last executing test programs:

1.341258845s ago: executing program 2 (id=8093):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x17, &(0x7f0000000540)=""/23, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)

1.221769497s ago: executing program 2 (id=8097):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="c16b90ad0f0000004193fc04574d3ca94f95bdef8a6701633b8bd1cfecb4c0bbc0c62d3e3b7d4578bd360ea718afacbfd6c7559a0363ec0d3e901cf5eb094e044c36a7e312576131f1c2de4c159d29ab0c76798f3c75cf5d68d137fe86e1d0b8baa2f8d1b3c6f655cc", 0x69}], 0x1, 0x0, 0x0, 0x44000}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}, 0x6}], 0x1, 0x40002101, 0x0)

1.221132053s ago: executing program 2 (id=8099):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4)

1.031322871s ago: executing program 2 (id=8100):
r0 = socket$inet6(0xa, 0x1, 0x0)
listen(r0, 0x50)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x400)
listen(r4, 0xc78)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

407.250645ms ago: executing program 0 (id=8120):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

342.034621ms ago: executing program 0 (id=8121):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0xcb}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

341.351198ms ago: executing program 1 (id=8122):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x4402}, 0x0)

341.202838ms ago: executing program 0 (id=8123):
syz_emit_ethernet(0x2a, &(0x7f0000002000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @echo={0x8, 0x0, 0x0, 0x2}}}}}, 0x0)

340.817321ms ago: executing program 1 (id=8124):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@fwd={0x7}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0x30, 0x0, 0x5f, 0x5f]}}, 0x0, 0x45}, 0x28)

281.089547ms ago: executing program 0 (id=8125):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x3, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x20)

280.543357ms ago: executing program 1 (id=8126):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @loopback}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="07ef00", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0xc6, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @link_local, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@rand_addr=0x64010100, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0xfd, 0x0, 0x0, 0x9, 0xffffffff, 0x4}, {0x0, 0x200, 0x4}, 0x2000, 0x6e6b35, 0x2, 0x0, 0x1}}, 0xb8}}, 0x24000080)
socket$packet(0x11, 0x3, 0x300)
write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="07009875f37538e484dd63d7fa5ad0109989e1641af025ec4fb2aa9aa3c2d373f39a4d397feacc617743b8e90a56c9a0fcbe42e8651369795815891b148badd4c2db321e262c66bc92bda4e2bbe7cc267eefc8352a779a30a0c099ed64505cd66df6a5a60b70bd13a88d4fd44771e2b9a18def69bc04b750c90b429419affca4300b6691d540fd2fbbd28ed33b60bdd45c22901a984f17b4f0899731669633da1fff8ca4dcdd7aa76fdff38f9ddc998a1a8b6bd7b05fc920ac5d77c5760e8cf09dd81e708430"], 0x5c47)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

279.928809ms ago: executing program 0 (id=8127):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8010)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r6, 0x25, 0x8, @void}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002200)={{0x1, <r10=>0xffffffffffffffff}, 0x0, &(0x7f00000021c0)='%pS    \x00'}, 0x20)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x5, 0x28, &(0x7f00000019c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff9c2, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb11d5864d2e1fe8e}}, @call={0x85, 0x0, 0x0, 0x9a}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6}]}, 0x0, 0x0, 0xd2, &(0x7f0000001b40)=""/210, 0x40f00, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001c80)={0x5, 0x2, 0x7, 0x8000}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001cc0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r10], &(0x7f0000001d00)=[{0x4, 0x3, 0x2, 0x8}, {0x3, 0x5, 0xc, 0x1}, {0x1, 0x4, 0x6, 0xc}, {0x1, 0x5, 0x5, 0x3}, {0x1, 0x5, 0xa, 0xa}, {0x0, 0x3, 0x0, 0x8}, {0x1, 0x3, 0x6, 0x5}, {0x3, 0x2, 0x2, 0x2}, {0x4, 0x5, 0x6, 0xb}, {0x2, 0x3, 0xe}], 0x10, 0x100}, 0x94)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1)
ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001fc0)={r11, 0xffffffffffffffff, 0x22, 0x0, @val=@uprobe_multi={&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)=[0x5, 0x3, 0x8], &(0x7f0000001f00)=[0x0, 0x5, 0x2, 0x4, 0x4, 0x0, 0x1, 0x3, 0x0], 0x3be4, 0x3, 0x1}}, 0x40)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffbfff7f}, 0xc)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002140)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002100)={&(0x7f0000002000)={0xcc, 0x0, 0x22, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5c39}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xe}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc080}, 0x480c0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

158.998159ms ago: executing program 2 (id=8128):
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400400d}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804)

158.555095ms ago: executing program 2 (id=8129):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512-generic,ecb-twofish-avx)\x00'}, 0x58)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2c020400)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x48, r5, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4)
syz_emit_ethernet(0x82, &(0x7f0000000480)=ANY=[], 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x9, 0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
close(0x3)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r11, @ANYBLOB="000226bd7000fbdbdf2509000000000001007063690000000200303030303a30303a31302e30000000002bff0300010000000800090042000000080001007063690011000200303030533a30303a31302e3000000000080003000200000008000900040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090003000000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x40)

79.559311ms ago: executing program 1 (id=8130):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

79.145639ms ago: executing program 1 (id=8131):
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xa794, 0xf5, &(0x7f0000000300)=""/245, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x16, 0x301, 0x0, 0x0, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}}, 0x0)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000a80)=@hci={0x1f, 0x300, 0x6}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000013c0)="62031400d70000000010122f1eafbcf72be12b30087f5c582d26116642", 0x1d}, {&(0x7f0000002380)="935deb19b2b890c21382bf1f79aa9b071cd87f9e1138bd", 0x17}], 0x2}, 0x4041)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r11, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

20.892782ms ago: executing program 0 (id=8132):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b2af8ff00000000b509000004000000c38af8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000460bf0ff76000000bf98000000000000d608000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071"], &(0x7f0000000480)='GPL\x00'}, 0x94)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e4fffffffffffbff", "9da152000004b4991192c0029200", "b6730761", "cbc5f9dc4dab64ec"}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={0x0, 0x3, 0x6}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000120005ff00000000000000000000004a", @ANYBLOB="2482000000020000180012800e00010077697265640000000400028000000000"], 0x38}}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)

0s ago: executing program 1 (id=8133):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x6}, 0x8)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20)
close(0x3)

kernel console output (not intermixed with test programs):

