 has an invalid length.
[  295.099716][T23905] ip6gretap0: left promiscuous mode
[  295.103735][T23905] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.108606][T23905] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.138038][T23905] veth1_vlan: left promiscuous mode
[  295.141045][T23905] veth0_vlan: left promiscuous mode
[  295.143556][T23905] veth0_vlan: entered promiscuous mode
[  295.146411][T23905] veth1_vlan: entered promiscuous mode
[  295.151400][T23905] veth1_macvtap: left promiscuous mode
[  295.154079][T23905] veth0_macvtap: left promiscuous mode
[  295.156885][T23905] veth0_macvtap: entered promiscuous mode
[  295.159601][T23905] veth1_macvtap: entered promiscuous mode
[  295.172936][T23905] 8021q: adding VLAN 0 to HW filter on device bond1
[  295.177953][T23905] 8021q: adding VLAN 0 to HW filter on device bond2
[  295.182698][T23905] 8021q: adding VLAN 0 to HW filter on device bond3
[  295.187230][T23905] 8021q: adding VLAN 0 to HW filter on device batadv1
[  295.192288][T23905] 8021q: adding VLAN 0 to HW filter on device bond4
[  295.204199][T23905] 8021q: adding VLAN 0 to HW filter on device bond5
[  295.217117][T23905] 8021q: adding VLAN 0 to HW filter on device bond6
[  295.224377][T23905] 8021q: adding VLAN 0 to HW filter on device bond7
[  295.314706][T23905] 8021q: adding VLAN 0 to HW filter on device bond8
[  295.324752][T23905] 8021q: adding VLAN 0 to HW filter on device bond9
[  295.341560][T23905] ip6gretap0: entered promiscuous mode
[  295.352718][T23905] 8021q: adding VLAN 0 to HW filter on device bond10
[  295.376922][T23905] 8021q: adding VLAN 0 to HW filter on device bond13
[  295.428655][ T5888] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.431467][ T5888] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.434402][ T5888] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  295.440883][ T5888] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.443648][ T5888] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.448518][ T5888] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  295.453659][ T5888] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.458140][ T5888] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.460897][ T5888] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  295.463761][ T5888] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.473238][ T5888] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.481015][ T5888] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  295.895120][T23967] netlink: 'syz.0.7839': attribute type 11 has an invalid length.
[  295.899785][T23967] netlink: 'syz.0.7839': attribute type 4 has an invalid length.
[  296.112314][T23994] netlink: 'syz.1.7852': attribute type 11 has an invalid length.
[  296.251438][T24006] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  296.254688][T24006] syzkaller0: entered promiscuous mode
[  296.259933][T24006] syzkaller0: entered allmulticast mode
[  296.395077][T24024] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  296.619557][T24047] tipc: Resetting bearer <eth:gre0>
[  296.622208][T24047] tipc: Resetting bearer <eth:gre0>
[  296.645045][T24047] tipc: Resetting bearer <ib:ip6gre0>
[  296.648895][T24047] tipc: Resetting bearer <ib:ip6gre0>
[  296.862345][T24067] __nla_validate_parse: 6 callbacks suppressed
[  296.862356][T24067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7885'.
[  296.880129][T24067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7885'.
[  296.992125][T24079] validate_nla: 1 callbacks suppressed
[  296.992134][T24079] netlink: 'syz.0.7889': attribute type 1 has an invalid length.
[  297.012336][T24079] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7889'.
[  297.016195][T24079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7889'.
[  297.112982][T24092] netlink: 'syz.2.7893': attribute type 4 has an invalid length.
[  297.126923][T24088] netlink: 'syz.2.7893': attribute type 4 has an invalid length.
[  297.702021][T24153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7914'.
[  297.708743][T24153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7914'.
[  297.712512][T24153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7914'.
[  297.717039][T24153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7914'.
[  297.811199][T24159] syzkaller0: Caught tx_queue_len zero misconfig
[  297.813983][T24159] netlink: 9988 bytes leftover after parsing attributes in process `syz.2.7916'.
[  298.044836][T24183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7928'.
[  298.262394][T24205] hsr0 speed is unknown, defaulting to 1000
[  298.325753][ T4019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.335087][ T4019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.361361][T24213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.778161][T24255] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  298.882234][T24268] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) !
