last executing test programs:

2m50.558604588s ago: executing program 1 (id=2242):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
connect$bt_sco(r2, &(0x7f0000000340)={0x1f, @none}, 0x8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/16, @ANYRES32], 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m50.477236383s ago: executing program 1 (id=2245):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0)

2m50.354693078s ago: executing program 1 (id=2249):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)

2m50.297375404s ago: executing program 1 (id=2252):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001940))
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev, 0xfffffffe}}, 0xe8)
listen(r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0xe7})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x20)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x40)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000002200)={0x42, 0x1, 0x6, 0x3, 0x0, 0x81})
socket(0x21, 0x800, 0x5f00)

2m50.268416599s ago: executing program 1 (id=2255):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1, 0x81, 0x9f, 0x6}, {0x6, 0xc, 0xd, 0x4f4}, {0x8, 0x3, 0x8, 0x7a}]})
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6)

2m49.82291298s ago: executing program 1 (id=2262):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/287, 0x11f}, {&(0x7f0000002100)=""/4056, 0xfd8}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f0000000b00)=""/190, 0xbe}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f0000000940)=""/212, 0xd4}], 0x8}, 0x40012100)

2m49.665153102s ago: executing program 32 (id=2262):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/287, 0x11f}, {&(0x7f0000002100)=""/4056, 0xfd8}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f0000000b00)=""/190, 0xbe}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f0000000940)=""/212, 0xd4}], 0x8}, 0x40012100)

519.592817ms ago: executing program 2 (id=6468):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000340)=0x62)

449.742994ms ago: executing program 2 (id=6469):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000640)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e)

443.678566ms ago: executing program 2 (id=6472):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000fedbdf25020000000001000900000000060015000400000014001680100008800c000380050001"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0)

365.431464ms ago: executing program 2 (id=6473):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c000180080001"], 0x8c}}, 0x0)

365.157029ms ago: executing program 3 (id=6474):
r0 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x2000000000}}, {{@in6=@mcast1}, 0x0, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0xe8)

364.673277ms ago: executing program 2 (id=6476):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0)

304.438613ms ago: executing program 3 (id=6477):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0)

304.189204ms ago: executing program 2 (id=6478):
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r2, 0x2}, 0x8)

300.592131ms ago: executing program 3 (id=6480):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r0, &(0x7f0000000480)="3d0b41e2"}, 0x20)

254.634036ms ago: executing program 3 (id=6483):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="0d3328bd7000fedbdf256b00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800)

212.613176ms ago: executing program 0 (id=6484):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24)

154.504153ms ago: executing program 0 (id=6485):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0)

154.167309ms ago: executing program 3 (id=6486):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x1a}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

154.031568ms ago: executing program 0 (id=6487):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x7, 0x5, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000050)

151.413965ms ago: executing program 3 (id=6488):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x10000c00)

84.857793ms ago: executing program 0 (id=6489):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0xc, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0)

84.564829ms ago: executing program 0 (id=6490):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r2, r1, 0x0, 0x3)

0s ago: executing program 0 (id=6491):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0xfffffffc, 0x25dfdbf8, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xa30}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x3c}}, 0x0)

kernel console output (not intermixed with test programs):