s an invalid length.
[  198.666501][T12618] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2992'.
[  198.782316][T12635] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2998'.
[  199.244596][T12660] netlink: 'syz.1.3005': attribute type 1 has an invalid length.
[  199.356393][T12605] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  199.359108][T12605] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  199.364581][T12605] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  199.370705][T12605] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  199.391346][T12605] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  199.395232][T12605] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  199.626677][T12674] __nla_validate_parse: 1 callbacks suppressed
[  199.626688][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'.
[  199.656637][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3012'.
[  199.875067][T12695] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  199.898708][T12698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3022'.
[  199.982171][T12704] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  200.118305][T12710] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3028'.
[  200.126035][T12710] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3028'.
[  200.164308][T12712] geneve1: Caught tx_queue_len zero misconfig
[  200.325011][T12727] netlink: 296 bytes leftover after parsing attributes in process `syz.0.3036'.
[  200.751066][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3057'.
[  200.767211][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3059'.
[  200.838620][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3059'.
[  200.861330][T12790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3064'.
[  200.864263][T12790] tunl0: Caught tx_queue_len zero misconfig
[  200.925648][T12796] bond1: (slave lo): Releasing backup interface
[  200.928945][T12796] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  200.937629][T12796] bridge_slave_0: left allmulticast mode
[  200.941684][T12796] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.946829][T12796] bridge_slave_1: left allmulticast mode
[  200.952580][T12796] bridge_slave_1: left promiscuous mode
[  200.954870][T12796] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.962282][T12796] bond0: (slave bond_slave_0): Releasing backup interface
[  200.966582][T12796] bond0: (slave bond_slave_1): Releasing backup interface
[  200.973287][T12796] team0: Port device team_slave_0 removed
[  200.976432][T12796] team0: Port device team_slave_1 removed
[  200.980280][T12796] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.983033][T12796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  201.006214][T12802] netlink: 'syz.2.3071': attribute type 1 has an invalid length.
[  201.220005][T12823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  202.197756][T12891] netlink: 'syz.2.3113': attribute type 1 has an invalid length.
[  202.201294][T12891] netlink: 'syz.2.3113': attribute type 1 has an invalid length.
[  202.547242][T12908] tipc: Enabled bearer <eth:vcan0>, priority 10
[  203.031495][T12929] netlink: 'syz.1.3128': attribute type 4 has an invalid length.
[  203.041641][T12929] netlink: 'syz.1.3128': attribute type 4 has an invalid length.
[  203.047838][T12929] netlink: 'syz.1.3128': attribute type 4 has an invalid length.
[  203.097255][T12933] xt_hashlimit: size too large, truncated to 1048576
[  203.122490][T12935] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  203.126749][T12935] pim6reg1: entered promiscuous mode
[  203.129856][T12935] pim6reg1: entered allmulticast mode
[  203.189724][T12939] tipc: Enabled bearer <udp:s>, priority 10
[  203.493186][T12952] 8021q: adding VLAN 0 to HW filter on device bond7
[  203.511283][T12952] bond6: (slave bond7): Enslaving as an active interface with an up link
[  203.526075][T12961] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  203.644343][T12970] netlink: 'syz.0.3140': attribute type 178 has an invalid length.
[  204.298787][ T5241] tipc: Node number set to 3711049027
[  204.365768][T13044] syzkaller0: entered promiscuous mode
[  204.367565][T13044] syzkaller0: entered allmulticast mode
[  204.647750][T13067] __nla_validate_parse: 14 callbacks suppressed
[  204.647762][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3180'.
[  205.357392][T13085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3186'.
[  205.465673][T13089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3188'.
[  205.757524][T13096] netlink: 'syz.0.3191': attribute type 13 has an invalid length.
[  205.762436][T13096] netlink: 'syz.0.3191': attribute type 17 has an invalid length.
[  205.800806][T13096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  205.803984][T13096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.811031][T13096] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  205.946281][T13099] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  206.255854][T13142] netlink: 'syz.2.3213': attribute type 1 has an invalid length.
[  206.259693][T13142] netlink: 'syz.2.3213': attribute type 4 has an invalid length.
[  206.262995][T13142] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3213'.
[  206.270036][T13142] netlink: 'syz.2.3213': attribute type 1 has an invalid length.
[  206.272695][T13142] netlink: 'syz.2.3213': attribute type 4 has an invalid length.
[  206.275138][T13142] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3213'.
[  206.322435][T13147] sctp: [Deprecated]: syz.1.3214 (pid 13147) Use of int in max_burst socket option deprecated.
[  206.322435][T13147] Use struct sctp_assoc_value instead
[  206.470164][T13154] sctp: [Deprecated]: syz.0.3218 (pid 13154) Use of struct sctp_assoc_value in delayed_ack socket option.
[  206.470164][T13154] Use struct sctp_sack_info instead
[  206.475400][T13154] sctp: [Deprecated]: syz.0.3218 (pid 13154) Use of struct sctp_assoc_value in delayed_ack socket option.
[  206.475400][T13154] Use struct sctp_sack_info instead
[  206.486501][T13154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.500021][T13154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.311239][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3239'.
[  207.451510][T13215] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  207.517235][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3252'.
[  207.521748][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3252'.
[  207.524382][T13223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'.
[  207.524859][T13222] netlink: 58 bytes leftover after parsing attributes in process `syz.2.3252'.
[  207.672767][T13235] netlink: 'syz.2.3258': attribute type 1 has an invalid length.
[  207.692533][T13235] bond8: entered promiscuous mode
[  207.694433][T13235] 8021q: adding VLAN 0 to HW filter on device bond8
[  207.717335][T13235] veth9: entered promiscuous mode
[  207.719925][T13235] veth9: entered allmulticast mode
[  207.734300][T13235] bond8: (slave veth9): Enslaving as a backup interface with a down link
[  207.786844][T13246] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  208.393698][T13262] macvtap1: entered promiscuous mode
[  208.395989][T13262] macvtap1: entered allmulticast mode
[  208.398849][T13262] veth1_vlan: entered allmulticast mode
[  208.415461][T13264] macvtap2: entered promiscuous mode
[  208.417463][T13264] macvtap2: entered allmulticast mode
[  208.634677][T13280] netlink: 'syz.1.3276': attribute type 11 has an invalid length.
[  208.874648][T13299] netlink: 'syz.0.3284': attribute type 1 has an invalid length.
[  208.899428][T13299] 8021q: adding VLAN 0 to HW filter on device bond8
[  208.933362][T13299] veth9: entered allmulticast mode
[  208.937114][T13299] bond8: (slave veth9): Enslaving as an active interface with an up link
[  208.959214][T13299] bond8 (unregistering): (slave veth9): Releasing backup interface
[  208.967264][T13299] bond8 (unregistering): Released all slaves
[  208.995045][T13304] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  209.309740][T13326] netlink: 'syz.2.3298': attribute type 1 has an invalid length.
[  209.323949][T13326] bond9: entered promiscuous mode
[  209.326239][T13326] 8021q: adding VLAN 0 to HW filter on device bond9
[  209.341656][T13326] 8021q: adding VLAN 0 to HW filter on device bond9
[  209.344718][T13326] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address
[  209.348808][T13326] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  209.355224][T13326] bond9: (slave wireguard0): making interface the new active one
[  209.359096][T13326] wireguard0: entered promiscuous mode
[  209.362755][T13326] bond9: (slave wireguard0): Enslaving as an active interface with an up link
[  209.985312][T13365] __nla_validate_parse: 2 callbacks suppressed
[  209.985323][T13365] netlink: 540 bytes leftover after parsing attributes in process `syz.2.3313'.
[  209.992295][T13365] netlink: 540 bytes leftover after parsing attributes in process `syz.2.3313'.
[  210.277192][T13380] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3320'.
[  210.280344][T13380] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3320'.
[  210.341504][T13388] tipc: New replicast peer: 255.255.255.255
[  210.343810][T13388] tipc: Enabled bearer <udp:syz2>, priority 10
[  210.572906][T13401] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  210.622094][T13403] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3331'.
[  211.083323][T13427] validate_nla: 2 callbacks suppressed
[  211.083343][T13427] netlink: 'syz.0.3343': attribute type 1 has an invalid length.
[  211.313429][T13440] SET target dimension over the limit!
[  211.614125][T13465] x_tables: unsorted underflow at hook 1
[  211.687229][T13472] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3361'.
[  211.776882][T13478] netlink: 'syz.0.3365': attribute type 1 has an invalid length.
[  211.811535][T13478] 8021q: adding VLAN 0 to HW filter on device bond8
[  212.063398][T13498] netlink: 'syz.0.3373': attribute type 10 has an invalid length.
[  212.137790][T13501] veth0: entered promiscuous mode
[  212.173600][T13501] bond0: entered promiscuous mode
[  212.269978][T13497] bond0: left promiscuous mode
[  212.271757][T13497] veth0: left promiscuous mode
[  212.312090][T13504] geneve2: left promiscuous mode
[  212.314724][T13504] geneve2: left allmulticast mode
[  212.361623][T13504] bridge4: left promiscuous mode
[  212.363371][T13504] bridge4: left allmulticast mode
[  212.367623][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.374780][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[  212.381096][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.388274][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[  212.396453][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.402688][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[  212.407766][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.418777][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[  212.658220][T13535] block nbd0: server does not support multiple connections per device.
[  212.661605][T13535] block nbd0: shutting down sockets
[  212.726028][T13539] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.3389'.
[  212.984572][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3397'.
[  213.105303][T13561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3400'.
[  213.207229][T13565] IPv6: Can't replace route, no match found
[  213.211080][T13565] IPv6: Can't replace route, no match found
[  213.237297][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3403'.
[  213.505432][T13594] veth0: Caught tx_queue_len zero misconfig
[  213.590896][T13597] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  213.696464][T13606] netlink: 'syz.1.3421': attribute type 21 has an invalid length.
[  213.756447][T13611] tunl0: Caught tx_queue_len zero misconfig
[  213.782830][T13612] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  214.533810][T13669] batadv_slave_0: entered promiscuous mode
[  214.536994][T13668] batadv_slave_0: left promiscuous mode
[  214.622448][T13671] 8021q: adding VLAN 0 to HW filter on device bond4
[  214.640238][T13671] bond4: entered promiscuous mode
[  214.643596][T13671] bond4: entered allmulticast mode
[  214.649680][T13671] 8021q: adding VLAN 0 to HW filter on device bond4
[  214.657372][T13671] team0: Port device bond4 added
[  214.669516][T13671] team_slave_1: entered promiscuous mode
[  214.677542][T13671] team0: Port device team_slave_1 removed
[  214.692920][T13671] team_slave_1: entered allmulticast mode
[  214.701185][T13671] bond4: (slave team_slave_1): Enslaving as an active interface with an up link
[  215.012277][T13695] netlink: 'syz.0.3447': attribute type 2 has an invalid length.
[  215.019528][T13695] netlink: 'syz.0.3447': attribute type 2 has an invalid length.
[  215.364584][T13703] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  215.379667][T13703] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  215.466528][T13704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.699374][T13719] netlink: 'syz.0.3460': attribute type 1 has an invalid length.
[  215.702037][T13719] __nla_validate_parse: 2 callbacks suppressed
[  215.702046][T13719] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3460'.
[  215.850041][T13727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3464'.
[  216.040683][T13737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.047117][T13737] tipc: Resetting bearer <eth:syzkaller0>
[  216.089167][T13739] netlink: 'syz.0.3470': attribute type 4 has an invalid length.
[  216.093829][T13739] netlink: 'syz.0.3470': attribute type 4 has an invalid length.
[  216.223451][T13747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3474'.
[  216.347458][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3478'.
[  216.387480][T13755] bond9: entered promiscuous mode
[  216.390042][T13755] bond9: entered allmulticast mode
[  216.521447][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'.
[  216.667364][T13775] hmac(sha224: entered promiscuous mode
[  216.789147][T13788] netlink: 'syz.1.3493': attribute type 1 has an invalid length.
[  217.010034][T13814] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  217.327379][T13839] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3517'.
[  217.331097][T13839] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3517'.
[  217.362319][T13851] syzkaller0: entered promiscuous mode
[  217.364238][T13851] syzkaller0: entered allmulticast mode
[  217.462678][T13862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.514307][T13870] netlink: 'syz.2.3530': attribute type 21 has an invalid length.
[  217.516706][T13870] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3530'.
[  217.519725][T13870] netlink: 'syz.2.3530': attribute type 4 has an invalid length.
[  217.522135][T13870] netlink: 'syz.2.3530': attribute type 5 has an invalid length.
[  217.524376][T13870] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3530'.
[  217.562001][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3531'.
[  217.696659][T13888] vlan3: entered promiscuous mode
[  217.698770][T13888] gretap0: entered promiscuous mode
[  217.825297][T13895] Unsupported ieee802154 address type: 0
[  218.106001][T13911] bond5: entered promiscuous mode
[  218.109077][T13911] 8021q: adding VLAN 0 to HW filter on device bond5
[  218.384736][T13926] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  218.391938][T13926] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  218.408477][T13926] bond0: Caught tx_queue_len zero misconfig
[  218.862016][T13965] netlink: 'syz.1.3574': attribute type 22 has an invalid length.
[  218.867026][T13965] netlink: 'syz.1.3574': attribute type 1 has an invalid length.
[  218.963539][T13976] bond10: option arp_interval: invalid value (18446744073709551615)
[  218.968749][T13976] bond10: option arp_interval: allowed values 0 - 2147483647
[  218.973049][T13976] bond10 (unregistering): Released all slaves
[  219.027890][T13984] veth0_vlan: entered allmulticast mode
[  219.102521][T13981] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  219.195407][T13998] SET target dimension over the limit!
[  220.194088][T14024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.306673][T14034] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  220.467686][T14045] veth0: entered promiscuous mode
[  220.471627][T14045] veth0: left promiscuous mode
[  221.138820][T14052] __nla_validate_parse: 11 callbacks suppressed
[  221.138832][T14052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3613'.
[  221.960275][T14093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3630'.
[  222.471159][T14149] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3652'.
[  222.474849][T14149] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3652'.
[  222.482921][T14149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3652'.
[  223.453627][T14188] netlink: 'syz.0.3669': attribute type 10 has an invalid length.
[  223.467092][T14188] tap0: tun_chr_ioctl cmd 1074025677
[  223.472372][T14188] tap0: linktype set to 773
[  223.487641][T14188] : entered promiscuous mode
[  223.613304][T14194] netlink: 'syz.0.3672': attribute type 21 has an invalid length.
[  223.628165][T14194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3672'.
[  223.634026][T14194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3672'.
[  224.413837][T14266] tipc: New replicast peer: 172.20.20.170
[  224.416191][T14266] tipc: Enabled bearer <udp:syz2>, priority 10
[  224.471911][T14270] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  224.770393][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3711'.
[  225.120845][T14287] netlink: 'syz.2.3714': attribute type 10 has an invalid length.
[  225.123876][T14287] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3714'.
[  225.226806][T14293] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.3717'.
[  225.363513][T14303] netlink: 'syz.2.3722': attribute type 4 has an invalid length.
[  225.381558][T14303] netlink: 'syz.2.3722': attribute type 4 has an invalid length.
[  225.455966][T14303] veth1_vlan: left allmulticast mode
[  226.298969][T14351] __nla_validate_parse: 2 callbacks suppressed
[  226.298984][T14351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3742'.
[  226.341024][T14360] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  226.721268][T14392] netlink: 'syz.0.3758': attribute type 2 has an invalid length.
[  227.158725][T14421] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3772'.
[  227.162717][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3772'.
