last executing test programs:

730.134979ms ago: executing program 2 (id=3971):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
unshare(0x20040400)
r0 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r0, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14)

729.965626ms ago: executing program 2 (id=3973):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}, [@generic='\f']}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)

676.525312ms ago: executing program 2 (id=3977):
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
close(0x3)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendfile(r0, r1, 0x0, 0xffffffff000)

676.415395ms ago: executing program 0 (id=3978):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x40f0bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x2c}}, 0x40018)

587.742502ms ago: executing program 0 (id=3980):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

587.557965ms ago: executing program 0 (id=3981):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x40000)

519.314011ms ago: executing program 0 (id=3982):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYRES32=0x0, @ANYBLOB="040013001400030017"], 0x68}}, 0x0)

518.314641ms ago: executing program 2 (id=3983):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
close(0x4)

460.335962ms ago: executing program 0 (id=3984):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
tee(r0, r1, 0xf, 0x0)

460.175134ms ago: executing program 0 (id=3985):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x111)

370.243273ms ago: executing program 2 (id=3986):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

370.045709ms ago: executing program 2 (id=3987):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98)
vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000240)="f9b1", 0x2}], 0x1, 0xf)
splice(r1, 0x0, r2, 0x0, 0xc, 0x4)
write(r0, 0x0, 0x0)

259.818389ms ago: executing program 1 (id=3990):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94)

259.637488ms ago: executing program 1 (id=3991):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xe, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

208.734598ms ago: executing program 1 (id=3992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0xff}]}}}]}, 0x40}}, 0x0)

208.485008ms ago: executing program 1 (id=3993):
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x2160)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

79.907741ms ago: executing program 1 (id=3994):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/242, 0xf2}, {0x0}], 0x2}, 0x7fff}], 0x1, 0x400000ea, 0x0)