ting bearer <eth:syzkaller0>
[  109.522509][ T7884] tipc: Disabling bearer <eth:syzkaller0>
[  109.657068][   T33] audit: type=1800 audit(1753362782.590:2): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.833" name="memory.events" dev="tmpfs" ino=1478 res=0 errno=0
[  109.702640][ T7899] bond3: entered promiscuous mode
[  109.705032][ T7899] 8021q: adding VLAN 0 to HW filter on device bond3
[  109.950975][ T7920] bridge0: entered promiscuous mode
[  109.953434][ T7920] macsec1: entered promiscuous mode
[  109.957380][ T7920] bridge0: port 4(macsec1) entered blocking state
[  109.960454][ T7920] bridge0: port 4(macsec1) entered disabled state
[  109.963360][ T7920] macsec1: entered allmulticast mode
[  109.966129][ T7920] bridge0: entered allmulticast mode
[  109.970450][ T7920] macsec1: left allmulticast mode
[  109.972411][ T7920] bridge0: left allmulticast mode
[  109.980452][ T7920] bridge0: left promiscuous mode
[  110.161569][ T7938] netlink: 'syz.1.854': attribute type 21 has an invalid length.
[  110.164182][ T7938] netlink: 'syz.1.854': attribute type 22 has an invalid length.
[  110.172959][ T7938] netlink: 'syz.1.854': attribute type 23 has an invalid length.
[  110.175349][ T7938] netlink: 'syz.1.854': attribute type 25 has an invalid length.
[  110.177855][ T7938] netlink: 'syz.1.854': attribute type 26 has an invalid length.
[  110.180226][ T7938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.854'.
[  110.187160][ T5830] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  110.222052][ T7944] lo: entered promiscuous mode
[  110.225470][ T7944] netlink: 'syz.1.857': attribute type 8 has an invalid length.
[  110.229071][ T7944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.501394][ T7961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.863'.
[  111.249615][ T7980] netlink: 5 bytes leftover after parsing attributes in process `syz.2.871'.
[  111.411630][ T7990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.876'.
[  111.823459][ T8015] xt_hashlimit: max too large, truncated to 1048576
[  111.873241][ T8017] bond0: entered promiscuous mode
[  111.875267][ T8017] bond_slave_0: entered promiscuous mode
[  111.880784][ T8017] batadv0: entered promiscuous mode
[  111.885436][ T8017] bond0: left promiscuous mode
[  111.888708][ T8017] bond_slave_0: left promiscuous mode
[  111.891101][ T8017] batadv0: left promiscuous mode
[  111.951777][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'.
[  111.954714][ T8013] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  111.958659][ T8013] tipc: Enabled bearer <udp:syz1>, priority 10
[  112.042773][ T8021] xt_connbytes: Forcing CT accounting to be enabled
[  112.057586][ T8021] set match dimension is over the limit!
[  112.143317][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'.
[  112.147120][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'.
[  113.180746][ T8053] __nla_validate_parse: 1 callbacks suppressed
[  113.180769][ T8053] netlink: 68 bytes leftover after parsing attributes in process `syz.2.902'.
[  113.197839][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'.
[  113.213370][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  113.249020][ T8059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.904'.
[  113.490415][ T8077] syzkaller0: entered promiscuous mode
[  113.492289][ T8077] syzkaller0: entered allmulticast mode
[  113.599904][ T8092] netlink: 244 bytes leftover after parsing attributes in process `syz.1.920'.
[  114.589500][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'.
[  114.767359][ T8113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'.
[  114.839827][ T8113] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.926'.
[  114.879279][ T8124] netlink: 'syz.0.932': attribute type 1 has an invalid length.
[  114.881817][ T8124] netlink: 144 bytes leftover after parsing attributes in process `syz.0.932'.
[  114.884884][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.932'.
[  116.002552][ T8197] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  116.022278][ T8197] syz_tun: left allmulticast mode
[  116.024509][ T8197] syz_tun: left promiscuous mode
[  116.028187][ T8197] bridge0: port 3(syz_tun) entered disabled state
[  116.038150][ T8197] bond0: (slave batadv0): Releasing backup interface
[  116.045323][ T8197] bridge_slave_0: left allmulticast mode
[  116.048537][ T8197] bridge_slave_0: left promiscuous mode
[  116.050999][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.060483][ T8197] bridge_slave_1: left allmulticast mode
[  116.062794][ T8197] bridge_slave_1: left promiscuous mode
[  116.065362][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.080752][ T8197] bond0: (slave bond_slave_0): Releasing backup interface
[  116.095175][ T8197] team0: Port device team_slave_0 removed
[  116.103659][ T8197] team0: Port device team_slave_1 removed
[  116.109303][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.113522][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.117924][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.133238][ T8197] bond1: (slave bond2): Releasing backup interface
[  116.136859][ T8197] bond1: (slave bond2): the permanent HWaddr of slave - 12:67:b5:34:7c:6a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  116.143613][ T8197] bond1: (slave gretap1): making interface the new active one
[  116.160904][ T8197] bond1: (slave gretap1): Releasing backup interface
[  116.190862][ T8197] netlink: 'syz.2.966': attribute type 10 has an invalid length.
[  116.194345][ T8197] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  116.203475][ T8197] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.211316][ T8197] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  116.227547][ T8197] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  116.231519][ T8197] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  116.821470][ T8197] syz.2.966 (8197) used greatest stack depth: 16456 bytes left
[  116.987999][ T8243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.018640][ T8270] netlink: 'syz.1.998': attribute type 83 has an invalid length.
[  118.340035][ T8283] netlink: 'syz.0.1003': attribute type 4 has an invalid length.
[  118.356442][ T8283] netlink: 'syz.0.1003': attribute type 4 has an invalid length.
[  118.567733][ T8305] __nla_validate_parse: 4 callbacks suppressed
[  118.567753][ T8305] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1012'.
[  118.664776][ T8314] netlink: 'syz.2.1017': attribute type 2 has an invalid length.
[  118.669615][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'.
[  118.833049][ T8330] netlink: 'syz.2.1025': attribute type 21 has an invalid length.
[  119.045407][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1033'.
[  119.049050][ T8348] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  119.715751][ T8397] netlink: 'syz.2.1055': attribute type 5 has an invalid length.
[  119.723557][ T8397] ip6erspan0: entered promiscuous mode
[  119.930445][ T8411] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  120.275059][ T8437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.281791][ T8437] syzkaller0: entered promiscuous mode
[  120.285050][ T8437] syzkaller0: entered allmulticast mode
[  120.315263][ T8437] tipc: Resetting bearer <eth:syzkaller0>
[  120.321430][ T8436] tipc: Resetting bearer <eth:syzkaller0>
[  120.333398][ T8436] tipc: Disabling bearer <eth:syzkaller0>
[  120.417753][    T9] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  120.601166][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1085'.
[  120.604304][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1085'.
[  120.833456][ T8489] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1098'.
[  120.877586][ T8493] netlink: 'syz.2.1101': attribute type 1 has an invalid length.
[  120.902427][ T8493] bond4: entered promiscuous mode
[  120.905994][ T8493] 8021q: adding VLAN 0 to HW filter on device bond4
[  120.928529][ T8493] 8021q: adding VLAN 0 to HW filter on device bond4
[  120.931302][ T8493] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  120.934809][ T8493] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  120.945019][ T8493] bond4: (slave wireguard0): making interface the new active one
[  120.948017][ T8493] wireguard0: entered promiscuous mode
[  120.950967][ T8493] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[  120.958032][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'.
[  120.962186][ T8493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  120.964484][ T8493] IPv6: NLM_F_CREATE should be set when creating new route
[  120.966873][ T8493] IPv6: NLM_F_CREATE should be set when creating new route
[  120.970541][ T8493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  120.979449][ T8493] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address
[  120.994358][ T8493] bond4: (slave wireguard1): Enslaving as a backup interface with an up link
[  121.001400][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'.
[  121.291216][ T8511] xt_CT: No such helper "pptp"
[  121.341084][ T8514] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  122.019340][ T8554] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1129'.
[  122.050156][ T8556] netlink: 'syz.1.1130': attribute type 1 has an invalid length.
[  122.053207][ T8556] netlink: 'syz.1.1130': attribute type 1 has an invalid length.
[  122.294072][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'.
[  122.297804][ T8574] netlink: 'syz.2.1139': attribute type 19 has an invalid length.
[  122.670598][ T8614] atomic_op ffff88803b495198 conn xmit_atomic 0000000000000000
[  122.852861][ T8630] pim6reg9: entered allmulticast mode
[  123.148257][ T8659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.156301][ T8659] syzkaller0: entered promiscuous mode
[  123.158278][ T8659] syzkaller0: entered allmulticast mode
[  123.174627][ T8661] netlink: 'syz.1.1180': attribute type 21 has an invalid length.
[  123.191055][ T8659] tipc: Resetting bearer <eth:syzkaller0>
[  123.205308][ T8658] tipc: Resetting bearer <eth:syzkaller0>
[  123.217281][ T8658] tipc: Disabling bearer <eth:syzkaller0>
[  123.586231][ T8692] __nla_validate_parse: 4 callbacks suppressed
[  123.586356][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'.
[  123.592976][ T8692] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  123.599417][ T8692] tipc: Enabled bearer <udp:syz1>, priority 10
[  123.911055][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'.
[  124.043561][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'.
[  124.342413][ T8722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1208'.
[  124.726728][   T24] tipc: Node number set to 1864991357
[  124.895203][ T8751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.904052][ T8754] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1223'.
[  124.911270][ T8751] syzkaller0: entered promiscuous mode
[  124.913481][ T8751] syzkaller0: entered allmulticast mode
[  124.956740][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'.
[  124.961735][ T8751] tipc: Resetting bearer <eth:syzkaller0>
[  124.974224][ T8750] tipc: Resetting bearer <eth:syzkaller0>
[  124.993482][ T8750] tipc: Disabling bearer <eth:syzkaller0>
[  125.116809][ T8764] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1228'.
[  125.350711][ T8778] No such timeout policy "syz0"
[  125.446806][ T8782] netlink: 'syz.0.1237': attribute type 8 has an invalid length.
[  125.497373][ T8778] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1235'.
[  125.544855][ T8788] sch_tbf: burst 4398 is lower than device lo mtu (65499) !
[  125.848543][ T8808] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1249'.
[  125.851537][ T8808] netlink: zone id is out of range
[  125.853167][ T8808] netlink: get zone limit has 8 unknown bytes
[  125.894417][ T8816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1254'.
[  126.895969][ T5834] Bluetooth: hci2: link tx timeout
[  126.898199][ T5834] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  127.259859][ T8921] batman_adv: batadv0: Adding interface: ip6gretap1
[  127.262487][ T8921] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.280597][ T8921] batman_adv: batadv0: Interface activated: ip6gretap1
[  127.475157][ T8946] netlink: 'syz.1.1313': attribute type 9 has an invalid length.
[  127.487828][ T8946] macvlan2: entered promiscuous mode
[  127.490849][ T8946] hsr0: entered promiscuous mode
[  127.492819][ T8946] macvlan2: entered allmulticast mode
[  127.494932][ T8946] hsr0: entered allmulticast mode
[  127.497214][ T8946] hsr_slave_0: entered allmulticast mode
[  127.499463][ T8946] hsr_slave_1: entered allmulticast mode
[  128.976037][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  128.993733][ T9029] __nla_validate_parse: 7 callbacks suppressed
[  128.993752][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'.
[  129.001729][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'.
[  129.005243][ T9029] netlink: 'syz.1.1351': attribute type 20 has an invalid length.
[  129.177666][ T9037] batadv_slave_1: entered promiscuous mode
[  129.216433][ T9039] netlink: 'syz.0.1355': attribute type 13 has an invalid length.
[  129.219700][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'.
[  129.240708][ T9039] netlink: 'syz.0.1355': attribute type 13 has an invalid length.
[  129.244451][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'.
[  129.249974][ T5845] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.264319][ T5845] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.270453][ T5845] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.273954][ T5845] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.437271][ T9088] netlink: 'syz.2.1376': attribute type 1 has an invalid length.
[  130.736822][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1381'.
[  130.740857][ T9102] smc: net device bond0 applied user defined pnetid SYZ
[  130.908897][ T9108] netlink: 'syz.0.1384': attribute type 23 has an invalid length.
[  131.048032][ T9118] xt_TCPMSS: Only works on TCP SYN packets
[  131.073124][ T9120] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  131.131873][ T9124] gretap0: entered promiscuous mode
[  131.137523][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'.
[  131.203000][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'.
[  131.714973][ T9180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.799390][ T9186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.803782][ T9186] syzkaller0: entered promiscuous mode
[  131.809892][ T9186] syzkaller0: entered allmulticast mode
[  131.834470][ T9186] tipc: Resetting bearer <eth:syzkaller0>
[  131.840549][ T9183] tipc: Resetting bearer <eth:syzkaller0>
[  131.852752][ T9183] tipc: Disabling bearer <eth:syzkaller0>
[  132.054723][ T9204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1429'.
[  132.071094][ T9204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1429'.
[  132.130385][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'.
[  134.006777][ T9275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.153746][ T9291] syzkaller1: entered promiscuous mode
[  134.156782][ T9291] syzkaller1: entered allmulticast mode
[  134.322530][ T9300] netlink: 'syz.1.1466': attribute type 2 has an invalid length.
[  134.336458][ T9300] __nla_validate_parse: 5 callbacks suppressed
[  134.336474][ T9300] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1466'.
[  134.643051][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'.
[  135.297617][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'.
[  135.466482][ T9347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.509468][ T9347] syzkaller0: entered promiscuous mode
[  135.511601][ T9347] syzkaller0: entered allmulticast mode
[  135.514579][ T9347] tipc: Resetting bearer <eth:syzkaller0>
[  135.528366][ T9346] tipc: Resetting bearer <eth:syzkaller0>
[  135.777024][    T9] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  136.435698][ T9360] netlink: 'syz.2.1499': attribute type 10 has an invalid length.
[  136.508455][ T9361] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1499'.
[  136.921316][ T9346] tipc: Disabling bearer <eth:syzkaller0>
[  137.957792][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1544'.
[  138.339416][ T9482] netlink: 'syz.2.1556': attribute type 4 has an invalid length.
[  138.721465][ T9511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1569'.
[  138.914248][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1577'.
[  138.960305][ T9527] netlink: 'syz.2.1577': attribute type 1 has an invalid length.
[  138.964530][ T9527] netlink: 'syz.2.1577': attribute type 1 has an invalid length.
[  139.090814][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1583'.
[  139.289875][ T9541] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  139.369557][ T9547] veth5: entered promiscuous mode
[  139.544837][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'.
[  139.576406][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1595'.
[  139.596259][ T9563] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1595'.
[  139.703847][ T9574] lo: left promiscuous mode
[  139.753062][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'.
[  140.072253][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'.
[  140.086821][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'.
[  140.493932][ T9627] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1626'.
[  140.515754][ T9627] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1626'.
[  140.557221][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'.
[  140.911299][ T9655] netlink: 'syz.1.1639': attribute type 1 has an invalid length.
[  140.914515][ T9655] netlink: 'syz.1.1639': attribute type 4 has an invalid length.
[  140.920058][ T9655] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1639'.
[  141.204572][ T9676] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  143.319538][ T9800] No such timeout policy "syz1"