[  227.165929][T14421] netlink: 'syz.0.3772': attribute type 1 has an invalid length.
[  227.278980][T14430] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3776'.
[  227.337384][T14430] bridge0: left promiscuous mode
[  227.341315][T14430] tipc: Resetting bearer <eth:vcan0>
[  227.345426][T14430] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.353059][T14430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.395068][T14430] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  227.486463][T14440] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  227.644185][T14457] netlink: 'syz.2.3786': attribute type 1 has an invalid length.
[  227.647290][T14457] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3786'.
[  227.801901][T14473] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3795'.
[  227.807211][T14473] ksmbd: Unknown IPC event: 1, ignore.
[  228.100867][T14500] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3806'.
[  228.410115][T14530] netlink: 'syz.1.3819': attribute type 29 has an invalid length.
[  228.430040][T14530] netlink: 'syz.1.3819': attribute type 29 has an invalid length.
[  228.434306][T14530] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3819'.
[  228.633227][T14554] ip6tnl0: Caught tx_queue_len zero misconfig
[  228.635194][T14554] netlink: 844 bytes leftover after parsing attributes in process `syz.2.3830'.
[  228.923255][T14584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3841'.
[  229.100931][T14593] vlan6: entered promiscuous mode
[  229.103744][T14593] gretap0: entered promiscuous mode
[  229.458635][T14615] xt_hashlimit: invalid rate
[  229.580217][T14622] validate_nla: 1 callbacks suppressed
[  229.580227][T14622] netlink: 'syz.0.3856': attribute type 10 has an invalid length.
[  229.971243][T14653] netlink: 'syz.2.3868': attribute type 3 has an invalid length.
[  230.100121][T14661] smc: net device wlan0 erased user defined pnetid SYZ0
[  230.426796][T14682] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  230.467603][T14682] bond6 (unregistering): Released all slaves
[  231.043170][T14731] netlink: 'syz.2.3905': attribute type 1 has an invalid length.
[  231.099304][T14735] syzkaller1: entered promiscuous mode
[  231.105314][T14735] syzkaller1: entered allmulticast mode
[  231.292177][T14757] xt_ecn: cannot match TCP bits for non-tcp packets
[  231.717643][T14803] __nla_validate_parse: 11 callbacks suppressed
[  231.717658][T14803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3939'.
[  231.812334][T14812] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  231.815047][T14812] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  231.871022][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3945'.
[  231.875702][T14814] syzkaller0: entered promiscuous mode
[  231.877408][T14814] syzkaller0: entered allmulticast mode
[  231.881608][T14814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3944'.
[  231.884978][T14814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3944'.
[  231.959540][T14819] ip6_vti0: Caught tx_queue_len zero misconfig
[  232.164709][T14840] netlink: 'syz.2.3954': attribute type 1 has an invalid length.
[  232.167411][T14841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3956'.
[  232.434523][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3967'.
[  232.452582][T14863] bond0: entered promiscuous mode
[  232.454707][T14863] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.464986][T14863] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.472290][T14863] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[  232.476454][T14863] bond0: (slave vti0): Error -95 calling set_mac_address
[  232.551307][T14876] bond10: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms
[  232.554592][T14876] bond10: entered promiscuous mode
[  232.622447][ T5669] bond0 (unregistering): Released all slaves
[  232.785297][T14898] netlink: 'syz.1.3982': attribute type 4 has an invalid length.
[  232.788540][T14898] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3982'.
[  232.993349][T14918] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3992'.
[  233.830849][T14971] netlink: 'syz.2.4014': attribute type 1 has an invalid length.
[  233.837464][T14971] netlink: 'syz.2.4014': attribute type 2 has an invalid length.
[  234.186465][T15004] netlink: 'syz.1.4030': attribute type 58 has an invalid length.
[  234.195116][T15004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4030'.
[  234.276251][T15010] dummy0: mtu less than device minimum
[  234.429825][T15020] netlink: 180568 bytes leftover after parsing attributes in process `syz.0.4038'.
[  234.672472][T15028] policy can only be matched on NF_INET_PRE_ROUTING
[  234.672484][T15028] unable to load match
[  235.104891][T15042] xt_HMARK: proto mask must be zero with L3 mode
[  235.142353][T15046] netlink: 'syz.2.4050': attribute type 14 has an invalid length.
[  235.145291][T15046] bond0: option xmit_hash_policy: invalid value (191)
[  235.377599][T15067] x_tables: duplicate underflow at hook 4
[  235.473538][T15073] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  235.485710][T15073] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  235.493870][T15075] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  235.547400][T15080] sctp: [Deprecated]: syz.0.4066 (pid 15080) Use of struct sctp_assoc_value in delayed_ack socket option.
[  235.547400][T15080] Use struct sctp_sack_info instead
[  235.740896][T15108] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  235.743274][T15108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.760011][T15111] netlink: 'syz.0.4081': attribute type 9 has an invalid length.
[  236.373389][T15164] netlink: 'syz.0.4104': attribute type 1 has an invalid length.
[  236.681084][T15180] netlink: 'syz.2.4112': attribute type 3 has an invalid length.
[  236.723381][T15183] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  236.726467][T15183] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  236.939395][T15202] __nla_validate_parse: 7 callbacks suppressed
[  236.939405][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4121'.
[  237.386696][T15241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4141'.
[  237.412639][T15241] veth1_vlan: left promiscuous mode
[  237.415138][T15241] veth0_vlan: left promiscuous mode
[  237.417550][T15241] veth0_vlan: entered promiscuous mode
[  237.422394][T15241] veth1_vlan: entered promiscuous mode
[  237.426876][T15241] veth1_macvtap: left promiscuous mode
[  237.430292][T15241] veth0_macvtap: left promiscuous mode
[  237.433475][T15241] veth0_macvtap: entered promiscuous mode
[  237.436395][T15241] veth1_macvtap: entered promiscuous mode
[  237.447256][T15241] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  237.450597][T15241] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  237.453681][T15241] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  237.456427][T15241] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  237.459955][T15241] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  237.507519][ T6547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.516547][ T6547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.541306][ T6547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.556803][ T6547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.590034][T15257] netlink: 'syz.2.4146': attribute type 2 has an invalid length.
[  237.595843][T15257] netlink: 'syz.2.4146': attribute type 9 has an invalid length.
[  237.600115][T15257] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4146'.
[  237.793400][T15272] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4153'.
[  237.796937][T15272] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4153'.
[  237.800571][T15272] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  237.801272][T15273] netlink: 'syz.0.4154': attribute type 6 has an invalid length.
[  237.810115][T15273] netlink: 3936 bytes leftover after parsing attributes in process `syz.0.4154'.
[  237.814579][T15273] netlink: 'syz.0.4154': attribute type 1 has an invalid length.
[  237.817453][T15273] block nbd0: Unsupported socket: should be TCP or UNIX.
[  238.834876][T15344] xt_hashlimit: size too large, truncated to 1048576
[  238.882581][T15347] netlink: 'syz.2.4188': attribute type 13 has an invalid length.
[  238.948471][T15350] netlink: 'syz.0.4187': attribute type 1 has an invalid length.
[  238.967409][T15350] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4187'.
[  238.993888][T15347] tipc: Resetting bearer <eth:vcan0>
[  239.260974][ T5669] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.266043][ T5669] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.269418][ T5669] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.272699][ T5669] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.607199][T15393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4197'.
[  239.684771][T15393] 8021q: adding VLAN 0 to HW filter on device bond7
[  239.714287][T15393] bond7 (unregistering): Released all slaves
[  239.755276][T15411] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4205'.
[  240.232481][T15446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4221'.
[  240.263300][T15449] sock: sock_set_timeout: `syz.2.4222' (pid 15449) tries to set negative timeout
[  240.381923][T15457] validate_nla: 1 callbacks suppressed
[  240.381933][T15457] netlink: 'syz.2.4226': attribute type 1 has an invalid length.
[  240.981691][T15438] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  240.984962][T15438] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  241.163032][T15479] IPv6: sit2: Disabled Multicast RS
[  241.227117][T15485] netlink: 'syz.1.4240': attribute type 58 has an invalid length.
[  241.521863][T15504] netlink: 'syz.1.4248': attribute type 1 has an invalid length.
[  241.538467][T15504] 8021q: adding VLAN 0 to HW filter on device bond7
[  241.555188][T15504] bond7: (slave geneve4): making interface the new active one
[  241.560181][T15504] bond7: (slave geneve4): Enslaving as an active interface with an up link
[  241.563188][ T6547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.565886][ T6547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.571543][ T6547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.574299][ T6547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.364865][T15517] netlink: 'syz.0.4253': attribute type 16 has an invalid length.
[  242.374918][T15517] netlink: 'syz.0.4253': attribute type 17 has an invalid length.
[  242.470091][T15517] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.473240][T15517] 8021q: adding VLAN 0 to HW filter on device team0
[  242.477718][T15517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.578526][T15517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  242.587556][T15517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  242.602394][T15517] veth1_vlan: left promiscuous mode
[  242.606399][T15517] veth0_vlan: left promiscuous mode
[  242.609292][T15517] veth0_vlan: left allmulticast mode
[  242.612043][T15517] veth0_vlan: entered promiscuous mode
[  242.615677][T15517] veth1_vlan: entered promiscuous mode
[  242.620722][T15517] veth1_macvtap: left promiscuous mode
[  242.623143][T15517] veth0_macvtap: left promiscuous mode
[  242.625483][T15517] veth0_macvtap: entered promiscuous mode
[  242.627866][T15517] veth1_macvtap: entered promiscuous mode
[  242.645826][T15517] 8021q: adding VLAN 0 to HW filter on device bond1
[  242.651920][T15517] vti0: left promiscuous mode
[  242.656929][T15517] macvlan2: left promiscuous mode
[  242.659670][T15517] macvlan2: left allmulticast mode
[  242.667881][T15517] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  242.672299][T10427] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  242.679955][T15517] 8021q: adding VLAN 0 to HW filter on device bond2
[  242.686249][T15517] ip6gre2: left promiscuous mode
[  242.691697][T15517] ip6gre2: left allmulticast mode
[  242.694484][T15517] vti1: left promiscuous mode
[  242.696431][T15517] vti1: left allmulticast mode
[  242.700000][T15517] 8021q: adding VLAN 0 to HW filter on device bond3
[  242.703913][T15517] 8021q: adding VLAN 0 to HW filter on device bond4
[  242.709252][T15517] batman_adv: batadv0: Interface activated: gretap1
[  242.714479][T15517] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  242.776844][ T6547] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  242.780019][ T6547] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 8472 - 0
[  242.785495][ T6547] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.792526][ T6547] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  242.799013][ T6547] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 8472 - 0
[  242.805556][ T6547] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.813411][ T6547] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  242.818836][ T6547] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 8472 - 0
[  242.823530][ T6547] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.828275][ T6547] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  242.835003][ T6547] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 8472 - 0
[  242.839859][ T6547] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.863611][ T5669] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  242.873776][ T5669] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  243.131808][T15533] netlink: 'syz.2.4260': attribute type 1 has an invalid length.
[  243.187295][T15533] bond12: (slave bridge6): making interface the new active one
[  243.191531][T15533] bond12: (slave bridge6): Enslaving as an active interface with an up link
[  243.218424][T15533] macvlan2: entered promiscuous mode
[  243.221743][T15533] macvlan2: entered allmulticast mode
[  243.225685][T15533] bond12: entered promiscuous mode
[  243.231037][T15533] bridge6: entered promiscuous mode
[  243.237773][T15533] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  243.245667][T15533] bond12: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  243.257815][T15533] bond12: left promiscuous mode
[  243.267497][T15533] bridge6: left promiscuous mode
[  243.441519][T15560] __nla_validate_parse: 4 callbacks suppressed
[  243.441536][T15560] netlink: 460 bytes leftover after parsing attributes in process `syz.0.4272'.
[  243.447413][T15562] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.4273'.
[  243.452821][T15560] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  243.468838][   T31] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  243.621986][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'.
[  243.631896][T15575] vlan6: entered allmulticast mode
[  243.633963][T15575] macvtap0: entered allmulticast mode
[  243.636093][T15575] veth0_macvtap: entered allmulticast mode
[  243.648369][T10432] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  243.693836][T15582] netlink: 'syz.1.4282': attribute type 89 has an invalid length.
[  243.751187][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4283'.
[  243.977121][T15612] netlink: 'syz.2.4296': attribute type 1 has an invalid length.
[  243.996370][T15612] 8021q: adding VLAN 0 to HW filter on device bond13
[  244.221589][T15626] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.307808][T15626] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.380726][T15626] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.424537][T15626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.505921][ T5478] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.545428][ T5669] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.562586][ T5478] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.576764][ T5478] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.619669][T15642] netlink: 'syz.1.4307': attribute type 5 has an invalid length.
[  244.707480][T15646] veth0_to_bond: Caught tx_queue_len zero misconfig
[  245.247256][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4323'.
[  245.584949][T15686] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4326'.
[  245.594770][T15683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  245.754645][T15688] netlink: 'syz.2.4327': attribute type 1 has an invalid length.
[  245.814387][T15688] gretap2: entered allmulticast mode
[  245.825107][T15688] bond14: (slave gretap2): making interface the new active one
[  245.831463][T15688] bond14: (slave gretap2): Enslaving as an active interface with an up link
[  246.255122][T15702] syzkaller0: entered promiscuous mode
[  246.256833][T15702] syzkaller0: entered allmulticast mode
[  246.928509][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  247.235868][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4345'.
[  247.346777][T15762] netlink: 'syz.1.4348': attribute type 4 has an invalid length.
[  247.440420][T15772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4353'.
[  247.552910][T15786] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4360'.
[  247.622162][T15793] geneve5: entered promiscuous mode
[  247.641928][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4364'.
[  247.884321][T15817] netlink: 'syz.0.4374': attribute type 9 has an invalid length.
[  248.498650][T15867] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  248.711074][T15892] __nla_validate_parse: 1 callbacks suppressed
[  248.711090][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4410'.
[  248.723257][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4410'.
[  249.012921][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4423'.
[  249.035370][T15923] netlink: 'syz.0.4424': attribute type 4 has an invalid length.
[  249.125876][T15926] ip6gre0: left allmulticast mode
[  249.132274][T15926] veth0_to_batadv: left allmulticast mode
[  249.136849][T15926] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  249.140355][T15926] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  249.144498][T15926] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  249.147242][T15926] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  249.153783][T15926] bond2: left promiscuous mode
[  249.157207][T15926] bond2: left allmulticast mode
[  249.159684][T15926] bond3: left allmulticast mode
[  249.163112][T15926] bond8: left promiscuous mode
[  249.165227][T15926] veth9: left promiscuous mode
[  249.167750][T15926] veth9: left allmulticast mode
[  249.172434][T15926] macvtap1: left promiscuous mode
[  249.174475][T15926] macvtap1: left allmulticast mode
[  249.177809][T15926] bond9: left promiscuous mode
[  249.181237][T15926] wireguard0: left promiscuous mode