0s ago: executing program 1 (id=3995):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYRES32=r1, @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffd8d)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)
connect$rose(r9, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d57002000500", @ANYRES32, @ANYBLOB, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45861' (ED25519) to the list of known hosts.
syzkaller login: [   50.498172][ T5738] cgroup: Unknown subsys name 'net'
[   50.678055][ T5738] cgroup: Unknown subsys name 'cpuset'
[   50.685476][ T5738] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.890566][ T5738] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.722451][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.725602][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.728470][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.734421][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.738118][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.763882][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.768528][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.772011][ T5197] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.778922][ T5197] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.782591][ T5197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.785992][ T5197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.790108][ T5197] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.794296][ T5197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.806917][ T5197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.810471][ T5197] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.959483][ T5800] chnl_net:caif_netlink_parms(): no params data found
[   56.069605][ T5804] chnl_net:caif_netlink_parms(): no params data found
[   56.092705][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.096145][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.099099][ T5800] bridge_slave_0: entered allmulticast mode
[   56.102132][ T5800] bridge_slave_0: entered promiscuous mode
[   56.120794][ T5805] chnl_net:caif_netlink_parms(): no params data found
[   56.134050][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.136897][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.139181][ T5800] bridge_slave_1: entered allmulticast mode
[   56.142079][ T5800] bridge_slave_1: entered promiscuous mode
[   56.178926][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.199774][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.240588][ T5800] team0: Port device team_slave_0 added
[   56.259784][ T5800] team0: Port device team_slave_1 added
[   56.262191][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.265026][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.267460][ T5804] bridge_slave_0: entered allmulticast mode
[   56.270437][ T5804] bridge_slave_0: entered promiscuous mode
[   56.312401][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.315398][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.318301][ T5804] bridge_slave_1: entered allmulticast mode
[   56.321684][ T5804] bridge_slave_1: entered promiscuous mode
[   56.326611][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.329391][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.339588][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.344292][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.346505][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.348739][ T5805] bridge_slave_0: entered allmulticast mode
[   56.351296][ T5805] bridge_slave_0: entered promiscuous mode
[   56.365562][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.367840][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.376225][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.385124][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.387473][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.389725][ T5805] bridge_slave_1: entered allmulticast mode
[   56.392592][ T5805] bridge_slave_1: entered promiscuous mode
[   56.409569][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.422264][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.449221][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.468807][ T5804] team0: Port device team_slave_0 added
[   56.471806][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.485563][ T5800] hsr_slave_0: entered promiscuous mode
[   56.487893][ T5800] hsr_slave_1: entered promiscuous mode
[   56.491822][ T5804] team0: Port device team_slave_1 added
[   56.516888][ T5805] team0: Port device team_slave_0 added
[   56.518974][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.521107][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.530854][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.541523][ T5805] team0: Port device team_slave_1 added
[   56.544331][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.547013][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.558816][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.591736][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.594819][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.602653][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.607674][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.609879][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.618159][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.656051][ T5804] hsr_slave_0: entered promiscuous mode
[   56.658334][ T5804] hsr_slave_1: entered promiscuous mode
[   56.660410][ T5804] debugfs: 'hsr0' already exists in 'hsr'
[   56.662247][ T5804] Cannot create hsr debugfs directory
[   56.695670][ T5805] hsr_slave_0: entered promiscuous mode
[   56.697954][ T5805] hsr_slave_1: entered promiscuous mode
[   56.700101][ T5805] debugfs: 'hsr0' already exists in 'hsr'
[   56.701822][ T5805] Cannot create hsr debugfs directory
[   56.876648][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.887947][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.895067][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.908048][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.947160][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.954996][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.961194][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.975991][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.978576][ T5800] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.981662][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.984535][ T5800] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.991921][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.998302][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.002325][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.047935][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.054841][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.059454][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.067399][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.131012][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.147735][ T5800] 8021q: adding VLAN 0 to HW filter on device team0
[   57.157807][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.160146][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.168877][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.171095][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.176887][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.207359][ T5804] 8021q: adding VLAN 0 to HW filter on device team0
[   57.211427][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.225632][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.228110][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.239299][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.242046][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.251823][ T5805] 8021q: adding VLAN 0 to HW filter on device team0
[   57.264598][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.266912][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.270798][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.273059][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.346292][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.377161][ T5800] veth0_vlan: entered promiscuous mode
[   57.386841][ T5800] veth1_vlan: entered promiscuous mode
[   57.431661][ T5800] veth0_macvtap: entered promiscuous mode
[   57.442818][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.451565][ T5800] veth1_macvtap: entered promiscuous mode
[   57.463500][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.473080][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.490089][ T5804] veth0_vlan: entered promiscuous mode
[   57.493932][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.500506][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.504844][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.507498][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.510152][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.516296][ T5804] veth1_vlan: entered promiscuous mode
[   57.550437][ T5804] veth0_macvtap: entered promiscuous mode
[   57.567863][ T5805] veth0_vlan: entered promiscuous mode
[   57.577030][ T5805] veth1_vlan: entered promiscuous mode
[   57.580171][ T5804] veth1_macvtap: entered promiscuous mode
[   57.602780][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.612144][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.617571][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.623671][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.646900][ T5805] veth0_macvtap: entered promiscuous mode
[   57.653513][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.658349][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.661767][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.665937][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.669589][ T5805] veth1_macvtap: entered promiscuous mode
[   57.695369][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.706426][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.717495][ T5800] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.737669][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.762739][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.767916][ T5197] Bluetooth: hci0: command tx timeout
[   57.791099][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.797070][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.800569][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.819258][ T5866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.822171][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.834793][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.842145][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.845567][ T5197] Bluetooth: hci2: command tx timeout
[   57.846533][ T5808] Bluetooth: hci1: command tx timeout
[   57.899822][ T5868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4'.
[   57.908657][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.912802][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.973376][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.980488][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.006409][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.010459][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.208765][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'.
[   58.214804][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   58.243866][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'.
[   58.253296][ T5851] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   58.255989][ T5851] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   58.258848][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   58.266338][ T5851] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   58.271618][ T5889] Zero length message leads to an empty skb
[   58.274053][ T5851] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   58.494089][ T5907] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET)
[   58.621548][ T5916] syzkaller0: entered promiscuous mode
[   58.624967][ T5916] syzkaller0: entered allmulticast mode
[   58.938229][ T5924] Illegal XDP return value 4294967274 on prog  (id 3) dev N/A, expect packet loss!
[   59.038423][ T5930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.24'.
[   59.318526][ T5946] sctp: [Deprecated]: syz.2.32 (pid 5946) Use of struct sctp_assoc_value in delayed_ack socket option.
[   59.318526][ T5946] Use struct sctp_sack_info instead
[   59.400443][ T5950] netlink: 104 bytes leftover after parsing attributes in process `syz.2.33'.
[   59.501817][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'.
[   59.516407][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'.
[   59.521726][ T5960] netlink: 'syz.0.38': attribute type 14 has an invalid length.
[   59.528601][ T5960] netlink: 'syz.0.38': attribute type 12 has an invalid length.
[   59.565960][ T5960] netlink: 'syz.0.38': attribute type 14 has an invalid length.
[   59.568261][ T5960] netlink: 'syz.0.38': attribute type 12 has an invalid length.
[   59.605806][ T5968] syzkaller0: entered promiscuous mode
[   59.607665][ T5968] syzkaller0: entered allmulticast mode
[   59.853366][ T5808] Bluetooth: hci0: command tx timeout
[   59.924952][ T5808] Bluetooth: hci1: command tx timeout
[   59.926742][ T5808] Bluetooth: hci2: command tx timeout
[   59.952677][ T5994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.435773][ T6019] bridge0: port 3(gretap0) entered blocking state
[   60.438639][ T6019] bridge0: port 3(gretap0) entered disabled state
[   60.441365][ T6019] gretap0: entered allmulticast mode
[   60.446570][ T6019] gretap0: entered promiscuous mode
[   60.449253][ T6019] bridge0: port 3(gretap0) entered blocking state
[   60.451873][ T6019] bridge0: port 3(gretap0) entered forwarding state
[   60.556021][ T6026] netlink: 'syz.2.68': attribute type 2 has an invalid length.
[   60.726310][ T6036] gretap0: left allmulticast mode
[   60.727896][ T6036] gretap0: left promiscuous mode
[   60.729563][ T6036] bridge0: port 3(gretap0) entered disabled state
[   60.738999][ T6036] bridge_slave_0: left allmulticast mode
[   60.740888][ T6036] bridge_slave_0: left promiscuous mode
[   60.742817][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.749523][ T6036] bridge_slave_1: left allmulticast mode
[   60.751338][ T6036] bridge_slave_1: left promiscuous mode
[   60.754400][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.759857][ T6036] bond0: (slave bond_slave_0): Releasing backup interface
[   60.768723][ T6036] bond0: (slave bond_slave_1): Releasing backup interface
[   60.778117][ T6036] team0: Port device team_slave_0 removed
[   60.796065][ T6036] team0: Port device team_slave_1 removed
[   60.798989][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.801824][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.816831][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.819921][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.826517][ T6036] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   61.489617][   T10] IPVS: starting estimator thread 0...
[   61.584218][ T6090] IPVS: using max 48 ests per chain, 115200 per kthread
[   62.003456][ T5197] Bluetooth: hci2: command tx timeout
[   62.003807][ T5808] Bluetooth: hci1: command tx timeout
[   62.505765][ T6188] syzkaller0: entered promiscuous mode
[   62.507552][ T6188] syzkaller0: entered allmulticast mode
[   62.641384][ T6203] ip6tnl1: entered allmulticast mode
[   62.698779][ T6207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.756492][ T6207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.770526][ T6215] macvlan2: entered promiscuous mode
[   62.772733][ T6215] macvlan2: entered allmulticast mode
[   62.779465][ T6215] veth1_to_batadv: entered allmulticast mode
[   62.835349][ T6207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.876356][ T6207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.952171][ T5851] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.969374][ T5851] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.981265][ T5851] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.994814][ T5851] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.210720][ T6231] __nla_validate_parse: 6 callbacks suppressed
[   63.210736][ T6231] netlink: 724 bytes leftover after parsing attributes in process `syz.1.127'.
[   63.218963][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.127'.
[   63.222473][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.127'.
[   63.226107][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.127'.
[   63.759820][ T6265] block nbd0: not configured, cannot reconfigure
[   63.888696][ T6277] IPVS: Scheduler module ip_vs_ not found
[   63.891442][ T6277] IPVS: length: 24 != 73752
[   64.007783][ T6288] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   64.017880][ T6288] bond2 (unregistering): Released all slaves
[   64.083383][ T5808] Bluetooth: hci2: command tx timeout
[   64.083649][ T5197] Bluetooth: hci1: command tx timeout
[   64.156481][ T6300] netlink: 'syz.2.159': attribute type 13 has an invalid length.
[   64.158826][ T6300] netlink: 'syz.2.159': attribute type 17 has an invalid length.
[   64.599322][ T6300] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.606305][ T6300] 8021q: adding VLAN 0 to HW filter on device team0
[   64.614812][ T6300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.622597][ T5851] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.630723][ T5851] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.637536][ T6338] netlink: 616 bytes leftover after parsing attributes in process `syz.1.167'.
[   64.646214][ T5851] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.655445][ T5851] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.752232][ T6350] netlink: 'syz.0.173': attribute type 1 has an invalid length.
[   64.755605][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'.
[   64.843221][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'.