[  143.514266][ T9810] tun0: tun_chr_ioctl cmd 2147767520
[  143.835072][ T9837] Cannot find map_set index 0 as target
[  144.563313][ T9896] __nla_validate_parse: 9 callbacks suppressed
[  144.563332][ T9896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1739'.
[  144.572986][ T9896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1739'.
[  144.697239][ T9902] vlan0: entered promiscuous mode
[  144.889924][ T9910] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1745'.
[  144.917670][ T9910] vlan0: left promiscuous mode
[  144.930137][ T9910] hsr0: left allmulticast mode
[  144.932145][ T9910] hsr_slave_0: left allmulticast mode
[  144.934348][ T9910] hsr_slave_1: left allmulticast mode
[  144.937976][ T9910] hsr0: left promiscuous mode
[  144.940254][ T9910] macvlan2: left promiscuous mode
[  144.962210][ T9910] veth5: left promiscuous mode
[  145.387217][    T9] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  145.489731][ T9939] erspan0: left allmulticast mode
[  145.491837][ T9939] erspan0: left promiscuous mode
[  145.496544][ T9939] bridge0: port 3(erspan0) entered disabled state
[  145.514776][ T9939] team0: Port device dummy0 removed
[  145.520917][ T9943] netlink: 'syz.1.1759': attribute type 5 has an invalid length.
[  145.529860][ T9939] bridge_slave_0: left allmulticast mode
[  145.532159][ T9939] bridge_slave_0: left promiscuous mode
[  145.534606][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.567012][ T9939] bridge_slave_1: left allmulticast mode
[  145.569175][ T9939] bridge_slave_1: left promiscuous mode
[  145.571230][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.579318][ T9939] bond0: (slave bond_slave_0): Releasing backup interface
[  145.595156][ T9939] bond0: (slave bond_slave_1): Releasing backup interface
[  145.612752][ T9939] team0: Port device team_slave_0 removed
[  145.629978][ T9939] team0: Port device team_slave_1 removed
[  145.637663][ T9939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.645038][ T9939] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.676442][ T9939] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  145.679600][ T9939] batman_adv: batadv0: Removing interface: ip6gretap1
[  145.878487][ T9957] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  146.524626][T10009] tap0: tun_chr_ioctl cmd 1074812118
[  146.552458][T10011] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1792'.
[  146.632645][T10015] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  146.803037][T10025] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1798'.
[  146.866152][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'.
[  147.770845][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1823'.
[  147.841559][T10080] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1824'.
[  148.126829][T10092] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1829'.
[  148.130549][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1829'.
[  148.538168][T10118] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  148.826298][T10131] netlink: 'syz.2.1846': attribute type 1 has an invalid length.
[  148.867663][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  148.870887][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.874246][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  148.877725][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.881183][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  148.884469][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.889682][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  148.893066][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.059574][T10145] team0: entered promiscuous mode
[  149.189919][T10145] team0 (unregistering): left promiscuous mode
[  149.354676][T10161] netlink: 'syz.0.1855': attribute type 20 has an invalid length.
[  149.357661][T10161] netlink: 'syz.0.1855': attribute type 21 has an invalid length.
[  149.615169][T10181] netlink: 'syz.0.1865': attribute type 1 has an invalid length.
[  149.618121][T10181] netlink: 'syz.0.1865': attribute type 4 has an invalid length.
[  149.620605][T10181] __nla_validate_parse: 6 callbacks suppressed
[  149.620614][T10181] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1865'.
[  149.829631][T10195] veth7: entered promiscuous mode
[  150.004643][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1876'.
[  150.086905][T10207] netlink: 'syz.0.1877': attribute type 9 has an invalid length.
[  150.612087][T10223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1885'.
[  150.762299][T10227] openvswitch: netlink: Missing valid actions attribute.
[  150.765287][T10227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.021429][T10243] netlink: 'syz.0.1894': attribute type 1 has an invalid length.
[  151.071484][T10246] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1896'.
[  151.088617][T10243] bond1: (slave gretap1): making interface the new active one
[  151.093270][T10243] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  151.337996][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'.
[  151.454763][T10264] netlink: 'syz.0.1905': attribute type 3 has an invalid length.
[  151.525096][T10270] netlink: 'syz.1.1909': attribute type 1 has an invalid length.
[  151.531367][T10270] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1909'.
[  151.796996][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1913'.
[  152.178010][T10311] netlink: 'syz.2.1925': attribute type 3 has an invalid length.
[  153.698209][T10368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1949'.
[  153.706864][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  154.005842][T10398] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1964'.
[  154.235223][T10419] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  154.331899][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'.
[  154.920943][T10457] netlink: 'syz.0.1987': attribute type 3 has an invalid length.
[  154.924069][T10457] __nla_validate_parse: 1 callbacks suppressed
[  154.924084][T10457] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1987'.
[  155.023460][T10464] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1990'.
[  155.069603][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'.
[  155.072845][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1992'.
[  155.087558][T10466] netlink: 'syz.1.1992': attribute type 11 has an invalid length.
[  155.314369][T10476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.336531][T10476] syzkaller0: entered promiscuous mode
[  155.338796][T10476] syzkaller0: entered allmulticast mode
[  155.381458][T10476] tipc: Resetting bearer <eth:syzkaller0>
[  155.406425][T10475] tipc: Resetting bearer <eth:syzkaller0>
[  155.435072][T10475] tipc: Disabling bearer <eth:syzkaller0>
[  155.464253][T10486] nbd: must specify a device to reconfigure
[  155.555835][T10488] openvswitch: netlink: Message has 1 unknown bytes.
[  155.558413][T10488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.621628][   T33] audit: type=1800 audit(1753362828.560:3): pid=10494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2004" name="@" dev="tmpfs" ino=3401 res=0 errno=0
[  155.863051][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'.
[  156.290928][T10539] x_tables: unsorted underflow at hook 2
[  156.305133][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'.
[  156.353286][T10549] ipt_REJECT: ECHOREPLY no longer supported.
[  156.726946][T10583] ipt_REJECT: TCP_RESET invalid for non-tcp
[  156.782693][T10586] netlink: 'syz.0.2049': attribute type 1 has an invalid length.
[  156.811214][T10586] 8021q: adding VLAN 0 to HW filter on device bond2
[  156.844607][T10586] bond2: (slave veth9): Enslaving as an active interface with a down link
[  156.870120][T10586] vlan2: entered allmulticast mode
[  156.872245][T10586] veth1: entered allmulticast mode
[  156.876420][T10586] bond2: (slave vlan2): Opening slave failed
[  157.500749][T10602] netlink: 'syz.0.2056': attribute type 1 has an invalid length.
[  157.555370][T10608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2059'.
[  157.920665][T10629] sctp: [Deprecated]: syz.2.2068 (pid 10629) Use of int in maxseg socket option.
[  157.920665][T10629] Use struct sctp_assoc_value instead
[  157.963684][T10631] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2069'.
[  157.967052][T10631] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2069'.
[  157.970351][T10631] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2069'.
[  158.014324][T10633] veth0: entered promiscuous mode
[  158.024338][T10632] veth0: left promiscuous mode
[  158.191442][T10636] veth0: entered promiscuous mode
[  158.572291][T10648] netlink: 'syz.1.2075': attribute type 1 has an invalid length.
[  159.084545][T10681] netlink: 'syz.2.2088': attribute type 1 has an invalid length.
[  159.612956][T10707] netlink: 'syz.2.2099': attribute type 5 has an invalid length.
[  160.522909][T10753] __nla_validate_parse: 7 callbacks suppressed
[  160.522927][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2119'.
[  160.682126][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.686732][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.151532][T10777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2131'.
[  161.377913][T10796] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  161.507016][T10804] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2142'.
[  161.725044][T10807] xt_hashlimit: max too large, truncated to 1048576
[  161.734832][T10807] No such timeout policy "syz1"
[  162.762420][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'.
[  162.770622][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2158'.
[  162.859224][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2161'.
[  162.870888][T10853] xfrm1: entered promiscuous mode
[  162.872721][T10853] xfrm1: entered allmulticast mode
[  163.422237][T10894] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2178'.
[  163.932314][T10924] syzkaller1: entered promiscuous mode
[  163.934718][T10924] syzkaller1: entered allmulticast mode
[  164.051588][T10930] netlink: 'syz.2.2193': attribute type 1 has an invalid length.
[  164.108668][T10930] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  164.116260][T10933] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2194'.
[  164.419917][T10957] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2206'.
[  164.591342][T10974] netlink: 'syz.1.2214': attribute type 5 has an invalid length.
[  164.719429][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'.
[  164.921655][T11006] netlink: 'syz.1.2226': attribute type 21 has an invalid length.
[  164.935145][T11006] netlink: 'syz.1.2226': attribute type 6 has an invalid length.
[  165.237288][T11031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.240608][T11031] syzkaller0: entered promiscuous mode
[  165.242794][T11031] syzkaller0: entered allmulticast mode
[  165.269935][T11033] netlink: 'syz.0.2241': attribute type 8 has an invalid length.
[  165.408045][T11035] tipc: Resetting bearer <eth:syzkaller0>
[  165.428116][T11030] tipc: Resetting bearer <eth:syzkaller0>
[  165.470289][T11030] tipc: Disabling bearer <eth:syzkaller0>
[  165.582521][T11044] __nla_validate_parse: 6 callbacks suppressed
[  165.582541][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2244'.
[  165.880396][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2259'.
[  165.887408][T11075] vlan0: entered promiscuous mode
[  166.712054][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  166.732399][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  166.738464][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  166.754297][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  166.758876][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  166.960155][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2275'.
[  167.006608][   T12] bond0 (unregistering): Released all slaves
[  167.014844][T11112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2275'.
[  167.018776][   T12] bond1 (unregistering): Released all slaves
[  167.132725][   T12] tipc: Disabling bearer <udp:syz1>
[  167.141402][   T12] tipc: Left network mode
[  167.429597][T11101] chnl_net:caif_netlink_parms(): no params data found
[  167.456263][T11133] netlink: 'syz.0.2283': attribute type 1 has an invalid length.
[  167.459295][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2283'.
[  167.544535][   T12] hsr_slave_0: left promiscuous mode
[  167.549787][   T12] hsr_slave_1: left promiscuous mode
[  168.306021][T11141] netlink: 'syz.2.2285': attribute type 4 has an invalid length.
[  168.361974][T11101] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.364450][T11101] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.367647][T11101] bridge_slave_0: entered allmulticast mode
[  168.371654][T11101] bridge_slave_0: entered promiscuous mode
[  168.384819][T11101] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.388296][T11101] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.390729][T11101] bridge_slave_1: entered allmulticast mode
[  168.404890][T11101] bridge_slave_1: entered promiscuous mode
[  168.481897][T11101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.487563][T11101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.561016][T11101] team0: Port device team_slave_0 added
[  168.564665][T11101] team0: Port device team_slave_1 added
[  168.642538][T11101] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.644844][T11101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.654545][T11101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.669392][T11101] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.677925][T11101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.689450][T11101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.729036][   T12] IPVS: stop unused estimator thread 0...
[  168.812792][T11101] hsr_slave_0: entered promiscuous mode
[  168.816011][ T5835] Bluetooth: hci2: command tx timeout
[  168.817348][T11101] hsr_slave_1: entered promiscuous mode
[  168.821462][T11101] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.824515][T11101] Cannot create hsr debugfs directory
[  168.987941][T11101] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  168.996356][T11101] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  169.001212][T11101] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  169.006278][T11101] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  169.027916][T11101] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.030445][T11101] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.033470][T11101] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.035854][T11101] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.042122][T11184] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2301'.
[  169.089075][T11101] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.097854][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.101684][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.113603][T11101] 8021q: adding VLAN 0 to HW filter on device team0
[  169.129183][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.131443][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.141452][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.143840][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.261808][T11193] netlink: 'syz.0.2304': attribute type 29 has an invalid length.
[  169.264784][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'.
[  169.329232][T11101] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.372003][T11101] veth0_vlan: entered promiscuous mode
[  169.385041][T11101] veth1_vlan: entered promiscuous mode
[  169.416054][T11101] veth0_macvtap: entered promiscuous mode
[  169.421744][T11101] veth1_macvtap: entered promiscuous mode
[  169.438063][T11101] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.449841][T11101] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.461015][ T5861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.470363][ T5861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.475467][ T5861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.485094][ T5861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.600225][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.605027][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.615253][T11204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2309'.
[  169.665313][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.668576][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.318849][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2327'.
[  170.350637][T11246] 8021q: adding VLAN 0 to HW filter on device bond3
[  170.388409][T11246] macvlan0: entered promiscuous mode
[  170.390143][T11246] macvlan0: entered allmulticast mode
[  170.394351][T11246] bond0: entered allmulticast mode
[  170.398307][T11246] bond0: entered promiscuous mode
[  170.401053][T11246] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  170.414393][T11246] bond3: (slave macvlan0): Enslaving as an active interface with an up link
[  170.470204][T11256] netlink: 'syz.0.2332': attribute type 1 has an invalid length.
[  170.489629][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'.
[  170.897165][ T5835] Bluetooth: hci2: command tx timeout
[  171.933850][T11318] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  172.058547][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'.
[  172.068675][T11325] macvlan1: entered allmulticast mode
[  172.070592][T11325] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  172.092490][T11327] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  172.099888][T11327] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  172.979044][ T5835] Bluetooth: hci2: command tx timeout
[  173.403852][T11414] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.2398'.