[  249.184657][T15926] bond10: left promiscuous mode
[  249.193472][T15926] gretap2: left allmulticast mode
[  249.337463][T15937] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4431'.
[  249.565880][T15952] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  249.662716][T15960] netlink: 'syz.2.4442': attribute type 1 has an invalid length.
[  249.699252][T15960] bond15: entered promiscuous mode
[  249.701748][T15960] 8021q: adding VLAN 0 to HW filter on device bond15
[  249.739650][T15965] netlink: 'syz.1.4444': attribute type 20 has an invalid length.
[  249.742943][T15960] bond15: (slave bridge7): making interface the new active one
[  249.745822][T15960] bridge7: entered promiscuous mode
[  249.747674][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4444'.
[  249.752580][T15960] bridge7: left promiscuous mode
[  249.779481][T15965] netlink: 'syz.1.4444': attribute type 20 has an invalid length.
[  249.779595][ T5478] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  249.781908][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4444'.
[  249.785129][ T5478] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  249.790815][ T5478] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  249.797839][ T5478] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.940686][T15973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.005814][T15975] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  250.008924][T15975] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  250.012148][T15975] tipc: Resetting bearer <eth:syzkaller0>
[  250.099351][   T84] tipc: Resetting bearer <eth:syzkaller0>
[  250.203357][T15996] syzkaller0: entered promiscuous mode
[  250.205984][T15996] syzkaller0: entered allmulticast mode
[  250.477056][T16013] netlink: 'syz.1.4465': attribute type 10 has an invalid length.
[  250.491942][T16013] team0 (unregistering): Port device team_slave_0 removed
[  250.511214][T16013] team0 (unregistering): Port device bond4 removed
[  250.685173][T16025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4471'.
[  251.385017][T16058] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  251.388577][T16058] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  251.449558][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4485'.
[  251.473608][T16061] bond11: entered promiscuous mode
[  251.476047][T16061] 8021q: adding VLAN 0 to HW filter on device bond11
[  251.506799][T16061] 8021q: adding VLAN 0 to HW filter on device bond12
[  251.511439][T16061] bond12: entered promiscuous mode
[  251.514326][T16061] bond11: (slave bond12): Enslaving as an active interface with an up link
[  252.106114][T16057] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  252.273356][T16093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4498'.
[  252.536998][T16115] xt_TCPMSS: Only works on TCP SYN packets
[  252.748828][T16133] bond4: (slave lo): Releasing backup interface
[  252.759794][T16133] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  252.770192][T16133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  253.052358][T16156] netlink: 'syz.1.4526': attribute type 1 has an invalid length.
[  253.057018][T16156] netlink: 'syz.1.4526': attribute type 4 has an invalid length.
[  253.062254][T16156] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4526'.
[  253.067607][ T5613] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  253.083341][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  253.083355][ T5613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  253.083362][ T5613] Call Trace:
[  253.083367][ T5613]  <TASK>
[  253.083371][ T5613]  dump_stack_lvl+0xe8/0x150
[  253.083387][ T5613]  dump_header+0xd3/0x4c0
[  253.083402][ T5613]  oom_kill_process+0x3ab/0x970
[  253.083414][ T5613]  out_of_memory+0x106c/0x1410
[  253.083423][ T5613]  ? try_charge_memcg+0xbb9/0x1570
[  253.083437][ T5613]  ? __pfx___mutex_lock+0x10/0x10
[  253.083452][ T5613]  ? __pfx_out_of_memory+0x10/0x10
[  253.083460][ T5613]  ? do_raw_spin_unlock+0x4d/0x210
[  253.083494][ T5613]  try_charge_memcg+0xc77/0x1570
[  253.083518][ T5613]  ? __pfx_try_charge_memcg+0x10/0x10
[  253.083533][ T5613]  ? percpu_ref_tryget+0x15/0x180
[  253.083564][ T5613]  ? charge_memcg+0x23/0x2b0
[  253.083584][ T5613]  charge_memcg+0x1a2/0x2b0
[  253.083602][ T5613]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  253.083620][ T5613]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  253.083665][ T5613]  __swap_cache_prepare_and_add+0xdc/0x700
[  253.083678][ T5613]  ? page_rmappable_folio+0x9a/0x170
[  253.083695][ T5613]  swap_cache_alloc_folio+0xf1/0x240
[  253.083713][ T5613]  swap_cluster_readahead+0x355/0x670
[  253.083736][ T5613]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  253.083755][ T5613]  ? get_vma_policy+0x27b/0x3c0
[  253.083767][ T5613]  swapin_readahead+0x196/0xc50
[  253.083778][ T5613]  ? swap_table_get+0x1e/0x260
[  253.083792][ T5613]  ? __pfx_swapin_readahead+0x10/0x10
[  253.083809][ T5613]  ? swap_table_get+0x1e/0x260
[  253.083824][ T5613]  ? swap_table_get+0x1e/0x260
[  253.083837][ T5613]  ? swap_table_get+0x1e/0x260
[  253.083852][ T5613]  ? swap_table_get+0x216/0x260
[  253.083869][ T5613]  ? swap_cache_get_folio+0x2e4/0x2f0
[  253.083889][ T5613]  do_swap_page+0x555/0x5120
[  253.083908][ T5613]  ? __pte_offset_map+0x29/0x240
[  253.083924][ T5613]  ? __pte_offset_map+0x29/0x240
[  253.083947][ T5613]  ? do_swap_page+0x128/0x5120
[  253.083962][ T5613]  ? __pfx_do_swap_page+0x10/0x10
[  253.083976][ T5613]  ? __pte_offset_map+0x1ae/0x240
[  253.083988][ T5613]  ? pte_offset_map_rw_nolock+0xea/0x160
[  253.083999][ T5613]  handle_mm_fault+0x12d2/0x3170
[  253.084015][ T5613]  ? handle_mm_fault+0xee/0x3170
[  253.084028][ T5613]  ? __pfx_handle_mm_fault+0x10/0x10
[  253.084036][ T5613]  ? lock_vma_under_rcu+0x45a/0x500
[  253.084058][ T5613]  do_user_addr_fault+0xa73/0x1340
[  253.084070][ T5613]  ? rcu_is_watching+0x15/0xb0
[  253.084085][ T5613]  ? trace_page_fault_user+0x84/0x1e0
[  253.084101][ T5613]  exc_page_fault+0x6a/0xc0
[  253.084121][ T5613]  asm_exc_page_fault+0x26/0x30
[  253.084135][ T5613] RIP: 0033:0x7fcf0b06adf7
[  253.084149][ T5613] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c0 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 a8 ed 00 48 01 d1 39 7c 24
[  253.084161][ T5613] RSP: 002b:00007fff25712cc0 EFLAGS: 00010206
[  253.084172][ T5613] RAX: 0000001b33624000 RBX: 0000000000000bf4 RCX: 000000000003d860
[  253.084178][ T5613] RDX: 000000000cccc03c RSI: 00007fff25712d50 RDI: 0000000000000000
[  253.084185][ T5613] RBP: 00007fff25712cfc R08: 0000000030d3d011 R09: 3fffffffffffffff
[  253.084194][ T5613] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  253.084202][ T5613] R13: 00000000000927c0 R14: 000000000003d966 R15: 00007fff25712d50
[  253.084232][ T5613]  </TASK>
[  253.191899][ T5613] memory: usage 307200kB, limit 307200kB, failcnt 2278
[  253.194922][ T5613] memory+swap: usage 307288kB, limit 9007199254740988kB, failcnt 0
[  253.197172][ T5613] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[  253.201369][ T5613] Memory cgroup stats for /syz0:
[  253.201550][ T5613] cache 0
[  253.203888][ T5613] rss 0
[  253.204721][ T5613] rss_huge 0
[  253.205675][ T5613] shmem 0
[  253.206523][ T5613] mapped_file 0
[  253.207551][ T5613] dirty 0
[  253.208555][ T5613] writeback 0
[  253.209686][ T5613] workingset_refault_anon 4
[  253.211006][ T5613] workingset_refault_file 39
[  253.212324][ T5613] swap 90112
[  253.213269][ T5613] swapcached 131072
[  253.214396][ T5613] pgpgin 111682
[  253.215383][ T5613] pgpgout 111676
[  253.216438][ T5613] pgfault 242561
[  253.217474][ T5613] pgmajfault 2
[  253.218533][ T5613] inactive_anon 24576
[  253.219691][ T5613] active_anon 0
[  253.220717][ T5613] inactive_file 0
[  253.221759][ T5613] active_file 0
[  253.222791][ T5613] unevictable 0
[  253.223845][ T5613] hierarchical_memory_limit 314572800
[  253.225475][ T5613] hierarchical_memsw_limit 9223372036854771712
[  253.227206][ T5613] total_cache 0
[  253.228335][ T5613] total_rss 0
[  253.229289][ T5613] total_rss_huge 0
[  253.230387][ T5613] total_shmem 0
[  253.231452][ T5613] total_mapped_file 0
[  253.232680][ T5613] total_dirty 0
[  253.233754][ T5613] total_writeback 0
[  253.235071][ T5613] total_workingset_refault_anon 4
[  253.236709][ T5613] total_workingset_refault_file 39
[  253.238770][ T5613] total_swap 90112
[  253.240224][ T5613] total_swapcached 131072
[  253.241875][ T5613] total_pgpgin 111682
[  253.243354][ T5613] total_pgpgout 111676
[  253.244893][ T5613] total_pgfault 242561
[  253.246411][ T5613] total_pgmajfault 2
[  253.247529][ T5613] total_inactive_anon 24576
[  253.248944][ T5613] total_active_anon 0
[  253.250086][ T5613] total_inactive_file 0
[  253.251280][ T5613] total_active_file 0
[  253.252417][ T5613] total_unevictable 0
[  253.253562][ T5613] anon_cost 0
[  253.254545][ T5613] file_cost 0
[  253.255529][ T5613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4503,pid=16102,uid=0
[  253.263916][ T5613] Memory cgroup out of memory: Killed process 16102 (syz.0.4503) total-vm:104208kB, anon-rss:1256kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  253.565456][T16173] syzkaller1: tun_chr_ioctl cmd 2147767520
[  254.020418][T16203] __nla_validate_parse: 1 callbacks suppressed
[  254.020434][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4549'.
[  254.045884][T16203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4549'.
[  254.220857][T16216] netlink: 'syz.1.4556': attribute type 4 has an invalid length.
[  254.234350][T16217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4555'.
[  254.314132][T16222] netlink: 'syz.1.4558': attribute type 16 has an invalid length.
[  254.544720][T16239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4566'.
[  255.176955][T16269] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4576'.
[  255.213068][T16271] netlink: 212320 bytes leftover after parsing attributes in process `syz.1.4577'.
[  255.248677][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  255.371186][T16279] tc_dump_action: action bad kind
[  255.486551][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4584'.
[  255.496491][T16285] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4584'.
[  256.011502][T16322] xt_nfacct: accounting object `syz0' does not exist
[  256.245518][T16339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4609'.
[  256.249991][T16339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4609'.
[  256.375735][T16347] netlink: 'syz.0.4613': attribute type 1 has an invalid length.
[  256.378917][T16347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.425517][T16351] syzkaller1: tun_chr_ioctl cmd 1074025677
[  256.427519][T16351] syzkaller1: Linktype set failed because interface is up
[  256.588593][T16362] sctp: [Deprecated]: syz.0.4620 (pid 16362) Use of struct sctp_assoc_value in delayed_ack socket option.
[  256.588593][T16362] Use struct sctp_sack_info instead
[  256.683785][T16369] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  256.724341][T16373] tls_set_device_offload_rx: netdev not found
[  256.927832][T16391] geneve4: entered promiscuous mode
[  256.932939][T16391] geneve4: entered allmulticast mode
[  259.552234][T16507] team_slave_1: Caught tx_queue_len zero misconfig
[  260.562916][T16555] __nla_validate_parse: 2 callbacks suppressed
[  260.562935][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4705'.
[  260.754341][T16572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.756694][T16572] syzkaller0: entered promiscuous mode
[  260.759874][T16572] syzkaller0: entered allmulticast mode
[  260.792005][T16572] tipc: Resetting bearer <eth:syzkaller0>
[  260.799465][T16570] tipc: Resetting bearer <eth:syzkaller0>
[  260.817806][T16570] tipc: Disabling bearer <eth:syzkaller0>
[  261.013829][T16585] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  262.387059][T16650] netlink: 'syz.0.4749': attribute type 1 has an invalid length.
[  262.390581][T16650] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4749'.
[  262.477758][ T5478] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  262.483401][ T5478] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.490038][ T5478] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  262.496126][ T5478] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.504199][ T5478] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  262.509056][ T5478] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.515735][ T5478] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  262.526839][ T5478] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.671116][T16679] netem: change failed
[  263.587489][T16733] netlink: 'syz.1.4783': attribute type 1 has an invalid length.
[  263.789358][T16705] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  264.061213][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4798'.
[  264.517077][T16805] netlink: 'syz.2.4815': attribute type 1 has an invalid length.
[  264.546478][T16807] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4816'.
[  264.617887][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4819'.
[  265.024317][T16854] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  265.039885][ T5241] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.197004][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4842'.
[  265.200462][T16867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4842'.
[  265.203635][T16868] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4841'.
[  265.212589][T16870] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4843'.
[  265.221071][T16868] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  265.228671][T16868] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  265.231325][T16868] tipc: Resetting bearer <eth:syzkaller0>
[  265.323205][T16881] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4849'.
[  265.362305][T16886] xt_hl: Unknown TTL match mode: 237
[  265.369004][   T31] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.532497][ T5478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.540930][ T5478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.549388][ T5478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.557765][ T5478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.726944][T16926] netlink: 'syz.2.4871': attribute type 1 has an invalid length.
[  265.771752][T16930] syzkaller0: entered promiscuous mode
[  265.773567][T16930] syzkaller0: entered allmulticast mode
[  265.797036][T16932] __nla_validate_parse: 2 callbacks suppressed
[  265.797052][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4874'.
[  265.803464][T16932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4874'.
[  266.983637][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4891'.
[  267.255748][T16996] netlink: 996 bytes leftover after parsing attributes in process `syz.1.4903'.
[  267.359507][T17008] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4909'.
[  267.575191][T17015] bridge_slave_0: left allmulticast mode
[  267.576985][T17015] bridge_slave_0: left promiscuous mode
[  267.581174][T17015] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.590645][T17015] bridge_slave_1: left allmulticast mode
[  267.595311][T17015] bridge_slave_1: left promiscuous mode
[  267.598914][T17015] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.606409][T17015] bond0: (slave bond_slave_0): Releasing backup interface
[  267.613827][T17015] bond0: (slave bond_slave_1): Releasing backup interface
[  267.618248][T17015] bond4: (slave team_slave_1): Releasing backup interface
[  267.621547][T17015] team_slave_1: left allmulticast mode
[  267.623518][T17015] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.626411][T17015] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.630701][T17015] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  267.694405][T17029] bridge7: entered promiscuous mode
[  267.696576][T17029] bridge7: entered allmulticast mode
[  268.289111][T17071] netlink: 'syz.1.4937': attribute type 3 has an invalid length.
[  268.292321][T17071] netlink: 'syz.1.4937': attribute type 3 has an invalid length.
[  268.538960][T17090] syzkaller1: entered promiscuous mode
[  268.540782][T17090] syzkaller1: entered allmulticast mode
[  268.693774][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4956'.
[  268.697166][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4956'.
[  269.001786][T17150] netlink: 'syz.1.4976': attribute type 1 has an invalid length.
[  269.004412][T17150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4976'.
[  269.393577][T17199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.396253][T17199] syzkaller0: entered promiscuous mode
[  269.400597][T17199] syzkaller0: entered allmulticast mode
[  269.432039][T17199] tipc: Resetting bearer <eth:syzkaller0>
[  269.439649][T17198] tipc: Resetting bearer <eth:syzkaller0>
[  269.459716][T17198] tipc: Disabling bearer <eth:syzkaller0>
[  269.470344][T17201] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  269.474655][T17201] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  269.479747][T17201] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.539623][T17208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4999'.
[  269.566920][T17201] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  269.580390][T17201] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  269.583402][T17201] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.603891][T17211] netlink: 292 bytes leftover after parsing attributes in process `syz.1.5000'.
[  269.674139][T17201] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  269.677745][T17201] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  269.681701][T17201] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.752667][T17201] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  269.756883][T17201] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  269.760654][T17201] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.765309][T17217] sctp: [Deprecated]: syz.1.5003 (pid 17217) Use of struct sctp_assoc_value in delayed_ack socket option.
[  269.765309][T17217] Use struct sctp_sack_info instead