[   64.910328][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.913692][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.998496][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.005480][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.084499][ T5851] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.087836][ T5851] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.098928][ T5851] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.101772][ T5851] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.314875][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'.
[   65.391987][ T6397] syzkaller0: entered promiscuous mode
[   65.394391][ T6397] syzkaller0: entered allmulticast mode
[   65.405197][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.372467][ T6453] warning: `syz.0.223' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.969334][ T6486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.239'.
[   66.988557][ T6487] bridge1: entered promiscuous mode
[   66.990440][ T6487] bridge1: entered allmulticast mode
[   67.008507][ T6487] team0: Port device bridge1 added
[   67.018441][ T6487] bridge0: port 1(team0) entered blocking state
[   67.021274][ T6487] bridge0: port 1(team0) entered disabled state
[   67.024063][ T6487] team0: entered allmulticast mode
[   67.027989][ T6487] team0: entered promiscuous mode
[   67.075044][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.243'.
[   67.344509][ T6514] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   67.696580][ T6551] ip6tnl2: entered promiscuous mode
[   67.698301][ T6551] ip6tnl2: entered allmulticast mode
[   68.647603][ T6594] Bluetooth: MGMT ver 1.23
[   68.686749][ T6597] __nla_validate_parse: 1 callbacks suppressed
[   68.686763][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'.
[   68.896981][ T6610] IPv6: NLM_F_REPLACE set, but no existing node found!
[   69.652373][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'.
[   69.655258][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'.
[   69.890355][ T6677] trusted_key: syz.2.318 sent an empty control message without MSG_MORE.
[   70.377297][ T6719] IPVS: Scheduler module ip_vs_sip not found
[   70.718967][ T6746] xt_hashlimit: size too large, truncated to 1048576
[   70.888964][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'.
[   70.892901][ T6767] syzkaller0: entered promiscuous mode
[   70.895711][ T6767] syzkaller0: entered allmulticast mode
[   72.719090][ T6848] netlink: 'syz.1.395': attribute type 1 has an invalid length.
[   72.732661][ T6848] netlink: 'syz.1.395': attribute type 4 has an invalid length.
[   72.741630][ T6848] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.395'.
[   72.989318][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'.
[   72.995676][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'.
[   72.998469][ T6869] netlink: 'syz.1.405': attribute type 6 has an invalid length.
[   73.009768][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.012673][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'.
[   73.015843][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.018536][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.021115][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.023980][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'.
[   73.026964][ T6869] netlink: 'syz.1.405': attribute type 6 has an invalid length.
[   73.089565][ T6874] netlink: 48 bytes leftover after parsing attributes in process `syz.1.407'.
[   73.095894][ T6874] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   73.133764][ T6876] netlink: 'syz.1.408': attribute type 14 has an invalid length.
[   73.164192][ T6876] netlink: 'syz.1.408': attribute type 14 has an invalid length.
[   73.695942][ T6910] syzkaller0: entered promiscuous mode
[   73.697823][ T6910] syzkaller0: entered allmulticast mode
[   73.774265][  T782] cfg80211: failed to load regulatory.db
[   73.928560][ T6923] __nla_validate_parse: 2 callbacks suppressed
[   73.928577][ T6923] netlink: 220 bytes leftover after parsing attributes in process `syz.2.431'.
[   74.262732][ T6949] netlink: 56 bytes leftover after parsing attributes in process `syz.2.432'.
[   75.357674][ T7007] sctp: [Deprecated]: syz.0.464 (pid 7007) Use of int in max_burst socket option.
[   75.357674][ T7007] Use struct sctp_assoc_value instead
[   75.437605][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'.
[   75.668894][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'.
[   75.742628][ T7049] tipc: Started in network mode
[   75.744760][ T7049] tipc: Node identity , cluster identity 4711
[   75.746813][ T7049] tipc: Failed to obtain node identity
[   75.748755][ T7049] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[   76.053762][ T7081] openvswitch: netlink: Message has 16 unknown bytes.
[   76.057409][ T7080] syzkaller0: entered promiscuous mode
[   76.059254][ T7080] syzkaller0: entered allmulticast mode
[   76.131237][ T7076] syzkaller1: entered promiscuous mode
[   76.143262][ T7076] syzkaller1: entered allmulticast mode
[   76.319635][ T7100] syzkaller0: entered promiscuous mode
[   76.321422][ T7100] syzkaller0: entered allmulticast mode
[   76.468159][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'.
[   76.646721][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   76.650081][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   76.850211][ T7149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.858733][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.961034][ T7157] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.533'.
[   76.967047][ T7157] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[   77.000168][ T7159] tipc: Started in network mode
[   77.002248][ T7159] tipc: Node identity 865306f4b349, cluster identity 4711
[   77.005753][ T7159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.026394][ T7159] syzkaller0: entered promiscuous mode
[   77.028202][ T7159] syzkaller0: entered allmulticast mode
[   77.030372][ T7159] tipc: Resetting bearer <eth:syzkaller0>
[   77.035570][ T7158] tipc: Resetting bearer <eth:syzkaller0>
[   77.702611][ T7158] tipc: Disabling bearer <eth:syzkaller0>
[   77.813114][ T7172] syzkaller0: entered promiscuous mode
[   77.814995][ T7172] syzkaller0: entered allmulticast mode
[   77.820470][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'.
[   77.826712][ T7174] tipc: Invalid UDP bearer configuration
[   77.826744][ T7174] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   78.152794][ T7188] syzkaller1: entered promiscuous mode
[   78.159851][ T7188] syzkaller1: entered allmulticast mode
[   78.361672][ T5815] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.368093][ T5815] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.373364][ T5815] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.376447][ T5815] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.649377][ T7259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.577'.
[   79.842342][ T7263] syzkaller0: entered promiscuous mode
[   79.844752][ T7263] syzkaller0: entered allmulticast mode
[   79.948274][ T7269] bond1: Unable to set down delay as MII monitoring is disabled
[   79.952418][ T7269] bond1 (unregistering): Released all slaves
[   80.061187][ T7277] xt_hashlimit: size too large, truncated to 1048576
[   80.165245][ T7281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.586'.
[   80.230095][ T7283] macvlan0: entered promiscuous mode
[   80.238189][ T7283] netlink: 'syz.2.587': attribute type 2 has an invalid length.
[   80.300290][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.591'.
[   80.456356][ T7303] netlink: 'syz.1.597': attribute type 3 has an invalid length.
[   80.459496][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'.
[   80.494840][ T7305] syzkaller0: entered promiscuous mode
[   80.496687][ T7305] syzkaller0: entered allmulticast mode
[   80.581249][ T7316] netlink: 72 bytes leftover after parsing attributes in process `syz.1.603'.
[   80.585315][ T7316] netlink: 56 bytes leftover after parsing attributes in process `syz.1.603'.
[   81.276397][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'.
[   81.279105][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'.
[   81.314644][ T7333] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) !
[   81.783801][ T7378] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[   81.888573][ T7389] netlink: 'syz.1.636': attribute type 1 has an invalid length.
[   81.891620][ T7389] netlink: 224 bytes leftover after parsing attributes in process `syz.1.636'.
[   82.124880][ T7403] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma?
[   82.175774][ T7405] tipc: Started in network mode
[   82.177448][ T7405] tipc: Node identity fee9ee255df, cluster identity 4711
[   82.180294][ T7405] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.188225][ T7405] syzkaller0: entered promiscuous mode
[   82.192228][ T7405] syzkaller0: entered allmulticast mode
[   82.208269][ T7405] tipc: Resetting bearer <eth:syzkaller0>
[   82.211087][ T7404] tipc: Resetting bearer <eth:syzkaller0>
[   82.217974][ T7404] tipc: Disabling bearer <eth:syzkaller0>
[   82.434159][ T7433] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[   82.539009][ T7444] netlink: 68 bytes leftover after parsing attributes in process `syz.1.658'.
[   82.727211][ T7468] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   83.417649][ T7549] syzkaller1: entered promiscuous mode
[   83.419791][ T7549] syzkaller1: entered allmulticast mode
[   84.063283][ T7590] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   85.059555][ T7655] __nla_validate_parse: 3 callbacks suppressed
[   85.059568][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.755'.
[   85.798395][ T7689] netlink: 'syz.1.770': attribute type 1 has an invalid length.
[   85.810706][ T7689] bond2: entered promiscuous mode
[   85.812600][ T7689] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.824926][ T7689] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.827268][ T7689] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[   85.830549][ T7689] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   85.835872][ T7689] bond2: (slave vti0): making interface the new active one
[   85.838333][ T7689] vti0: entered promiscuous mode
[   85.840775][ T7689] bond2: (slave vti0): Enslaving as an active interface with an up link
[   86.896804][ T7718] netlink: 'syz.1.782': attribute type 1 has an invalid length.
[   86.966713][ T7720] netlink: 'syz.1.783': attribute type 2 has an invalid length.
[   86.974427][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'.
[   86.983281][ T7720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.057354][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'.
[   87.338632][ T7754] ip6_vti0: entered promiscuous mode
[   87.341336][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'.
[   87.372265][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.802'.
[   87.374694][ T7769] netlink: 'syz.1.803': attribute type 39 has an invalid length.
[   87.386973][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'.
[   87.698801][ T7788] netlink: 'syz.0.811': attribute type 7 has an invalid length.
[   87.725925][ T7793] vlan2: entered promiscuous mode
[   87.727492][ T7793] bond0: entered promiscuous mode
[   87.729117][ T7793] bond_slave_0: entered promiscuous mode
[   87.730933][ T7793] bond_slave_1: entered promiscuous mode
[   87.979530][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'.
[   88.150371][ T7839] netlink: 'syz.1.834': attribute type 2 has an invalid length.
[   88.180729][ T7841] syzkaller0: entered promiscuous mode
[   88.182544][ T7841] syzkaller0: entered allmulticast mode
[   88.202652][ T7841] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.205870][ T7840] tipc: Resetting bearer <eth:syzkaller0>
[   88.219012][ T7840] tipc: Disabling bearer <eth:syzkaller0>
[   88.257427][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.838'.
[   88.545179][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[   89.798566][ T7910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.868'.
[   90.372090][ T7933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   90.401399][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.404489][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.461653][ T7945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.467571][ T7945] netlink: 'syz.0.882': attribute type 1 has an invalid length.
[   90.495506][ T7945] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.516518][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.882'.
[   90.551542][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'.
[   90.612284][ T7945] bond1: (slave dummy0): making interface the new active one
[   90.615576][ T7945] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   90.635629][ T7945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.639715][ T7965] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   90.697147][ T7971] netlink: 3 bytes leftover after parsing attributes in process `syz.1.892'.
[   90.699975][ T7971] netlink: 3 bytes leftover after parsing attributes in process `syz.1.892'.
[   90.910019][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.903'.
[   91.128097][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'.
[   91.341260][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'.
[   91.346129][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'.
[   91.559661][ T8055] syzkaller1: entered promiscuous mode
[   91.561529][ T8055] syzkaller1: entered allmulticast mode
[   91.692103][ T8059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.775178][ T8067] hsr0: entered promiscuous mode
[   91.777249][ T8066] hsr0: left promiscuous mode
[   91.817453][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.940'.
[   91.821019][ T8073] netlink: 60 bytes leftover after parsing attributes in process `syz.2.940'.
[   91.887440][ T8080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.906454][ T8083] syzkaller0: entered promiscuous mode
[   91.908578][ T8083] syzkaller0: entered allmulticast mode
[   92.250971][ T8134] macvlan0: left promiscuous mode
[   92.252602][ T8134] netlink: 'syz.2.963': attribute type 2 has an invalid length.
[   93.208085][ T8194] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   93.289636][ T8208] netlink: 'syz.0.996': attribute type 15 has an invalid length.
[   93.515804][ T8241] syzkaller1: entered promiscuous mode
[   93.519274][ T8241] syzkaller1: entered allmulticast mode
[   93.620911][ T8255] netlink: 'syz.2.1010': attribute type 1 has an invalid length.
[   93.691090][ T8261] tipc: Started in network mode
[   93.693060][ T8261] tipc: Node identity , cluster identity 4711
[   93.700006][ T8261] tipc: Failed to set node id, please configure manually
[   93.705962][ T8261] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   93.887565][ T8285] bridge0: entered allmulticast mode
[   93.910466][ T8285] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   94.265937][ T8337] netlink: 'syz.0.1030': attribute type 10 has an invalid length.
[   94.499118][ T8359] veth0_virt_wifi: entered allmulticast mode
[   94.502286][ T8359] veth0_virt_wifi: left allmulticast mode
[   94.576207][ T8364] bond0: entered promiscuous mode
[   94.578113][ T8364] bond_slave_0: entered promiscuous mode
[   94.580047][ T8364] bond_slave_1: entered promiscuous mode
[   94.583050][ T8364] bond0: left promiscuous mode
[   94.586374][ T8364] bond_slave_0: left promiscuous mode
[   94.588241][ T8364] bond_slave_1: left promiscuous mode
[   94.993552][ T8380] netlink: 'syz.0.1049': attribute type 39 has an invalid length.
[   95.255802][ T8394] netlink: 'syz.0.1056': attribute type 1 has an invalid length.
[   95.258248][ T8394] netlink: 'syz.0.1056': attribute type 6 has an invalid length.
[   95.260959][ T8394] netlink: 'syz.0.1056': attribute type 3 has an invalid length.
[   95.536596][ T8423] __nla_validate_parse: 12 callbacks suppressed
[   95.536612][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'.
[   95.551278][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1069'.
[   95.598578][ T8431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.600877][ T8431] IPv6: NLM_F_CREATE should be set when creating new route
[   96.072922][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'.
[   96.080473][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'.
[   96.246263][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[   96.272968][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1095'.
[   96.281263][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1095'.
[   96.492379][ T5220] IPVS: starting estimator thread 0...
[   96.583626][ T8498] IPVS: using max 81 ests per chain, 194400 per kthread
[   96.916848][ T8525] syzkaller0: entered promiscuous mode
[   96.918816][ T8525] syzkaller0: entered allmulticast mode
[   97.899855][ T8546] openvswitch: netlink: Actions may not be safe on all matching packets
[   98.256875][ T8557] netlink: 'syz.0.1125': attribute type 1 has an invalid length.
[   98.672063][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'.
[   98.724018][ T8576] syzkaller0: entered promiscuous mode
[   98.725711][ T8576] syzkaller0: entered allmulticast mode
[   98.734304][ T8576] tipc: Started in network mode
[   98.735874][ T8576] tipc: Node identity d250de119e22, cluster identity 4711
[   98.739054][ T8576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.741868][ T8575] tipc: Resetting bearer <eth:syzkaller0>
[   98.756255][ T8575] tipc: Disabling bearer <eth:syzkaller0>
[   98.837883][ T8584] netlink: zone id is out of range
[   98.839509][ T8584] netlink: zone id is out of range
[   98.841309][ T8584] netlink: zone id is out of range
[   98.843828][ T8584] netlink: zone id is out of range
[   98.846638][ T8584] netlink: zone id is out of range
[   98.849464][ T8584] netlink: zone id is out of range
[   98.851438][ T8584] netlink: zone id is out of range
[   98.855507][ T8584] netlink: zone id is out of range
[   98.885002][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'.
[   99.332100][ T8632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1158'.
[   99.412802][ T8644] netlink: 'syz.1.1164': attribute type 2 has an invalid length.
[   99.429145][ T8644] l24): entered promiscuous mode
[   99.456266][ T8647] net_ratelimit: 337 callbacks suppressed