[  173.409471][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2398'.
[  173.418585][T11413] netlink: 'syz.2.2400': attribute type 72 has an invalid length.
[  173.421910][T11413] netlink: 1016 bytes leftover after parsing attributes in process `syz.2.2400'.
[  173.542534][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2398'.
[  173.566394][T11430] Cannot find set identified by id 1 to match
[  173.571646][T11414] IPv6: NLM_F_REPLACE set, but no existing node found!
[  173.634069][T11434] netlink: 'syz.2.2408': attribute type 1 has an invalid length.
[  173.639811][T11434] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2408'.
[  174.164071][T11461] xt_CT: No such helper "snmp_trap"
[  174.369243][T11481] netlink: 'syz.2.2429': attribute type 4 has an invalid length.
[  174.372649][T11481] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2429'.
[  174.385998][T11481] wlan1: mtu less than device minimum
[  174.773983][T11508] ip6gre1: entered promiscuous mode
[  174.964487][T11516] ipt_ECN: cannot use operation on non-tcp rule
[  175.055710][ T5835] Bluetooth: hci2: command tx timeout
[  175.100638][T11520] syzkaller0: entered allmulticast mode
[  175.132091][T11520] syzkaller0 (unregistering): left allmulticast mode
[  175.349900][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'.
[  175.578688][T11549] 8021q: adding VLAN 0 to HW filter on device bond8
[  175.581137][T11549] bridge0: port 1(bond8) entered blocking state
[  175.585862][T11549] bridge0: port 1(bond8) entered disabled state
[  175.593466][T11549] bond8: entered allmulticast mode
[  175.596620][T11549] bond8: entered promiscuous mode
[  175.602368][T11549] bridge0: port 1(bond8) entered blocking state
[  175.604453][T11549] bridge0: port 1(bond8) entered forwarding state
[  175.608965][T11546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  175.618721][   T40] bridge0: port 1(bond8) entered disabled state
[  175.644610][T11549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2461'.
[  175.646988][T11554] xt_l2tp: wrong L2TP version: 0
[  175.651468][T11549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2461'.
[  175.818736][T11566] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  175.926591][T11573] nftables ruleset with unbound chain
[  176.386550][T11598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.791575][T11634] netlink: 'syz.3.2501': attribute type 1 has an invalid length.
[  176.866865][T11640] bond1: (slave gretap1): making interface the new active one
[  176.873854][T11640] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  177.084298][T11658] __nla_validate_parse: 7 callbacks suppressed
[  177.084314][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'.
[  177.091829][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2512'.
[  177.388684][T11683] netlink: 'syz.3.2521': attribute type 9 has an invalid length.
[  177.391770][T11683] netlink: 'syz.3.2521': attribute type 6 has an invalid length.
[  177.425118][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'.
[  177.432173][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'.
[  177.773392][T11695] netlink: 'syz.0.2528': attribute type 1 has an invalid length.
[  177.991341][T11715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.061575][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2539'.
[  178.503086][T11745] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2551'.
[  178.881775][T11774] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  179.051129][T11788] xt_ipcomp: unknown flags F7
[  179.547073][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2582'.
[  179.569211][T11823] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  179.885967][T11846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.895801][T11846] syzkaller0: entered promiscuous mode
[  179.897983][T11846] syzkaller0: entered allmulticast mode
[  179.939635][T11846] tipc: Resetting bearer <eth:syzkaller0>
[  179.951477][T11845] tipc: Resetting bearer <eth:syzkaller0>
[  179.969318][T11845] tipc: Disabling bearer <eth:syzkaller0>
[  180.579158][T11880] Cannot find add_set index 0 as target
[  180.971993][T11903] tipc: Started in network mode
[  180.973573][T11903] tipc: Node identity aaad24bc6f29, cluster identity 4711
[  180.976115][T11903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.004117][T11903] syzkaller0: entered promiscuous mode
[  181.006352][T11903] syzkaller0: entered allmulticast mode
[  181.009107][T11903] tipc: Resetting bearer <eth:syzkaller0>
[  181.024443][T11902] tipc: Resetting bearer <eth:syzkaller0>
[  181.144048][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2619'.
[  181.148595][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2619'.
[  182.009782][  T792] tipc: Node number set to 3313771708
[  182.588048][T11902] tipc: Disabling bearer <eth:syzkaller0>
[  182.667598][T11935] netlink: 'syz.2.2630': attribute type 2 has an invalid length.
[  183.268700][T11968] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2644'.
[  183.344244][T11971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.362256][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2645'.
[  183.536131][ T5835] Bluetooth: hci2: command tx timeout
[  183.763508][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2648'.
[  184.222032][T11994] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.225543][T11994] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.264488][T12002] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2657'.
[  184.371493][T11994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.382835][T11994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.578635][ T5861] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.584671][ T5861] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.595231][ T5861] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.606540][ T5861] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.691097][T12007] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2659'.
[  184.825750][T12012] netlink: 'syz.3.2660': attribute type 1 has an invalid length.
[  184.835872][T12012] netlink: 'syz.3.2660': attribute type 1 has an invalid length.
[  185.163304][T12023] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2667'.
[  185.592687][T12060] netlink: 'syz.3.2684': attribute type 23 has an invalid length.
[  185.601470][T12061] netlink: 'syz.0.2683': attribute type 32 has an invalid length.
[  185.610656][T12061] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2683'.
[  185.901947][    T9] IPVS: starting estimator thread 0...
[  185.972494][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2698'.
[  185.980196][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2698'.
[  185.995646][T12088] IPVS: using max 64 ests per chain, 153600 per kthread
[  186.038282][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2699'.
[  186.062515][T12102] xt_hashlimit: size too large, truncated to 1048576
[  186.399538][T12127] netlink: 'syz.3.2711': attribute type 3 has an invalid length.
[  186.443315][T12130] vlan0: entered promiscuous mode
[  186.452006][T12130] vlan0: entered allmulticast mode
[  186.454206][T12130] hsr_slave_1: entered allmulticast mode
[  186.904223][T12151] openvswitch: netlink: Flow actions attr not present in new flow.
[  188.420774][T12238] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  188.492754][T12242] netlink: 'syz.3.2761': attribute type 3 has an invalid length.
[  188.896421][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.954860][T12263] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  189.036718][T12271] Cannot find add_set index 0 as target
[  189.103400][T12273] openvswitch: netlink: IPv4 tun info is not correct
[  189.203125][T12279] syzkaller1: entered promiscuous mode
[  189.205270][T12279] syzkaller1: entered allmulticast mode
[  190.089128][T12347] __nla_validate_parse: 13 callbacks suppressed
[  190.089140][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2812'.
[  190.665241][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2829'.
[  190.975976][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  191.041316][T12421] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2848'.
[  191.723533][T12454] netlink: 'syz.2.2863': attribute type 16 has an invalid length.
[  191.728093][T12454] netlink: 'syz.2.2863': attribute type 3 has an invalid length.
[  191.730812][T12454] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2863'.
[  192.828422][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'.
[  193.209955][T12545] xt_CT: You must specify a L4 protocol and not use inversions on it
[  193.309075][T12545] bond0: (slave wlan1): Releasing backup interface
[  193.320273][T12545] bond0: Destroying bond
[  193.358413][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2889'.
[  193.362113][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2889'.
[  193.419960][T12545] bond0 (unregistering): Released all slaves
[  193.568470][T12563] syzkaller1: entered promiscuous mode
[  193.570885][T12563] syzkaller1: entered allmulticast mode
[  193.767843][T12582] bond0: left promiscuous mode
[  193.769761][T12582] macvlan0: left promiscuous mode
[  193.773562][T12582] macvlan0: left allmulticast mode
[  193.898481][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2902'.
[  194.196375][T12618] netlink: 'syz.0.2916': attribute type 2 has an invalid length.
[  194.198685][T12618] netlink: 'syz.0.2916': attribute type 1 has an invalid length.
[  194.666586][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'.
[  194.669496][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'.
[  195.200093][T12657] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2934'.
[  195.240076][T12662] delete_channel: no stack
[  195.348329][T12670] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2939'.
[  195.524877][T12681] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2944'.
[  196.197745][T12710] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2957'.
[  196.202286][T12710] bridge_slave_0: entered allmulticast mode
[  196.293687][T12716] netlink: 'syz.3.2959': attribute type 1 has an invalid length.
[  196.297992][T12716] netlink: 'syz.3.2959': attribute type 2 has an invalid length.
[  196.864650][T12758] Cannot find set identified by id 2 to match
[  197.298122][T12791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2995'.
[  197.545250][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3003'.
[  197.636257][T12809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3004'.
[  197.933947][T12836] tipc: MTU too low for tipc bearer
[  198.158486][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3019'.
[  198.333573][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3023'.
[  198.338873][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3023'.
[  198.342544][T12866] netlink: 'syz.0.3023': attribute type 5 has an invalid length.
[  198.346205][T12866] netlink: 'syz.0.3023': attribute type 6 has an invalid length.
[  198.519349][T12875] xt_bpf: check failed: parse error
[  199.396116][T12927] netlink: 'syz.0.3051': attribute type 33 has an invalid length.
[  199.744491][T12955] netlink: 'syz.3.3062': attribute type 5 has an invalid length.
[  199.871036][T12967] openvswitch: netlink: Key type 30 is not supported
[  200.262821][T12997] pimreg: entered allmulticast mode
[  200.267230][T12997] pimreg: left allmulticast mode
[  200.814305][T13028] __nla_validate_parse: 4 callbacks suppressed
[  200.814324][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'.
[  201.003260][T13044] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3102'.
[  201.079127][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'.
[  201.238607][T13058] netlink: 'syz.0.3108': attribute type 10 has an invalid length.
[  201.238686][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'.
[  201.260354][T13058] team0: Cannot enslave team device to itself
[  201.475346][T13080] netlink: 'syz.2.3118': attribute type 1 has an invalid length.
[  201.487507][T13080] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3118'.
[  201.523726][T13079] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  201.543818][T13083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3120'.
[  201.558038][T13083] No such timeout policy "syz0"
[  201.789025][T13100] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3127'.
[  201.854265][T13106] xt_hashlimit: max too large, truncated to 1048576
[  201.859633][T13106] xt_hashlimit: overflow, rate too high: 0
[  201.880730][T13108] bridge_slave_0: left allmulticast mode
[  201.885222][T13108] bridge_slave_0: left promiscuous mode
[  201.889858][T13108] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.897088][T13108] bridge_slave_1: left allmulticast mode
[  201.899317][T13108] bridge_slave_1: left promiscuous mode
[  201.901740][T13108] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.916604][T13108] bond0: (slave bond_slave_0): Releasing backup interface
[  201.922337][T13108] bond0: (slave bond_slave_1): Releasing backup interface
[  201.943020][T13108] team0: Port device team_slave_0 removed
[  201.952447][T13108] team0: Port device team_slave_1 removed
[  201.955180][T13108] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.959389][T13108] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.968294][T13108] bond1: (slave gretap1): Releasing active interface
[  202.438765][T13147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3149'.
[  202.458859][T13147] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3149'.
[  202.462497][T13147] tipc: Invalid UDP bearer configuration
[  202.462554][T13147] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  202.543493][T13160] netlink: 'syz.3.3153': attribute type 1 has an invalid length.
[  202.549445][T13160] netlink: 'syz.3.3153': attribute type 10 has an invalid length.
[  202.551916][T13160] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3153'.
[  203.030026][T13207] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  203.116614][T13215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.531836][T13234] netlink: 'syz.0.3185': attribute type 4 has an invalid length.
[  204.108610][T13278] netlink: 'syz.0.3202': attribute type 1 has an invalid length.
[  204.135130][T13278] 8021q: adding VLAN 0 to HW filter on device bond4
[  204.169525][T13278] bond4: (slave wlan0): Enslaving as an active interface with a down link
[  204.188517][T13278] vlan0: entered allmulticast mode
[  204.190453][T13278] bond4: (slave vlan0): Opening slave failed
[  204.300725][T13289] netlink: 'syz.2.3208': attribute type 10 has an invalid length.
[  204.433217][T13297] netlink: 'syz.3.3212': attribute type 3 has an invalid length.
[  204.784958][T13324] bridge1: entered promiscuous mode
[  204.788115][T13324] macsec1: entered promiscuous mode
[  204.797640][T13324] macsec1: entered allmulticast mode
[  204.799339][T13324] bridge1: entered allmulticast mode
[  204.801892][T13324] bridge1: port 1(macsec1) entered blocking state
[  204.806132][T13324] bridge1: port 1(macsec1) entered disabled state
[  204.819874][T13324] bridge1: left allmulticast mode
[  204.821791][T13324] bridge1: left promiscuous mode
[  205.127616][T13350] netlink: 'syz.3.3235': attribute type 4 has an invalid length.
[  205.248224][T13362] netlink: 'syz.2.3241': attribute type 1 has an invalid length.
[  206.216728][T13395] syzkaller0: entered promiscuous mode
[  206.219017][T13395] syzkaller0: entered allmulticast mode
[  208.453244][T13449] GUP no longer grows the stack in syz.3.3276 (13449): 200000004000-200000008000 (200000002000)
[  208.465488][T13449] CPU: 0 UID: 0 PID: 13449 Comm: syz.3.3276 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  208.465519][T13449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.465530][T13449] Call Trace:
[  208.465548][T13449]  <TASK>
[  208.465556][T13449]  dump_stack_lvl+0x189/0x250
[  208.465586][T13449]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.465604][T13449]  ? __pfx__printk+0x10/0x10
[  208.465622][T13449]  ? find_vma+0xe7/0x160
[  208.465684][T13449]  __get_user_pages+0x2a60/0x30b0
[  208.465734][T13449]  ? __pfx___get_user_pages+0x10/0x10
[  208.465751][T13449]  ? __gup_longterm_locked+0x309/0x15b0
[  208.465768][T13449]  ? down_read_killable+0x1d1/0x350
[  208.465784][T13449]  ? try_get_folio+0x633/0x660
[  208.465806][T13449]  __gup_longterm_locked+0x3e3/0x15b0
[  208.465845][T13449]  gup_fast_fallback+0x1cd4/0x2260
[  208.465900][T13449]  ? __pfx_gup_fast_fallback+0x10/0x10
[  208.465920][T13449]  ? rcu_is_watching+0x15/0xb0
[  208.465941][T13449]  ? is_valid_gup_args+0x11f/0x200
[  208.465961][T13449]  ? pin_user_pages_fast+0x4d/0xb0
[  208.465981][T13449]  rds_cmsg_rdma_args+0x8f4/0x1240
[  208.466047][T13449]  rds_cmsg_send+0x33d/0x5c0
[  208.466074][T13449]  rds_sendmsg+0x1129/0x1f00
[  208.466102][T13449]  ? __pfx_rds_sendmsg+0x10/0x10
[  208.466115][T13449]  ? aa_sk_perm+0x81e/0x950
[  208.466141][T13449]  ? __pfx_aa_sk_perm+0x10/0x10
[  208.466160][T13449]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  208.466181][T13449]  ? aa_sock_msg_perm+0x94/0x160
[  208.466195][T13449]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  208.466210][T13449]  ? __pfx_rds_sendmsg+0x10/0x10
[  208.466225][T13449]  __sock_sendmsg+0x21c/0x270
[  208.466249][T13449]  ____sys_sendmsg+0x505/0x830
[  208.466271][T13449]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.466296][T13449]  ? import_iovec+0x74/0xa0
[  208.466317][T13449]  ___sys_sendmsg+0x21f/0x2a0
[  208.466335][T13449]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.466357][T13449]  ? futex_wait+0x285/0x360
[  208.466381][T13449]  ? __pfx_rds_bind+0x10/0x10
[  208.466397][T13449]  ? __might_fault+0xb0/0x130
[  208.466436][T13449]  __x64_sys_sendmsg+0x19b/0x260
[  208.466454][T13449]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.466479][T13449]  ? rcu_is_watching+0x15/0xb0
[  208.466499][T13449]  ? do_syscall_64+0xbe/0x3b0
