last executing test programs:

1.601017597s ago: executing program 2 (id=5186):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x1}, 0x8)

1.433658876s ago: executing program 2 (id=5196):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4)

1.380418871s ago: executing program 2 (id=5199):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0xf4f422d5faf08caa, 0x0, 0x0)

1.332010995s ago: executing program 2 (id=5202):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xa, 0x7ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x1f0c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4)

1.10367189s ago: executing program 1 (id=5210):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0), 0x8)

1.103204426s ago: executing program 1 (id=5213):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}}], {0x14, 0x10}}, 0x3c}}, 0x4)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
r6 = socket(0x10, 0x2, 0x0)
write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)

403.730564ms ago: executing program 0 (id=5221):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a0100000000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

303.768225ms ago: executing program 1 (id=5222):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="41ee00000000000001000603000014000300060a0006090300f006e812000000000108000700263a0903140002"], 0x44}, 0x1, 0x1000000, 0x0, 0x4000}, 0x24008090)

192.055704ms ago: executing program 0 (id=5223):
r0 = socket$inet(0x2, 0xa, 0x3)
getsockname$inet(r0, 0x0, &(0x7f0000000180))

191.684359ms ago: executing program 2 (id=5224):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffdf, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x20000080)

191.583576ms ago: executing program 0 (id=5225):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000500000000000000000000090300000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000100000d03000000030000000300000000005f2e"], 0x0, 0x65}, 0x28)

101.745453ms ago: executing program 1 (id=5226):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x20000800)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x14)

101.582348ms ago: executing program 0 (id=5227):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1f63, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

41.626173ms ago: executing program 1 (id=5228):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0xbe, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x2004809c)

41.518095ms ago: executing program 0 (id=5229):
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockname(r0, 0x0, &(0x7f0000000180))

1.365043ms ago: executing program 1 (id=5230):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071106400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0af8fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)

1.204768ms ago: executing program 0 (id=5231):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000000))

0s ago: executing program 2 (id=5232):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10)

kernel console output (not intermixed with test programs):

a:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.889268][ T8469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.893254][ T8469] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  112.171628][ T8480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.248156][ T8484] SET target dimension over the limit!
[  112.312480][ T8488] __nla_validate_parse: 7 callbacks suppressed
[  112.312491][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'.
[  112.322057][ T6055] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.322074][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'.
[  112.325088][ T6055] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.331637][ T6055] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.336797][ T6055] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.847422][ T8410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  112.945963][ T8496] netlink: 'syz.1.1141': attribute type 2 has an invalid length.
[  112.949974][ T8496] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1141'.
[  113.009639][ T8502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1144'.
[  113.020548][ T8502] ip6gre1: entered promiscuous mode
[  113.028404][ T8502] ip6gre1: entered allmulticast mode
[  113.032403][ T8502] netlink: 'syz.0.1144': attribute type 6 has an invalid length.
[  113.035324][ T8502] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1144'.
[  113.042528][ T8502] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  113.045553][ T8502] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  113.377594][ T8533] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1158'.
[  113.416847][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'.
[  113.423062][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1162'.
[  113.470657][ T8545] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002
[  113.474814][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'.
[  113.749462][ T8565] bridge0: port 3(erspan0) entered blocking state
[  113.752771][ T8565] bridge0: port 3(erspan0) entered disabled state
[  113.755496][ T8565] erspan0: entered allmulticast mode
[  113.760418][ T8565] erspan0: entered promiscuous mode
[  113.767142][ T8565] erspan0: left allmulticast mode
[  113.769663][ T8565] erspan0: left promiscuous mode
[  113.773456][ T8565] bridge0: port 3(erspan0) entered disabled state
[  113.789722][ T8565] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1175'.
[  114.002279][ T8584] netlink: 'syz.0.1184': attribute type 10 has an invalid length.
[  114.341657][ T8623] vlan2: entered promiscuous mode
[  114.343767][ T8623] syz_tun: entered promiscuous mode
[  114.855902][ T8673] veth1: entered promiscuous mode
[  114.857864][ T8673] veth1: entered allmulticast mode
[  115.587872][ T6055] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.591803][ T6055] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.595512][ T6055] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.601017][ T6055] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.618660][ T8702] netlink: 'syz.1.1237': attribute type 1 has an invalid length.
[  115.923955][ T8736] syzkaller0: entered promiscuous mode
[  115.925888][ T8736] syzkaller0: entered allmulticast mode
[  116.107826][ T8742] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  116.238551][ T8748] syzkaller0: entered promiscuous mode
[  116.240412][ T8748] syzkaller0: entered allmulticast mode
[  116.472789][ T8756] bridge3: entered promiscuous mode
[  116.475063][ T8756] bridge3: entered allmulticast mode
[  116.480468][ T8756] team0: Port device bridge3 added
[  116.484675][ T8756] bridge0: port 3(team0) entered blocking state
[  116.489012][ T8756] bridge0: port 3(team0) entered disabled state
[  116.491783][ T8756] team0: entered allmulticast mode
[  116.494060][ T8756] team_slave_0: entered allmulticast mode
[  116.496547][ T8756] team_slave_1: entered allmulticast mode
[  116.500658][ T8756] team0: entered promiscuous mode
[  116.502379][ T8756] team_slave_0: entered promiscuous mode
[  116.504507][ T8756] team_slave_1: entered promiscuous mode
[  116.823105][ T8773] IPVS: Error connecting to the multicast addr
[  117.396257][ T8808] syzkaller1: entered promiscuous mode
[  117.403360][ T8808] syzkaller1: entered allmulticast mode
[  117.697513][ T8832] __nla_validate_parse: 17 callbacks suppressed
[  117.697524][ T8832] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1299'.
[  117.721478][ T8823] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  117.732857][ T8823] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  117.782744][ T8818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.786331][ T8818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.789482][ T8818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  117.794725][ T8818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.805606][ T8818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.809995][ T8818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.510963][ T8853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1307'.
[  118.514731][ T8853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1307'.
[  118.920237][ T5615] Bluetooth: hci2: command tx timeout
[  119.589811][ T8863] syzkaller1: entered promiscuous mode
[  119.591834][ T8863] syzkaller1: entered allmulticast mode
[  120.752244][ T8836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.483949][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'.
[  122.565914][ T8955] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  122.578637][ T8955] syzkaller0: entered promiscuous mode
[  122.581193][ T8955] syzkaller0: entered allmulticast mode
[  122.623946][ T8965] netlink: 'syz.1.1359': attribute type 1 has an invalid length.
[  122.768158][ T8981] netlink: 'syz.1.1367': attribute type 4 has an invalid length.
[  122.783438][ T8981] netlink: 'syz.1.1367': attribute type 4 has an invalid length.
[  122.910166][ T8993] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  122.951704][ T8996] netlink: 'syz.0.1375': attribute type 5 has an invalid length.
[  122.987266][ T8999] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1377'.
[  122.990820][ T8999] netlink: 'syz.0.1377': attribute type 1 has an invalid length.
[  123.047279][ T9006] netlink: 'syz.2.1380': attribute type 1 has an invalid length.
[  123.050765][ T9006] netlink: 'syz.2.1380': attribute type 2 has an invalid length.
[  123.055276][ T9006] netlink: 'syz.2.1380': attribute type 1 has an invalid length.
[  123.068414][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1380'.
[  123.311220][ T9027] ip6tnl1: entered promiscuous mode
[  123.337493][ T9029] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1391'.
[  123.622672][ T9044] tipc: Enabling <eth:lo> not permitted
[  123.625170][ T9044] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  123.745167][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'.
[  124.079558][ T9089] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  124.082870][ T9089] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  124.092701][ T9093] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1422'.
[  124.322322][ T9120] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1435'.
[  124.332907][ T9120] netlink: 'syz.2.1435': attribute type 9 has an invalid length.
[  124.347547][ T9125] netlink: 'syz.0.1438': attribute type 10 has an invalid length.
[  124.352143][ T9125] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1438'.
[  124.392159][ T9130] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  124.446693][ T9134] bridge_slave_0: left allmulticast mode