[   99.456277][ T8647] openvswitch: netlink: Missing valid actions attribute.
[   99.463514][ T8647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.461413][ T8682] netlink: 'syz.2.1178': attribute type 3 has an invalid length.
[  100.488180][ T8682] block nbd2: NBD_DISCONNECT
[  100.501318][ T8682] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  100.521430][ T8682] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  100.579585][ T8689] bridge0: left allmulticast mode
[  100.605644][ T8689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.621869][ T8696] __nla_validate_parse: 2 callbacks suppressed
[  100.621886][ T8696] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1184'.
[  100.668258][ T8702] syzkaller0: entered promiscuous mode
[  100.670052][ T8702] syzkaller0: entered allmulticast mode
[  100.715787][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1187'.
[  100.865613][ T8717] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1189'.
[  100.945537][ T8724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1192'.
[  101.639309][ T8783] bridge0: entered promiscuous mode
[  101.641301][ T8783] vlan2: entered promiscuous mode
[  101.680596][ T8787] xt_hashlimit: size too large, truncated to 1048576
[  102.011992][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'.
[  102.126235][ T8831] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1233'.
[  102.612342][ T8877] syzkaller0: entered promiscuous mode
[  102.617395][ T8877] syzkaller0: entered allmulticast mode
[  102.623373][ T8877] 0: reclassify loop, rule prio 0, protocol 700
[  102.685539][ T8887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.742070][ T8891] netlink: 'syz.1.1257': attribute type 1 has an invalid length.
[  102.748011][ T8891] netlink: 'syz.1.1257': attribute type 2 has an invalid length.
[  103.186201][ T8926] gretap1: entered promiscuous mode
[  103.194208][ T8926] batman_adv: batadv0: Adding interface: gretap1
[  103.196285][ T8926] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  103.203021][ T8926] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  103.805896][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'.
[  104.477208][ T8985] No such timeout policy "syz0"
[  104.835349][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1313'.
[  104.898291][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'.
[  105.232417][ T9064] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1334'.
[  105.476478][ T9083] netlink: 'syz.2.1342': attribute type 11 has an invalid length.
[  105.618590][ T9093] netlink: ct family unspecified
[  105.620953][ T9093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.286638][ T9121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.649459][ T9141] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  106.860350][ T9156] syzkaller0: entered promiscuous mode
[  106.862248][ T9156] syzkaller0: entered allmulticast mode
[  106.880030][ T9156] tc action pedit offset 128 out of bounds
[  110.227105][ T9205] IPVS: stopping backup sync thread 7433 ...
[  110.470619][ T9226] netlink: 'syz.1.1403': attribute type 29 has an invalid length.
[  110.480163][ T9226] netlink: 'syz.1.1403': attribute type 29 has an invalid length.
[  110.561482][ T9232] __nla_validate_parse: 1 callbacks suppressed
[  110.561498][ T9232] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1408'.
[  110.656793][ T9236] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1410'.
[  110.693940][ T9238] veth1: entered allmulticast mode
[  110.862361][ T9249] veth1: left allmulticast mode
[  110.935051][ T9249] bond2: left promiscuous mode
[  110.936810][ T9249] vti0: left promiscuous mode
[  111.889615][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'.
[  111.926932][   T56] block nbd0: Receive control failed (result -1)
[  112.241246][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'.
[  112.250281][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'.
[  112.254568][ T9327] erspan0: entered promiscuous mode
[  112.257016][ T9327] gretap0: entered promiscuous mode
[  112.260227][ T9327] hsr1: entered allmulticast mode
[  112.261834][ T9327] erspan0: entered allmulticast mode
[  112.263997][ T9327] gretap0: entered allmulticast mode
[  112.342798][ T9340] netlink: 'syz.2.1453': attribute type 21 has an invalid length.
[  112.346470][ T9340] netlink: 'syz.2.1453': attribute type 20 has an invalid length.
[  112.520608][ T9352] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1456'.
[  112.637946][ T9364] xt_hashlimit: size too large, truncated to 1048576
[  112.640627][ T9364] xt_hashlimit: max too large, truncated to 1048576
[  112.786533][ T9371] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  112.790075][ T9371] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  113.681224][ T9429] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  113.790057][ T9441] xt_connbytes: Forcing CT accounting to be enabled
[  114.887608][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1516'.
[  114.998869][ T9500] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1521'.
[  115.001751][ T9500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.104454][ T9518] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1529'.
[  115.107594][ T9518] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  115.229758][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1529'.
[  115.232583][ T9537] openvswitch: netlink: Flow key attr not present in new flow.
[  115.551662][ T9567] ip6gre1: entered promiscuous mode
[  115.556287][ T9567] ip6gre1: entered allmulticast mode
[  115.568979][ T9567] netlink: 'syz.2.1549': attribute type 6 has an invalid length.
[  115.572037][ T9567] __nla_validate_parse: 2 callbacks suppressed
[  115.572048][ T9567] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1549'.
[  115.617139][ T9567] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  115.620171][ T9567] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  117.228404][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'.
[  117.461122][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1587'.
[  117.661312][ T9676] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  117.665222][ T9676] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  117.668679][ T9676] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  118.232874][ T9708] syzkaller0: entered promiscuous mode
[  118.237344][ T9708] syzkaller0: entered allmulticast mode
[  118.565885][ T9733] netlink: 'syz.1.1625': attribute type 1 has an invalid length.
[  118.586184][ T9733] 8021q: adding VLAN 0 to HW filter on device bond3
[  118.606358][ T9733] 8021q: adding VLAN 0 to HW filter on device batadv1
[  118.615111][ T9733] bond3: (slave batadv1): making interface the new active one
[  118.620755][ T9733] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  119.170740][ T9768] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1641'.
[  119.176551][ T9768] netlink: 'syz.1.1641': attribute type 1 has an invalid length.
[  119.182768][ T9768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1641'.
[  119.802824][ T9778] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.1645'.
[  119.806068][ T9778] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  119.919741][ T9783] ip6tnl1: left allmulticast mode
[  119.924522][ T9783] ip6tnl2: left promiscuous mode
[  119.937766][ T9783] ip6tnl2: left allmulticast mode
[  119.955364][ T9783] hsr1: left allmulticast mode
[  119.957034][ T9783] erspan0: left allmulticast mode
[  119.958696][ T9783] gretap0: left allmulticast mode
[  119.962006][ T9783] ip6gre1: left promiscuous mode
[  119.964131][ T9783] ip6gre1: left allmulticast mode
[  120.133982][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'.
[  120.425485][ T9834] syzkaller0: entered promiscuous mode
[  120.427371][ T9834] syzkaller0: entered allmulticast mode
[  120.546867][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1671'.
[  121.816155][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'.
[  122.087747][ T9976] syzkaller0: entered promiscuous mode
[  122.089565][ T9976] syzkaller0: entered allmulticast mode
[  122.492269][T10014] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1747'.
[  122.499732][T10014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1747'.
[  122.741982][T10044] xt_CT: You must specify a L4 protocol and not use inversions on it
[  122.972166][T10068] IPv6: Can't replace route, no match found
[  123.332575][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'.
[  123.409931][T10092] netlink: 656 bytes leftover after parsing attributes in process `syz.0.1782'.
[  123.529617][T10098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.779437][T10116] netlink: 'syz.1.1794': attribute type 1 has an invalid length.
[  123.899023][T10123] netlink: 'syz.0.1797': attribute type 1 has an invalid length.
[  123.931477][T10123] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  123.936665][T10123] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  123.980785][T10128] bond2: (slave gretap2): making interface the new active one
[  123.986573][T10128] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  123.999459][T10128] macvlan3: entered promiscuous mode
[  124.001333][T10128] macvlan3: entered allmulticast mode
[  124.008566][T10128] bond2: entered promiscuous mode
[  124.010629][T10128] gretap2: entered promiscuous mode
[  124.018322][T10128] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  124.037727][T10128] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  124.043048][T10128] bond2: left promiscuous mode
[  124.046498][T10128] gretap2: left promiscuous mode
[  124.316559][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'.
[  124.556040][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'.
[  124.622696][T10179] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1822'.
[  124.786053][ T5800] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  124.789764][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  124.789776][ T5800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.789781][ T5800] Call Trace:
[  124.789785][ T5800]  <TASK>
[  124.789789][ T5800]  dump_stack_lvl+0xe8/0x150
[  124.789805][ T5800]  dump_header+0xd3/0x4c0
[  124.789816][ T5800]  oom_kill_process+0x3ab/0x970
[  124.789826][ T5800]  out_of_memory+0x106c/0x1410
[  124.789833][ T5800]  ? percpu_ref_put+0x19/0x180
[  124.789843][ T5800]  ? __pfx___mutex_lock+0x10/0x10
[  124.789856][ T5800]  ? __pfx_out_of_memory+0x10/0x10
[  124.789863][ T5800]  ? do_raw_spin_unlock+0x4d/0x210
[  124.789874][ T5800]  try_charge_memcg+0xc53/0x1560
[  124.789884][ T5800]  ? __lock_acquire+0x6b5/0x2cf0
[  124.789898][ T5800]  ? __pfx_try_charge_memcg+0x10/0x10
[  124.789906][ T5800]  ? xa_load+0x60/0x210
[  124.789918][ T5800]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  124.789929][ T5800]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  124.789942][ T5800]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  124.789957][ T5800]  __swap_cache_prepare_and_add+0x52a/0x700
[  124.789984][ T5800]  swap_cache_alloc_folio+0xf1/0x240
[  124.789997][ T5800]  swap_cluster_readahead+0x369/0x690
[  124.790010][ T5800]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  124.790025][ T5800]  ? get_vma_policy+0x27b/0x3c0
[  124.790036][ T5800]  swapin_readahead+0x196/0xc50
[  124.790051][ T5800]  ? __pfx_swapin_readahead+0x10/0x10
[  124.790062][ T5800]  ? swap_table_get+0x1e/0x260
[  124.790072][ T5800]  ? swap_table_get+0x1e/0x260
[  124.790080][ T5800]  ? swap_table_get+0x1e/0x260
[  124.790090][ T5800]  ? swap_table_get+0x216/0x260
[  124.790100][ T5800]  ? swap_cache_get_folio+0x513/0x520
[  124.790113][ T5800]  do_swap_page+0x56f/0x5a20
[  124.790132][ T5800]  ? do_swap_page+0x127/0x5a20
[  124.790152][ T5800]  ? __pfx_do_swap_page+0x10/0x10
[  124.790167][ T5800]  ? __pte_offset_map+0x1ae/0x240
[  124.790181][ T5800]  ? pte_offset_map_rw_nolock+0xea/0x160
[  124.790193][ T5800]  handle_mm_fault+0x12d2/0x3310
[  124.790217][ T5800]  ? handle_mm_fault+0xee/0x3310
[  124.790239][ T5800]  ? __pfx_handle_mm_fault+0x10/0x10
[  124.790253][ T5800]  ? lock_vma_under_rcu+0x45a/0x500
[  124.790270][ T5800]  do_user_addr_fault+0xa73/0x1340
[  124.790283][ T5800]  ? rcu_is_watching+0x15/0xb0
[  124.790293][ T5800]  ? trace_page_fault_user+0x84/0x210
[  124.790303][ T5800]  exc_page_fault+0x6a/0xc0
[  124.790312][ T5800]  asm_exc_page_fault+0x26/0x30
[  124.790320][ T5800] RIP: 0033:0x7fad25f5d04e
[  124.790328][ T5800] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  124.790334][ T5800] RSP: 002b:00007ffd51d23998 EFLAGS: 00010246
[  124.790341][ T5800] RAX: 0000000000000000 RBX: 00005555721fa500 RCX: 00007fad25f5d04e
[  124.790346][ T5800] RDX: 00007ffd51d239f0 RSI: 0000000000000000 RDI: 0000000000000000
[  124.790386][ T5800] RBP: 00007ffd51d23a5c R08: 0000000000000000 R09: 0000000000000000
[  124.790393][ T5800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  124.790399][ T5800] R13: 00000000000927c0 R14: 000000000001e536 R15: 00007ffd51d23ab0
[  124.790419][ T5800]  </TASK>
[  124.790422][ T5800] memory: usage 307200kB, limit 307200kB, failcnt 3328
[  124.953319][ T5800] memory+swap: usage 307292kB, limit 9007199254740988kB, failcnt 0
[  124.956549][ T5800] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  124.959502][ T5800] Memory cgroup stats for /syz0:
[  124.959820][ T5800] cache 0
[  124.993270][ T5800] rss 0
[  124.994651][ T5800] rss_huge 0
[  124.995952][ T5800] shmem 0
[  124.997161][ T5800] mapped_file 0
[  124.998546][ T5800] dirty 0
[  124.999770][ T5800] writeback 0
[  125.024476][ T5800] workingset_refault_anon 10
[  125.026412][ T5800] workingset_refault_file 10
[  125.028301][ T5800] swap 94208
[  125.029676][ T5800] swapcached 110592
[  125.031239][ T5800] pgpgin 82739
[  125.032637][ T5800] pgpgout 82735
[  125.053319][ T5800] pgfault 156941
[  125.054937][ T5800] pgmajfault 13
[  125.056403][ T5800] inactive_anon 0
[  125.057910][ T5800] active_anon 16384
[  125.059507][ T5800] inactive_file 0
[  125.061019][ T5800] active_file 0
[  125.062498][ T5800] unevictable 0
[  125.073319][ T5800] hierarchical_memory_limit 314572800
[  125.075635][ T5800] hierarchical_memsw_limit 9223372036854771712
[  125.078150][ T5800] total_cache 0
[  125.079581][ T5800] total_rss 0
[  125.080964][ T5800] total_rss_huge 0
[  125.082525][ T5800] total_shmem 0
[  125.084741][ T5800] total_mapped_file 0
[  125.086771][ T5800] total_dirty 0
[  125.088242][ T5800] total_writeback 0
[  125.089831][ T5800] total_workingset_refault_anon 10
[  125.091912][ T5800] total_workingset_refault_file 10
[  125.094096][ T5800] total_swap 94208
[  125.097041][ T5800] total_swapcached 110592
[  125.098862][ T5800] total_pgpgin 82740
[  125.100489][ T5800] total_pgpgout 82736
[  125.102144][ T5800] total_pgfault 156971
[  125.104560][ T5800] total_pgmajfault 13
[  125.106497][ T5800] total_inactive_anon 0
[  125.108270][ T5800] total_active_anon 16384
[  125.109973][ T5800] total_inactive_file 0
[  125.111686][ T5800] total_active_file 0
[  125.113504][ T5800] total_unevictable 0
[  125.115289][ T5800] anon_cost 0
[  125.116666][ T5800] file_cost 0
[  125.118005][ T5800] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1814,pid=10158,uid=0
[  125.134897][ T5800] Memory cgroup out of memory: Killed process 10158 (syz.0.1814) total-vm:102156kB, anon-rss:1248kB, file-rss:21576kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  125.426577][T10201] xt_hashlimit: size too large, truncated to 1048576
[  125.736215][T10213] syzkaller0: entered promiscuous mode
[  125.738090][T10213] syzkaller0: entered allmulticast mode
[  125.801972][T10217] syzkaller0: entered promiscuous mode
[  125.806046][T10217] 0: reclassify loop, rule prio 0, protocol 800
[  125.887512][T10219] syzkaller1: entered promiscuous mode
[  125.889761][T10219] syzkaller1: entered allmulticast mode
[  126.196721][T10238] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1849'.
[  126.749010][T10282] netlink: 'syz.2.1866': attribute type 1 has an invalid length.
[  126.838586][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'.
[  126.883367][T10292] netlink: 'syz.0.1871': attribute type 11 has an invalid length.
[  126.897612][T10296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.900058][T10296] syzkaller0: entered promiscuous mode
[  126.901765][T10296] syzkaller0: entered allmulticast mode
[  126.906906][T10296] tipc: Resetting bearer <eth:syzkaller0>
[  126.910141][T10294] tipc: Resetting bearer <eth:syzkaller0>
[  126.919839][T10294] tipc: Disabling bearer <eth:syzkaller0>
[  127.067948][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'.
[  127.073304][T10310] block nbd0: Unsupported socket: should be TCP or UNIX.
[  127.127190][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1882'.
[  127.183046][T10323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1882'.
[  127.202048][T10323] bond1: (slave bridge4): Enslaving as an active interface with an up link
[  127.212145][T10319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1882'.
[  127.220942][T10319] 8021q: adding VLAN 0 to HW filter on device bond1
[  127.353138][T10338] netlink: 'syz.1.1891': attribute type 1 has an invalid length.
[  127.387894][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1890'.
[  127.956354][T10394] xt_hashlimit: max too large, truncated to 1048576
[  127.959405][T10394] xt_bpf: check failed: parse error
[  128.152676][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'.
[  128.186008][T10419] netlink: 'syz.2.1920': attribute type 6 has an invalid length.
[  128.222480][T10424] netlink: 'syz.0.1921': attribute type 1 has an invalid length.
[  128.235549][T10424] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1921'.
[  128.237735][T10425] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  128.752190][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'.
[  129.204375][T10481] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1947'.
[  129.273102][T10489] netlink: 'syz.1.1952': attribute type 1 has an invalid length.
[  129.538758][T10512] netlink: 'syz.2.1962': attribute type 29 has an invalid length.
[  130.192549][T10564] openvswitch: netlink: nsh attribute has 5 unknown bytes.