[  208.466518][T13449]  do_syscall_64+0xfa/0x3b0
[  208.466532][T13449]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.466545][T13449]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.466559][T13449]  ? exc_page_fault+0x9f/0xf0
[  208.466574][T13449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.466588][T13449] RIP: 0033:0x7fd85d58e9a9
[  208.466604][T13449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.466618][T13449] RSP: 002b:00007fd85e47d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.466636][T13449] RAX: ffffffffffffffda RBX: 00007fd85d7b6080 RCX: 00007fd85d58e9a9
[  208.466674][T13449] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 000000000000000c
[  208.466684][T13449] RBP: 00007fd85d610d69 R08: 0000000000000000 R09: 0000000000000000
[  208.466693][T13449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.466702][T13449] R13: 0000000000000000 R14: 00007fd85d7b6080 R15: 00007ffc464c3968
[  208.466728][T13449]  </TASK>
[  209.325752][T13471] __nla_validate_parse: 13 callbacks suppressed
[  209.325766][T13471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3287'.
[  209.537267][T13488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3294'.
[  209.559144][T13490] syzkaller1: entered promiscuous mode
[  209.571740][T13490] syzkaller1: entered allmulticast mode
[  209.617325][T13496] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3299'.
[  209.620976][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3299'.
[  209.678098][T13500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.697962][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3302'.
[  210.234554][T13543] ip6tnl3: entered promiscuous mode
[  210.240452][T13543] ip6tnl3: entered allmulticast mode
[  210.888224][T13586] nbd: must specify at least one socket
[  210.891866][T13586] bond0: Device is already in use.
[  210.895310][T13586] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  211.026936][T13598] vlan0: entered promiscuous mode
[  211.046832][T13598] tipc: Enabled bearer <eth:team0>, priority 0
[  211.089587][T13604] veth0: entered promiscuous mode
[  211.095984][T13604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3344'.
[  211.190882][T13604] veth0 (unregistering): left promiscuous mode
[  211.449747][T13613] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3347'.
[  211.497212][T13613] 8021q: adding VLAN 0 to HW filter on device bond2
[  211.511479][T13613] team0: Port device bond2 added
[  211.802836][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3350'.
[  211.877269][T13644] 8021q: adding VLAN 0 to HW filter on device bond3
[  211.891008][T13650] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3352'.
[  212.164824][T13678] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.3361'.
[  212.930893][T13736] nbd: must specify an index to disconnect
[  213.633864][T13786] x_tables: duplicate underflow at hook 1
[  214.218502][T13823] netlink: 'syz.2.3417': attribute type 1 has an invalid length.
[  214.762750][T13862] netlink: 'syz.0.3435': attribute type 1 has an invalid length.
[  214.803382][T13862] 8021q: adding VLAN 0 to HW filter on device bond5
[  214.852340][T13862] 8021q: adding VLAN 0 to HW filter on device bond5
[  214.856506][T13862] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  214.867155][T13862] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  214.899000][T13868] gretap2: entered promiscuous mode
[  214.902236][T13868] bond5: (slave gretap2): making interface the new active one
[  214.904890][T13868] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  214.913596][T13870] netlink: 'syz.2.3437': attribute type 4 has an invalid length.
[  214.934344][T13868] macvlan2: entered promiscuous mode
[  214.942012][T13868] macvlan2: entered allmulticast mode
[  214.949956][T13868] bond5: entered promiscuous mode
[  214.952832][T13868] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  214.959352][T13868] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  214.966895][T13868] bond5: left promiscuous mode
[  215.501734][T13901] __nla_validate_parse: 1 callbacks suppressed
[  215.501756][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3452'.
[  215.899510][T13929] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.3466'.
[  216.144606][T13948] netlink: 'syz.2.3475': attribute type 29 has an invalid length.
[  216.147607][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3475'.
[  216.238554][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3479'.
[  216.297443][T13960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'.
[  216.455904][T13969] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3485'.
[  216.714421][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3494'.
[  216.802505][T13992] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  216.839127][T13996] xt_nfacct: accounting object `syz1' does not exists
[  216.902646][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'.
[  217.011392][T14007] syz_tun: entered allmulticast mode
[  217.016453][T14002] block nbd0: server does not support multiple connections per device.
[  217.020355][T14002] block nbd0: shutting down sockets
[  217.025759][T14007] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  218.559357][T14038] tipc: Can't bind to reserved service type 2
[  219.710277][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'.
[  219.951937][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3569'.
[  221.439876][T14236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3604'.
[  221.629439][T14248] macvlan0: entered allmulticast mode
[  221.631740][T14248] netlink: 'syz.0.3609': attribute type 1 has an invalid length.
[  221.634890][T14248] netlink: 'syz.0.3609': attribute type 2 has an invalid length.
[  222.220169][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3620'.
[  222.355001][T14279] dvmrp1: tun_chr_ioctl cmd 1074025677
[  222.357785][T14279] dvmrp1: linktype set to 805
[  222.794655][T14304] Unknown options in mask 700
[  222.896926][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3637'.
[  222.900359][T14309] netlink: 'syz.0.3637': attribute type 30 has an invalid length.
[  222.936424][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3637'.
[  222.939915][T14309] netlink: 'syz.0.3637': attribute type 30 has an invalid length.
[  222.947854][T14311] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3639'.
[  222.951538][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  222.966179][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  222.969398][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  222.994228][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  223.270627][T14339] netlink: 'syz.2.3650': attribute type 4 has an invalid length.
[  223.284388][T14339] netlink: 'syz.2.3650': attribute type 4 has an invalid length.
[  224.197350][T14363] xt_ecn: cannot match TCP bits for non-tcp packets
[  224.213527][T14365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3663'.
[  224.272290][T14369] vlan2: entered promiscuous mode
[  224.274328][T14369] bond0: entered promiscuous mode
[  224.276869][T14369] vlan2: entered allmulticast mode
[  224.278887][T14369] bond0: entered allmulticast mode
[  224.351220][T14373] netlink: 'syz.0.3667': attribute type 1 has an invalid length.
[  224.385825][T14377] netlink: 'syz.2.3669': attribute type 58 has an invalid length.
[  224.389113][T14377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3669'.
[  224.522049][T14389] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3675'.
[  224.607934][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3677'.
[  224.830135][T14411] Bluetooth: hci0: Opcode 0x080f failed: -22
[  224.928544][T14420] netlink: 'syz.2.3688': attribute type 3 has an invalid length.
[  224.931572][T14420] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3688'.
[  225.166720][T14436] netlink: 'syz.0.3694': attribute type 1 has an invalid length.
[  225.214329][T14436] 8021q: adding VLAN 0 to HW filter on device bond6
[  225.233552][T14436] vlan0: entered promiscuous mode
[  225.238108][T14436] bond6: entered promiscuous mode
[  225.240198][T14436] vlan0: entered allmulticast mode
[  225.242166][T14436] bond6: entered allmulticast mode
[  225.255450][T14436] bond6: (slave gretap3): making interface the new active one
[  225.260252][T14436] gretap3: entered promiscuous mode
[  225.262439][T14436] gretap3: entered allmulticast mode
[  225.266516][T14436] bond6: (slave gretap3): Enslaving as an active interface with an up link
[  226.856795][T14511] netlink: 'syz.3.3729': attribute type 1 has an invalid length.
[  226.899738][ T5835] Bluetooth: hci0: command tx timeout
[  226.915061][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.917903][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.972431][T14517] __nla_validate_parse: 2 callbacks suppressed
[  226.972452][T14517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3732'.
[  227.149521][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3735'.
[  227.180804][T14525] netlink: 'syz.2.3735': attribute type 1 has an invalid length.
[  227.337199][T14530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3737'.
[  227.482329][T14542] netlink: 'syz.3.3741': attribute type 83 has an invalid length.
[  227.707796][T14551] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.725253][T14561] netlink: 'syz.0.3748': attribute type 1 has an invalid length.
[  228.077684][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3758'.
[  228.081189][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3758'.
[  228.084592][T14581] netlink: 'syz.0.3758': attribute type 13 has an invalid length.
[  228.088130][T14581] netlink: 'syz.0.3758': attribute type 12 has an invalid length.
[  228.224940][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3763'.
[  228.343964][T14597] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3766'.
[  228.354337][T14597] netlink: 'syz.2.3766': attribute type 1 has an invalid length.
[  228.377784][T14597] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.399470][T14597] bond0: (slave gretap2): making interface the new active one
[  228.405092][T14597] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  228.465147][T14606] netlink: 'syz.3.3769': attribute type 2 has an invalid length.
[  228.582967][T14613] ipt_rpfilter: unknown options
[  228.678598][T14622] TCP: TCP_TX_DELAY enabled
[  229.497455][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3809'.
[  229.853238][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3824'.
[  229.859002][T14723] netlink: 'syz.3.3824': attribute type 2 has an invalid length.
[  229.861371][T14723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3824'.
[  230.200322][T14752] openvswitch: netlink: IP tunnel dst address not specified
[  231.386901][T14803] xt_ecn: cannot match TCP bits for non-tcp packets
[  231.546577][T14814] netlink: 'syz.3.3865': attribute type 1 has an invalid length.
[  232.080425][T14850] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  232.179147][T14863] __nla_validate_parse: 4 callbacks suppressed
[  232.179157][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3883'.
[  232.183871][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3883'.
[  232.340454][T14874] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3889'.
[  232.981486][T14906] 8021q: adding VLAN 0 to HW filter on device bond9
[  232.993576][T14906] gretap2: entered promiscuous mode
[  232.997052][T14906] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  233.002455][T14906] bond9: (slave macvlan3): Enslaving as a backup interface with an up link
[  233.023628][T14906] bond4: (slave wireguard0): Releasing backup interface
[  233.028775][T14906] wireguard0: left promiscuous mode
[  233.031098][T14906] bond4: (slave wireguard1): making interface the new active one
[  233.034227][T14906] wireguard1: entered promiscuous mode
[  233.052145][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.055378][T14906] bond4: (slave wireguard1): Releasing backup interface
[  233.061777][T14906] wireguard1: left promiscuous mode
[  233.075145][T14906] bond6: (slave ip6gretap1): Releasing backup interface
[  233.082006][T14906] bond8: left allmulticast mode
[  233.084042][T14906] bond8: left promiscuous mode
[  233.088177][T14906] bridge0: port 1(bond8) entered disabled state
[  233.096686][ T5881] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  233.102425][T14906] bond0: (slave gretap2): Releasing active interface
[  233.105123][T14906] gretap2: left promiscuous mode
[  233.114553][T14906] bond9: (slave macvlan3): Removing an active aggregator
[  233.119510][T14906] bond9: (slave macvlan3): Releasing backup interface
[  233.183950][T14916] netlink: ct family unspecified
[  233.186543][T14917] xt_cgroup: invalid path, errno=-2
[  233.188229][T14916] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.226170][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.436789][T14927] netlink: 'syz.2.3915': attribute type 21 has an invalid length.
[  234.718605][T14936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3919'.
[  235.132995][T14965] 8021q: adding VLAN 0 to HW filter on device bond7
[  235.433841][T14982] netlink: 'syz.0.3937': attribute type 1 has an invalid length.
[  235.440927][T14982] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3937'.
[  235.451273][T14982] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3937'.
[  236.183367][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3945'.
[  236.230535][T14996] bond10: (slave bridge6): Enslaving as an active interface with an up link
[  236.240547][T14996] macvlan4: entered promiscuous mode
[  236.242444][T14996] macvlan4: entered allmulticast mode
[  236.244603][T14996] bond10: entered promiscuous mode
[  236.248214][T14996] bridge6: entered promiscuous mode
[  236.250256][T14996] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  236.253244][T14996] bond10: left promiscuous mode
[  236.254886][T14996] bridge6: left promiscuous mode
[  236.362915][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3951'.
[  236.367898][T15011] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  236.370295][T15011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.380155][T15013] netlink: zone id is out of range
[  236.529561][T15030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3959'.
[  236.533098][T15030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3959'.
[  236.893586][T15070] netlink: 'syz.3.3978': attribute type 3 has an invalid length.
[  236.897363][T15070] netlink: 'syz.3.3978': attribute type 3 has an invalid length.
[  236.950503][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.953818][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.016394][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  237.126170][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  237.134413][T15092] netlink: 'syz.0.3988': attribute type 5 has an invalid length.
[  237.353087][T15116] __nla_validate_parse: 10 callbacks suppressed
[  237.353097][T15116] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3998'.
[  237.691274][T15141] bridge0: entered allmulticast mode
[  237.760316][T15141] pim6reg: entered allmulticast mode
[  237.842665][T15149] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  237.990470][T15156] netlink: 'syz.2.4016': attribute type 1 has an invalid length.
[  237.993119][T15156] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4016'.
[  238.095872][   T12] net_ratelimit: 7 callbacks suppressed
[  238.095884][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  238.206177][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  238.322658][   T12] bond4: (slave wlan0): failed to get link speed/duplex
[  238.426929][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  238.521118][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4026'.
[  238.524667][T15180] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4026'.
[  238.535252][T15180] gretap4: entered promiscuous mode
[  238.552774][   T13] bond4: (slave wlan0): failed to get link speed/duplex
[  238.673872][T14928] bond4: (slave wlan0): failed to get link speed/duplex
[  238.802323][T14928] bond4: (slave wlan0): failed to get link speed/duplex
[  238.910454][T14928] bond4: (slave wlan0): failed to get link speed/duplex
[  239.016132][T14928] bond4: (slave wlan0): failed to get link speed/duplex
[  239.126820][ T5845] bond4: (slave wlan0): failed to get link speed/duplex
[  239.996585][T14928] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  241.054103][T15303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4081'.
[  241.234765][T15313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4086'.
[  241.317030][T15323] netlink: 'syz.3.4089': attribute type 11 has an invalid length.
[  241.319404][T15323] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4089'.
[  241.415857][T15331] Cannot find add_set index 4 as target
[  242.504303][T15359] bond0: left allmulticast mode
[  242.557891][ T5845] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  242.564027][ T5845] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  242.568409][ T5845] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  242.571572][ T5845] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  242.663908][T15369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4106'.
[  242.962923][T15386] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4114'.
[  243.394327][T15402] net_ratelimit: 29 callbacks suppressed
[  243.394339][T15402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.530873][T15412] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  243.880730][T15440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4141'.
[  243.984628][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4144'.
[  243.989147][T15449] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4144'.
[  244.111240][T15460] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  244.180991][T15468] netlink: 'syz.2.4152': attribute type 10 has an invalid length.