[  298.997136][T24271] netlink: 'syz.0.7961': attribute type 7 has an invalid length.
[  298.999675][T24271] netlink: 'syz.0.7961': attribute type 8 has an invalid length.
[  299.002140][T24271] netlink: 'syz.0.7961': attribute type 4 has an invalid length.
[  299.063993][T24288] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  299.067393][T24288] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  299.471902][T24350] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  299.537112][T24355] netlink: 'syz.1.8000': attribute type 1 has an invalid length.
[  299.604997][T24365] batadv0: entered promiscuous mode
[  299.611318][T24365] macvtap1: entered promiscuous mode
[  299.614259][T24365] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  299.630684][T24365] batadv0: left promiscuous mode
[  299.862386][T24399] openvswitch: netlink: Actions may not be safe on all matching packets
[  300.051180][T24423] tap0: tun_chr_ioctl cmd 1074812118
[  300.059315][T24425] !: renamed from dummy0 (while UP)
[  300.116603][T24429] tc_dump_action: action bad kind
[  300.205999][T24444] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  300.338650][T24461] 
[  300.339493][T24461] ======================================================
[  300.341687][T24461] WARNING: possible circular locking dependency detected
[  300.343988][T24461] 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 Not tainted
[  300.346940][T24461] ------------------------------------------------------
[  300.349310][T24461] syz.2.8042/24461 is trying to acquire lock:
[  300.351190][T24461] ffff888020e7c188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  300.354665][T24461] 
[  300.354665][T24461] but task is already holding lock:
[  300.357006][T24461] ffff888020e7c230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  300.360045][T24461] 
[  300.360045][T24461] which lock already depends on the new lock.
[  300.360045][T24461] 
[  300.363288][T24461] 
[  300.363288][T24461] the existing dependency chain (in reverse order) is:
[  300.366059][T24461] 
[  300.366059][T24461] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  300.368508][T24461]        lock_acquire+0x120/0x360
[  300.370100][T24461]        __mutex_lock+0x182/0xe80
[  300.371716][T24461]        refcount_dec_and_mutex_lock+0x30/0xa0
[  300.373660][T24461]        nbd_config_put+0x2c/0x790
[  300.375253][T24461]        nbd_release+0xfe/0x140
[  300.376783][T24461]        bdev_release+0x536/0x650
[  300.378365][T24461]        blkdev_release+0x15/0x20
[  300.379936][T24461]        __fput+0x44c/0xa70
[  300.381377][T24461]        fput_close_sync+0x119/0x200
[  300.383041][T24461]        __x64_sys_close+0x7f/0x110
[  300.384694][T24461]        do_syscall_64+0xfa/0x3b0
[  300.386266][T24461]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.388298][T24461] 
[  300.388298][T24461] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  300.390705][T24461]        lock_acquire+0x120/0x360
[  300.392258][T24461]        __mutex_lock+0x182/0xe80
[  300.393838][T24461]        __del_gendisk+0x129/0x9e0
[  300.395575][T24461]        del_gendisk+0xe8/0x160
[  300.397198][T24461]        nbd_dev_remove_work+0x47/0xe0
[  300.398930][T24461]        process_scheduled_works+0xae1/0x17b0
[  300.400826][T24461]        worker_thread+0x8a0/0xda0
[  300.402474][T24461]        kthread+0x711/0x8a0
[  300.403994][T24461]        ret_from_fork+0x3fc/0x770
[  300.405582][T24461]        ret_from_fork_asm+0x1a/0x30
[  300.407265][T24461] 
[  300.407265][T24461] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  300.409906][T24461]        validate_chain+0xb9b/0x2140
[  300.411562][T24461]        __lock_acquire+0xab9/0xd20
[  300.413261][T24461]        lock_acquire+0x120/0x360
[  300.414881][T24461]        down_write+0x96/0x1f0
[  300.416387][T24461]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  300.418398][T24461]        nbd_start_device+0x16c/0xac0
[  300.420101][T24461]        nbd_genl_connect+0x135b/0x18f0
[  300.421815][T24461]        genl_family_rcv_msg_doit+0x215/0x300