[  130.316065][T10562] syzkaller0: entered promiscuous mode
[  130.317806][T10562] syzkaller0: entered allmulticast mode
[  130.646271][T10604] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  130.769478][T10618] team0: entered allmulticast mode
[  130.771407][T10618] team_slave_0: entered allmulticast mode
[  130.776966][T10618] team_slave_1: entered allmulticast mode
[  130.923669][T10636] bond0: option arp_validate: invalid value (55553)
[  130.987008][T10645] syzkaller0: entered promiscuous mode
[  130.988761][T10645] syzkaller0: entered allmulticast mode
[  130.993127][T10645] TC_ACT_REPEAT abuse ?
[  131.502203][T10686] netdevsim netdevsim2: loading /lib/firmware// failed with error -22
[  131.510644][T10686] netdevsim netdevsim2: Direct firmware load for / failed with error -22
[  131.513792][T10686] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[  131.700798][T10698] netlink: 'syz.1.2041': attribute type 1 has an invalid length.
[  131.988174][T10722] __nla_validate_parse: 9 callbacks suppressed
[  131.988186][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'.
[  132.035036][T10727] netlink: 'syz.0.2048': attribute type 4 has an invalid length.
[  132.077788][T10734] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2050'.
[  132.186730][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'.
[  132.474476][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'.
[  132.639319][T10804] syzkaller0: entered promiscuous mode
[  132.641545][T10804] syzkaller0: entered allmulticast mode
[  132.749516][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'.
[  132.752418][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2079'.
[  132.795242][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2080'.
[  134.126481][T10870] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  134.129294][T10870] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  134.132325][T10870] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  134.135487][T10870] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  134.138353][T10870] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  134.141122][T10870] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  134.143711][T10870] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  134.146176][T10870] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  134.148693][T10870] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  134.282769][T10890] netlink: 'syz.1.2107': attribute type 8 has an invalid length.
[  134.614389][T10932] smc: net device wlan0 applied user defined pnetid SYZ0
[  134.920827][T10971] syzkaller1: entered promiscuous mode
[  134.925065][T10971] syzkaller1: entered allmulticast mode
[  135.171004][T10996] vlan2: entered promiscuous mode
[  135.172949][T10996] bridge0: entered promiscuous mode
[  135.182124][T10998] lo speed is unknown, defaulting to 1000
[  135.190312][T10998] lo speed is unknown, defaulting to 1000
[  135.195179][T10998] lo speed is unknown, defaulting to 1000
[  135.306971][ T6327] lo speed is unknown, defaulting to 1000
[  135.309097][T10998] infiniband sqz0: set active
[  135.310744][T10998] infiniband sqz0: added lo
[  135.331534][T10998] RDS/IB: sqz0: added
[  135.333619][T10998] smc: adding ib device sqz0 with port count 1
[  135.336296][T10998] smc:    ib device sqz0 port 1 has no pnetid
[  135.340767][ T6327] lo speed is unknown, defaulting to 1000
[  135.344670][T10998] lo speed is unknown, defaulting to 1000
[  135.441160][T10998] lo speed is unknown, defaulting to 1000
[  135.537002][T10998] lo speed is unknown, defaulting to 1000
[  135.716819][T11020] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.719738][T11020] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.787147][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2151'.
[  135.790264][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2151'.
[  135.848699][T11042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2155'.
[  136.072241][T11068] gre2: entered promiscuous mode
[  136.245225][T11088] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.248651][T11088] 8021q: adding VLAN 0 to HW filter on device team0
[  136.258916][T11088] net_ratelimit: 45 callbacks suppressed
[  136.258920][T11088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.374296][   T56] block nbd2: Receive control failed (result -32)
[  137.243353][T11136] netlink: 'syz.2.2198': attribute type 10 has an invalid length.
[  137.259901][T11136] dummy0: entered promiscuous mode
[  137.262592][T11136] dummy0: entered allmulticast mode
[  137.269753][T11136] team0: Port device dummy0 added
[  137.272333][ T6181] bridge0: port 1(team0) entered blocking state
[  137.274853][ T6181] bridge0: port 1(team0) entered forwarding state
[  137.281532][T11136] netlink: 'syz.2.2198': attribute type 10 has an invalid length.
[  137.292736][T11136] dummy0: left promiscuous mode
[  137.294769][T11136] dummy0: left allmulticast mode
[  137.297758][T11136] team0: Port device dummy0 removed
[  137.301650][T11136] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  137.305270][ T6181] bridge0: port 1(team0) entered disabled state
[  137.368939][T11141] syzkaller0: entered promiscuous mode
[  137.371268][T11141] syzkaller0: entered allmulticast mode
[  137.619813][T11159] __nla_validate_parse: 7 callbacks suppressed
[  137.619824][T11159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2209'.
[  137.742347][T11163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2211'.
[  137.867126][T11170] syzkaller0: entered promiscuous mode
[  137.869492][T11170] syzkaller0: entered allmulticast mode
[  137.979252][T11169] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96
[  138.087838][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  139.177220][T11179] lo speed is unknown, defaulting to 1000
[  139.210376][T11185] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2218'.
[  139.220586][T11185] syzkaller0: entered promiscuous mode
[  139.222808][T11185] syzkaller0: entered allmulticast mode
[  139.298678][T11189] IPVS: Error connecting to the multicast addr
[  139.339038][T11193] netlink: 'syz.2.2221': attribute type 9 has an invalid length.
[  139.392642][T11195] netlink: 'syz.0.2223': attribute type 10 has an invalid length.
[  139.397458][T11195] bond0: (slave wlan1): Opening slave failed
[  139.457924][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2225'.
[  139.714001][T11219] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2235'.
[  139.718015][T11219] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2235'.
[  139.781066][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'.
[  139.971093][T11242] sctp: [Deprecated]: syz.2.2246 (pid 11242) Use of int in max_burst socket option.
[  139.971093][T11242] Use struct sctp_assoc_value instead
[  140.058843][T11249] netem: incorrect gi model size
[  140.061331][T11249] netem: change failed
[  140.254628][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2250'.
[  140.629140][T11289] syzkaller0: entered promiscuous mode
[  140.631358][T11289] syzkaller0: entered allmulticast mode
[  140.846512][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'.
[  140.849948][T11302] bond0: option packets_per_slave: invalid value (10212248)
[  140.852544][T11302] bond0: option packets_per_slave: allowed values 0 - 65535
[  140.935964][T11312] xt_CT: You must specify a L4 protocol and not use inversions on it
[  141.006169][T11320] netlink: 'syz.0.2281': attribute type 1 has an invalid length.
[  141.118134][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'.
[  141.404703][T11350] gre0 speed is unknown, defaulting to 1000
[  141.409010][T11350] gre0 speed is unknown, defaulting to 1000
[  141.414910][T11350] gre0 speed is unknown, defaulting to 1000
[  141.473571][T11351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.491234][T11348] syzkaller1: entered promiscuous mode
[  141.493127][T11348] syzkaller1: entered allmulticast mode
[  141.559835][T11350] infiniband syz1: set active
[  141.561441][ T6312] gre0 speed is unknown, defaulting to 1000
[  141.567278][T11350] infiniband syz1: added gre0
[  141.705373][T11350] RDS/IB: syz1: added
[  141.706885][T11350] smc: adding ib device syz1 with port count 1
[  141.709420][T11350] smc:    ib device syz1 port 1 has pnetid SYZ0 (user defined)
[  141.712394][ T5852] gre0 speed is unknown, defaulting to 1000
[  141.716061][T11350] gre0 speed is unknown, defaulting to 1000
[  141.767116][T11360] netlink: 'syz.1.2298': attribute type 3 has an invalid length.
[  141.997677][T11350] gre0 speed is unknown, defaulting to 1000
[  142.019258][T11366] gretap1: entered promiscuous mode
[  142.022094][T11366] batman_adv: batadv0: Adding interface: gretap1
[  142.057177][T11366] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  142.088349][T11366] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  142.225512][T11350] gre0 speed is unknown, defaulting to 1000
[  142.276447][T11371] netlink: 'syz.0.2301': attribute type 4 has an invalid length.
[  142.280367][ T2649] lo speed is unknown, defaulting to 1000
[  142.719054][T11390] __nla_validate_parse: 1 callbacks suppressed
[  142.719070][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2310'.
[  142.727089][T11390] netlink: 580 bytes leftover after parsing attributes in process `syz.2.2310'.
[  142.959543][T11406] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.008484][T11409] tipc: Failed to remove unknown binding: 66,1,1/0:1394905338/1394905340
[  143.024230][T11409] tipc: Failed to remove unknown binding: 66,1,1/0:1394905338/1394905340
[  143.057862][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2320'.
[  143.060579][T11412] netlink: 121 bytes leftover after parsing attributes in process `syz.2.2320'.
[  143.168259][T11420] batadv0: entered promiscuous mode
[  143.185215][T11420] bond0: entered promiscuous mode
[  143.187104][T11420] dummy0: entered promiscuous mode
[  143.190625][T11420] hsr2: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  143.200520][T11420] hsr2: entered allmulticast mode
[  143.202420][T11420] batadv0: entered allmulticast mode
[  143.206262][T11420] bond0: entered allmulticast mode
[  143.207894][T11420] dummy0: entered allmulticast mode
[  143.209890][T11420] 8021q: adding VLAN 0 to HW filter on device hsr2
[  143.224020][T11422] vlan0: entered allmulticast mode
[  143.225914][T11422] macvtap0: entered allmulticast mode
[  143.233517][T11422] veth0_macvtap: entered allmulticast mode
[  143.335096][T11433] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2327'.
[  143.335899][T11432] ip6gre2: entered promiscuous mode
[  143.346637][T11432] ip6gre2: entered allmulticast mode
[  143.898484][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'.
[  144.050332][T11517] openvswitch: netlink: Actions may not be safe on all matching packets
[  145.165465][T11565] xt_bpf: check failed: parse error
[  145.231282][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'.
[  145.234189][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2395'.
[  145.407143][T11589] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  145.735669][T11610] netlink: 'syz.2.2410': attribute type 62 has an invalid length.
[  147.035670][T11689] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  147.169691][T11702] netlink: 'syz.0.2449': attribute type 3 has an invalid length.
[  148.328814][T11791] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  148.490856][T11805] netlink: 'syz.0.2493': attribute type 10 has an invalid length.
[  148.496077][T11805] bond1: (slave dummy0): Releasing active interface
[  148.510327][T11805] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  148.544212][T11809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2496'.
[  149.262777][T11852] pim6reg1: entered promiscuous mode
[  149.266923][T11852] pim6reg1: entered allmulticast mode
[  149.998209][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2533'.
[  150.007757][T11894] macvtap1: entered promiscuous mode
[  150.010226][T11894] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  150.013367][T11894] macvtap1: entered allmulticast mode
[  150.015101][T11894] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  150.139772][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'.
[  150.184044][T11916] batadv_slave_1: entered promiscuous mode
[  150.186607][T11915] batadv_slave_1: left promiscuous mode
[  150.479558][T11961] ieee802154 phy1 wpan1: encryption failed: -90
[  150.937554][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2578'.
[  150.957882][T11995] 8021q: adding VLAN 0 to HW filter on device bond4
[  150.958658][T11998] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  150.967518][T11995] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  150.971292][T11995] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  151.036143][T12006] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.2582'.
[  151.265885][T12025] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  151.316141][T12027] lo speed is unknown, defaulting to 1000
[  151.402001][T12027] gre0 speed is unknown, defaulting to 1000
[  151.420876][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'.
[  151.963656][T12073] netlink: 'syz.0.2603': attribute type 4 has an invalid length.
[  151.981519][T12073] netlink: 'syz.0.2603': attribute type 4 has an invalid length.
[  151.985087][ T6327] lo speed is unknown, defaulting to 1000
[  151.987357][ T6327] sqz0: Port: 1 Link DOWN
[  152.007244][ T6327] lo speed is unknown, defaulting to 1000
[  152.009831][ T6327] lo speed is unknown, defaulting to 1000
[  152.012276][ T6327] sqz0: Port: 1 Link ACTIVE
[  152.170286][T12093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2612'.
[  152.174088][T12093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2612'.
[  153.001278][T12153] netlink: 'syz.0.2638': attribute type 9 has an invalid length.
[  153.009376][T12153] netlink: 'syz.0.2638': attribute type 6 has an invalid length.
[  153.013125][T12153] netlink: 'syz.0.2638': attribute type 7 has an invalid length.
[  153.019633][T12153] netlink: 'syz.0.2638': attribute type 8 has an invalid length.
[  153.288287][T12170] syz_tun: entered promiscuous mode
[  153.290260][T12170] macvtap2: entered promiscuous mode
[  153.292181][T12170] macvtap2: entered allmulticast mode
[  153.296762][T12170] syz_tun: entered allmulticast mode
[  153.301906][T12170] syz_tun: left allmulticast mode
[  153.304309][T12170] syz_tun: left promiscuous mode
[  153.632671][T12185] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  153.756348][T12147] syz.1.2636 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  153.760412][T12147] CPU: 0 UID: 0 PID: 12147 Comm: syz.1.2636 Not tainted syzkaller #0 PREEMPT(full) 
[  153.760426][T12147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.760432][T12147] Call Trace:
[  153.760438][T12147]  <TASK>
[  153.760443][T12147]  dump_stack_lvl+0xe8/0x150
[  153.760462][T12147]  dump_header+0xd3/0x4c0
[  153.760478][T12147]  oom_kill_process+0x3ab/0x970
[  153.760493][T12147]  out_of_memory+0x106c/0x1410
[  153.760505][T12147]  ? percpu_ref_put+0x19/0x180
[  153.760520][T12147]  ? __pfx___mutex_lock+0x10/0x10
[  153.760539][T12147]  ? __pfx_out_of_memory+0x10/0x10
[  153.760549][T12147]  ? do_raw_spin_unlock+0x4d/0x210
[  153.760567][T12147]  try_charge_memcg+0xc53/0x1560
[  153.760581][T12147]  ? __lock_acquire+0x6b5/0x2cf0
[  153.760602][T12147]  ? __pfx_try_charge_memcg+0x10/0x10
[  153.760613][T12147]  ? xa_load+0x60/0x210
[  153.760631][T12147]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  153.760647][T12147]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  153.760661][T12147]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  153.760676][T12147]  __swap_cache_prepare_and_add+0x52a/0x700
[  153.760703][T12147]  swap_cache_alloc_folio+0xf1/0x240
[  153.760721][T12147]  swap_cluster_readahead+0x369/0x690
[  153.760740][T12147]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  153.760764][T12147]  ? get_vma_policy+0x27b/0x3c0
[  153.760780][T12147]  swapin_readahead+0x196/0xc50
[  153.760803][T12147]  ? __pfx_swapin_readahead+0x10/0x10
[  153.760820][T12147]  ? swap_table_get+0x1e/0x260
[  153.760833][T12147]  ? swap_table_get+0x1e/0x260
[  153.760846][T12147]  ? swap_table_get+0x1e/0x260
[  153.760861][T12147]  ? swap_table_get+0x216/0x260
[  153.760876][T12147]  ? swap_cache_get_folio+0x513/0x520
[  153.760895][T12147]  do_swap_page+0x56f/0x5a20
[  153.760923][T12147]  ? do_swap_page+0x127/0x5a20
[  153.760937][T12147]  ? __pfx_do_swap_page+0x10/0x10
[  153.760950][T12147]  ? __pte_offset_map+0x1ae/0x240
[  153.760963][T12147]  ? pte_offset_map_rw_nolock+0xea/0x160
[  153.761002][T12147]  handle_mm_fault+0x12d2/0x3310
[  153.761029][T12147]  ? handle_mm_fault+0xee/0x3310
[  153.761050][T12147]  ? __pfx_handle_mm_fault+0x10/0x10
[  153.761064][T12147]  ? lock_vma_under_rcu+0x45a/0x500
[  153.761092][T12147]  do_user_addr_fault+0xa73/0x1340
[  153.761111][T12147]  ? rcu_is_watching+0x15/0xb0
[  153.761126][T12147]  ? trace_page_fault_user+0x84/0x210
[  153.761141][T12147]  exc_page_fault+0x6a/0xc0
[  153.761155][T12147]  asm_exc_page_fault+0x26/0x30
[  153.761165][T12147] RIP: 0033:0x7f224326a190
[  153.761177][T12147] Code: c4 4c 0f 42 e0 83 3d 3a dc 3a 00 00 0f 8e d9 fd ff ff e8 33 83 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d fe b4 ed 00 e8 03 00 00 48 8d 1d ff bd 3a 00 e8 8a 31 13 00
[  153.761186][T12147] RSP: 002b:00007fff1634e250 EFLAGS: 00010212
[  153.761197][T12147] RAX: 000000000002580a RBX: 00007f2243617da0 RCX: 00000000000255a8
[  153.761204][T12147] RDX: 0000000000000262 RSI: 00007fff1634e230 RDI: 000000002465a9bf
[  153.761210][T12147] RBP: 00007f2243617da0 R08: 7fffffffffffffff R09: 3fffffffffffffff
[  153.761217][T12147] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000025824
[  153.761224][T12147] R13: 00007f224361618c R14: 000000000002558f R15: 00007f2243616180
[  153.761244][T12147]  </TASK>
[  153.761355][T12147] memory: usage 307200kB, limit 307200kB, failcnt 2239
[  153.861841][T12147] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0
[  153.864527][T12147] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0
[  153.866742][T12147] Memory cgroup stats for /syz1:
[  153.866796][T12147] cache 0
[  153.869238][T12147] rss 0
[  153.870128][T12147] rss_huge 0
[  153.871126][T12147] shmem 0
[  153.872037][T12147] mapped_file 0
[  153.873529][T12147] dirty 0
[  153.874497][T12147] writeback 0
[  153.875535][T12147] workingset_refault_anon 6
[  153.876924][T12147] workingset_refault_file 0
[  153.878322][T12147] swap 184320
[  153.879353][T12147] swapcached 225280
[  153.880505][T12147] pgpgin 60716
[  153.881537][T12147] pgpgout 60706
[  153.882565][T12147] pgfault 153488
[  153.884346][T12147] pgmajfault 2
[  153.885414][T12147] inactive_anon 24576
[  153.886639][T12147] active_anon 16384
[  153.887819][T12147] inactive_file 0
[  153.888959][T12147] active_file 0
[  153.890056][T12147] unevictable 0
[  153.891153][T12147] hierarchical_memory_limit 314572800
[  153.892783][T12147] hierarchical_memsw_limit 9223372036854771712
[  153.895044][T12147] total_cache 0
[  153.896139][T12147] total_rss 0
[  153.897205][T12147] total_rss_huge 0
[  153.898386][T12147] total_shmem 0
[  153.899525][T12147] total_mapped_file 0
[  153.900767][T12147] total_dirty 0
[  153.901864][T12147] total_writeback 0
[  153.903060][T12147] total_workingset_refault_anon 6
[  153.905230][T12147] total_workingset_refault_file 0
[  153.906894][T12147] total_swap 184320
[  153.908194][T12147] total_swapcached 225280
[  153.909531][T12147] total_pgpgin 60716
[  153.911032][T12147] total_pgpgout 60706
[  153.912584][T12147] total_pgfault 153488
[  153.914628][T12147] total_pgmajfault 2
[  153.916179][T12147] total_inactive_anon 24576
[  153.917961][T12147] total_active_anon 16384
[  153.919669][T12147] total_inactive_file 0
[  153.921321][T12147] total_active_file 0
[  153.922882][T12147] total_unevictable 0
[  153.925074][T12147] anon_cost 0
[  153.926130][T12147] file_cost 0
[  153.927169][T12147] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2636,pid=12147,uid=0
[  153.931999][T12147] Memory cgroup out of memory: Killed process 12147 (syz.1.2636) total-vm:102420kB, anon-rss:1240kB, file-rss:23304kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  154.319489][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2657'.
[  155.362115][T12192] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2655'.
[  155.531261][T12212] lo speed is unknown, defaulting to 1000
[  155.566275][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2662'.
[  155.724094][T12212] gre0 speed is unknown, defaulting to 1000
[  155.735465][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2672'.
[  155.784574][T12240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2674'.
[  155.973941][T12254] lo speed is unknown, defaulting to 1000
[  156.070559][T12254] gre0 speed is unknown, defaulting to 1000
[  156.732158][T12315] netlink: 488 bytes leftover after parsing attributes in process `syz.0.2704'.
[  156.738358][T12315] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2704'.
[  156.785881][T12319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.036836][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2710'.
[  157.040491][T12328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2710'.
[  157.045964][T12328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2710'.
[  157.842136][T12390] syzkaller0: entered promiscuous mode
[  157.844847][T12390] syzkaller0: entered allmulticast mode
[  157.985485][T12396] syz.2.2742 (12396) used obsolete PPPIOCDETACH ioctl
[  158.478788][T12427] syzkaller1: entered promiscuous mode
[  158.483364][T12427] syzkaller1: entered allmulticast mode
[  158.789129][T12465] sit0: entered allmulticast mode
[  158.791295][T12465] sit0: left allmulticast mode
[  158.817736][T12467] dummy0: entered promiscuous mode
[  158.820979][T12466] dummy0: left promiscuous mode
[  159.703482][T12484] batman_adv: batadv0: Adding interface: gretap1
[  159.706068][T12484] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  159.723474][T12484] batman_adv: batadv0: Interface activated: gretap1
[  159.761702][T12486] syzkaller0: entered promiscuous mode
[  159.769108][T12486] syzkaller0: entered allmulticast mode
[  160.009366][T12503] netlink: 'syz.0.2789': attribute type 2 has an invalid length.
[  160.054173][T12504] __nla_validate_parse: 7 callbacks suppressed
[  160.054191][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'.
[  161.104780][T12547] gre0 speed is unknown, defaulting to 1000
[  161.602546][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'.
[  161.810057][T12586] lo speed is unknown, defaulting to 1000
[  161.886456][T12591] tap0: tun_chr_ioctl cmd 1074025677
[  161.888272][T12591] tap0: linktype set to 6
[  161.901836][T12586] gre0 speed is unknown, defaulting to 1000
[  162.161748][T12605] lo speed is unknown, defaulting to 1000
[  162.464083][T12605] gre0 speed is unknown, defaulting to 1000
[  162.656125][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2835'.
[  162.659259][T12623] netlink: 'syz.1.2835': attribute type 14 has an invalid length.
[  162.661639][T12623] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2835'.
[  162.757816][T12625] lo speed is unknown, defaulting to 1000
[  162.918542][T12627] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  162.922388][T12627] team0 (unregistering): Port device team_slave_0 removed
[  163.003879][T12627] team0 (unregistering): Failed to send options change via netlink (err -105)
[  163.007621][T12627] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  163.012328][T12627] team0 (unregistering): Port device team_slave_1 removed
[  163.128637][T12625] gre0 speed is unknown, defaulting to 1000
[  163.290933][T12644] netlink: 'syz.0.2842': attribute type 1 has an invalid length.
[  163.291947][T12642] lo speed is unknown, defaulting to 1000
[  163.293734][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'.
[  163.381892][T12652] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.503656][T12660] syzkaller0: entered promiscuous mode
[  163.505450][T12660] syzkaller0: entered allmulticast mode
[  163.534664][T12660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.538279][T12656] tipc: Resetting bearer <eth:syzkaller0>
[  163.584243][T12656] tipc: Disabling bearer <eth:syzkaller0>
[  163.605598][T12642] gre0 speed is unknown, defaulting to 1000
[  163.777643][T12680] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2857'.
[  163.848383][T12684] syzkaller1: entered promiscuous mode
[  163.852657][T12684] syzkaller1: entered allmulticast mode
[  164.127115][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2868'.
[  164.285981][T12724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2875'.
[  164.290596][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2875'.
[  164.299759][T12724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2875'.
[  164.946494][T12781] netlink: 'syz.0.2901': attribute type 1 has an invalid length.
[  164.958624][T12781] 8021q: adding VLAN 0 to HW filter on device bond3
[  164.971648][T12781] bond3: (slave veth7): Enslaving as an active interface with a down link
[  164.979181][T12781] bond0: (slave dummy0): Releasing backup interface
[  164.984492][T12781] bond3: (slave dummy0): making interface the new active one
[  164.987950][T12781] dummy0: entered promiscuous mode
[  164.989745][T12781] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  166.327168][T12877] __nla_validate_parse: 1 callbacks suppressed
[  166.327179][T12877] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2944'.
[  166.379969][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2947'.
[  166.382881][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2947'.
[  166.428239][T12889] veth0_virt_wifi: entered allmulticast mode
[  166.627633][T12903] syzkaller0: entered promiscuous mode
[  166.630002][T12903] syzkaller0: entered allmulticast mode
[  166.989397][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2960'.
[  167.695189][T12921] syzkaller0: entered promiscuous mode
[  167.697028][T12921] syzkaller0: entered allmulticast mode
[  167.932974][T12939] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2973'.
[  168.888579][T12955] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.891133][T12955] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.972655][T12955] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.016158][T12955] veth0_macvtap: left allmulticast mode
[  169.118873][ T6312] lo speed is unknown, defaulting to 1000
[  169.123273][ T5815] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.126011][ T5815] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.128679][ T5815] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.131402][ T5815] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.137257][ T6312] sqz0: Port: 1 Link DOWN
[  169.157148][ T5815] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.159951][ T5815] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.179045][ T6323] lo speed is unknown, defaulting to 1000
[  169.181462][ T5815] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.188702][ T5815] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.352886][T12988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2993'.
[  169.356286][T12988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2993'.
[  169.401135][T12998] sch_tbf: burst 32852 is lower than device lo mtu (11337746) !
[  169.531796][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3005'.
[  169.535667][T13017] netlink: 'syz.0.3005': attribute type 25 has an invalid length.
[  169.543351][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3005'.
[  169.569548][T13019] netlink: 'syz.1.3006': attribute type 1 has an invalid length.
[  169.571906][T13019] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3006'.
[  169.579626][T13019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  169.695454][T13037] bond2: entered allmulticast mode
[  169.697131][T13037] vti0: entered allmulticast mode
[  170.265113][T13115] lo speed is unknown, defaulting to 1000
[  170.421249][T13115] gre0 speed is unknown, defaulting to 1000
[  170.619220][T13154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.827835][T13163] netlink: 'syz.0.3072': attribute type 1 has an invalid length.
[  170.905020][T13163] 8021q: adding VLAN 0 to HW filter on device bond4
[  171.005394][T13171] lo speed is unknown, defaulting to 1000
[  171.235456][T13171] gre0 speed is unknown, defaulting to 1000
[  171.851064][T13215] netlink: 'syz.1.3093': attribute type 19 has an invalid length.
[  171.853666][T13215] __nla_validate_parse: 1 callbacks suppressed
[  171.853674][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3093'.
[  171.859380][T13215] netlink: 'syz.1.3093': attribute type 19 has an invalid length.
[  171.862218][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3093'.
[  172.162101][T13244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3106'.
[  172.165234][T13244] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3106'.
[  172.168923][T13244] tipc: Cannot configure node identity twice
[  172.525015][T13281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3122'.
[  172.731677][T13296] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3128'.
[  172.802115][T13303] netlink: 'syz.1.3131': attribute type 2 has an invalid length.
[  172.828462][T13303] : entered promiscuous mode
[  172.831871][T13303] netlink: 'syz.1.3131': attribute type 2 has an invalid length.
[  172.834936][T13303] : left promiscuous mode
[  172.853804][T13307] ip6gre1: entered promiscuous mode
[  172.856116][T13307] ip6gre1: entered allmulticast mode
[  173.440021][T13371] netlink: 'syz.2.3163': attribute type 2 has an invalid length.
[  173.442666][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3163'.
[  173.581248][T13387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3169'.
[  173.585652][T13386] x_tables: ip_tables: osf match: only valid for protocol 6
[  173.639886][T13396] bridge0: port 3(veth0_to_bridge) entered blocking state
[  173.642338][T13396] bridge0: port 3(veth0_to_bridge) entered disabled state
[  173.661659][T13396] veth0_to_bridge: entered allmulticast mode
[  173.664570][T13396] veth0_to_bridge: entered promiscuous mode
[  174.111360][T13447] IPv6: sit1: Disabled Multicast RS
[  174.176260][T13456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3191'.
[  174.180008][T13456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3191'.
[  174.651068][T13510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.658560][T12963] gre0 speed is unknown, defaulting to 1000
[  174.692606][T13510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.756051][T13519] netlink: 'syz.0.3210': attribute type 1 has an invalid length.
[  174.770123][T13519] bond5: entered promiscuous mode
[  174.772066][T13519] 8021q: adding VLAN 0 to HW filter on device bond5
[  174.784447][T13519] 8021q: adding VLAN 0 to HW filter on device bond5
[  174.787171][T13519] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  174.791249][T13519] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  174.795933][T13519] bond5: (slave vti0): making interface the new active one
[  174.798173][T13519] vti0: entered promiscuous mode
[  174.800488][T13519] bond5: (slave vti0): Enslaving as an active interface with an up link
[  175.132982][T13534] netlink: 'syz.0.3216': attribute type 10 has an invalid length.
[  175.140312][T13534] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  175.339952][T13546] geneve2: entered promiscuous mode
[  175.342235][ T5815] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.349726][ T5815] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.352167][ T5815] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.354901][ T5815] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.693936][T13582] xt_connbytes: Forcing CT accounting to be enabled
[  175.925309][T13601] syzkaller0: entered promiscuous mode
[  175.928193][T13601] syzkaller0: entered allmulticast mode
[  175.997138][T13607] netlink: 'syz.2.3248': attribute type 3 has an invalid length.
[  176.005472][T13607] netlink: 'syz.2.3248': attribute type 1 has an invalid length.
[  176.017074][T13607] NCSI netlink: No device for ifindex 808464432
[  176.425305][T13654] bond2: Removing last arp target with arp_interval on
[  176.493551][T13664] netlink: 'syz.0.3273': attribute type 34 has an invalid length.
[  176.500057][T13666] netlink: 'syz.2.3274': attribute type 1 has an invalid length.
[  176.577531][T13673] netlink: zone id is out of range
[  176.747271][T13691] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  176.819985][T13699] macvtap0: entered promiscuous mode
[  177.746236][T13730] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[  178.174095][T13751] netlink: 'syz.2.3313': attribute type 1 has an invalid length.
[  178.177296][T13751] __nla_validate_parse: 15 callbacks suppressed
[  178.177309][T13751] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3313'.
[  178.255390][T13755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3315'.
[  178.262257][T13755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3315'.
[  178.270852][T13755] syzkaller0: entered promiscuous mode
[  178.277795][T13755] 0: reclassify loop, rule prio 0, protocol 800
[  179.291575][T13776] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3321'.
[  180.049128][T13822] gretap1: left promiscuous mode
[  180.065540][T13822] geneve2: left promiscuous mode
[  180.068916][ T6335] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.072275][ T6335] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.075818][ T5815] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.079423][ T5815] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.462041][T13833] netlink: 'syz.2.3350': attribute type 11 has an invalid length.
[  180.539366][T13837] netlink: 'syz.2.3352': attribute type 10 has an invalid length.
[  180.544241][T13837] bond0: (slave wlan1): Opening slave failed
[  180.852621][T13847] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3357'.
[  180.997317][ T5808] Bluetooth: hci2: link tx timeout
[  180.999396][ T5808] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  181.003891][ T5803] Bluetooth: hci2: link tx timeout
[  181.005469][ T5803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  181.007821][ T5803] Bluetooth: hci2: link tx timeout
[  181.011584][ T5803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  181.014618][ T5803] Bluetooth: hci2: link tx timeout
[  181.016234][ T5803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  181.034661][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3362'.
[  181.123379][ T5803] Bluetooth: hci1: command 0x0406 tx timeout
[  182.140400][T13902] netlink: 'syz.0.3380': attribute type 4 has an invalid length.
[  182.572351][T13935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.576990][T13935] syzkaller0: entered promiscuous mode
[  182.578833][T13935] syzkaller0: entered allmulticast mode
[  182.590840][T13935] tipc: Resetting bearer <eth:syzkaller0>
[  182.593631][T13933] tipc: Resetting bearer <eth:syzkaller0>
[  182.600293][T13933] tipc: Disabling bearer <eth:syzkaller0>
[  183.043342][ T5197] Bluetooth: hci2: command 0x0406 tx timeout
[  183.087591][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3404'.
[  183.236134][T13962] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3406'.
[  183.418957][T13980] ieee802154 phy1 wpan1: encryption failed: -22
[  183.495742][T13983] lo speed is unknown, defaulting to 1000
[  183.642733][T13983] gre0 speed is unknown, defaulting to 1000
[  183.882282][T14016] netlink: 'syz.1.3429': attribute type 1 has an invalid length.
[  184.346708][T14047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3441'.
[  184.352690][T14047] ipvlan1: entered promiscuous mode
[  184.356537][T14047] ipvlan1: left promiscuous mode
[  184.668736][T14077] lo speed is unknown, defaulting to 1000
[  184.764411][T14077] gre0 speed is unknown, defaulting to 1000
[  184.918924][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3464'.
[  185.000391][T14103] lo speed is unknown, defaulting to 1000
[  185.011112][T14108] syz.1.3464: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  185.023767][T14108] CPU: 0 UID: 0 PID: 14108 Comm: syz.1.3464 Not tainted syzkaller #0 PREEMPT(full) 