[  269.806226][T17220] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  269.881015][ T5478] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  269.889869][ T5478] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  269.894029][ T5478] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.915352][ T5478] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  269.922344][ T5478] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  269.929433][ T5478] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.950449][ T5478] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  269.958350][ T5478] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  269.961892][ T5478] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.995659][ T5478] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  270.001517][ T5478] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  270.008403][ T5478] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.902048][T17310] __nla_validate_parse: 2 callbacks suppressed
[  270.902060][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5048'.
[  270.966759][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5050'.
[  270.971296][T17317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5050'.
[  270.971412][T17316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5051'.
[  271.412799][T17351] netlink: 'syz.2.5067': attribute type 1 has an invalid length.
[  271.453656][T17357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5070'.
[  271.461913][T17357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5070'.
[  271.706609][T17382] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  271.727615][T17382] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  271.729968][T17382] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  271.732524][T17382] tipc: Resetting bearer <eth:syzkaller0>
[  272.133592][T17400] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  272.640142][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5100'.
[  272.805388][T17436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5106'.
[  272.887750][T17442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5109'.
[  273.018895][T17451] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5113'.
[  273.168358][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  273.220962][T17465] IPv6: sit3: Disabled Multicast RS
[  273.449250][T17487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  273.931175][T17535] netlink: 'syz.0.5152': attribute type 6 has an invalid length.
[  274.029296][T17542] ip6gre3: entered promiscuous mode
[  274.031279][T17542] ip6gre3: entered allmulticast mode
[  274.034926][   T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  274.039672][   T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  274.052251][T17542] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  274.058375][ T5241] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  274.144320][T17552] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  274.228744][ T5241] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  274.559623][ T5241] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  275.523964][T17627] xfrm1: entered promiscuous mode
[  275.525641][T17627] xfrm1: entered allmulticast mode
[  275.532346][T17625] netlink: 'syz.2.5193': attribute type 9 has an invalid length.
[  275.743632][T17643] netlink: 'syz.1.5197': attribute type 10 has an invalid length.
[  275.750225][T17643] netlink: 'syz.1.5197': attribute type 10 has an invalid length.
[  276.193623][T17673] __nla_validate_parse: 9 callbacks suppressed
[  276.193633][T17673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5204'.
[  276.200244][T17673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5204'.
[  276.443515][T17707] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5218'.
[  276.446547][T17707] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5218'.
[  276.452207][T17707] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5218'.
[  276.464808][T17707] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5218'.
[  276.474804][T17707] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5218'.
[  276.745560][T17741] netlink: 'syz.1.5235': attribute type 8 has an invalid length.
[  276.751233][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5235'.
[  276.765467][T17741] bond0: entered promiscuous mode
[  276.769065][T17741] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  276.772670][T17741] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  276.779239][T17747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5238'.
[  276.782070][T17741] hsr1: entered promiscuous mode
[  276.932352][T17757] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  276.980924][T17757] batadv_slave_0: entered promiscuous mode
[  276.989486][T17756] batadv_slave_0: left promiscuous mode
[  277.808586][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  278.816837][T17779] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5254'.
[  279.244692][T17821] netlink: 'syz.0.5271': attribute type 14 has an invalid length.
[  279.289930][T17826] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  279.654424][T17849] dvmrp1: entered allmulticast mode
[  279.679284][T17856] tipc: Disabling bearer <udp:syz2>
[  279.763812][T17863] netlink: 'syz.0.5288': attribute type 1 has an invalid length.
[  279.808423][T17864] netpci0: tun_chr_ioctl cmd 1074025678
[  279.812815][T17864] netpci0: group set to 0
[  279.825786][T17863] gretap2: entered allmulticast mode
[  279.834149][T17863] bond13: (slave gretap2): making interface the new active one
[  279.837631][T17863] bond13: (slave gretap2): Enslaving as an active interface with an up link
[  280.515876][T17906] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  280.525318][T17906] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  280.746845][T17920] bond14: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  280.751925][T17920] bond14 (unregistering): Released all slaves
[  280.971064][T17943] syzkaller0: entered promiscuous mode
[  280.974030][T17943] syzkaller0: entered allmulticast mode
[  281.873434][T18019] __nla_validate_parse: 3 callbacks suppressed
[  281.873446][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5360'.
[  281.930321][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5361'.
[  281.934419][T18021] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5361'.
[  282.271345][T18057] veth1_to_bond: entered allmulticast mode
[  282.277285][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5377'.
[  282.290564][T18057] veth1_to_bond (unregistering): left allmulticast mode
[  282.317804][T18061] xt_CT: You must specify a L4 protocol and not use inversions on it
[  282.967484][T18118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5403'.
[  283.247787][T18122] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  283.251176][T18122] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  284.673281][T18198] macsec0: entered allmulticast mode
[  284.681042][T18198] veth1_macvtap: entered allmulticast mode
[  284.687829][T18198] macsec0: left allmulticast mode
[  284.696692][T18198] veth1_macvtap: left allmulticast mode
[  284.990142][T18210] block nbd2: not configured, cannot reconfigure
[  285.196457][T18218] netlink: 'syz.2.5451': attribute type 1 has an invalid length.
[  285.256404][T18218] 8021q: adding VLAN 0 to HW filter on device bond16
[  285.363619][T18218] macvlan2: entered promiscuous mode
[  285.371058][T18218] macvlan2: entered allmulticast mode
[  285.674094][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5455'.
[  285.854022][T18244] syzkaller0: entered promiscuous mode
[  285.856895][T18244] syzkaller0: entered allmulticast mode
[  285.968139][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  285.977695][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5464'.
[  285.995404][T18256] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  286.011022][T18257] tipc: Resetting bearer <eth:syzkaller0>
[  286.034514][T18257] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  286.044666][T18257] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  286.057266][T18257] bond15: left promiscuous mode
[  286.122330][T18257] macvlan2: left promiscuous mode
[  286.128646][T18257] macvlan2: left allmulticast mode
[  286.151488][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.157333][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.169545][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.172225][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.373269][T18281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5475'.
[  286.380268][T18281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5475'.
[  286.387886][T18281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5475'.
[  286.463567][T18285] netlink: 'syz.2.5478': attribute type 1 has an invalid length.
[  286.978161][T18335] pim6reg1: entered promiscuous mode
[  286.979978][T18335] pim6reg1: entered allmulticast mode
[  287.058547][T18341] __nla_validate_parse: 5 callbacks suppressed
[  287.058562][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5500'.
[  287.079208][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5500'.
[  287.119259][T18347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5503'.
[  287.261392][T18359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5507'.
[  287.265055][T18359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5507'.
[  287.270086][T18359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5507'.
[  287.274163][T18359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5507'.
[  287.431875][T18374] netlink: 'syz.1.5516': attribute type 1 has an invalid length.
[  287.434506][T18374] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5516'.
[  287.439607][T18374] netlink: 658 bytes leftover after parsing attributes in process `syz.1.5516'.
[  287.443150][T18374] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5516'.
[  287.482163][T18378] xt_time: invalid argument - start or stop time greater than 23:59:59
[  287.897787][T18419] pimreg: entered allmulticast mode
[  287.904541][T18419] dvmrp6: left allmulticast mode
[  287.933520][T18418] pimreg: left allmulticast mode
[  289.104723][T18448] xt_CT: You must specify a L4 protocol and not use inversions on it
[  289.160662][T18466] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  289.250471][T18479] xt_TCPMSS: Only works on TCP SYN packets
[  289.283744][T18482] netlink: 'syz.0.5562': attribute type 3 has an invalid length.
[  289.437015][T18496] bond17 (unregistering): Released all slaves
[  290.244589][T18574] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  290.325074][T18584] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.329800][T18584] syzkaller0: mtu less than device minimum
[  290.344271][T18587] Cannot find del_set index 3 as target
[  290.546314][T18605] syzkaller1: entered promiscuous mode
[  290.552492][T18605] syzkaller1: entered allmulticast mode
[  290.787942][T18631] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  290.995910][T18645] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[  291.334042][T18674] netlink: 'syz.2.5654': attribute type 1 has an invalid length.
[  291.466052][T18684] bridge0: entered allmulticast mode
[  291.470490][T18684] bridge0: left allmulticast mode
[  291.530894][T18688] netlink: 'syz.1.5661': attribute type 5 has an invalid length.
[  291.765180][T18710] netlink: 'syz.1.5671': attribute type 1 has an invalid length.
[  292.068967][T18742] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  292.186692][T18751] __nla_validate_parse: 16 callbacks suppressed
[  292.186704][T18751] netlink: 504 bytes leftover after parsing attributes in process `syz.0.5686'.
[  292.206833][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5681'.
[  292.764255][T18792] trusted_key: syz.2.5706 sent an empty control message without MSG_MORE.
[  292.980020][T18811] veth0_virt_wifi: entered allmulticast mode
[  293.053123][T18817] netlink: 'syz.0.5718': attribute type 1 has an invalid length.
[  293.079762][T18817] 8021q: adding VLAN 0 to HW filter on device bond14
[  293.111422][T18817] macvlan5: entered promiscuous mode
[  293.118342][T18817] macvlan5: entered allmulticast mode
[  293.124308][T18817] bond14: entered allmulticast mode
[  293.129611][T18817] bond14: entered promiscuous mode
[  293.132476][T18817] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  293.143156][T18817] team0: Port device macvlan5 added
[  293.177295][T18817] sctp: [Deprecated]: syz.0.5718 (pid 18817) Use of int in maxseg socket option.
[  293.177295][T18817] Use struct sctp_assoc_value instead
[  293.365832][T18839] xt_hashlimit: overflow, try lower: 18446744073709551615/32
[  293.545901][T18854] bond17 (unregistering): Released all slaves
[  293.572514][T18857] geneve0: entered promiscuous mode
[  293.835261][T18872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5742'.
[  293.930233][T18878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5746'.
[  293.969966][T18884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5748'.
[  294.067740][T18893] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  294.120428][T18898] netlink: 'syz.2.5755': attribute type 1 has an invalid length.
[  294.123446][T18898] netlink: 264 bytes leftover after parsing attributes in process `syz.2.5755'.
[  294.127774][T18898] netlink: 'syz.2.5755': attribute type 1 has an invalid length.
[  294.131298][T18898] netlink: 264 bytes leftover after parsing attributes in process `syz.2.5755'.
[  294.305781][T18907] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5759'.
[  294.680717][T18938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.884013][T18951] netlink: 'syz.0.5776': attribute type 1 has an invalid length.
[  295.009107][T18956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5775'.
[  295.167386][T18972] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.173850][T18972] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  295.176450][T18972] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  295.179520][T18972] tipc: Resetting bearer <eth:syzkaller0>
[  295.182196][T18970] syzkaller0: entered promiscuous mode
[  295.184245][T18970] syzkaller0: entered allmulticast mode
[  295.192161][T18970] 0: reclassify loop, rule prio 0, protocol 800
[  295.592947][T18994] openvswitch: netlink: Unknown key attributes 2
[  295.647123][T18999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5796'.
[  296.053319][T19031] netlink: 'syz.0.5811': attribute type 9 has an invalid length.
[  296.115441][T19036] xt_CT: You must specify a L4 protocol and not use inversions on it
[  296.630369][T19089] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  296.758644][T19100] IPVS: Error connecting to the multicast addr
[  297.049028][T19125] IPv6: sit3: Disabled Multicast RS
[  297.185312][T19135] Cannot find del_set index 14804 as target
[  297.209992][T19138] __nla_validate_parse: 3 callbacks suppressed
[  297.210008][T19138] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5862'.
[  297.482313][T19167] netlink: 'syz.1.5874': attribute type 2 has an invalid length.
[  297.862487][T19212] netlink: 'syz.2.5892': attribute type 1 has an invalid length.
[  297.927400][   T33] audit: type=1804 audit(1778615033.551:5): pid=19222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5896" name="/newroot/1824/memory.events" dev="tmpfs" ino=9226 res=1 errno=0
[  297.942844][T19220] bond17: (slave bridge8): making interface the new active one
[  297.947413][   T33] audit: type=1800 audit(1778615033.551:6): pid=19222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5896" name="memory.events" dev="tmpfs" ino=9226 res=0 errno=0
[  297.961825][T19220] bond17: (slave bridge8): Enslaving as an active interface with an up link
[  297.962284][   T33] audit: type=1804 audit(1778615033.551:7): pid=19222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5896" name="/newroot/1824/memory.events" dev="tmpfs" ino=9226 res=1 errno=0
[  298.044349][T19226] nbd0: detected capacity change from 0 to 63
[  298.049978][T19232] block nbd0: NBD_DISCONNECT
[  298.063260][T19232] block nbd0: Disconnected due to user request.
[  298.069705][T18983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  298.074671][T19232] block nbd0: shutting down sockets
[  298.084613][T19236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5902'.
[  298.088776][T18983] Buffer I/O error on dev nbd0, logical block 0, async page read
[  298.109282][T19236] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5902'.
[  298.111028][   T52] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  298.117187][   T52] Buffer I/O error on dev nbd0, logical block 1, async page read
[  298.121629][   T52] Buffer I/O error on dev nbd0, logical block 2, async page read
[  298.124666][   T52] Buffer I/O error on dev nbd0, logical block 3, async page read
[  298.129792][T18983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  298.138238][T18983] Buffer I/O error on dev nbd0, logical block 0, async page read
[  298.142895][T18983] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  298.151824][T18983] Buffer I/O error on dev nbd0, logical block 1, async page read
[  298.158467][T18983] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  298.164485][T18983] Buffer I/O error on dev nbd0, logical block 2, async page read
[  298.170550][T18983] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  298.180057][T18983] Buffer I/O error on dev nbd0, logical block 3, async page read
[  298.189529][T18983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  298.196436][T18983] Buffer I/O error on dev nbd0, logical block 0, async page read
[  298.204933][T18983] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  298.216192][T18983] Buffer I/O error on dev nbd0, logical block 1, async page read
[  298.222765][T18983] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  298.236503][T18983] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  298.248991][T18983] ldm_validate_partition_table(): Disk read failed.
[  298.259422][T18983] Dev nbd0: unable to read RDB block 0
[  298.265883][T18983]  nbd0: unable to read partition table
[  298.292090][T18983] ldm_validate_partition_table(): Disk read failed.
[  298.295396][T18983] Dev nbd0: unable to read RDB block 0
[  298.300637][T18983]  nbd0: unable to read partition table
[  298.313229][T19249] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  298.318933][T19249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5908'.
[  298.348813][T19251] tc action pedit offset 20 out of bounds
[  298.466189][T19263] netlink: 320 bytes leftover after parsing attributes in process `syz.2.5915'.
[  298.534675][T19272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5921'.
[  298.537915][T19272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5921'.
[  298.594944][T19279] IPVS: Error connecting to the multicast addr
[  298.621726][T19278] netlink: 'syz.1.5922': attribute type 11 has an invalid length.