[  244.189683][T15468] netlink: 'syz.2.4152': attribute type 10 has an invalid length.
[  244.420531][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4157'.
[  245.070469][T15524] netlink: 'syz.0.4174': attribute type 39 has an invalid length.
[  245.318075][T15543] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  245.321719][T15543] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  245.557288][T15564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.290462][T15618] xt_CT: No such helper "syz0"
[  246.417738][T15629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.444145][T15630] syzkaller1: entered promiscuous mode
[  246.447652][T15630] syzkaller1: entered allmulticast mode
[  246.558187][T15639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4221'.
[  246.722914][T15651] xt_CT: No such helper "netbios-ns"
[  246.803608][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4231'.
[  247.029958][T15674] netlink: 676 bytes leftover after parsing attributes in process `syz.0.4239'.
[  247.030587][T15673] netlink: 'syz.3.4238': attribute type 21 has an invalid length.
[  247.033514][T15674] netlink: 676 bytes leftover after parsing attributes in process `syz.0.4239'.
[  247.036604][T15673] netlink: 'syz.3.4238': attribute type 5 has an invalid length.
[  247.434670][T15693] netlink: 'syz.3.4248': attribute type 1 has an invalid length.
[  247.470048][T15693] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  247.474883][T15693] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  247.536758][T15693] gretap2: entered promiscuous mode
[  247.544243][T15693] bond4: (slave gretap2): making interface the new active one
[  247.549062][T15693] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  247.643296][T15701] netlink: 'syz.3.4251': attribute type 4 has an invalid length.
[  248.031802][T15722] 8021q: adding VLAN 0 to HW filter on device bond11
[  248.033956][T15725] __nla_validate_parse: 2 callbacks suppressed
[  248.033966][T15725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4262'.
[  248.879109][T15763] netlink: 'syz.3.4279': attribute type 4 has an invalid length.
[  249.266515][T15770] xt_HMARK: spi-set and port-set can't be combined
[  249.402371][T15783] netlink: 'syz.2.4288': attribute type 1 has an invalid length.
[  249.409709][T15783] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.4288'.
[  249.476025][T15790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4291'.
[  249.893157][T15832] netlink: 'syz.3.4312': attribute type 1 has an invalid length.
[  249.896921][T15832] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4312'.
[  249.933914][T15834] netlink: 'syz.3.4313': attribute type 1 has an invalid length.
[  249.937160][T15834] netlink: 'syz.3.4313': attribute type 2 has an invalid length.
[  250.234504][T15859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4325'.
[  250.302031][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4329'.
[  250.482809][T15878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4335'.
[  250.595591][T15892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4341'.
[  250.813682][T15910] syzkaller1: entered promiscuous mode
[  250.817364][T15910] syzkaller1: entered allmulticast mode
[  250.860708][T15913] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4348'.
[  251.060340][T15925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.063906][T15925] syzkaller0: entered promiscuous mode
[  251.066783][T15925] syzkaller0: entered allmulticast mode
[  251.089732][T15925] tipc: Resetting bearer <eth:syzkaller0>
[  251.092174][T15927] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4358'.
[  251.106840][T15924] tipc: Resetting bearer <eth:syzkaller0>
[  251.145254][T15924] tipc: Disabling bearer <eth:syzkaller0>
[  251.218061][T15932] netlink: 'syz.2.4361': attribute type 4 has an invalid length.
[  251.228127][T15932] netlink: 'syz.2.4361': attribute type 4 has an invalid length.
[  251.336346][T15942] 8021q: adding VLAN 0 to HW filter on device bond8
[  251.350694][T15942] macvlan2: entered promiscuous mode
[  251.352691][T15942] macvlan2: entered allmulticast mode
[  251.355242][T15942] bond8: entered promiscuous mode
[  251.359116][T15942] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  251.364347][T15942] bond8: left promiscuous mode
[  252.181407][T16007] netlink: 'syz.2.4393': attribute type 2 has an invalid length.
[  252.632351][T16042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  252.740365][T16049] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.786702][T16049] syzkaller0: entered promiscuous mode
[  252.788843][T16049] syzkaller0: entered allmulticast mode
[  252.796929][T16049] tipc: Resetting bearer <eth:syzkaller0>
[  252.808913][T16048] tipc: Resetting bearer <eth:syzkaller0>
[  254.381253][T16048] tipc: Disabling bearer <eth:syzkaller0>
[  254.388322][T16051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.393630][T16055] syzkaller0: entered promiscuous mode
[  254.396625][T16055] syzkaller0: entered allmulticast mode
[  254.420597][T16064] tipc: Resetting bearer <eth:syzkaller0>
[  254.434436][T16050] tipc: Resetting bearer <eth:syzkaller0>
[  254.459919][T16050] tipc: Disabling bearer <eth:syzkaller0>
[  254.630191][   T33] audit: type=1800 audit(1753362927.570:4): pid=16081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4424" name="memory.events" dev="tmpfs" ino=7740 res=0 errno=0
[  254.834703][T16098] __nla_validate_parse: 2 callbacks suppressed
[  254.834716][T16098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4433'.
[  254.851996][T16098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4433'.
[  254.883398][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4435'.
[  254.888309][T16101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  254.969881][T16110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4439'.
[  254.995012][T16112] netlink: 'syz.0.4440': attribute type 42 has an invalid length.
[  255.048924][T16120] netlink: 'syz.0.4442': attribute type 2 has an invalid length.
[  255.386189][T16147] af_packet: tpacket_rcv: packet too big, clamped from 584 to 4294967272. macoff=96
[  255.432942][T16154] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4457'.
[  255.611388][T16159] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  255.614555][T16159] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  255.681452][T16172] netlink: 'syz.2.4466': attribute type 2 has an invalid length.
[  255.834883][T16185] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  256.476645][T16219] batman_adv: batadv0: Adding interface: macvlan2
[  256.479390][T16219] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.492938][T16219] batman_adv: batadv0: Interface activated: macvlan2
[  256.625762][T16219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4485'.
[  257.013328][T16235] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  257.022019][T16235] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  257.326116][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4497'.
[  257.412173][T16256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4499'.
[  257.576256][T16256] veth1_vlan (unregistering): left allmulticast mode
[  257.643811][T16269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4505'.
[  257.724542][T16273] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4507'.
[  257.748942][T16273] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  257.752203][T16273] gretap5: entered promiscuous mode
[  257.753762][T16273] gretap5: entered allmulticast mode
[  257.798343][T16277] netlink: 'syz.0.4510': attribute type 9 has an invalid length.
[  257.801283][T16277] netlink: 'syz.0.4510': attribute type 9 has an invalid length.
[  257.940720][T16292] netlink: 'syz.2.4516': attribute type 2 has an invalid length.
[  258.554199][T16361] xt_TCPMSS: Only works on TCP SYN packets
[  258.590167][T16365] netlink: 'syz.3.4550': attribute type 1 has an invalid length.
[  259.788514][T16411] IPv6: sit1: Disabled Multicast RS
[  259.958466][T16423] __nla_validate_parse: 6 callbacks suppressed
[  259.958485][T16423] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4573'.
[  259.965282][T16423] netlink: 'syz.2.4573': attribute type 32 has an invalid length.
[  259.976604][T16423] bond0: option coupled_control: mode dependency failed, not supported in mode balance-tlb(5)
[  260.160485][T16437] smc: net device bond0 erased user defined pnetid SYZ
[  260.434260][T16446] bond3: (slave macvlan0): Releasing backup interface
[  260.461927][T16446] bond0 (unregistering): Released all slaves
[  260.613399][T16459] vxcan1: entered allmulticast mode
[  260.619336][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4591'.
[  260.635939][T16462] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4592'.
[  260.683073][T16464] netlink: 'syz.2.4593': attribute type 1 has an invalid length.
[  260.703571][T16464] bond12: entered promiscuous mode
[  260.705239][T16464] bond12: entered allmulticast mode
[  260.718909][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4593'.
[  260.729089][T16464] bridge7: the hash_elasticity option has been deprecated and is always 16
[  260.747366][T16464] bond12: (slave bridge7): making interface the new active one
[  260.750333][T16464] bridge7: entered promiscuous mode
[  260.752207][T16464] bridge7: entered allmulticast mode
[  260.755243][T16464] bond12: (slave bridge7): Enslaving as an active interface with an up link
[  260.852910][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4597'.
[  260.908788][T16479] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  261.024918][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4605'.
[  261.249261][   T33] audit: type=1800 audit(1753362934.190:5): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4611" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=7850 res=0 errno=0
[  261.468361][T16516] openvswitch: netlink: IP tunnel dst address not specified
[  261.608040][T16531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4626'.
[  261.632142][T16531] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  261.924316][T16554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.051849][T16585] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4647'.
[  263.058153][T16585] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4647'.
[  263.061847][T16585] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4647'.
[  263.123423][T16589] ip6t_REJECT: ECHOREPLY is not supported
[  263.859831][T16632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.869503][T16632] syzkaller0: entered promiscuous mode
[  263.873824][T16632] syzkaller0: entered allmulticast mode
[  263.903741][T16632] tipc: Resetting bearer <eth:syzkaller0>
[  263.910659][T16631] tipc: Resetting bearer <eth:syzkaller0>
[  263.924346][T16631] tipc: Disabling bearer <eth:syzkaller0>
[  264.262496][T16645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.269744][T16645] syzkaller0: entered promiscuous mode
[  264.271958][T16645] syzkaller0: entered allmulticast mode
[  264.299860][T16645] tipc: Resetting bearer <eth:syzkaller0>
[  264.305188][T16644] tipc: Resetting bearer <eth:syzkaller0>
[  264.323972][T16644] tipc: Disabling bearer <eth:syzkaller0>
[  265.571662][T16713] __nla_validate_parse: 2 callbacks suppressed
[  265.571681][T16713] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4706'.
[  265.678965][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4709'.
[  265.982576][T16742] Cannot find add_set index 2 as target
[  266.026739][T16745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4722'.
[  266.030458][T16745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4722'.
[  266.355835][T16766] netlink: 'syz.3.4732': attribute type 11 has an invalid length.
[  266.359200][T16766] netlink: 'syz.3.4732': attribute type 4 has an invalid length.
[  266.362338][T16766] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4732'.
[  266.453631][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4736'.
[  266.623515][T16794] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4746'.
[  266.805597][T16808] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4753'.
[  266.865675][T16813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4753'.
[  266.869279][T16813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4753'.
[  266.872255][T16813] netlink: 'syz.2.4753': attribute type 3 has an invalid length.
[  266.886167][T16813] xt_CT: You must specify a L4 protocol and not use inversions on it
[  268.002045][T16888] delete_channel: no stack
[  269.172459][T16939] netlink: 'syz.0.4813': attribute type 1 has an invalid length.
[  270.390481][T17028] erspan0: Device is already in use.
[  270.664070][T17048] __nla_validate_parse: 4 callbacks suppressed
[  270.664109][T17048] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4863'.
[  270.719048][T17052] netlink: 'syz.2.4866': attribute type 4 has an invalid length.
[  270.742890][T17052] netlink: 'syz.2.4866': attribute type 4 has an invalid length.
[  270.850935][T17059] netlink: 'syz.2.4869': attribute type 1 has an invalid length.
[  270.854215][T17059] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4869'.
[  271.130318][T17076] netlink: 'syz.3.4877': attribute type 15 has an invalid length.
[  271.181012][T17078] netlink: 'syz.3.4878': attribute type 2 has an invalid length.
[  271.184208][T17078] netlink: 'syz.3.4878': attribute type 8 has an invalid length.
[  271.188853][T17078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4878'.
[  271.244773][T17080] !: renamed from dummy0
[  272.921127][T17179] netlink: 'syz.2.4912': attribute type 1 has an invalid length.
[  272.950462][T17179] 8021q: adding VLAN 0 to HW filter on device bond13
[  273.025269][T17186] sctp: [Deprecated]: syz.3.4916 (pid 17186) Use of int in maxseg socket option.
[  273.025269][T17186] Use struct sctp_assoc_value instead
[  273.060518][T17190] x_tables: duplicate entry at hook 3
[  273.223229][T17205] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4925'.
[  273.958769][T17238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4936'.
[  274.376461][T17264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4948'.
[  274.546295][T17281] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4957'.
[  274.692510][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4964'.
[  274.700120][T17294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4964'.
[  274.704506][T17294] netlink: 'syz.3.4964': attribute type 9 has an invalid length.
[  274.809920][T17301] netlink: 'syz.0.4966': attribute type 12 has an invalid length.
[  275.052494][T17322] netlink: 'syz.0.4973': attribute type 33 has an invalid length.
[  275.060368][T17322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4973'.
[  275.224826][T17329] xt_CT: No such helper "syz0"
[  275.578132][T17362] netlink: 'syz.3.4990': attribute type 25 has an invalid length.
[  275.754086][T17382] batadv_slave_0: entered promiscuous mode
[  275.758559][T17382] batadv_slave_0: entered allmulticast mode
[  275.768592][T17384] gretap0: left promiscuous mode
[  275.777838][T17384] bridge_slave_0: left allmulticast mode
[  275.786102][T17384] veth0_to_bond: left allmulticast mode
[  275.790337][T17384] ip6erspan0: left promiscuous mode
[  275.793276][T17384] veth7: left promiscuous mode
[  275.807270][T17384] xfrm1: left promiscuous mode
[  275.809695][T17384] xfrm1: left allmulticast mode
[  275.812175][T17384] ip6tnl3: left promiscuous mode
[  275.813790][T17384] ip6tnl3: left allmulticast mode
[  275.817386][T17384] gretap2: left promiscuous mode
[  275.819856][T17384] vlan0: left promiscuous mode
[  275.822256][T17384] bond6: left promiscuous mode
[  275.824158][T17384] gretap3: left promiscuous mode
[  275.827943][T17384] vlan0: left allmulticast mode
[  275.829927][T17384] bond6: left allmulticast mode
[  275.831511][T17384] gretap3: left allmulticast mode
[  275.833432][T17390] __nla_validate_parse: 2 callbacks suppressed
[  275.833447][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5000'.
[  275.833781][T17384] gretap4: left promiscuous mode
[  275.841748][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5000'.
[  275.853973][T17384] gretap5: left promiscuous mode
[  275.855958][T17384] gretap5: left allmulticast mode
[  275.878632][ T5845] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  275.886207][ T5845] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  275.889664][ T5845] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  275.892667][ T5845] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  277.273461][T17445] xt_CT: No such helper "syz0"
[  277.407722][ T5830] hid-generic 0005:04F3:100C.0001: item fetching failed at offset 0/1
[  277.410754][ T5830] hid-generic 0005:04F3:100C.0001: probe with driver hid-generic failed with error -22
[  277.536691][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5035'.
[  277.754266][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5039'.
[  277.840044][T17478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.310507][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5053'.
[  279.683054][T17563] netlink: 'syz.0.5079': attribute type 1 has an invalid length.
[  279.688609][T17563] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5079'.
[  281.056631][T17597] Bluetooth: hci1: Opcode 0x080f failed: -4
[  281.576892][T17629] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.5107'.
[  281.580190][T17629] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.5107'.
[  282.303639][T17645] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5115'.
[  282.310138][T17645] batadv_slave_1: entered promiscuous mode
[  282.527275][T17635] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  282.764291][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5128'.
[  282.769946][T17672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5128'.