[  185.023784][T14108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.023791][T14108] Call Trace:
[  185.023797][T14108]  <TASK>
[  185.023802][T14108]  dump_stack_lvl+0xe8/0x150
[  185.023823][T14108]  warn_alloc+0x249/0x340
[  185.023838][T14108]  ? stack_trace_save+0xa9/0x100
[  185.023853][T14108]  ? __pfx_warn_alloc+0x10/0x10
[  185.023871][T14108]  ? kasan_save_track+0x4f/0x80
[  185.023884][T14108]  ? kasan_save_track+0x3e/0x80
[  185.023895][T14108]  ? __kasan_kmalloc+0x93/0xb0
[  185.023908][T14108]  ? __kmalloc_cache_noprof+0x31c/0x660
[  185.023919][T14108]  ? xskq_create+0x56/0x170
[  185.023931][T14108]  ? xsk_setsockopt+0x54c/0x990
[  185.023948][T14108]  ? do_sock_setsockopt+0x17c/0x1b0
[  185.023959][T14108]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  185.023967][T14108]  ? do_syscall_64+0x14d/0xf80
[  185.023983][T14108]  __vmalloc_node_range_noprof+0x132/0x1730
[  185.024017][T14108]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  185.024034][T14108]  ? __kasan_kmalloc+0x93/0xb0
[  185.024051][T14108]  vmalloc_user_noprof+0xad/0xe0
[  185.024064][T14108]  ? xskq_create+0xbf/0x170
[  185.024076][T14108]  xskq_create+0xbf/0x170
[  185.024089][T14108]  xsk_init_queue+0x8a/0xe0
[  185.024101][T14108]  xsk_setsockopt+0x54c/0x990
[  185.024117][T14108]  ? __pfx_xsk_setsockopt+0x10/0x10
[  185.024134][T14108]  ? __pfx_aa_sk_perm+0x10/0x10
[  185.024154][T14108]  ? aa_sock_opt_perm+0xff/0x1a0
[  185.024172][T14108]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  185.024186][T14108]  ? __pfx_xsk_setsockopt+0x10/0x10
[  185.024204][T14108]  do_sock_setsockopt+0x17c/0x1b0
[  185.024220][T14108]  __x64_sys_setsockopt+0x13d/0x1b0
[  185.024236][T14108]  do_syscall_64+0x14d/0xf80
[  185.024245][T14108]  ? trace_irq_disable+0x3b/0x150
[  185.024256][T14108]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.024273][T14108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.024285][T14108] RIP: 0033:0x7f224339c819
[  185.024305][T14108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.024315][T14108] RSP: 002b:00007f22415cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  185.024329][T14108] RAX: ffffffffffffffda RBX: 00007f2243616090 RCX: 00007f224339c819
[  185.024338][T14108] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[  185.024345][T14108] RBP: 00007f2243432c91 R08: 0000000000000004 R09: 0000000000000000
[  185.024353][T14108] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.024361][T14108] R13: 00007f2243616128 R14: 00007f2243616090 R15: 00007fff1634e0e8
[  185.024381][T14108]  </TASK>
[  185.024384][T14108] Mem-Info:
[  185.078854][T14111] sock: sock_timestamping_bind_phc: sock not bind to device
[  185.084565][T14108] active_anon:5621 inactive_anon:0 isolated_anon:0
[  185.084565][T14108]  active_file:12289 inactive_file:38361 isolated_file:0
[  185.084565][T14108]  unevictable:1768 dirty:157 writeback:0
[  185.084565][T14108]  slab_reclaimable:11264 slab_unreclaimable:98462
[  185.084565][T14108]  mapped:18129 shmem:2417 pagetables:1062
[  185.084565][T14108]  sec_pagetables:0 bounce:0
[  185.084565][T14108]  kernel_misc_reclaimable:0
[  185.084565][T14108]  free:1104921 free_pcp:25985 free_cma:0
[  185.139159][T14108] Node 0 active_anon:10196kB inactive_anon:0kB active_file:12304kB inactive_file:132904kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36396kB dirty:24kB writeback:0kB shmem:4708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3096kB pagetables:1992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  185.150004][T14108] Node 1 active_anon:12288kB inactive_anon:0kB active_file:36852kB inactive_file:20540kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36120kB dirty:604kB writeback:0kB shmem:4960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9784kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  185.159757][T14108] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  185.171045][T14108] lowmem_reserve[]: 0 1587 2117 2117 2117
[  185.172942][T14108] Node 0 DMA32 free:1511596kB boost:0kB min:25028kB low:31284kB high:37540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1625364kB mlocked:0kB bounce:0kB free_pcp:27948kB local_pcp:15568kB free_cma:0kB
[  185.192101][T14108] lowmem_reserve[]: 0 0 530 530 530
[  185.195920][T14108] Node 0 Normal free:15396kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10248kB inactive_anon:0kB active_file:12304kB inactive_file:132904kB unevictable:3536kB writepending:24kB zspages:0kB present:1572868kB managed:543364kB mlocked:0kB bounce:0kB free_pcp:16380kB local_pcp:16308kB free_cma:0kB
[  185.228344][T14108] lowmem_reserve[]: 0 0 0 0 0
[  185.229967][T14108] Node 1 Normal free:2877332kB boost:0kB min:56324kB low:70404kB high:84484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12288kB inactive_anon:0kB active_file:36852kB inactive_file:20540kB unevictable:3536kB writepending:604kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:59836kB local_pcp:33112kB free_cma:0kB
[  185.262883][T14108] lowmem_reserve[]: 0 0 0 0 0
[  185.264901][T14108] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  185.273430][T14108] Node 0 DMA32: 107*4kB (UM) 70*8kB (UME) 9*16kB (UME) 64*32kB (UM) 115*64kB (UME) 99*128kB (UME) 122*256kB (UME) 116*512kB (UM) 99*1024kB (UM) 13*2048kB (UE) 310*4096kB (UM) = 1511596kB
[  185.280742][T14108] Node 0 Normal: 234*4kB (UM) 160*8kB (UM) 22*16kB (UM) 4*32kB (M) 1*64kB (M) 0*128kB 14*256kB (M) 7*512kB (M) 5*1024kB (M) 0*2048kB 0*4096kB = 15048kB
[  185.288779][T14108] Node 1 Normal: 1165*4kB (U) 1116*8kB (UM) 512*16kB (UME) 904*32kB (UM) 570*64kB (U) 200*128kB (UM) 67*256kB (UE) 40*512kB (UM) 23*1024kB (UM) 2*2048kB (U) 659*4096kB (UM) = 2877332kB
[  185.296201][T14108] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB
[  185.299895][T14108] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  185.303911][T14108] 53071 total pagecache pages
[  185.305464][T14108] 4 pages in swap cache
[  185.306967][T14108] Free swap  = 124980kB
[  185.308389][T14108] Total swap = 124996kB
[  185.309857][T14108] 1834877 pages RAM
[  185.311264][T14108] 0 pages HighMem/MovableOnly
[  185.312987][T14108] 390183 pages reserved
[  185.318251][T14108] 0 pages cma reserved
[  185.447928][T14125] tipc: Enabled bearer <ib:gre0>, priority 10
[  185.476714][T14103] gre0 speed is unknown, defaulting to 1000
[  185.836176][T14148] sctp: [Deprecated]: syz.1.3484 (pid 14148) Use of int in maxseg socket option.
[  185.836176][T14148] Use struct sctp_assoc_value instead
[  185.957501][T14160] syzkaller0: entered promiscuous mode
[  185.967435][T14160] 0: reclassify loop, rule prio 0, protocol 800
[  186.123925][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'.
[  186.154295][T12963] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  186.373343][T12961] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  186.495352][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'.
[  186.506794][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'.
[  186.533045][T14179] netlink: 'syz.0.3496': attribute type 29 has an invalid length.
[  186.561169][T14181] netlink: 'syz.0.3497': attribute type 3 has an invalid length.
[  186.567669][ T6323] tipc: Node number set to 2736385573
[  186.656121][T14187] netlink: 'syz.0.3500': attribute type 1 has an invalid length.
[  186.659028][T14187] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3500'.
[  187.001674][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3507'.
[  187.006492][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3507'.
[  187.042871][ T5815] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.042908][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3507'.
[  187.051344][ T5815] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.063331][ T5815] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.067438][ T5815] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.125982][ T5815] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  187.329924][T14230] IPVS: set_ctl: invalid protocol: 102 172.30.1.2:20002
[  187.349997][T14232] syzkaller0: entered promiscuous mode
[  187.352448][T14232] syzkaller0: entered allmulticast mode
[  187.576328][T14250] netlink: 'syz.2.3528': attribute type 1 has an invalid length.
[  187.579633][T14250] netlink: 'syz.2.3528': attribute type 2 has an invalid length.
[  187.833955][T14272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.863995][T14272] syzkaller0: entered promiscuous mode
[  187.865839][T14272] syzkaller0: entered allmulticast mode
[  187.868320][T14272] tipc: Resetting bearer <eth:syzkaller0>
[  187.894746][T14271] tipc: Resetting bearer <eth:syzkaller0>
[  188.872003][T14271] tipc: Disabling bearer <eth:syzkaller0>
[  188.877426][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  188.881872][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  188.885277][T14278] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  189.443352][ T5808] Bluetooth: hci2: command 0x0406 tx timeout
[  189.764323][T12963] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  189.999384][T14380] __nla_validate_parse: 5 callbacks suppressed
[  189.999399][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3590'.
[  190.008740][T14380] netlink: 'syz.1.3590': attribute type 2 has an invalid length.
[  190.011852][T14380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3590'.
[  190.019170][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3589'.
[  190.076475][T14386] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3592'.
[  190.306613][T14400] lo speed is unknown, defaulting to 1000
[  190.462166][T14400] gre0 speed is unknown, defaulting to 1000
[  190.596124][T14424] atomic_op ffff88811444b198 conn xmit_atomic 0000000000000000
[  190.696110][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'.
[  190.945236][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'.
[  190.948735][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'.
[  191.010218][T14466] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  191.340431][T14503] IPVS: Scheduler module ip_vs_ not found
[  191.342747][T14503] IPVS: length: 24 != 73752
[  191.462433][T14514] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  191.467168][T14514] bond7 (unregistering): Released all slaves
[  191.653120][T14523] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  191.731746][T14525] netlink: 'syz.1.3651': attribute type 21 has an invalid length.
[  191.738128][T14525] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3651'.
[  191.934636][T14547] tipc: Started in network mode
[  191.936509][T14547] tipc: Node identity bbbbbb01, cluster identity 4711
[  191.939047][T14547] tipc: Enabled bearer <eth:rose0>, priority 10
[  192.092392][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3667'.
[  192.199406][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.218606][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.221941][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.233512][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.794985][T14590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3680'.
[  192.854728][T14594] block nbd0: Unsupported socket: should be TCP or UNIX.
[  192.871551][T14596] netlink: 'syz.0.3683': attribute type 30 has an invalid length.
[  192.892175][T14596] bond7: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  192.900010][T14596] bond7 (unregistering): Released all slaves
[  193.053402][T12963] tipc: Node number set to 3149642497
[  193.253450][T14634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.256287][T14634] syzkaller0: entered promiscuous mode
[  193.263599][T14634] syzkaller0: entered allmulticast mode
[  193.286674][T14634] tipc: Resetting bearer <eth:syzkaller0>
[  193.296600][T14633] tipc: Resetting bearer <eth:syzkaller0>
[  193.314501][T14633] tipc: Disabling bearer <eth:syzkaller0>
[  195.045287][T14719] IPv6: NLM_F_REPLACE set, but no existing node found!
[  195.067362][T14728] lo speed is unknown, defaulting to 1000
[  195.158521][T14728] gre0 speed is unknown, defaulting to 1000
[  195.174952][T14742] __nla_validate_parse: 7 callbacks suppressed
[  195.174963][T14742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3748'.
[  195.291882][T14751] &: renamed from dummy0 (while UP)
[  195.372816][T14759] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3756'.
[  195.587620][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3767'.
[  195.691723][T14793] netlink: 'syz.1.3773': attribute type 13 has an invalid length.
[  195.744807][T14796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3775'.
[  195.775710][T14801] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  196.214570][T14849] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  196.217386][T14849] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  196.235449][T14858] IPVS: Scheduler module ip_vs_sip not found
[  196.322692][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3802'.
[  196.345750][T14867] lo speed is unknown, defaulting to 1000
[  196.463063][T14867] gre0 speed is unknown, defaulting to 1000
[  196.485060][T14885] tipc: Resetting bearer <ib:gre0>
[  196.625914][T14894] lo: Caught tx_queue_len zero misconfig
[  196.627983][T14894] netlink: 'syz.1.3811': attribute type 6 has an invalid length.
[  197.860985][T14960] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  197.931646][T14969] x_tables: ip_tables: icmp match: only valid for protocol 1
[  198.030845][T14970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3848'.
[  198.108611][T14986] netlink: 'syz.0.3854': attribute type 1 has an invalid length.
[  198.111248][T14986] netlink: 'syz.0.3854': attribute type 4 has an invalid length.
[  198.115550][T14986] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3854'.
[  198.265866][T15000] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3860'.
[  198.269626][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3860'.
[  198.315125][T15007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3863'.
[  198.974907][T15078] No such timeout policy "syz1"
[  199.137387][T15100] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  199.181357][T15105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.187279][T12963] lo speed is unknown, defaulting to 1000
[  199.189444][T12963] sqz0: Port: 1 Link ACTIVE
[  199.191296][T12963] lo speed is unknown, defaulting to 1000
[  199.415118][T15137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.528285][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  199.721550][T15154] batadv_slave_1: entered promiscuous mode
[  199.724779][T15153] batadv_slave_1: left promiscuous mode
[  199.834322][T15146] nbd3: detected capacity change from 0 to 127
[  199.840556][   T56] block nbd3: Receive control failed (result -104)
[  199.843713][ T9310] block nbd3: Receive control failed (result -32)
[  200.104566][T15193] pim6reg1: entered allmulticast mode
[  200.122555][ T6335] tipc: Subscription rejected, illegal request
[  200.308483][T15213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.310884][T15213] syzkaller0: entered promiscuous mode
[  200.312559][T15213] syzkaller0: entered allmulticast mode
[  200.358540][T15213] tipc: Resetting bearer <eth:syzkaller0>
[  200.361229][T15212] tipc: Resetting bearer <eth:syzkaller0>
[  200.384314][T15212] tipc: Disabling bearer <eth:syzkaller0>
[  200.482950][T15234] __nla_validate_parse: 7 callbacks suppressed
[  200.482961][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3968'.
[  200.488221][T15234] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  200.491305][T15234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3968'.
[  200.562652][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3973'.
[  200.582192][T15247] tipc: Enabled bearer <eth:ip6gre0>, priority 14
[  200.656972][T15253] lo speed is unknown, defaulting to 1000
[  200.784725][T15253] gre0 speed is unknown, defaulting to 1000
[  201.260788][T15299] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3995'.
[  201.274332][T15299] netlink: 'syz.1.3995': attribute type 11 has an invalid length.
[  201.276807][T15299] netlink: 'syz.1.3995': attribute type 23 has an invalid length.
[  201.279216][T15299] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3995'.
[  201.285596][T15299] 
[  201.286360][T15299] ======================================================
[  201.288472][T15299] WARNING: possible circular locking dependency detected
[  201.290565][T15299] syzkaller #0 Not tainted
[  201.291947][T15299] ------------------------------------------------------
[  201.294007][T15299] syz.1.3995/15299 is trying to acquire lock:
[  201.295901][T15299] ffff8881012ad220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180
[  201.299162][T15299] 
[  201.299162][T15299] but task is already holding lock:
[  201.301317][T15299] ffff8881012ad188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130
[  201.304326][T15299] 
[  201.304326][T15299] which lock already depends on the new lock.
[  201.304326][T15299] 
[  201.307462][T15299] 
[  201.307462][T15299] the existing dependency chain (in reverse order) is:
[  201.310491][T15299] 
[  201.310491][T15299] -> #10 (&root->kernfs_rwsem){++++}-{4:4}:
[  201.312859][T15299]        down_write+0x96/0x200
[  201.314336][T15299]        kernfs_add_one+0x41/0x5c0
[  201.315851][T15299]        kernfs_create_dir_ns+0xde/0x130
[  201.317512][T15299]        internal_create_group+0x425/0x1180
[  201.319289][T15299]        cpuhp_invoke_callback+0x445/0x860
[  201.321042][T15299]        cpuhp_issue_call+0x430/0x7a0
[  201.322842][T15299]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  201.325304][T15299]        __cpuhp_setup_state+0x3f/0x60
[  201.326983][T15299]        do_one_initcall+0x250/0x8d0
[  201.328595][T15299]        do_initcall_level+0x104/0x190
[  201.330200][T15299]        do_initcalls+0x59/0xa0
[  201.331723][T15299]        kernel_init_freeable+0x2a6/0x3e0
[  201.333470][T15299]        kernel_init+0x1d/0x1d0
[  201.334942][T15299]        ret_from_fork+0x51e/0xb90
[  201.336674][T15299]        ret_from_fork_asm+0x1a/0x30
[  201.338278][T15299] 
[  201.338278][T15299] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}:
[  201.340628][T15299] 