[  298.624984][T19278] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.5922'.
[  298.832461][T19305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5936'.
[  298.875049][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5939'.
[  299.556793][T19372] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[  300.206633][T19411] xt_bpf: check failed: parse error
[  300.376675][T19421] syzkaller1: entered promiscuous mode
[  300.389890][T19421] syzkaller1: entered allmulticast mode
[  300.755497][T19444] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.887792][T19456] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  301.363400][T19505] syzkaller0: entered promiscuous mode
[  301.365647][T19505] syzkaller0: entered allmulticast mode
[  301.448229][T19506] tipc: Trying to set illegal importance in message
[  301.561644][T19511] netlink: 'syz.2.6031': attribute type 4 has an invalid length.
[  301.818920][T19531] syzkaller0: entered promiscuous mode
[  301.820920][T19531] syzkaller0: entered allmulticast mode
[  301.895761][T19539] netlink: 'syz.2.6043': attribute type 12 has an invalid length.
[  302.401778][T19596] __nla_validate_parse: 12 callbacks suppressed
[  302.401794][T19596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6067'.
[  302.449922][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  302.715928][T19626] netlink: 'syz.1.6081': attribute type 10 has an invalid length.
[  302.807636][T19631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.811013][T19631] syzkaller0: entered promiscuous mode
[  302.812722][T19631] syzkaller0: entered allmulticast mode
[  302.847595][T19631] tipc: Resetting bearer <eth:syzkaller0>
[  302.863693][T19630] tipc: Resetting bearer <eth:syzkaller0>
[  302.895003][T19630] tipc: Disabling bearer <eth:syzkaller0>
[  302.945876][T19637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6086'.
[  302.954066][T19637] netlink: 94 bytes leftover after parsing attributes in process `syz.2.6086'.
[  302.957430][T19637] netlink: 'syz.2.6086': attribute type 1 has an invalid length.
[  302.960752][T19637] netlink: 568 bytes leftover after parsing attributes in process `syz.2.6086'.
[  303.023730][T19639] netlink: 'syz.0.6087': attribute type 1 has an invalid length.
[  303.043376][T19643] netlink: 'syz.1.6088': attribute type 1 has an invalid length.
[  303.051434][T19643] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6088'.
[  303.145380][T19651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.173225][T19651] ip6tnl3: entered allmulticast mode
[  303.185205][T19651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.457031][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6105'.
[  303.639688][T19692] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  303.642429][T19692] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  303.662954][T19694] netlink: 'syz.1.6112': attribute type 3 has an invalid length.
[  303.721401][T19700] netlink: 'syz.1.6114': attribute type 15 has an invalid length.
[  303.858367][T19714] openvswitch: netlink: IP tunnel TTL not specified.
[  303.921092][T19720] wg2: Caught tx_queue_len zero misconfig
[  304.133814][T19734] syzkaller1: entered promiscuous mode
[  304.138577][T19734] syzkaller1: entered allmulticast mode
[  304.292411][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6140'.
[  304.406376][T19767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6147'.
[  304.595274][T19789] syzkaller1: entered promiscuous mode
[  304.599966][T19789] syzkaller1: entered allmulticast mode
[  304.738486][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6164'.
[  304.871613][T19815] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6170'.
[  306.443283][T19951] xt_hashlimit: overflow, rate too high: 0
[  307.452732][T19984] bond18: entered promiscuous mode
[  307.571472][T19992] __nla_validate_parse: 4 callbacks suppressed
[  307.571485][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6250'.
[  307.826902][T20013] batadv0: entered promiscuous mode
[  307.831836][T20013] vlan9: entered promiscuous mode
[  307.950925][T20022] xt_CT: You must specify a L4 protocol and not use inversions on it
[  308.031525][T20028] netlink: 'syz.2.6267': attribute type 1 has an invalid length.
[  308.068703][T20031] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6268'.
[  308.470612][T20057] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6278'.
[  308.815871][T20078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6289'.
[  309.207382][T20102] netlink: 'syz.1.6301': attribute type 6 has an invalid length.
[  310.146873][T20139] netlink: 'syz.1.6317': attribute type 1 has an invalid length.
[  310.150027][T20139] netlink: 'syz.1.6317': attribute type 3 has an invalid length.
[  310.152566][T20139] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6317'.
[  310.294530][T20148] syzkaller0: entered promiscuous mode
[  310.296762][T20148] syzkaller0: entered allmulticast mode
[  310.669519][T20169] netlink: 'syz.1.6328': attribute type 4 has an invalid length.
[  310.672510][T20169] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6328'.
[  310.720057][T20171] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6329'.
[  310.723694][T20171] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  311.271792][T20202] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  311.575295][T20228] netlink: 'syz.2.6356': attribute type 11 has an invalid length.
[  311.585571][T20230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6357'.
[  311.693221][T20241] syzkaller1: entered promiscuous mode
[  311.695010][T20241] syzkaller1: entered allmulticast mode
[  311.789855][T20245] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  311.792559][T20245] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  312.171784][T20263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6372'.
[  312.178933][T20263] netem: change failed
[  312.324513][T20300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6390'.
[  312.343661][T20300] 8021q: adding VLAN 0 to HW filter on device bond9
[  312.370407][T20300] bond9: (slave veth13): Enslaving as an active interface with an up link
[  312.396245][T20300] bond9: (slave bridge11): Enslaving as an active interface with an up link
[  312.647858][T20332] __nla_validate_parse: 1 callbacks suppressed
[  312.647870][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6406'.
[  312.756205][T20340] bond20: Removing last ns target with arp_interval on
[  312.933825][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6415'.
[  312.937314][T20354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6415'.
[  313.377843][T20383] netlink: 'syz.2.6429': attribute type 4 has an invalid length.
[  313.776902][T20418] syzkaller1: entered promiscuous mode
[  313.780149][T20418] syzkaller1: entered allmulticast mode
[  313.784657][T20420] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6446'.
[  313.917878][T20427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  314.091713][T20440] netlink: 'syz.0.6457': attribute type 1 has an invalid length.
[  314.098207][T20440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.111896][T20442] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  314.338412][T20457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6462'.
[  314.857614][T20469] netlink: 'syz.1.6469': attribute type 12 has an invalid length.
[  314.876161][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6469'.
[  314.879781][T20469] macsec0: entered promiscuous mode
[  314.884369][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6469'.
[  314.894012][T20469] macsec0 (unregistering): left promiscuous mode
[  314.909195][T20473] netlink: 'syz.2.6472': attribute type 11 has an invalid length.
[  314.997333][T20479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6475'.
[  315.319826][T20507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6489'.
[  315.327642][T20509] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6490'.
[  315.331713][T20509] netlink: 'syz.2.6490': attribute type 2 has an invalid length.
[  316.365414][T20616] netlink: 'syz.1.6540': attribute type 61 has an invalid length.
[  316.571754][T20630] syzkaller0: entered promiscuous mode
[  316.573865][T20630] syzkaller0: entered allmulticast mode
[  316.982535][T20664] netlink: 'syz.2.6561': attribute type 21 has an invalid length.
[  317.169552][T20683] bond10: Removing last ns target with arp_interval on
[  317.176252][T20686] xt_hashlimit: size too large, truncated to 1048576
[  317.308992][T20695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  317.636666][T20735] macsec0: entered promiscuous mode
[  317.696575][T20744] syzkaller0: entered promiscuous mode
[  317.701485][T20744] syzkaller0: entered allmulticast mode
[  317.793787][T20754] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  317.795981][T20754] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  317.830853][T20757] __nla_validate_parse: 11 callbacks suppressed
[  317.830946][T20757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6597'.
[  318.216533][T20791] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[  318.433310][T20810] xt_cgroup: invalid path, errno=-2
[  318.457596][T20812] Cannot find del_set index 3 as target
[  318.493791][T20818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6627'.
[  318.552347][T20826] xt_hashlimit: size too large, truncated to 1048576
[  318.556223][T20825] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6630'.
[  318.631396][T20825] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  318.643743][   T56] block nbd0: Receive control failed (result -32)
[  318.845873][T20851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6641'.
[  318.895687][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6642'.
[  319.007828][T20862] ip6_vti0: entered promiscuous mode
[  319.013110][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6644'.
[  319.052752][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6647'.
[  319.084405][T20864] 8021q: adding VLAN 0 to HW filter on device bond16
[  319.284905][T20882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6653'.
[  319.373610][T20889] hsr0: entered promiscuous mode
[  319.376245][T20889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6655'.
[  319.379705][T20889] hsr_slave_0: left promiscuous mode
[  319.382209][T20889] hsr_slave_1: left promiscuous mode
[  319.385415][T20889] hsr0 (unregistering): left promiscuous mode
[  319.513618][T20896] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6658'.
[  320.400168][T20955] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  320.402430][T20955] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  320.404912][T20955] tipc: Resetting bearer <eth:syzkaller0>
[  320.756533][T20988] Bluetooth: MGMT ver 1.23
[  320.859599][T21000] netlink: 'syz.0.6704': attribute type 10 has an invalid length.
[  320.902687][T21003] netlink: 'syz.0.6706': attribute type 1 has an invalid length.
[  321.136484][T21028] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  321.151432][T21028] bond17: (slave lo): Enslaving as an active interface with an up link
[  321.158787][T21028] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  321.163830][T21032] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  322.994296][T21212] xt_hashlimit: overflow, try lower: 6/0
[  323.173711][T21236] __nla_validate_parse: 105 callbacks suppressed
[  323.173723][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6809'.
[  323.411429][T21257] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6818'.
[  324.140662][T21319] IPVS: ip_vs_edit_dest(): server weight less than zero
[  326.019294][T21398] netlink: 'syz.0.6868': attribute type 1 has an invalid length.
[  326.044879][T21398] 8021q: adding VLAN 0 to HW filter on device bond18
[  326.066879][T21398] bond18: (slave veth13): Enslaving as an active interface with a down link
[  326.079307][T21398] 8021q: adding VLAN 0 to HW filter on device batadv1
[  326.083095][T21398] bond18: (slave batadv1): making interface the new active one
[  326.086835][T21398] batadv1: entered promiscuous mode
[  326.089735][T21398] bond18: (slave batadv1): Enslaving as an active interface with an up link
[  326.334131][T21416] syzkaller0: entered promiscuous mode
[  326.338119][T21416] syzkaller0: entered allmulticast mode
[  326.373405][T21422] netlink: 'syz.2.6879': attribute type 49 has an invalid length.
[  327.029559][T21479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6905'.
[  327.424109][T21485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  327.977160][T21507] netlink: 'syz.1.6918': attribute type 1 has an invalid length.
[  328.378492][T21535] netlink: 'syz.2.6930': attribute type 1 has an invalid length.
[  329.801388][T21593] netlink: 'syz.0.6955': attribute type 3 has an invalid length.
[  330.235544][T21642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6980'.
[  330.238489][T21642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6980'.
[  330.289159][T21647] x9: renamed from bridge_slave_0
[  331.243080][T21749] netlink: 'syz.2.7023': attribute type 33 has an invalid length.
[  331.246150][T21749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7023'.
[  331.250404][T21749] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  331.931440][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7050'.
[  331.934959][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7050'.
[  332.737086][T21886] netlink: 'syz.1.7086': attribute type 6 has an invalid length.
[  332.738664][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7087'.
[  332.989797][T21913] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  333.132345][T21924] netlink: 'syz.1.7103': attribute type 5 has an invalid length.
[  333.136798][T21924] netlink: 'syz.1.7103': attribute type 4 has an invalid length.
[  333.236643][T21933] bond0: (slave vlan0): Opening slave failed
[  333.449957][T21957] netlink: 'syz.0.7120': attribute type 4 has an invalid length.
[  333.451431][T21959] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  333.455605][T21959] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  333.463747][T21957] netlink: 'syz.0.7120': attribute type 4 has an invalid length.
[  333.472839][T21957] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  334.373088][T21982] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7131'.
[  334.377261][T21983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.461824][T22006] bridge0: Caught tx_queue_len zero misconfig
[  335.497468][T22011] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7146'.
[  335.773362][T22035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7158'.
[  335.787762][T22038] netlink: 'syz.2.7156': attribute type 3 has an invalid length.
[  335.939855][T22052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.373693][T22089] ip6gre1: entered promiscuous mode
[  336.375281][T22089] ip6gre1: entered allmulticast mode
[  337.001887][T22146] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  337.333073][   T13] batadv1: left promiscuous mode
[  337.629037][T22200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7233'.
[  337.967921][T22222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7244'.
[  338.005418][T22222] veth15: entered allmulticast mode
[  338.012744][T22222] bond11: (slave veth15): Enslaving as an active interface with an up link
[  338.021135][T22222] bond11 (unregistering): (slave veth15): Releasing backup interface
[  338.027863][T22222] bond11 (unregistering): Released all slaves
[  338.233786][T22231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7248'.
[  338.237394][T22231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7248'.
[  338.241258][T22231] netlink: 304 bytes leftover after parsing attributes in process `syz.1.7248'.
[  338.583902][T22263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7263'.
[  339.164503][T22298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7278'.
[  339.181620][T22300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7279'.
[  340.287410][T22334] veth0_macvtap: left allmulticast mode
[  340.551163][T22334] batman_adv: batadv0: Interface deactivated: gretap1
[  340.603541][T22334] bond14: left allmulticast mode
[  340.607056][T22334] bond14: left promiscuous mode
[  340.674407][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.682679][   T12] netdevsim netdevsim0 eth0: unset [0, 1] type 1 family 0 port 2816 - 0
[  340.685358][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.693636][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.697813][   T12] netdevsim netdevsim0 eth1: unset [0, 1] type 1 family 0 port 2816 - 0
[  340.708464][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.718355][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.723320][   T12] netdevsim netdevsim0 eth2: unset [0, 1] type 1 family 0 port 2816 - 0
[  340.728861][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.736493][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.748022][   T12] netdevsim netdevsim0 eth3: unset [0, 1] type 1 family 0 port 2816 - 0
[  340.752598][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.766969][T22357] netlink: 'syz.1.7299': attribute type 9 has an invalid length.
[  340.857973][T22361] __nla_validate_parse: 1 callbacks suppressed
[  340.860463][T22361] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7301'.
[  341.641208][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7320'.
[  341.660644][T22415] bond11: option ad_actor_sys_prio: invalid value (0)
[  341.662793][T22415] bond11: option ad_actor_sys_prio: allowed values 1 - 65535
[  341.667827][T22415] bond11 (unregistering): Released all slaves
[  341.766508][T22428] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7324'.
[  341.954248][T22442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7330'.
[  342.472378][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7338'.
[  342.710589][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7345'.
[  342.713260][T22481] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.323931][T22532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7368'.
[  343.332918][T22532] veth1_to_team: entered promiscuous mode
[  343.335839][T22532] dummy0: entered promiscuous mode
[  343.341455][T22532] debugfs: 'hsr1' already exists in 'hsr'
[  343.343359][T22532] Cannot create hsr debugfs directory
[  343.345264][T22532] hsr1: entered promiscuous mode
[  343.677337][T22549] netlink: 'syz.2.7376': attribute type 1 has an invalid length.
[  343.682381][T22549] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7376'.