[  282.880630][T17682] netem: incorrect gi model size
[  282.882927][T17682] netem: change failed
[  282.999394][T17694] xt_cgroup: invalid path, errno=-2
[  283.140761][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  283.292714][T17711] SET target dimension over the limit!
[  283.381815][T17722] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  283.443395][T17725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5152'.
[  284.583438][T17806] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  285.093175][T17851] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5207'.
[  285.200610][T17857] : entered promiscuous mode
[  285.215994][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  287.199548][T17958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5258'.
[  287.625871][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5261'.
[  287.629492][T17964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5261'.
[  287.672345][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5263'.
[  287.833151][T17974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5266'.
[  287.869127][T17974] pim6reg: entered allmulticast mode
[  287.882063][T17974] pim6reg: left allmulticast mode
[  287.910363][T17991] xt_socket: unknown flags 0xfc
[  288.047280][T18003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5274'.
[  288.053142][T18004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5277'.
[  288.062136][T18004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5277'.
[  288.551941][T18041] netlink: 'syz.2.5291': attribute type 11 has an invalid length.
[  288.834273][   T33] audit: type=1800 audit(1753362961.770:6): pid=18054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5298" name="memory.events" dev="tmpfs" ino=8898 res=0 errno=0
[  288.851147][   T33] audit: type=1804 audit(1753362961.790:7): pid=18054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5298" name="/newroot/1763/memory.events" dev="tmpfs" ino=8898 res=1 errno=0
[  288.870659][T18056] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5299'.
[  289.627404][T18105] pim6reg1: entered promiscuous mode
[  289.629576][T18105] pim6reg1: entered allmulticast mode
[  289.654441][T18107] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  290.391118][T18156] netlink: 'syz.3.5345': attribute type 29 has an invalid length.
[  290.410802][T18154] bond4: (slave wlan0): Releasing active interface
[  290.418578][T18154] bond1: (slave gretap1): Releasing active interface
[  290.423896][T18154] bond2: (slave veth9): Releasing active interface
[  290.428863][T18154] bond5: (slave gretap2): Releasing active interface
[  290.433721][T18154] bond6: (slave gretap3): Releasing active interface
[  290.449949][T18158] netlink: 'syz.3.5346': attribute type 11 has an invalid length.
[  291.310152][T18195] netlink: 'syz.2.5364': attribute type 1 has an invalid length.
[  291.313098][T18195] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5364'.
[  291.431756][T18201] IPVS: Scheduler module ip_vs_sip not found
[  291.435014][T18201] IPVS: length: 8 != 446622349272
[  291.720056][T18217] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  291.723692][T18217] openvswitch: netlink: Message has 1 unknown bytes.
[  292.301628][T18244] __nla_validate_parse: 4 callbacks suppressed
[  292.301647][T18244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5386'.
[  292.477796][T18256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5389'.
[  292.632180][T18267] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5396'.
[  293.107137][T18300] delete_channel: no stack
[  293.184861][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5416'.
[  293.885136][T18335] netlink: 'syz.2.5426': attribute type 11 has an invalid length.
[  293.999365][T18336] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.152267][T18336] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.213938][T18336] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.267158][T18336] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  294.369371][ T5845] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  294.385216][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  294.431811][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  294.502369][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  294.688166][T18349] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5431'.
[  295.328325][T18386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5446'.
[  295.331532][T18386] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5446'.
[  295.393571][T18388] netlink: 'syz.2.5447': attribute type 1 has an invalid length.
[  295.397297][T18388] netlink: 'syz.2.5447': attribute type 4 has an invalid length.
[  295.400047][T18388] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5447'.
[  295.492893][T18390] netlink: zone id is out of range
[  295.497238][T18390] netlink: zone id is out of range
[  295.508507][T18390] netlink: zone id is out of range
[  295.510166][T18390] netlink: zone id is out of range
[  295.512161][T18390] netlink: zone id is out of range
[  295.513814][T18390] netlink: zone id is out of range
[  295.517350][T18390] netlink: zone id is out of range
[  295.519215][T18390] netlink: zone id is out of range
[  295.521447][T18390] netlink: zone id is out of range
[  295.523345][T18390] netlink: zone id is out of range
[  295.540133][T18390] : entered promiscuous mode
[  295.610715][T18393] netlink: 'syz.2.5449': attribute type 7 has an invalid length.
[  295.669607][T18395] netlink: 'syz.2.5450': attribute type 12 has an invalid length.
[  295.680584][T18395] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:19999
[  295.941200][T18407] netlink: 'syz.0.5455': attribute type 9 has an invalid length.
[  295.943970][T18407] netlink: 'syz.0.5455': attribute type 7 has an invalid length.
[  295.946799][T18407] netlink: 'syz.0.5455': attribute type 8 has an invalid length.
[  296.204611][T18423] netlink: 'syz.0.5462': attribute type 11 has an invalid length.
[  296.213996][T18423] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5462'.
[  296.330985][T18433] netlink: 'syz.3.5467': attribute type 10 has an invalid length.
[  296.363876][T18433] team0: Port device bond2 removed
[  296.374643][T18433] bond4: (slave gretap2): Releasing active interface
[  296.383443][T18433] batman_adv: batadv0: Interface deactivated: macvlan2
[  296.387257][T18433] batman_adv: batadv0: Removing interface: macvlan2
[  296.452677][T18442] SET target dimension over the limit!
[  296.609746][T18450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.618814][T18450] syzkaller0: entered promiscuous mode
[  296.620488][T18450] syzkaller0: entered allmulticast mode
[  296.649949][T18450] tipc: Resetting bearer <eth:syzkaller0>
[  296.653870][T18448] tipc: Resetting bearer <eth:syzkaller0>
[  296.668167][T18448] tipc: Disabling bearer <eth:syzkaller0>
[  297.007898][T18479] team0: Mode changed to "loadbalance"
[  297.143025][T18495] netlink: 'syz.2.5494': attribute type 11 has an invalid length.
[  297.185931][T18499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5497'.
[  297.298733][T18509] netlink: 'syz.0.5498': attribute type 14 has an invalid length.
[  297.652510][T18543] __nla_validate_parse: 1 callbacks suppressed
[  297.652525][T18543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5511'.
[  297.772011][T18553] xt_policy: too many policy elements
[  297.884805][T18565] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  298.091307][T18580] xt_hashlimit: size too large, truncated to 1048576
[  298.381540][T18596] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5536'.
[  298.384891][T18596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5536'.
[  298.502964][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5540'.
[  298.593100][T18611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5543'.
[  298.631245][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5544'.
[  298.647986][T18613] veth1_macvtap: left promiscuous mode
[  298.670765][T18615] xt_TPROXY: Can be used only with -p tcp or -p udp
[  298.815762][T18619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5547'.
[  298.874625][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5550'.
[  298.884040][T18627] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5551'.
[  298.899462][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5551'.
[  301.077637][T18763] validate_nla: 2 callbacks suppressed
[  301.077673][T18763] netlink: 'syz.3.5613': attribute type 1 has an invalid length.
[  301.799524][T18825] netlink: 'syz.0.5638': attribute type 14 has an invalid length.
[  301.802925][T18825] netlink: 'syz.0.5638': attribute type 13 has an invalid length.
[  303.002537][T18912] __nla_validate_parse: 15 callbacks suppressed
[  303.002552][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5676'.
[  303.043918][T18912] macvlan4: entered allmulticast mode
[  303.046653][T18912] veth1_vlan: entered allmulticast mode
[  304.370189][T18933] netlink: 'syz.3.5686': attribute type 1 has an invalid length.
[  304.373396][T18933] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5686'.
[  304.380720][T18933] netlink: 'syz.3.5686': attribute type 1 has an invalid length.
[  306.452876][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.458655][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.461951][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.465233][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.655710][    C1] net_ratelimit: 94 callbacks suppressed
[  306.655734][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.989064][T19074] netlink: 'syz.3.5745': attribute type 2 has an invalid length.
[  307.038586][T19077] netlink: 'syz.0.5744': attribute type 9 has an invalid length.
[  307.041348][T19077] netlink: 'syz.0.5744': attribute type 6 has an invalid length.
[  307.184079][T19089] xt_hashlimit: max too large, truncated to 1048576
[  307.189701][T19089] Cannot find add_set index 3 as target
[  307.209495][T19085] tipc: New replicast peer: 255.255.255.255
[  307.212598][T19085] tipc: Enabled bearer <udp:syz2>, priority 10
[  307.260615][T19094] : renamed from bridge_slave_0 (while UP)
[  307.348449][T19103] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  307.349485][T19102] IPVS: stopping master sync thread 19103 ...
[  308.063467][T19140] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  308.491325][T19159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5777'.
[  309.552698][T19188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5788'.
[  309.557254][T19188] openvswitch: netlink: Missing key (keys=40, expected=100)
[  309.572564][T19190] x_tables: unsorted underflow at hook 3
[  309.633588][T19196] nbd: socks must be embedded in a SOCK_ITEM attr
[  309.717564][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5795'.
[  310.014256][T19235] netlink: 'syz.0.5807': attribute type 10 has an invalid length.
[  310.018717][T19235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5807'.
[  310.027847][T19235] team0: Port device geneve0 added
[  310.030158][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.031476][T19235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5807'.
[  310.033434][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.033469][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.037023][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5807'.
[  310.053283][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.073726][T19235] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  310.232994][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5809'.
[  310.308627][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5810'.
[  310.311580][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5810'.
[  310.315020][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5810'.
[  310.728345][T19279] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  310.731430][T19279] bond0: option all_slaves_active: invalid value (7)
[  310.837955][T19287] ip6t_rpfilter: unknown options
[  311.588588][T19340] lo speed is unknown, defaulting to 1000
[  311.595769][T19340] lo speed is unknown, defaulting to 1000
[  311.602886][T19340] lo speed is unknown, defaulting to 1000
[  311.664596][T19342] syz_tun: left allmulticast mode
[  311.675209][T19342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  311.778217][T19340] infiniband syz0: set active
[  311.780476][T19340] infiniband syz0: added lo
[  311.832960][T19340] RDS/IB: syz0: added
[  311.836007][T19340] smc: adding ib device syz0 with port count 1
[  311.838758][T19340] smc:    ib device syz0 port 1 has pnetid 
[  311.873016][T19340] lo speed is unknown, defaulting to 1000
[  312.003594][ T5897] lo speed is unknown, defaulting to 1000
[  312.018808][ T5897] syz0: Port: 1 Link ACTIVE
[  312.021757][   T24] lo speed is unknown, defaulting to 1000
[  312.114571][T19340] lo speed is unknown, defaulting to 1000
[  312.253302][T19340] lo speed is unknown, defaulting to 1000
[  312.460208][T19363] netlink: 'syz.2.5856': attribute type 21 has an invalid length.
[  313.178152][T19406] sctp: [Deprecated]: syz.3.5874 (pid 19406) Use of int in max_burst socket option.
[  313.178152][T19406] Use struct sctp_assoc_value instead
[  313.671136][T19441] netlink: 'syz.2.5891': attribute type 1 has an invalid length.
[  313.675707][T19441] __nla_validate_parse: 6 callbacks suppressed
[  313.675718][T19441] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5891'.
[  313.798312][T19449] netlink: 'syz.0.5895': attribute type 1 has an invalid length.
[  313.801406][T19449] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.5895'.
[  313.913094][T19457] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5899'.
[  313.926382][T19457] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5899'.
[  314.147193][T19472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5905'.
[  314.213192][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5908'.
[  314.217843][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5908'.
[  314.292918][T19482] openvswitch: netlink: IPv6 tunnel dst address is zero
[  314.829619][T19527] lo speed is unknown, defaulting to 1000
[  314.986769][T19537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5933'.
[  314.990917][T19537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5933'.
[  315.285150][T19549] lo speed is unknown, defaulting to 1000
[  315.324560][T14928] nci: nci_ntf_packet: unknown ntf opcode 0x206
[  316.211618][T19577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5945'.
[  316.819572][T19610] xt_connbytes: Forcing CT accounting to be enabled
[  316.822121][T19610] xt_bpf: check failed: parse error
[  316.960642][T19623] netlink: 'syz.2.5964': attribute type 10 has an invalid length.
[  316.964288][T19623] netlink: 'syz.2.5964': attribute type 10 has an invalid length.
[  317.229449][T19639] netlink: 'syz.3.5971': attribute type 11 has an invalid length.
[  317.742597][   T24] lo speed is unknown, defaulting to 1000
[  317.745144][   T24] syz0: Port: 1 Link DOWN
[  317.766956][T19650] gretap3: entered promiscuous mode
[  317.770495][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.774158][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  317.778262][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.781869][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  317.789976][   T24] lo speed is unknown, defaulting to 1000
[  317.790213][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.797485][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  317.800995][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.804387][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  318.127471][T19678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.130802][T19678] syzkaller0: entered promiscuous mode
[  318.133152][T19678] syzkaller0: entered allmulticast mode
[  318.158684][T19678] tipc: Resetting bearer <eth:syzkaller0>
[  318.182489][T19677] tipc: Resetting bearer <eth:syzkaller0>
[  318.212489][T19677] tipc: Disabling bearer <eth:syzkaller0>
[  318.793210][T19710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.887108][T19714] __nla_validate_parse: 4 callbacks suppressed
[  318.887129][T19714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6005'.
[  318.934652][T19716] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  319.024414][T19720] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001
[  319.100268][T19724] openvswitch: netlink: IP tunnel dst address not specified
[  319.216245][T19730] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6009'.
[  319.221830][T19730] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6009'.
[  319.234443][T19730] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  319.247113][T19732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6013'.
[  319.460594][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6018'.
[  319.463300][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6018'.
[  319.466453][T19744] netlink: 124 bytes leftover after parsing attributes in process `syz.3.6018'.
[  319.690965][T19752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6022'.
[  319.824191][T19758] netlink: 'syz.3.6025': attribute type 1 has an invalid length.
[  319.827972][T19758] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6025'.
[  320.120861][T19772] netlink: 'syz.0.6032': attribute type 1 has an invalid length.
[  320.123956][T19772] netlink: 'syz.0.6032': attribute type 1 has an invalid length.
[  320.167469][T19776] netlink: 'syz.0.6034': attribute type 1 has an invalid length.
[  320.169852][T19776] netlink: 'syz.0.6034': attribute type 2 has an invalid length.
[  320.172798][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6034'.
[  320.856354][T19835] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  320.992109][T19850] netlink: 'syz.3.6065': attribute type 83 has an invalid length.
[  321.359112][T19883] netlink: 'syz.3.6079': attribute type 99 has an invalid length.