[  300.423795][T24461]        genl_rcv_msg+0x60e/0x790
[  300.425355][T24461]        netlink_rcv_skb+0x208/0x470
[  300.427009][T24461]        genl_rcv+0x28/0x40
[  300.428451][T24461]        netlink_unicast+0x82f/0x9e0
[  300.430112][T24461]        netlink_sendmsg+0x805/0xb30
[  300.431734][T24461]        __sock_sendmsg+0x21c/0x270
[  300.433367][T24461]        ____sys_sendmsg+0x505/0x830
[  300.435015][T24461]        ___sys_sendmsg+0x21f/0x2a0
[  300.436659][T24461]        __x64_sys_sendmsg+0x19b/0x260
[  300.438374][T24461]        do_syscall_64+0xfa/0x3b0
[  300.439976][T24461]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.442005][T24461] 
[  300.442005][T24461] other info that might help us debug this:
[  300.442005][T24461] 
[  300.445124][T24461] Chain exists of:
[  300.445124][T24461]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  300.445124][T24461] 
[  300.449408][T24461]  Possible unsafe locking scenario:
[  300.449408][T24461] 
[  300.451741][T24461]        CPU0                    CPU1
[  300.453447][T24461]        ----                    ----
[  300.455195][T24461]   lock(&nbd->config_lock);
[  300.456674][T24461]                                lock(&disk->open_mutex);
[  300.458847][T24461]                                lock(&nbd->config_lock);
[  300.461001][T24461]   lock(&set->update_nr_hwq_lock);
[  300.462641][T24461] 
[  300.462641][T24461]  *** DEADLOCK ***
[  300.462641][T24461] 
[  300.465140][T24461] 3 locks held by syz.2.8042/24461:
[  300.466811][T24461]  #0: ffffffff8f583e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  300.469387][T24461]  #1: ffffffff8f583c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  300.472205][T24461]  #2: ffff888020e7c230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  300.475312][T24461] 
[  300.475312][T24461] stack backtrace:
[  300.477197][T24461] CPU: 0 UID: 0 PID: 24461 Comm: syz.2.8042 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  300.477207][T24461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  300.477212][T24461] Call Trace:
[  300.477216][T24461]  <TASK>
[  300.477221][T24461]  dump_stack_lvl+0x189/0x250
[  300.477232][T24461]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.477241][T24461]  ? __pfx__printk+0x10/0x10
[  300.477252][T24461]  ? print_lock_name+0xde/0x100
[  300.477262][T24461]  print_circular_bug+0x2ee/0x310
[  300.477274][T24461]  check_noncircular+0x134/0x160
[  300.477284][T24461]  validate_chain+0xb9b/0x2140
[  300.477298][T24461]  __lock_acquire+0xab9/0xd20
[  300.477307][T24461]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  300.477316][T24461]  lock_acquire+0x120/0x360
[  300.477322][T24461]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  300.477332][T24461]  ? kernfs_add_one+0xf0/0x520
[  300.477340][T24461]  down_write+0x96/0x1f0
[  300.477348][T24461]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  300.477358][T24461]  ? __pfx_down_write+0x10/0x10
[  300.477368][T24461]  ? kernfs_add_one+0xf0/0x520
[  300.477376][T24461]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  300.477387][T24461]  ? sysfs_add_file_mode_ns+0x238/0x300
[  300.477397][T24461]  ? sysfs_add_file_mode_ns+0x259/0x300
[  300.477409][T24461]  nbd_start_device+0x16c/0xac0
[  300.477419][T24461]  ? __nla_parse+0x40/0x60
[  300.477451][T24461]  ? device_create_file+0xf4/0x1c0
[  300.477462][T24461]  nbd_genl_connect+0x135b/0x18f0
[  300.477472][T24461]  ? __pfx_nbd_genl_connect+0x10/0x10
[  300.477481][T24461]  ? __nla_parse+0x40/0x60
[  300.477489][T24461]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  300.477500][T24461]  genl_family_rcv_msg_doit+0x215/0x300
[  300.477512][T24461]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  300.477524][T24461]  ? stack_trace_save+0x9c/0xe0
[  300.477536][T24461]  genl_rcv_msg+0x60e/0x790
[  300.477545][T24461]  ? __pfx_genl_rcv_msg+0x10/0x10
[  300.477553][T24461]  ? __pfx_nbd_genl_connect+0x10/0x10
[  300.477562][T24461]  netlink_rcv_skb+0x208/0x470