[  201.340628][T15299] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  201.342914][T15299]        cpus_read_lock+0x42/0x160
[  201.344482][T15299]        static_key_slow_inc+0x12/0x30
[  201.346075][T15299]        udp_tunnel_encap_enable+0xce/0x110
[  201.347865][T15299]        udp_lib_setsockopt+0x790/0x980
[  201.349884][T15299]        udpv6_setsockopt+0x77/0xc0
[  201.351469][T15299]        do_sock_setsockopt+0x17c/0x1b0
[  201.353099][T15299]        __x64_sys_setsockopt+0x13d/0x1b0
[  201.354843][T15299]        do_syscall_64+0x14d/0xf80
[  201.356435][T15299]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.358346][T15299] 
[  201.358346][T15299] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  201.360648][T15299]        lock_sock_nested+0x48/0x100
[  201.362336][T15299]        inet_shutdown+0x6a/0x390
[  201.364225][T15299]        nbd_mark_nsock_dead+0x2e9/0x560
[  201.366011][T15299]        recv_work+0x1c7f/0x1d90
[  201.367536][T15299]        process_scheduled_works+0xb6e/0x18c0
[  201.369352][T15299]        worker_thread+0xa53/0xfc0
[  201.370902][T15299]        kthread+0x388/0x470
[  201.372308][T15299]        ret_from_fork+0x51e/0xb90
[  201.373844][T15299]        ret_from_fork_asm+0x1a/0x30
[  201.375438][T15299] 
[  201.375438][T15299] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  201.377989][T15299]        __mutex_lock+0x19f/0x1300
[  201.379574][T15299]        nbd_queue_rq+0x37b/0x1100
[  201.381067][T15299]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  201.382880][T15299]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  201.384873][T15299]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  201.386830][T15299]        blk_mq_run_hw_queue+0x348/0x4f0
[  201.388547][T15299]        blk_mq_dispatch_list+0xd16/0xe10
[  201.390670][T15299]        blk_mq_flush_plug_list+0x48d/0x570
[  201.392406][T15299]        __blk_flush_plug+0x3ed/0x4d0
[  201.393967][T15299]        __submit_bio+0x28d/0x580
[  201.395481][T15299]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  201.397351][T15299]        block_read_full_folio+0x599/0x830
[  201.399181][T15299]        filemap_read_folio+0x137/0x3b0
[  201.400856][T15299]        do_read_cache_folio+0x358/0x590
[  201.402721][T15299]        read_part_sector+0xb6/0x2b0
[  201.404739][T15299]        adfspart_check_ICS+0xa5/0xa40
[  201.406499][T15299]        bdev_disk_changed+0x7ba/0x1550
[  201.408123][T15299]        blkdev_get_whole+0x380/0x510
[  201.409740][T15299]        bdev_open+0x31e/0xd30
[  201.411130][T15299]        blkdev_open+0x470/0x610
[  201.412593][T15299]        do_dentry_open+0x785/0x14e0
[  201.414260][T15299]        vfs_open+0x3b/0x340
[  201.416054][T15299]        path_openat+0x2e08/0x3860
[  201.418089][T15299]        do_file_open+0x23e/0x4a0
[  201.420030][T15299]        do_sys_openat2+0x113/0x200
[  201.421694][T15299]        __x64_sys_openat+0x138/0x170
[  201.423281][T15299]        do_syscall_64+0x14d/0xf80
[  201.424876][T15299]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.426787][T15299] 
[  201.426787][T15299] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  201.429011][T15299]        __mutex_lock+0x19f/0x1300
[  201.431010][T15299]        nbd_queue_rq+0xc6/0x1100
[  201.432761][T15299]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  201.435095][T15299]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  201.437827][T15299]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  201.440396][T15299]        blk_mq_run_hw_queue+0x348/0x4f0
[  201.442479][T15299]        blk_mq_dispatch_list+0xd16/0xe10
[  201.444243][T15299]        blk_mq_flush_plug_list+0x48d/0x570
[  201.446337][T15299]        __blk_flush_plug+0x3ed/0x4d0
[  201.448532][T15299]        __submit_bio+0x28d/0x580
[  201.450538][T15299]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  201.453022][T15299]        block_read_full_folio+0x599/0x830
[  201.455329][T15299]        filemap_read_folio+0x137/0x3b0
[  201.457589][T15299]        do_read_cache_folio+0x358/0x590
[  201.459796][T15299]        read_part_sector+0xb6/0x2b0
[  201.461877][T15299]        adfspart_check_ICS+0xa5/0xa40
[  201.464087][T15299]        bdev_disk_changed+0x7ba/0x1550
[  201.466049][T15299]        blkdev_get_whole+0x380/0x510
[  201.468041][T15299]        bdev_open+0x31e/0xd30
[  201.469932][T15299]        blkdev_open+0x470/0x610
[  201.471912][T15299]        do_dentry_open+0x785/0x14e0
[  201.474033][T15299]        vfs_open+0x3b/0x340
[  201.475890][T15299]        path_openat+0x2e08/0x3860
[  201.477962][T15299]        do_file_open+0x23e/0x4a0
[  201.479966][T15299]        do_sys_openat2+0x113/0x200
[  201.482064][T15299]        __x64_sys_openat+0x138/0x170
[  201.484215][T15299]        do_syscall_64+0x14d/0xf80
[  201.486314][T15299]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.488862][T15299] 
[  201.488862][T15299] -> #4 (set->srcu){.+.+}-{0:0}:
[  201.491259][T15299]        __synchronize_srcu+0xca/0x300
[  201.493422][T15299]        elevator_switch+0x1e8/0x7a0
[  201.495515][T15299]        elevator_change+0x2cc/0x450
[  201.497586][T15299]        elevator_set_default+0x36c/0x430
[  201.499837][T15299]        blk_register_queue+0x366/0x430
[  201.502040][T15299]        __add_disk+0x677/0xd50
[  201.503948][T15299]        add_disk_fwnode+0xfb/0x480
[  201.506012][T15299]        nbd_dev_add+0x72c/0xb50
[  201.507987][T15299]        nbd_init+0x168/0x1f0
[  201.509904][T15299]        do_one_initcall+0x250/0x8d0
[  201.511737][T15299]        do_initcall_level+0x104/0x190
[  201.513380][T15299]        do_initcalls+0x59/0xa0
[  201.515288][T15299]        kernel_init_freeable+0x2a6/0x3e0
[  201.517583][T15299]        kernel_init+0x1d/0x1d0
[  201.519563][T15299]        ret_from_fork+0x51e/0xb90
[  201.521651][T15299]        ret_from_fork_asm+0x1a/0x30
[  201.523805][T15299] 
[  201.523805][T15299] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  201.526892][T15299]        __mutex_lock+0x19f/0x1300
[  201.529001][T15299]        elevator_change+0x1b3/0x450
[  201.530790][T15299]        elevator_set_none+0xb5/0x140
[  201.532402][T15299]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  201.534749][T15299]        nbd_start_device+0x17f/0xb10
[  201.536900][T15299]        nbd_genl_connect+0x165b/0x1cf0
[  201.539100][T15299]        genl_family_rcv_msg_doit+0x22a/0x330
[  201.541188][T15299]        genl_rcv_msg+0x61c/0x7a0
[  201.542739][T15299]        netlink_rcv_skb+0x232/0x4b0
[  201.544350][T15299]        genl_rcv+0x28/0x40
[  201.545713][T15299]        netlink_unicast+0x80f/0x9b0
[  201.547328][T15299]        netlink_sendmsg+0x813/0xb40
[  201.548938][T15299]        ____sys_sendmsg+0x972/0x9f0
[  201.550559][T15299]        ___sys_sendmsg+0x2a5/0x360
[  201.552123][T15299]        __x64_sys_sendmsg+0x1bd/0x2a0
[  201.553784][T15299]        do_syscall_64+0x14d/0xf80
[  201.555380][T15299]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.557300][T15299] 
[  201.557300][T15299] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  201.559888][T15299]        blk_alloc_queue+0x546/0x680
[  201.561465][T15299]        __blk_mq_alloc_disk+0x197/0x390
[  201.563133][T15299]        nbd_dev_add+0x499/0xb50
[  201.564813][T15299]        nbd_init+0x168/0x1f0
[  201.566567][T15299]        do_one_initcall+0x250/0x8d0
[  201.568087][T15299]        do_initcall_level+0x104/0x190
[  201.569773][T15299]        do_initcalls+0x59/0xa0
[  201.571206][T15299]        kernel_init_freeable+0x2a6/0x3e0
[  201.572859][T15299]        kernel_init+0x1d/0x1d0
[  201.574420][T15299]        ret_from_fork+0x51e/0xb90
[  201.576278][T15299]        ret_from_fork_asm+0x1a/0x30
[  201.577862][T15299] 
[  201.577862][T15299] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  201.579990][T15299]        fs_reclaim_acquire+0x71/0x100
[  201.581631][T15299]        kmem_cache_alloc_noprof+0x40/0x650
[  201.583334][T15299]        __kernfs_iattrs+0xdf/0x340
[  201.584914][T15299]        kernfs_iop_setattr+0xea/0x3f0
[  201.586538][T15299]        notify_change+0xc1a/0xf40
[  201.588035][T15299]        do_truncate+0x1c2/0x250
[  201.589587][T15299]        path_openat+0x2f89/0x3860
[  201.591112][T15299]        do_file_open+0x23e/0x4a0
[  201.592671][T15299]        do_sys_openat2+0x113/0x200
[  201.594252][T15299]        __x64_sys_openat+0x138/0x170
[  201.595847][T15299]        do_syscall_64+0x14d/0xf80
[  201.597401][T15299]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.599289][T15299] 
[  201.599289][T15299] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  201.601758][T15299]        __lock_acquire+0x15a5/0x2cf0
[  201.603326][T15299]        lock_acquire+0xf0/0x2e0
[  201.604814][T15299]        down_write+0x96/0x200
[  201.606288][T15299]        kernfs_unlink_sibling+0x71/0x180
[  201.608202][T15299]        __kernfs_remove+0x3e7/0x660
[  201.609809][T15299]        kernfs_remove_by_name_ns+0xaf/0x130
[  201.611766][T15299]        device_release_driver_internal+0x387/0x870
[  201.613882][T15299]        mac80211_hwsim_new_radio+0x417d/0x5330
[  201.615810][T15299]        hwsim_new_radio_nl+0xf35/0x1bd0
[  201.617492][T15299]        genl_family_rcv_msg_doit+0x22a/0x330
[  201.619309][T15299]        genl_rcv_msg+0x61c/0x7a0
[  201.620801][T15299]        netlink_rcv_skb+0x232/0x4b0
[  201.622639][T15299]        genl_rcv+0x28/0x40
[  201.624484][T15299]        netlink_unicast+0x80f/0x9b0
[  201.626331][T15299]        netlink_sendmsg+0x813/0xb40
[  201.627972][T15299]        ____sys_sendmsg+0x972/0x9f0
[  201.629593][T15299]        ___sys_sendmsg+0x2a5/0x360
[  201.631454][T15299]        __x64_sys_sendmsg+0x1bd/0x2a0
[  201.633303][T15299]        do_syscall_64+0x14d/0xf80
[  201.634980][T15299]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.636917][T15299] 
[  201.636917][T15299] other info that might help us debug this:
[  201.636917][T15299] 
[  201.639963][T15299] Chain exists of:
[  201.639963][T15299]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  201.639963][T15299] 
[  201.644191][T15299]  Possible unsafe locking scenario:
[  201.644191][T15299] 
[  201.646382][T15299]        CPU0                    CPU1
[  201.648037][T15299]        ----                    ----
[  201.649960][T15299]   lock(&root->kernfs_rwsem);
[  201.651567][T15299]                                lock(cpuhp_state_mutex);
[  201.653713][T15299]                                lock(&root->kernfs_rwsem);
[  201.656035][T15299]   lock(&root->kernfs_iattr_rwsem);
[  201.657866][T15299] 
[  201.657866][T15299]  *** DEADLOCK ***
[  201.657866][T15299] 
[  201.660433][T15299] 4 locks held by syz.1.3995/15299:
[  201.662017][T15299]  #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  201.664787][T15299]  #1: ffffffff8fc3cd48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  201.667870][T15299]  #2: ffff88810c6b0130 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870
[  201.671193][T15299]  #3: ffff8881012ad188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130
[  201.674404][T15299] 
[  201.674404][T15299] stack backtrace:
[  201.676296][T15299] CPU: 0 UID: 0 PID: 15299 Comm: syz.1.3995 Not tainted syzkaller #0 PREEMPT(full) 
[  201.676306][T15299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.676311][T15299] Call Trace:
[  201.676317][T15299]  <TASK>
[  201.676321][T15299]  dump_stack_lvl+0xe8/0x150
[  201.676335][T15299]  print_circular_bug+0x2e1/0x300
[  201.676348][T15299]  check_noncircular+0x12e/0x150
[  201.676389][T15299]  __lock_acquire+0x15a5/0x2cf0
[  201.676407][T15299]  ? __lock_acquire+0x6b5/0x2cf0
[  201.676426][T15299]  lock_acquire+0xf0/0x2e0
[  201.676438][T15299]  ? kernfs_unlink_sibling+0x71/0x180
[  201.676448][T15299]  down_write+0x96/0x200
[  201.676457][T15299]  ? kernfs_unlink_sibling+0x71/0x180
[  201.676464][T15299]  ? __pfx_down_write+0x10/0x10
[  201.676473][T15299]  ? kernfs_root+0x1c/0x230
[  201.676482][T15299]  ? kernfs_root+0x1c/0x230
[  201.676491][T15299]  ? kernfs_root+0x1c/0x230
[  201.676501][T15299]  ? kernfs_root+0x1ea/0x230
[  201.676510][T15299]  kernfs_unlink_sibling+0x71/0x180
[  201.676518][T15299]  __kernfs_remove+0x3e7/0x660
[  201.676525][T15299]  kernfs_remove_by_name_ns+0xaf/0x130
[  201.676534][T15299]  device_release_driver_internal+0x387/0x870
[  201.676546][T15299]  mac80211_hwsim_new_radio+0x417d/0x5330
[  201.676559][T15299]  ? __pfx__printk+0x10/0x10
[  201.676566][T15299]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  201.676575][T15299]  ? rcu_is_watching+0x15/0xb0
[  201.676586][T15299]  hwsim_new_radio_nl+0xf35/0x1bd0
[  201.676598][T15299]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.676608][T15299]  ? rcu_is_watching+0x15/0xb0
[  201.676617][T15299]  ? trace_kmalloc+0x2a/0x110
[  201.676626][T15299]  ? __nla_parse+0x40/0x60
[  201.676634][T15299]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  201.676644][T15299]  genl_family_rcv_msg_doit+0x22a/0x330
[  201.676658][T15299]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  201.676672][T15299]  ? bpf_lsm_capable+0x9/0x20
[  201.676682][T15299]  ? security_capable+0x7e/0x2c0
[  201.676693][T15299]  genl_rcv_msg+0x61c/0x7a0
[  201.676702][T15299]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.676710][T15299]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.676718][T15299]  ? __lock_acquire+0x6b5/0x2cf0
[  201.676728][T15299]  netlink_rcv_skb+0x232/0x4b0
[  201.676739][T15299]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.676747][T15299]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.676759][T15299]  ? down_read+0x272/0x2e0
[  201.676767][T15299]  ? genl_rcv+0xd/0x40
[  201.676775][T15299]  genl_rcv+0x28/0x40
[  201.676782][T15299]  netlink_unicast+0x80f/0x9b0
[  201.676793][T15299]  ? __pfx_netlink_unicast+0x10/0x10
[  201.676803][T15299]  ? netlink_sendmsg+0x650/0xb40
[  201.676809][T15299]  ? skb_put+0x11b/0x210
[  201.676816][T15299]  netlink_sendmsg+0x813/0xb40
[  201.676824][T15299]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.676831][T15299]  ? aa_sock_msg_perm+0xf1/0x1b0
[  201.676841][T15299]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.676849][T15299]  ____sys_sendmsg+0x972/0x9f0
[  201.676857][T15299]  ? futex_unqueue+0x211/0x240
[  201.676867][T15299]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.676875][T15299]  ? import_iovec+0x73/0xa0
[  201.676883][T15299]  ___sys_sendmsg+0x2a5/0x360
[  201.676892][T15299]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.676901][T15299]  ? futex_wait+0x29a/0x380
[  201.676915][T15299]  ? __fget_files+0x2a/0x420
[  201.676925][T15299]  ? __fget_files+0x3a0/0x420
[  201.676936][T15299]  __x64_sys_sendmsg+0x1bd/0x2a0
[  201.676944][T15299]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.676956][T15299]  do_syscall_64+0x14d/0xf80
[  201.676964][T15299]  ? trace_irq_disable+0x3b/0x150
[  201.676970][T15299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.676978][T15299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.676986][T15299] RIP: 0033:0x7f224339c819
[  201.676995][T15299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.677001][T15299] RSP: 002b:00007f22415ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.677010][T15299] RAX: ffffffffffffffda RBX: 00007f2243615fa0 RCX: 00007f224339c819
[  201.677015][T15299] RDX: 0000000004008080 RSI: 00002000000001c0 RDI: 000000000000000d
[  201.677020][T15299] RBP: 00007f2243432c91 R08: 0000000000000000 R09: 0000000000000000
[  201.677024][T15299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.677028][T15299] R13: 00007f2243616038 R14: 00007f2243615fa0 R15: 00007fff1634e0e8
[  201.677036][T15299]  </TASK>
[  201.678620][T15300] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  201.732048][T15299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3995'.
[  201.824711][T15299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3995'.
[  201.829459][T15299] gretap2: entered promiscuous mode
[  208.883483][  T127] block nbd3: Connection timed out, retrying (0/2 alive)
[  208.886226][  T127] block nbd3: Connection timed out, retrying (0/2 alive)
[  208.888938][  T127] block nbd3: Connection timed out, retrying (0/2 alive)
[  208.891618][  T127] block nbd3: Connection timed out, retrying (0/2 alive)
[  208.894666][  T127] block nbd3: Dead connection, failed to find a fallback
[  208.897406][  T127] block nbd3: shutting down sockets
[  208.899432][  T127] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  208.903467][  T127] Buffer I/O error on dev nbd3, logical block 3, async page read
[  208.906546][  T127] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  208.910132][  T127] Buffer I/O error on dev nbd3, logical block 2, async page read
[  208.913068][  T127] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  208.916767][  T127] Buffer I/O error on dev nbd3, logical block 1, async page read
[  208.919733][  T127] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  208.923581][  T127] Buffer I/O error on dev nbd3, logical block 0, async page read
[  208.926712][T14675] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  208.930474][T14675] Buffer I/O error on dev nbd3, logical block 0, async page read
[  208.933967][T14675] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  208.937793][T14675] Buffer I/O error on dev nbd3, logical block 1, async page read
[  208.940869][T14675] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  208.945459][T14675] Buffer I/O error on dev nbd3, logical block 2, async page read
[  208.948571][T14675] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  208.952366][T14675] Buffer I/O error on dev nbd3, logical block 3, async page read
[  208.955849][T14675] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  208.959525][T14675] Buffer I/O error on dev nbd3, logical block 0, async page read
[  208.962542][T14675] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  208.966901][T14675] Buffer I/O error on dev nbd3, logical block 1, async page read
[  208.970360][T14675] ldm_validate_partition_table(): Disk read failed.
[  208.973523][T14675] Dev nbd3: unable to read RDB block 0
[  208.976202][T14675]  nbd3: unable to read partition table
[  208.980391][T14675] ldm_validate_partition_table(): Disk read failed.
[  208.983659][T14675] Dev nbd3: unable to read RDB block 0
[  208.986204][T14675]  nbd3: unable to read partition table