[  321.419972][T19872] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  321.602103][T19896] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  322.143874][T19914] netlink: 'syz.3.6093': attribute type 4 has an invalid length.
[  322.545313][ T5835] Bluetooth: hci2: link tx timeout
[  322.548825][ T5835] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  322.553846][ T5835] Bluetooth: hci2: link tx timeout
[  322.557370][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  322.570396][T19949] IPVS: Scheduler module ip_vs_sip not found
[  322.896489][ T5835] Bluetooth: hci0: command tx timeout
[  323.623967][T20016] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.579486][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  324.605279][T20065] __nla_validate_parse: 7 callbacks suppressed
[  324.605299][T20065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6159'.
[  324.821457][T20074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6163'.
[  324.825313][T20074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6163'.
[  324.942594][T20081] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.960369][T20081] bond0: (slave rose0): Enslaving as an active interface with an up link
[  325.008549][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6170'.
[  325.011281][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6170'.
[  325.014021][T20088] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[  325.018571][T20088] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  325.229278][T20110] syzkaller1: entered promiscuous mode
[  325.231514][T20110] syzkaller1: entered allmulticast mode
[  325.299550][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6185'.
[  325.438760][T20130] netlink: 'syz.3.6191': attribute type 1 has an invalid length.
[  325.441843][T20130] netlink: 'syz.3.6191': attribute type 1 has an invalid length.
[  325.520699][T20140] netlink: 'syz.3.6195': attribute type 4 has an invalid length.
[  325.524121][T20140] netlink: 'syz.3.6195': attribute type 4 has an invalid length.
[  325.564175][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6199'.
[  325.635175][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6202'.
[  325.931735][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6212'.
[  326.666361][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  327.016744][T20204] xt_l2tp: invalid flags combination: 4
[  327.324107][T20229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6236'.
[  327.367990][T20237] netlink: 'syz.2.6240': attribute type 18 has an invalid length.
[  328.129053][T20298] netlink: 'syz.3.6270': attribute type 1 has an invalid length.
[  328.132396][T20298] netlink: 'syz.3.6270': attribute type 2 has an invalid length.
[  328.364487][T20317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.368401][T20317] syzkaller0: entered promiscuous mode
[  328.370510][T20317] syzkaller0: entered allmulticast mode
[  328.379944][T20317] tipc: Resetting bearer <eth:syzkaller0>
[  328.383997][T20316] tipc: Resetting bearer <eth:syzkaller0>
[  328.399157][T20316] tipc: Disabling bearer <eth:syzkaller0>
[  329.893349][T20393] __nla_validate_parse: 9 callbacks suppressed
[  329.893363][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6313'.
[  330.332676][T20426] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6329'.
[  330.461886][T20442] xt_ecn: cannot match TCP bits for non-tcp packets
[  330.464147][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6338'.
[  330.668769][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  332.046119][T20540] bridge0: entered promiscuous mode
[  332.050826][T20540] batadv0: entered promiscuous mode
[  332.054394][T20540] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  332.061089][T20540] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  332.198863][T20553] lo speed is unknown, defaulting to 1000
[  332.391160][T20551] lo speed is unknown, defaulting to 1000
[  332.432449][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6394'.
[  332.706882][T20574] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  332.760341][T20574] netlink: 'syz.0.6397': attribute type 4 has an invalid length.
[  332.886095][T14928] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  332.889713][T14928] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  332.893276][T14928] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  332.900906][T14928] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.090679][   T33] audit: type=1804 audit(1753363006.030:8): pid=20591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6404" name="/newroot/1381/cgroup.controllers" dev="tmpfs" ino=6980 res=1 errno=0
[  333.104372][   T33] audit: type=1800 audit(1753363006.030:9): pid=20591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6404" name="cgroup.controllers" dev="tmpfs" ino=6980 res=0 errno=0
[  333.123706][T20593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.455163][T20614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6415'.
[  333.539679][T20617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6416'.
[  333.813807][T20642] netlink: 'syz.3.6421': attribute type 10 has an invalid length.
[  333.822437][T20642] team0: Port device 0! added
[  334.232936][T20670] team0: Port device 0! removed
[  334.246765][T20670] erspan0: entered promiscuous mode
[  334.264526][T20670] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.268553][T20670] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  334.392428][T20674] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  335.002976][T20700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6446'.
[  335.119036][T20708] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  335.201210][T20714] ipt_REJECT: TCP_RESET invalid for non-tcp
[  335.271632][T20721] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6456'.
[  335.554093][T20748] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.6470'.
[  335.569175][T20748] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.6470'.
[  335.908269][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6489'.
[  336.057167][T20797] 
[  336.058028][T20797] ======================================================
[  336.060464][T20797] WARNING: possible circular locking dependency detected
[  336.062915][T20797] 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 Not tainted
[  336.066352][T20797] ------------------------------------------------------
[  336.069171][T20797] syz.0.6492/20797 is trying to acquire lock:
[  336.071377][T20797] ffff888021862188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  336.075241][T20797] 
[  336.075241][T20797] but task is already holding lock:
[  336.077966][T20797] ffff888021862230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  336.081256][T20797] 
[  336.081256][T20797] which lock already depends on the new lock.
[  336.081256][T20797] 
[  336.084734][T20797] 
[  336.084734][T20797] the existing dependency chain (in reverse order) is:
[  336.088001][T20797] 
[  336.088001][T20797] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  336.090410][T20797]        lock_acquire+0x120/0x360
[  336.091923][T20797]        __mutex_lock+0x182/0xe80
[  336.093467][T20797]        refcount_dec_and_mutex_lock+0x30/0xa0
[  336.095628][T20797]        nbd_config_put+0x2c/0x790
[  336.097329][T20797]        nbd_release+0xfe/0x140
[  336.099022][T20797]        bdev_release+0x536/0x650
[  336.101038][T20797]        blkdev_release+0x15/0x20
[  336.102719][T20797]        __fput+0x44c/0xa70
[  336.104059][T20797]        fput_close_sync+0x119/0x200
[  336.105619][T20797]        __x64_sys_close+0x7f/0x110
[  336.107245][T20797]        do_syscall_64+0xfa/0x3b0
[  336.108755][T20797]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.110599][T20797] 
[  336.110599][T20797] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  336.113107][T20797]        lock_acquire+0x120/0x360
[  336.114752][T20797]        __mutex_lock+0x182/0xe80
[  336.116391][T20797]        __del_gendisk+0x129/0x9e0
[  336.117961][T20797]        del_gendisk+0xe8/0x160
[  336.119440][T20797]        nbd_dev_remove_work+0x47/0xe0
[  336.121296][T20797]        process_scheduled_works+0xae1/0x17b0
[  336.123048][T20797]        worker_thread+0x8a0/0xda0
[  336.124547][T20797]        kthread+0x711/0x8a0
[  336.126305][T20797]        ret_from_fork+0x3fc/0x770
[  336.128017][T20797]        ret_from_fork_asm+0x1a/0x30
[  336.129661][T20797] 
[  336.129661][T20797] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  336.132434][T20797]        validate_chain+0xb9b/0x2140
[  336.134073][T20797]        __lock_acquire+0xab9/0xd20
[  336.135990][T20797]        lock_acquire+0x120/0x360
[  336.137508][T20797]        down_write+0x96/0x1f0
[  336.138919][T20797]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  336.141106][T20797]        nbd_start_device+0x16c/0xac0
[  336.142965][T20797]        nbd_genl_connect+0x135b/0x18f0
[  336.144925][T20797]        genl_family_rcv_msg_doit+0x215/0x300
[  336.146757][T20797]        genl_rcv_msg+0x60e/0x790
[  336.148446][T20797]        netlink_rcv_skb+0x208/0x470
[  336.150010][T20797]        genl_rcv+0x28/0x40
[  336.151352][T20797]        netlink_unicast+0x82f/0x9e0
[  336.152907][T20797]        netlink_sendmsg+0x805/0xb30
[  336.154465][T20797]        __sock_sendmsg+0x21c/0x270
[  336.156044][T20797]        ____sys_sendmsg+0x505/0x830
[  336.157579][T20797]        ___sys_sendmsg+0x21f/0x2a0
[  336.159249][T20797]        __x64_sys_sendmsg+0x19b/0x260
[  336.161252][T20797]        do_syscall_64+0xfa/0x3b0
[  336.163013][T20797]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.165166][T20797] 
[  336.165166][T20797] other info that might help us debug this:
[  336.165166][T20797] 
[  336.168493][T20797] Chain exists of:
[  336.168493][T20797]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  336.168493][T20797] 
[  336.172784][T20797]  Possible unsafe locking scenario:
[  336.172784][T20797] 
[  336.175002][T20797]        CPU0                    CPU1
[  336.176874][T20797]        ----                    ----
[  336.178791][T20797]   lock(&nbd->config_lock);
[  336.180225][T20797]                                lock(&disk->open_mutex);
[  336.182528][T20797]                                lock(&nbd->config_lock);
[  336.184590][T20797]   lock(&set->update_nr_hwq_lock);
[  336.186119][T20797] 
[  336.186119][T20797]  *** DEADLOCK ***
[  336.186119][T20797] 
[  336.188686][T20797] 3 locks held by syz.0.6492/20797:
[  336.190380][T20797]  #0: ffffffff8f583e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  336.193290][T20797]  #1: ffffffff8f583c48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  336.196462][T20797]  #2: ffff888021862230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  336.199829][T20797] 
[  336.199829][T20797] stack backtrace:
[  336.201850][T20797] CPU: 0 UID: 0 PID: 20797 Comm: syz.0.6492 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  336.201864][T20797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  336.201871][T20797] Call Trace:
[  336.201878][T20797]  <TASK>
[  336.201885][T20797]  dump_stack_lvl+0x189/0x250
[  336.201900][T20797]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.201909][T20797]  ? __pfx__printk+0x10/0x10
[  336.201922][T20797]  ? print_lock_name+0xde/0x100
[  336.201934][T20797]  print_circular_bug+0x2ee/0x310
[  336.201947][T20797]  check_noncircular+0x134/0x160
[  336.201958][T20797]  validate_chain+0xb9b/0x2140
[  336.201972][T20797]  __lock_acquire+0xab9/0xd20
[  336.201980][T20797]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  336.201993][T20797]  lock_acquire+0x120/0x360
[  336.202000][T20797]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  336.202010][T20797]  ? kernfs_add_one+0xf0/0x520
[  336.202019][T20797]  down_write+0x96/0x1f0
[  336.202029][T20797]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  336.202038][T20797]  ? __pfx_down_write+0x10/0x10
[  336.202047][T20797]  ? kernfs_add_one+0xf0/0x520
[  336.202056][T20797]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  336.202067][T20797]  ? sysfs_add_file_mode_ns+0x238/0x300
[  336.202077][T20797]  ? sysfs_add_file_mode_ns+0x259/0x300
[  336.202088][T20797]  nbd_start_device+0x16c/0xac0
[  336.202099][T20797]  ? __nla_parse+0x40/0x60
[  336.202109][T20797]  ? device_create_file+0xf4/0x1c0
[  336.202120][T20797]  nbd_genl_connect+0x135b/0x18f0
[  336.202131][T20797]  ? __pfx_nbd_genl_connect+0x10/0x10
[  336.202141][T20797]  ? __nla_parse+0x40/0x60
[  336.202150][T20797]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  336.202163][T20797]  genl_family_rcv_msg_doit+0x215/0x300
[  336.202174][T20797]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  336.202185][T20797]  ? stack_trace_save+0x9c/0xe0
[  336.202197][T20797]  genl_rcv_msg+0x60e/0x790
[  336.202207][T20797]  ? __pfx_genl_rcv_msg+0x10/0x10
[  336.202217][T20797]  ? __pfx_nbd_genl_connect+0x10/0x10
[  336.202229][T20797]  netlink_rcv_skb+0x208/0x470
[  336.202236][T20797]  ? __lock_acquire+0xab9/0xd20
[  336.202243][T20797]  ? __pfx_genl_rcv_msg+0x10/0x10
[  336.202252][T20797]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  336.202262][T20797]  ? down_read+0x1ad/0x2e0
[  336.202294][T20797]  genl_rcv+0x28/0x40
[  336.202303][T20797]  netlink_unicast+0x82f/0x9e0
[  336.202318][T20797]  ? __pfx_netlink_unicast+0x10/0x10
[  336.202329][T20797]  ? netlink_sendmsg+0x642/0xb30
[  336.202336][T20797]  ? skb_put+0x11b/0x210
[  336.202346][T20797]  netlink_sendmsg+0x805/0xb30
[  336.202356][T20797]  ? __pfx_netlink_sendmsg+0x10/0x10
[  336.202363][T20797]  ? aa_sock_msg_perm+0x94/0x160
[  336.202372][T20797]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  336.202380][T20797]  ? __pfx_netlink_sendmsg+0x10/0x10
[  336.202387][T20797]  __sock_sendmsg+0x21c/0x270
[  336.202399][T20797]  ____sys_sendmsg+0x505/0x830
[  336.202409][T20797]  ? __pfx_____sys_sendmsg+0x10/0x10
[  336.202419][T20797]  ? import_iovec+0x74/0xa0
[  336.202429][T20797]  ___sys_sendmsg+0x21f/0x2a0
[  336.202438][T20797]  ? __pfx____sys_sendmsg+0x10/0x10
[  336.202452][T20797]  ? __fget_files+0x2a/0x420
[  336.202459][T20797]  ? __fget_files+0x3a0/0x420
[  336.202472][T20797]  __x64_sys_sendmsg+0x19b/0x260
[  336.202482][T20797]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  336.202494][T20797]  ? rcu_is_watching+0x15/0xb0
[  336.202505][T20797]  ? do_syscall_64+0xbe/0x3b0
[  336.202515][T20797]  do_syscall_64+0xfa/0x3b0
[  336.202523][T20797]  ? lockdep_hardirqs_on+0x9c/0x150
[  336.202530][T20797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.202538][T20797]  ? exc_page_fault+0x9f/0xf0
[  336.202546][T20797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.202554][T20797] RIP: 0033:0x7fc31518e9a9
[  336.202563][T20797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.202571][T20797] RSP: 002b:00007fc316051038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  336.202580][T20797] RAX: ffffffffffffffda RBX: 00007fc3153b5fa0 RCX: 00007fc31518e9a9
[  336.202587][T20797] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004
[  336.202592][T20797] RBP: 00007fc315210d69 R08: 0000000000000000 R09: 0000000000000000
[  336.202598][T20797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.202602][T20797] R13: 0000000000000000 R14: 00007fc3153b5fa0 R15: 00007ffcc306a3c8
[  336.202612][T20797]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  336.458904][T20797] nbd1: detected capacity change from 0 to 128
[  336.585840][   T56] block nbd1: Receive control failed (result -104)
[  337.068989][ T5845] bridge0 (unregistering): left promiscuous mode
[  337.212729][ T5845] bond0 (unregistering): Released all slaves
[  337.223926][ T5845] bond1 (unregistering): Released all slaves
[  337.333428][ T5845] bond2 (unregistering): Released all slaves
[  337.441581][ T5845] bond3 (unregistering): Released all slaves
[  337.448300][ T5845] bond4 (unregistering): Released all slaves
[  337.521435][ T5845] : left promiscuous mode
[  337.566106][ T5845] tipc: Disabling bearer <eth:team0>
[  337.575820][ T5845] tipc: Disabling bearer <udp:syz2>
[  337.577600][ T5845] tipc: Left network mode
[  337.753228][ T5845] batadv0: left promiscuous mode
[  337.758216][ T5845] hsr_slave_0: left promiscuous mode
[  337.761208][ T5845] hsr_slave_1: left promiscuous mode
[  337.763979][ T5845] veth1_vlan: left allmulticast mode
[  338.834800][ T5845] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
13:16:49  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33c0860 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=000000000000114e RDI=000000000000114f RBP=ffffffff99e04750 RSP=ffffc9000369e630
R8 =ffff888020dc8237 R9 =1ffff110041b9046 R10=dffffc0000000000 R11=ffffffff85463550
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff854635c7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc3160516c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001ac0 CR3=00000000375ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd85d611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81fa7da7 RBX=ffff88813fff7400 RCX=ffff8880226f8000 RDX=0000000080000002
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900042f7138
R8 =ffffea0004447987 R9 =1ffffd4000888f30 R10=dffffc0000000000 R11=fffff94000888f31
R12=00000000ffffffff R13=000000000000000a R14=0000000000000001 R15=0000000000000002
RIP=ffffffff81c02a68 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd85e45c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd85e45bfc8 CR3=000000003562e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f314d586478 00007f314d586450 XMM03=00007f314d586488 00007f314d586480
XMM04=00007f314e0ed100 00007f314d586440 XMM05=00007f314d586458 00007f314d5864a0
XMM06=00007f314d586498 00007f314d586490 XMM07=00007f314d586488 00007f314d586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f314d411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