[  343.685315][T22549] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7376'.
[  343.688012][T22549] netlink: 658 bytes leftover after parsing attributes in process `syz.2.7376'.
[  343.815664][T22559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.684153][T22634] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.687420][T22634] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  344.691282][T22634] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  344.694146][T22634] tipc: Resetting bearer <eth:syzkaller0>
[  344.986421][T22596] syz.1.7400 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  345.007849][T22596] CPU: 0 UID: 0 PID: 22596 Comm: syz.1.7400 Not tainted syzkaller #0 PREEMPT(full) 
[  345.007885][T22596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  345.007892][T22596] Call Trace:
[  345.007897][T22596]  <TASK>
[  345.007902][T22596]  dump_stack_lvl+0xe8/0x150
[  345.007916][T22596]  dump_header+0xd3/0x4c0
[  345.007930][T22596]  oom_kill_process+0x3ab/0x970
[  345.007943][T22596]  out_of_memory+0x106c/0x1410
[  345.007967][T22596]  ? try_charge_memcg+0xbb9/0x1570
[  345.007980][T22596]  ? __pfx___mutex_lock+0x10/0x10
[  345.007996][T22596]  ? __pfx_out_of_memory+0x10/0x10
[  345.008004][T22596]  ? do_raw_spin_unlock+0x4d/0x210
[  345.008020][T22596]  try_charge_memcg+0xc77/0x1570
[  345.008040][T22596]  ? __pfx_try_charge_memcg+0x10/0x10
[  345.008050][T22596]  ? percpu_ref_tryget+0x15/0x180
[  345.008070][T22596]  ? charge_memcg+0x23/0x2b0
[  345.008082][T22596]  charge_memcg+0x1a2/0x2b0
[  345.008093][T22596]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  345.008103][T22596]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  345.008116][T22596]  __swap_cache_prepare_and_add+0xdc/0x700
[  345.008129][T22596]  ? page_rmappable_folio+0x9a/0x170
[  345.008145][T22596]  swap_cache_alloc_folio+0xf1/0x240
[  345.008156][T22596]  swap_cluster_readahead+0x355/0x670
[  345.008168][T22596]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  345.008183][T22596]  ? get_vma_policy+0x27b/0x3c0
[  345.008195][T22596]  swapin_readahead+0x196/0xc50
[  345.008206][T22596]  ? swap_table_get+0x1e/0x260
[  345.008217][T22596]  ? __pfx_swapin_readahead+0x10/0x10
[  345.008227][T22596]  ? swap_table_get+0x1e/0x260
[  345.008235][T22596]  ? swap_table_get+0x1e/0x260
[  345.008242][T22596]  ? swap_table_get+0x1e/0x260
[  345.008251][T22596]  ? swap_table_get+0x216/0x260
[  345.008260][T22596]  ? swap_cache_get_folio+0x2e4/0x2f0
[  345.008271][T22596]  do_swap_page+0x555/0x5120
[  345.008283][T22596]  ? __pte_offset_map+0x29/0x240
[  345.008293][T22596]  ? __pte_offset_map+0x29/0x240
[  345.008306][T22596]  ? do_swap_page+0x128/0x5120
[  345.008315][T22596]  ? __pfx_do_swap_page+0x10/0x10
[  345.008322][T22596]  ? __pte_offset_map+0x1ae/0x240
[  345.008333][T22596]  ? pte_offset_map_rw_nolock+0xea/0x160
[  345.008343][T22596]  handle_mm_fault+0x12d2/0x3170
[  345.008359][T22596]  ? handle_mm_fault+0xee/0x3170
[  345.008371][T22596]  ? __pfx_handle_mm_fault+0x10/0x10
[  345.008379][T22596]  ? lock_vma_under_rcu+0x45a/0x500
[  345.008401][T22596]  do_user_addr_fault+0xa73/0x1340
[  345.008413][T22596]  ? rcu_is_watching+0x15/0xb0
[  345.008423][T22596]  ? trace_page_fault_user+0x84/0x1e0
[  345.008432][T22596]  exc_page_fault+0x6a/0xc0
[  345.008443][T22596]  asm_exc_page_fault+0x26/0x30
[  345.008451][T22596] RIP: 0033:0x7f034ed57f03
[  345.008460][T22596] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ae 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b
[  345.008467][T22596] RSP: 002b:00007ffcb5fda6a0 EFLAGS: 00010246
[  345.008475][T22596] RAX: 0000000000000000 RBX: 000055556ef31500 RCX: 0000000000000000
[  345.008480][T22596] RDX: 00007ffcb5fda6e0 RSI: 0000000000000000 RDI: 0000000000000000
[  345.008485][T22596] RBP: 00007f034f017da0 R08: 0000000000000000 R09: 0000000000000000
[  345.008490][T22596] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005435f
[  345.008495][T22596] R13: 00007f034f015fac R14: 0000000000054051 R15: 00007ffcb5fda810
[  345.008508][T22596]  </TASK>
[  345.209686][T22596] memory: usage 291080kB, limit 307200kB, failcnt 3111
[  345.215181][T22596] memory+swap: usage 288588kB, limit 9007199254740988kB, failcnt 0
[  345.219309][T22596] kmem: usage 286208kB, limit 9007199254740988kB, failcnt 0
[  345.224444][T22596] Memory cgroup stats for /syz1:
[  345.224609][T22596] cache 0
[  345.237155][T22596] rss 0
[  345.241221][T22596] rss_huge 0
[  345.244363][T22596] shmem 0
[  345.247347][T22596] mapped_file 0
[  345.254545][T22596] dirty 0
[  345.257881][T22596] writeback 0
[  345.261798][T22596] workingset_refault_anon 14
[  345.265510][T22596] workingset_refault_file 0
[  345.273318][T22596] swap 110592
[  345.276144][T22596] swapcached 188416
[  345.281946][T22596] pgpgin 170294
[  345.285370][T22596] pgpgout 170292
[  345.292032][T22596] pgfault 416260
[  345.294865][T22596] pgmajfault 18
[  345.299032][T22596] inactive_anon 0
[  345.302407][T22596] active_anon 8192
[  345.305735][T22596] inactive_file 0
[  345.310988][T22596] active_file 0
[  345.313790][T22596] unevictable 0
[  345.327614][T22596] hierarchical_memory_limit 314572800
[  345.340434][T22596] hierarchical_memsw_limit 9223372036854771712
[  345.350784][T22596] total_cache 0
[  345.355924][T22596] total_rss 0
[  345.360908][T22596] total_rss_huge 0
[  345.363457][T22596] total_shmem 0
[  345.367401][T22596] total_mapped_file 0
[  345.373602][T22596] total_dirty 0
[  345.376416][T22596] total_writeback 0
[  345.381719][T22596] total_workingset_refault_anon 14
[  345.386301][T22596] total_workingset_refault_file 0
[  345.394202][T22596] total_swap 110592
[  345.406157][T22596] total_swapcached 188416
[  345.414678][T22596] total_pgpgin 170294
[  345.422210][T22596] total_pgpgout 170292
[  345.427270][T22596] total_pgfault 416260
[  345.433549][T22596] total_pgmajfault 18
[  345.440248][T22596] total_inactive_anon 0
[  345.448167][T22596] total_active_anon 8192
[  345.451925][T22596] total_inactive_file 0
[  345.455328][T22596] total_active_file 0
[  345.460748][T22596] total_unevictable 0
[  345.464181][T22596] anon_cost 0
[  345.470812][T22596] file_cost 0
[  345.472199][T22596] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7400,pid=22596,uid=0
[  345.494912][T22596] Memory cgroup out of memory: Killed process 22596 (syz.1.7400) total-vm:102232kB, anon-rss:1248kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  345.844871][T22676] syzkaller0: entered promiscuous mode
[  345.850181][T22676] syzkaller0: entered allmulticast mode
[  346.042261][T22687] __nla_validate_parse: 4 callbacks suppressed
[  346.042271][T22687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7441'.
[  346.061151][T22687] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7441'.
[  347.127503][T22728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7459'.
[  347.131273][T22728] hsr_slave_0: left promiscuous mode
[  347.135274][T22728] hsr_slave_1: left promiscuous mode
[  347.522774][T22754] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  347.524970][T22754] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  347.528660][T22754] tipc: Resetting bearer <eth:syzkaller0>
[  347.656792][T22770] pimreg: entered allmulticast mode
[  347.659954][T22770] pimreg: left allmulticast mode
[  347.779545][T22787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7484'.
[  347.863175][T22795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7487'.
[  348.010269][T22813] netlink: 'syz.1.7498': attribute type 15 has an invalid length.
[  348.013073][T22813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7498'.
[  348.328993][T22851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7515'.
[  348.532930][T22878] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  348.541683][T22878] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  348.552847][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7531'.
[  348.604579][T22884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7532'.
[  348.811097][T22909] tipc: Resetting bearer <eth:syzkaller0>
[  349.051323][T22934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7548'.
[  349.073934][   T33] audit: type=1800 audit(1778615084.701:8): pid=22907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7539" name="memory.events" dev="tmpfs" ino=13200 res=0 errno=0
[  349.169062][T22945] netlink: 'syz.2.7551': attribute type 4 has an invalid length.
[  349.173288][T22945] netlink: 'syz.2.7551': attribute type 4 has an invalid length.
[  349.268795][T22952] netlink: 'syz.2.7554': attribute type 1 has an invalid length.
[  349.785534][T23001] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  350.128890][T23017] veth0_to_bond: default FDB implementation only supports local addresses
[  350.203075][T23024] veth0: Caught tx_queue_len zero misconfig
[  350.257741][T23029] syz_tun: entered allmulticast mode
[  350.397439][T23039] netem: change failed
[  352.609772][T23084] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  352.656615][T23088] netlink: 'syz.1.7614': attribute type 2 has an invalid length.
[  352.659560][T23088] netlink: 'syz.1.7614': attribute type 2 has an invalid length.
[  352.728279][T23094] syzkaller1: tun_chr_ioctl cmd 21731
[  353.207346][T23131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  353.241297][T23131] syzkaller0: mtu less than device minimum
[  353.361404][T23152] __nla_validate_parse: 2 callbacks suppressed
[  353.361414][T23152] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7642'.
[  353.456988][T23156] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  353.459987][T23156] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  353.680123][T23180] netlink: 'syz.0.7653': attribute type 2 has an invalid length.
[  353.688146][T23180] netlink: 'syz.0.7653': attribute type 1 has an invalid length.
[  353.693714][T23180] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7653'.
[  353.753166][T23190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  353.755353][T23190] IPv6: NLM_F_CREATE should be set when creating new route
[  353.757641][T23190] IPv6: NLM_F_CREATE should be set when creating new route
[  353.961426][T23217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7671'.
[  355.007161][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7684'.
[  355.179314][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  355.184041][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  355.189752][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  355.194015][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  355.257943][T23269] netlink: 'syz.1.7695': attribute type 11 has an invalid length.
[  355.403615][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7699'.
[  355.407030][T23279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7699'.
[  355.419466][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7699'.
[  355.420325][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  355.422918][T23279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7699'.
[  355.425431][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  355.431942][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.435743][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.530007][T23285] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  355.532207][T23285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.115977][T23318] xt_hashlimit: size too large, truncated to 1048576
[  356.315707][   T55] block nbd1: Receive control failed (result -32)
[  356.316235][T23141] block nbd1: NBD_DISCONNECT
[  356.324553][T23141] block nbd1: Send disconnect failed -32
[  356.338732][T23141] block nbd1: shutting down sockets
[  357.275730][T23342] netlink: 'syz.0.7725': attribute type 7 has an invalid length.
[  358.009137][T23379] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.012688][T23379] 8021q: adding VLAN 0 to HW filter on device team0
[  358.020568][T23379] 8021q: adding VLAN 0 to HW filter on device batadv0
[  358.044795][T23379] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  358.769504][T23403] netlink: 'syz.2.7751': attribute type 1 has an invalid length.
[  358.793424][T23403] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  358.991901][T23423] netlink: 'syz.2.7760': attribute type 1 has an invalid length.
[  359.011092][T23423] bond21: entered promiscuous mode
[  359.013068][T23423] 8021q: adding VLAN 0 to HW filter on device bond21
[  359.023555][T23423] ipvlan2: entered allmulticast mode
[  359.025376][T23423] bond21: entered allmulticast mode
[  359.036476][T23423] bond21: (slave bridge9): making interface the new active one
[  359.039624][T23423] bridge9: entered promiscuous mode
[  359.041591][T23423] bridge9: entered allmulticast mode
[  359.044686][T23423] bond21: (slave bridge9): Enslaving as an active interface with an up link
[  359.247796][T23458] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7774'.
[  359.339535][T23468] netlink: 'syz.1.7780': attribute type 2 has an invalid length.
[  359.345770][T23470] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  359.351238][T23470] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  359.385638][T23475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7784'.
[  359.458759][T23485] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  359.547147][T23492] bond22: invalid ARP target 0.0.0.0 specified for addition
[  359.558439][T23492] bond22: option arp_ip_target: invalid value (0)
[  359.599701][T23492] bond22 (unregistering): Released all slaves
[  359.803454][T23508] 8021q: adding VLAN 0 to HW filter on device bond0
[  359.848984][T23508] veth1_vlan: left promiscuous mode
[  359.851843][T23508] veth0_vlan: left promiscuous mode
[  359.854131][T23508] veth0_vlan: entered promiscuous mode
[  359.857350][T23508] veth1_vlan: entered promiscuous mode
[  359.863870][T23508] veth1_macvtap: left promiscuous mode
[  359.866050][T23508] veth0_macvtap: left promiscuous mode
[  359.870719][T23508] veth0_macvtap: entered promiscuous mode
[  359.873000][T23508] veth1_macvtap: entered promiscuous mode
[  359.880103][T23508] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  359.882807][T23508] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  359.885676][T23508] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  359.888299][T23508] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  359.891301][T23508] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  359.921974][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.924937][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.937955][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.943575][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.332237][T23550] xt_hashlimit: size too large, truncated to 1048576
[  360.503468][T23566] netlink: 'syz.0.7822': attribute type 1 has an invalid length.
[  360.533345][T23566] 8021q: adding VLAN 0 to HW filter on device bond19
[  360.543309][T23566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7822'.
[  360.546680][T23566] bond19: entered allmulticast mode
[  360.666580][T23585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7831'.
[  360.680307][T23585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7831'.
[  360.766919][T23590] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7833'.
[  360.771860][T23590] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7833'.
[  360.775513][T23590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7833'.
[  360.984843][T23607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7840'.
[  361.770984][T23656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.775096][T23656] syzkaller0: entered promiscuous mode
[  361.776970][T23656] syzkaller0: entered allmulticast mode
[  361.799166][T23656] tipc: Resetting bearer <eth:syzkaller0>
[  361.809191][T23655] tipc: Resetting bearer <eth:syzkaller0>
[  361.841015][T23655] tipc: Disabling bearer <eth:syzkaller0>
[  361.841101][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7862'.
[  362.411060][T23707] netlink: 'syz.2.7882': attribute type 6 has an invalid length.
[  362.855237][T23738] SET target dimension over the limit!
[  363.575753][T23774] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.715229][T23790] netlink: 'syz.2.7918': attribute type 3 has an invalid length.
[  363.717666][T23790] netlink: 'syz.2.7918': attribute type 3 has an invalid length.
[  363.897006][T23814] netlink: 'syz.1.7929': attribute type 322 has an invalid length.
[  364.364627][T23868] openvswitch: netlink: Actions may not be safe on all matching packets
[  364.367691][T23869] netlink: 'syz.0.7953': attribute type 2 has an invalid length.
[  364.665716][T23898] __nla_validate_parse: 5 callbacks suppressed
[  364.665732][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7967'.
[  364.811190][T23908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7972'.
[  365.056182][T23925] netlink: 'syz.1.7979': attribute type 1 has an invalid length.
[  365.059093][T23925] netlink: 'syz.1.7979': attribute type 2 has an invalid length.
[  365.109823][T23927] ip6_vti0: left promiscuous mode
[  365.122459][T23927] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.135519][T23927] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.161533][T23927] team_slave_1: left promiscuous mode
[  365.169412][T23927] veth1_macvtap: left promiscuous mode
[  365.171887][T23927] veth0_macvtap: left promiscuous mode
[  365.174977][T23927] veth0_macvtap: entered promiscuous mode
[  365.181168][T23927] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  365.208802][ T5478] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  365.211814][ T5478] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  365.220200][ T5478] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  365.223740][ T5478] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  365.296124][T23929] ipip0: entered promiscuous mode
[  365.451419][T23943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.633011][T23953] sctp: [Deprecated]: syz.1.7992 (pid 23953) Use of struct sctp_assoc_value in delayed_ack socket option.
[  365.633011][T23953] Use struct sctp_sack_info instead
[  365.956739][T23984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8004'.
[  366.096577][T23997] gtp2: entered promiscuous mode
[  366.098775][T23997] gtp2: entered allmulticast mode
[  367.216770][T24037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8027'.
[  367.621554][   T56] block nbd2: Receive control failed (result -32)
[  368.135567][T24081] vlan2: entered allmulticast mode