[  300.477569][T24461]  ? __lock_acquire+0xab9/0xd20
[  300.477575][T24461]  ? __pfx_genl_rcv_msg+0x10/0x10
[  300.477584][T24461]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  300.477592][T24461]  ? down_read+0x1ad/0x2e0
[  300.477600][T24461]  genl_rcv+0x28/0x40
[  300.477607][T24461]  netlink_unicast+0x82f/0x9e0
[  300.477618][T24461]  ? __pfx_netlink_unicast+0x10/0x10
[  300.477627][T24461]  ? netlink_sendmsg+0x642/0xb30
[  300.477633][T24461]  ? skb_put+0x11b/0x210
[  300.477640][T24461]  netlink_sendmsg+0x805/0xb30
[  300.477649][T24461]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.477655][T24461]  ? aa_sock_msg_perm+0x94/0x160
[  300.477663][T24461]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  300.477670][T24461]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.477676][T24461]  __sock_sendmsg+0x21c/0x270
[  300.477686][T24461]  ____sys_sendmsg+0x505/0x830
[  300.477695][T24461]  ? __pfx_____sys_sendmsg+0x10/0x10
[  300.477703][T24461]  ? import_iovec+0x74/0xa0
[  300.477712][T24461]  ___sys_sendmsg+0x21f/0x2a0
[  300.477720][T24461]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.477733][T24461]  ? __fget_files+0x2a/0x420
[  300.477739][T24461]  ? __fget_files+0x3a0/0x420
[  300.477746][T24461]  __x64_sys_sendmsg+0x19b/0x260
[  300.477754][T24461]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  300.477763][T24461]  ? rcu_is_watching+0x15/0xb0
[  300.477771][T24461]  ? do_syscall_64+0xbe/0x3b0
[  300.477779][T24461]  do_syscall_64+0xfa/0x3b0
[  300.477785][T24461]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.477791][T24461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.477798][T24461]  ? exc_page_fault+0x9f/0xf0
[  300.477804][T24461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.477810][T24461] RIP: 0033:0x7fd2a558e9a9
[  300.477819][T24461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.477825][T24461] RSP: 002b:00007fd2a33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.477833][T24461] RAX: ffffffffffffffda RBX: 00007fd2a57b5fa0 RCX: 00007fd2a558e9a9
[  300.477838][T24461] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004
[  300.477844][T24461] RBP: 00007fd2a5610d69 R08: 0000000000000000 R09: 0000000000000000
[  300.477849][T24461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.477853][T24461] R13: 0000000000000000 R14: 00007fd2a57b5fa0 R15: 00007ffe5663ee58
[  300.477861][T24461]  </TASK>
[  300.645932][T24461] nbd1: detected capacity change from 0 to 127
[  300.652531][   T55] block nbd1: Receive control failed (result -104)

VM DIAGNOSIS:
02:38:37  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006e RBX=000000000000006e RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000110f RDI=0000000000001110 RBP=00000000000003f8 RSP=ffffc9000b0f6690
R8 =ffff888107990237 R9 =1ffff11020f32046 R10=dffffc0000000000 R11=ffffffff85463620
R12=dffffc0000000000 R13=ffffffff99aff8d1 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff8546369c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd2a33f66c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fad10718360 CR3=00000000366f6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0af4030002000af2 030a02000af00300
XMM02=100002b00301f810 0001900314048400 XMM03=02e00300100002d0 0300100002c00302
XMM04=0280040100000008 0606015cd2000800 XMM05=0100100002800401 000000080606015c
XMM06=d200080002e00300 100002d003001000 XMM07=02c00302100002b0 0301f81000019003
XMM08=140484000af40300 02000af2030a0200 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88813663b1c0 RCX=ffff888028c28000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000431f6c0 RSP=ffffc9000431f560
R8 =ffffffff8fa22df7 R9 =1ffffffff1f445be R10=dffffc0000000000 R11=fffffbfff1f445bf
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c00e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555561f04500 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe279ce56c0 CR3=0000000023b30000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe279011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