[  368.137580][T24081] bond0: entered allmulticast mode
[  368.210373][T24088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8049'.
[  368.229880][   T33] audit: type=1804 audit(1778615103.861:9): pid=24088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8049" name="/newroot/2817/cgroup.controllers" dev="tmpfs" ino=14210 res=1 errno=0
[  368.242669][   T33] audit: type=1800 audit(1778615103.861:10): pid=24088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8049" name="cgroup.controllers" dev="tmpfs" ino=14210 res=0 errno=0
[  368.257446][   T33] audit: type=1804 audit(1778615103.881:11): pid=24088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.8049" name="/newroot/2817/cgroup.controllers" dev="tmpfs" ino=14210 res=1 errno=0
[  368.559250][T24115] netlink: 'syz.2.8060': attribute type 1 has an invalid length.
[  368.636445][T24121] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8063'.
[  368.700918][T24127] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  368.703827][T24127] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  368.706484][T24127] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  369.035209][T24151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8078'.
[  369.395640][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8090'.
[  369.398780][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8090'.
[  369.811611][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  369.814611][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  369.822535][   T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  369.834864][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  369.841598][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  369.847188][   T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  369.852156][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  369.859545][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  369.863829][   T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  369.883252][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  369.888500][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  369.898089][   T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  369.967703][T24198] netlink: 'syz.0.8098': attribute type 1 has an invalid length.
[  370.831255][T24273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8129'.
[  370.867523][T24275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8131'.
[  370.877606][T24260] netlink: 'syz.0.8127': attribute type 1 has an invalid length.
[  370.961823][T24273] 
[  370.962758][T24273] ======================================================
[  370.965371][T24273] WARNING: possible circular locking dependency detected
[  370.967803][T24273] syzkaller #0 Not tainted
[  370.969411][T24273] ------------------------------------------------------
[  370.971994][T24273] syz.2.8129/24273 is trying to acquire lock:
[  370.974228][T24273] ffff88816cca2ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  370.977633][T24273] 
[  370.977633][T24273] but task is already holding lock:
[  370.979993][T24273] ffff88816cca25a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450
[  370.982892][T24273] 
[  370.982892][T24273] which lock already depends on the new lock.
[  370.982892][T24273] 
[  370.986233][T24273] 
[  370.986233][T24273] the existing dependency chain (in reverse order) is:
[  370.988872][T24273] 
[  370.988872][T24273] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  370.991398][T24273]        blk_alloc_queue+0x546/0x680
[  370.993184][T24273]        __blk_mq_alloc_disk+0x197/0x390
[  370.994853][T24273]        nbd_dev_add+0x499/0xb50
[  370.996256][T24273]        nbd_init+0x168/0x1f0
[  370.997603][T24273]        do_one_initcall+0x250/0x870
[  370.999262][T24273]        do_initcall_level+0x104/0x190
[  371.000988][T24273]        do_initcalls+0x59/0xa0
[  371.002542][T24273]        kernel_init_freeable+0x2a6/0x3e0
[  371.004240][T24273]        kernel_init+0x1d/0x1d0
[  371.005740][T24273]        ret_from_fork+0x514/0xb70
[  371.007379][T24273]        ret_from_fork_asm+0x1a/0x30
[  371.009057][T24273] 
[  371.009057][T24273] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  371.011404][T24273]        fs_reclaim_acquire+0x71/0x100
[  371.013290][T24273]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  371.015174][T24273]        __alloc_skb+0x1d0/0x7d0
[  371.016703][T24273]        __ip6_append_data+0x2d3c/0x3f60
[  371.018469][T24273]        ip6_append_data+0x10f/0x280
[  371.020082][T24273]        rawv6_sendmsg+0x12d3/0x18e0
[  371.021595][T24273]        ____sys_sendmsg+0x80a/0x9f0
[  371.023177][T24273]        ___sys_sendmsg+0x2a5/0x360
[  371.024924][T24273]        __x64_sys_sendmsg+0x1bd/0x2a0
[  371.026549][T24273]        do_syscall_64+0x15f/0xf80
[  371.028224][T24273]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.030230][T24273] 
[  371.030230][T24273] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  371.032514][T24273]        lock_sock_nested+0x41/0x100
[  371.034103][T24273]        inet_shutdown+0x6a/0x390
[  371.035587][T24273]        nbd_mark_nsock_dead+0x2e9/0x560
[  371.037192][T24273]        sock_shutdown+0x15e/0x260
[  371.038702][T24273]        nbd_clear_sock+0x24/0x170
[  371.040132][T24273]        nbd_config_put+0x2dd/0x580
[  371.041580][T24273]        nbd_genl_connect+0x19d5/0x1cf0
[  371.043250][T24273]        genl_family_rcv_msg_doit+0x22a/0x330
[  371.045216][T24273]        genl_rcv_msg+0x61c/0x7a0
[  371.046827][T24273]        netlink_rcv_skb+0x232/0x4b0
[  371.048684][T24273]        genl_rcv+0x28/0x40
[  371.050187][T24273]        netlink_unicast+0x75c/0x8e0
[  371.051953][T24273]        netlink_sendmsg+0x813/0xb40
[  371.053680][T24273]        ____sys_sendmsg+0x972/0x9f0
[  371.055384][T24273]        ___sys_sendmsg+0x2a5/0x360
[  371.057075][T24273]        __x64_sys_sendmsg+0x1bd/0x2a0
[  371.058930][T24273]        do_syscall_64+0x15f/0xf80
[  371.060668][T24273]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.062551][T24273] 
[  371.062551][T24273] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  371.064741][T24273]        __mutex_lock+0x1a3/0x1550
[  371.066341][T24273]        nbd_queue_rq+0x37b/0x1100
[  371.067961][T24273]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  371.069859][T24273]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  371.071976][T24273]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  371.073996][T24273]        blk_mq_run_hw_queue+0x348/0x4f0
[  371.075642][T24273]        blk_mq_dispatch_list+0xd16/0xe10
[  371.077412][T24273]        blk_mq_flush_plug_list+0x48d/0x570
[  371.079124][T24273]        __blk_flush_plug+0x3ed/0x4d0
[  371.080693][T24273]        __submit_bio+0x28d/0x580
[  371.082218][T24273]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  371.084057][T24273]        block_read_full_folio+0x599/0x830
[  371.085756][T24273]        filemap_read_folio+0x137/0x3b0
[  371.087481][T24273]        do_read_cache_folio+0x358/0x590
[  371.089176][T24273]        read_part_sector+0xb6/0x2b0
[  371.090738][T24273]        adfspart_check_ICS+0xb1/0x960
[  371.092396][T24273]        bdev_disk_changed+0x817/0x1770
[  371.094011][T24273]        blkdev_get_whole+0x380/0x510
[  371.095562][T24273]        bdev_open+0x31e/0xd30
[  371.097172][T24273]        blkdev_open+0x470/0x610
[  371.098981][T24273]        do_dentry_open+0x785/0x14e0
[  371.100493][T24273]        vfs_open+0x3b/0x340
[  371.101902][T24273]        path_openat+0x2e08/0x3860
[  371.103436][T24273]        do_file_open+0x23e/0x4a0
[  371.104903][T24273]        do_sys_openat2+0x113/0x200
[  371.106417][T24273]        __x64_sys_openat+0x138/0x170
[  371.108155][T24273]        do_syscall_64+0x15f/0xf80
[  371.109673][T24273]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.111644][T24273] 
[  371.111644][T24273] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  371.113963][T24273]        __mutex_lock+0x1a3/0x1550
[  371.115462][T24273]        nbd_queue_rq+0xc6/0x1100
[  371.117189][T24273]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  371.119383][T24273]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  371.121597][T24273]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  371.123819][T24273]        blk_mq_run_hw_queue+0x348/0x4f0
[  371.125548][T24273]        blk_mq_dispatch_list+0xd16/0xe10
[  371.127145][T24273]        blk_mq_flush_plug_list+0x48d/0x570
[  371.128803][T24273]        __blk_flush_plug+0x3ed/0x4d0
[  371.130292][T24273]        __submit_bio+0x28d/0x580
[  371.131818][T24273]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  371.133732][T24273]        block_read_full_folio+0x599/0x830
[  371.135338][T24273]        filemap_read_folio+0x137/0x3b0
[  371.136859][T24273]        do_read_cache_folio+0x358/0x590
[  371.138430][T24273]        read_part_sector+0xb6/0x2b0
[  371.139881][T24273]        adfspart_check_ICS+0xb1/0x960
[  371.141456][T24273]        bdev_disk_changed+0x817/0x1770
[  371.143179][T24273]        blkdev_get_whole+0x380/0x510
[  371.144685][T24273]        bdev_open+0x31e/0xd30
[  371.146027][T24273]        blkdev_open+0x470/0x610
[  371.147395][T24273]        do_dentry_open+0x785/0x14e0
[  371.148905][T24273]        vfs_open+0x3b/0x340
[  371.150526][T24273]        path_openat+0x2e08/0x3860
[  371.152310][T24273]        do_file_open+0x23e/0x4a0
[  371.154124][T24273]        do_sys_openat2+0x113/0x200
[  371.155912][T24273]        __x64_sys_openat+0x138/0x170
[  371.157480][T24273]        do_syscall_64+0x15f/0xf80
[  371.158962][T24273]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.160954][T24273] 
[  371.160954][T24273] -> #1 (set->srcu){.+.+}-{0:0}:
[  371.163197][T24273]        __synchronize_srcu+0xca/0x300
[  371.164944][T24273]        elevator_switch+0x1e8/0x7a0
[  371.166524][T24273]        elevator_change+0x2cc/0x450
[  371.168076][T24273]        elevator_set_default+0x36c/0x430
[  371.169791][T24273]        blk_register_queue+0x3e9/0x4e0
[  371.171441][T24273]        __add_disk+0x677/0xd50
[  371.172992][T24273]        add_disk_fwnode+0xfb/0x480
[  371.174682][T24273]        nbd_dev_add+0x72c/0xb50
[  371.176359][T24273]        nbd_init+0x168/0x1f0
[  371.177970][T24273]        do_one_initcall+0x250/0x870
[  371.179537][T24273]        do_initcall_level+0x104/0x190
[  371.181088][T24273]        do_initcalls+0x59/0xa0
[  371.182453][T24273]        kernel_init_freeable+0x2a6/0x3e0
[  371.184085][T24273]        kernel_init+0x1d/0x1d0
[  371.185613][T24273]        ret_from_fork+0x514/0xb70
[  371.187383][T24273]        ret_from_fork_asm+0x1a/0x30
[  371.189169][T24273] 
[  371.189169][T24273] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  371.191748][T24273]        __lock_acquire+0x15a5/0x2cf0
[  371.193437][T24273]        lock_acquire+0x106/0x350
[  371.195210][T24273]        __mutex_lock+0x1a3/0x1550
[  371.197030][T24273]        elevator_change+0x1b3/0x450
[  371.198740][T24273]        elevator_set_none+0xb5/0x140
[  371.200230][T24273]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  371.202076][T24273]        nbd_start_device+0x17f/0xb10
[  371.203768][T24273]        nbd_genl_connect+0x165b/0x1cf0
[  371.205326][T24273]        genl_family_rcv_msg_doit+0x22a/0x330
[  371.207096][T24273]        genl_rcv_msg+0x61c/0x7a0
[  371.208614][T24273]        netlink_rcv_skb+0x232/0x4b0
[  371.210155][T24273]        genl_rcv+0x28/0x40
[  371.211450][T24273]        netlink_unicast+0x75c/0x8e0
[  371.212955][T24273]        netlink_sendmsg+0x813/0xb40
[  371.214481][T24273]        ____sys_sendmsg+0x972/0x9f0
[  371.216107][T24273]        ___sys_sendmsg+0x2a5/0x360
[  371.217747][T24273]        __x64_sys_sendmsg+0x1bd/0x2a0
[  371.219548][T24273]        do_syscall_64+0x15f/0xf80
[  371.221168][T24273]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.223172][T24273] 
[  371.223172][T24273] other info that might help us debug this:
[  371.223172][T24273] 
[  371.226420][T24273] Chain exists of:
[  371.226420][T24273]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52
[  371.226420][T24273] 
[  371.230726][T24273]  Possible unsafe locking scenario:
[  371.230726][T24273] 
[  371.232917][T24273]        CPU0                    CPU1
[  371.234420][T24273]        ----                    ----
[  371.235961][T24273]   lock(&q->q_usage_counter(io)#52);
[  371.237445][T24273]                                lock(fs_reclaim);
[  371.239252][T24273]                                lock(&q->q_usage_counter(io)#52);
[  371.241441][T24273]   lock(&q->elevator_lock);
[  371.242729][T24273] 
[  371.242729][T24273]  *** DEADLOCK ***
[  371.242729][T24273] 
[  371.245098][T24273] 6 locks held by syz.2.8129/24273:
[  371.246633][T24273]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  371.249466][T24273]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  371.252324][T24273]  #2: ffff88816cc9d9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60
[  371.255658][T24273]  #3: ffff88816cc9d8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60
[  371.259092][T24273]  #4: ffff88816cca25a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450
[  371.262627][T24273]  #5: ffff88816cca25d8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  371.266533][T24273] 
[  371.266533][T24273] stack backtrace:
[  371.268543][T24273] CPU: 0 UID: 0 PID: 24273 Comm: syz.2.8129 Not tainted syzkaller #0 PREEMPT(full) 
[  371.268555][T24273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  371.268561][T24273] Call Trace:
[  371.268567][T24273]  <TASK>
[  371.268573][T24273]  dump_stack_lvl+0xe8/0x150
[  371.268585][T24273]  print_circular_bug+0x2e1/0x300
[  371.268598][T24273]  check_noncircular+0x12e/0x150
[  371.268610][T24273]  __lock_acquire+0x15a5/0x2cf0
[  371.268624][T24273]  ? elevator_change+0x1b3/0x450
[  371.268635][T24273]  lock_acquire+0x106/0x350
[  371.268643][T24273]  ? elevator_change+0x1b3/0x450
[  371.268656][T24273]  __mutex_lock+0x1a3/0x1550
[  371.268667][T24273]  ? elevator_change+0x1b3/0x450
[  371.268678][T24273]  ? rcu_is_watching+0x15/0xb0
[  371.268688][T24273]  ? work_grab_pending+0x3d1/0x990
[  371.268698][T24273]  ? elevator_change+0x1b3/0x450
[  371.268709][T24273]  ? __pfx___mutex_lock+0x10/0x10
[  371.268719][T24273]  ? enable_work+0x17f/0x230
[  371.268728][T24273]  ? lockdep_hardirqs_on+0x7a/0x110
[  371.268742][T24273]  ? __cancel_work_sync+0xf7/0x110
[  371.268751][T24273]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  371.268760][T24273]  elevator_change+0x1b3/0x450
[  371.268772][T24273]  elevator_set_none+0xb5/0x140
[  371.268786][T24273]  ? __pfx_elevator_set_none+0x10/0x10
[  371.268805][T24273]  ? xa_load+0x1db/0x210
[  371.268827][T24273]  blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  371.268847][T24273]  ? kernfs_add_one+0x477/0x5c0
[  371.268866][T24273]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  371.268886][T24273]  ? sysfs_add_file_mode_ns+0x259/0x300
[  371.268905][T24273]  nbd_start_device+0x17f/0xb10
[  371.268952][T24273]  ? device_create_file+0xf4/0x1b0
[  371.268967][T24273]  nbd_genl_connect+0x165b/0x1cf0
[  371.268976][T24273]  ? __pfx___nla_validate_parse+0x10/0x10
[  371.268990][T24273]  ? __pfx_nbd_genl_connect+0x10/0x10
[  371.268999][T24273]  ? rcu_is_watching+0x15/0xb0
[  371.269008][T24273]  ? trace_kmalloc+0x2a/0xf0
[  371.269020][T24273]  ? __nla_parse+0x40/0x60
[  371.269032][T24273]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  371.269041][T24273]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  371.269050][T24273]  genl_family_rcv_msg_doit+0x22a/0x330
[  371.269060][T24273]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  371.269070][T24273]  ? __lock_acquire+0x6b5/0x2cf0
[  371.269080][T24273]  genl_rcv_msg+0x61c/0x7a0
[  371.269088][T24273]  ? __pfx_genl_rcv_msg+0x10/0x10
[  371.269096][T24273]  ? __pfx_nbd_genl_connect+0x10/0x10
[  371.269107][T24273]  netlink_rcv_skb+0x232/0x4b0
[  371.269118][T24273]  ? __pfx_genl_rcv_msg+0x10/0x10
[  371.269126][T24273]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  371.269138][T24273]  ? down_read+0x270/0x2e0
[  371.269145][T24273]  ? genl_rcv+0xd/0x40
[  371.269152][T24273]  genl_rcv+0x28/0x40
[  371.269158][T24273]  netlink_unicast+0x75c/0x8e0
[  371.269169][T24273]  netlink_sendmsg+0x813/0xb40
[  371.269181][T24273]  ? __pfx_netlink_sendmsg+0x10/0x10
[  371.269191][T24273]  ? aa_sock_msg_perm+0xf1/0x1b0
[  371.269201][T24273]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  371.269212][T24273]  ____sys_sendmsg+0x972/0x9f0
[  371.269223][T24273]  ? __might_fault+0xaf/0x130
[  371.269234][T24273]  ? __pfx_____sys_sendmsg+0x10/0x10
[  371.269245][T24273]  ? import_iovec+0x73/0xa0
[  371.269257][T24273]  ___sys_sendmsg+0x2a5/0x360
[  371.269267][T24273]  ? try_to_wake_up+0x828/0x1380
[  371.269278][T24273]  ? __pfx____sys_sendmsg+0x10/0x10
[  371.269289][T24273]  ? futex_wake+0x4ac/0x580
[  371.269304][T24273]  ? call_rcu+0x644/0x890
[  371.269315][T24273]  __x64_sys_sendmsg+0x1bd/0x2a0
[  371.269325][T24273]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  371.269337][T24273]  ? rcu_is_watching+0x15/0xb0
[  371.269347][T24273]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.269355][T24273]  do_syscall_64+0x15f/0xf80
[  371.269366][T24273]  ? trace_irq_disable+0x3b/0x140
[  371.269378][T24273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.269386][T24273] RIP: 0033:0x7f5c8af9cdd9
[  371.269396][T24273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  371.269404][T24273] RSP: 002b:00007f5c8bea2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  371.269413][T24273] RAX: ffffffffffffffda RBX: 00007f5c8b216090 RCX: 00007f5c8af9cdd9
[  371.269420][T24273] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000009
[  371.269425][T24273] RBP: 00007f5c8b032d69 R08: 0000000000000000 R09: 0000000000000000
[  371.269430][T24273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  371.269435][T24273] R13: 00007f5c8b216128 R14: 00007f5c8b216090 R15: 00007ffe852b9ab8
[  371.269445][T24273]  </TASK>
[  371.486761][T24290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8129'.
[  371.537577][T24286] tipc: Resetting bearer <eth:vcan0>
[  371.657748][   T55] block nbd3: Receive control failed (result -32)
[  371.659381][T19227] block nbd3: Receive control failed (result -32)
[  371.933623][T24290] vlan3: entered promiscuous mode
[  371.935641][T24290] bridge0: entered promiscuous mode
[  371.943576][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.946924][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.950812][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.954083][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