[  124.450911][ T9134] bridge_slave_0: left promiscuous mode
[  124.452780][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.465195][ T9134] bridge_slave_1: left allmulticast mode
[  124.470290][ T9134] bridge_slave_1: left promiscuous mode
[  124.472482][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.480341][ T9134] bond0: (slave bond_slave_0): Releasing backup interface
[  124.486967][ T9134] bond0: (slave bond_slave_1): Releasing backup interface
[  124.496196][ T9134] team0: Port device team_slave_0 removed
[  124.502361][ T9134] team0: Port device team_slave_1 removed
[  124.506159][ T9134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.512228][ T9134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.519674][ T9134] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  124.829257][ T9176] netlink: 444 bytes leftover after parsing attributes in process `syz.0.1460'.
[  124.958753][ T9186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1465'.
[  125.200856][ T9196] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.204487][ T9196] 8021q: adding VLAN 0 to HW filter on device team0
[  125.209062][ T9196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.240656][ T9196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.245559][ T9196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.251476][ T9196] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  125.261278][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.263761][ T7749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.266907][ T7749] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.269273][ T7749] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.284888][ T7749] bridge0: port 3(team0) entered blocking state
[  125.286922][ T7749] bridge0: port 3(team0) entered forwarding state
[  125.292917][ T5676] syz1: Port: 1 Link ACTIVE
[  126.112951][ T9225] Bluetooth: MGMT ver 1.23
[  126.286102][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'.
[  126.380222][ T9241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.480357][ T9252] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  126.762941][ T9287] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  126.769687][ T9287] bond1 (unregistering): Released all slaves
[  126.903280][ T9301] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  126.934103][ T6054] IPVS: starting estimator thread 0...
[  127.019430][ T9304] IPVS: using max 46 ests per chain, 110400 per kthread
[  127.762006][ T9369] lo speed is unknown, defaulting to 1000
[  127.766390][ T9369] lo speed is unknown, defaulting to 1000
[  127.769190][ T9369] lo speed is unknown, defaulting to 1000
[  127.935046][ T6040] lo speed is unknown, defaulting to 1000
[  127.941729][ T9369] infiniband sqz0: set down
[  127.948522][ T9369] infiniband sqz0: added lo
[  127.981914][ T9369] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  127.986564][ T9369] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  127.993686][ T9369] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  128.008066][ T9369] RDS/IB: sqz0: added
[  128.011673][ T9369] smc: adding ib device sqz0 with port count 1
[  128.014456][ T9369] smc:    ib device sqz0 port 1 has no pnetid
[  128.022503][ T6051] lo speed is unknown, defaulting to 1000
[  128.026187][ T9369] lo speed is unknown, defaulting to 1000
[  128.053261][ T9391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.204490][ T9369] lo speed is unknown, defaulting to 1000
[  128.436464][ T9369] lo speed is unknown, defaulting to 1000
[  129.052800][ T9474] __nla_validate_parse: 6 callbacks suppressed
[  129.052844][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'.
[  129.123014][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'.
[  129.918923][ T9498] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1601'.
[  129.944433][ T9501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1604'.
[  130.039713][ T9517] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1612'.
[  130.045881][ T9517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1612'.
[  130.051232][ T9517] validate_nla: 5 callbacks suppressed
[  130.051240][ T9517] netlink: 'syz.0.1612': attribute type 1 has an invalid length.
[  130.075065][ T9521] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.1614'.
[  130.230683][ T9543] netlink: 'syz.1.1624': attribute type 5 has an invalid length.
[  130.233427][ T9543] netlink: 'syz.1.1624': attribute type 4 has an invalid length.
[  130.508630][ T9558] syzkaller1: entered promiscuous mode
[  130.510953][ T9558] syzkaller1: entered allmulticast mode
[  130.549086][ T9560] lo speed is unknown, defaulting to 1000
[  130.727984][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1636'.
[  130.771932][ T9573] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1638'.
[  131.502144][ T9636] netlink: 'syz.0.1663': attribute type 1 has an invalid length.
[  131.542295][ T9639] block nbd1: Unsupported socket: should be TCP or UNIX.
[  131.554672][ T9636] 8021q: adding VLAN 0 to HW filter on device bond3
[  131.560014][ T9636] bond2: (slave bond3): making interface the new active one
[  131.562927][ T9636] bond2: (slave bond3): Enslaving as an active interface with an up link
[  131.573836][ T9636] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1663'.
[  131.672026][ T9652] netlink: 'syz.0.1669': attribute type 8 has an invalid length.
[  131.677522][ T9652] veth1_to_team: entered promiscuous mode
[  131.686995][ T9652] gretap0: entered promiscuous mode
[  131.690854][ T9652] veth1_to_team: left promiscuous mode
[  131.693712][ T9652] gretap0: left promiscuous mode
[  132.075175][ T9680] netlink: 'syz.2.1684': attribute type 6 has an invalid length.
[  132.125809][ T9684] tunl0: entered promiscuous mode
[  132.128144][ T9684] netlink: 'syz.2.1686': attribute type 4 has an invalid length.
[  132.169573][ T9690] netlink: 'syz.2.1689': attribute type 6 has an invalid length.
[  132.336448][ T9712] netem: change failed
[  132.360259][ T9714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.527274][ T9726] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  132.737434][ T9753] batman_adv: batadv0: Adding interface: macvtap1
[  132.741318][ T9753] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  133.872851][ T9797] netlink: 'syz.2.1736': attribute type 1 has an invalid length.
[  134.012124][ T9805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.022992][ T9805] syzkaller0: entered promiscuous mode
[  134.030254][ T9805] syzkaller0: entered allmulticast mode
[  134.070610][ T9805] __nla_validate_parse: 6 callbacks suppressed
[  134.070621][ T9805] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1740'.
[  134.088025][ T9805] tipc: Resetting bearer <eth:syzkaller0>
[  134.102355][ T9804] tipc: Resetting bearer <eth:syzkaller0>
[  134.132643][ T9804] tipc: Disabling bearer <eth:syzkaller0>
[  134.212683][ T9816] netlink: 'syz.0.1745': attribute type 1 has an invalid length.
[  134.480433][ T9838] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1753'.
[  134.670580][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'.
[  134.677398][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'.
[  134.722231][ T9858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1763'.
[  134.900624][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'.
[  134.958786][ T9886] netem: change failed
[  135.131102][ T9904] openvswitch: netlink: ufid size 32 bytes exceeds the range (1, 16)
[  135.133847][ T9904] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  135.205939][ T9913] xt_time: invalid argument - start or stop time greater than 23:59:59
[  135.321612][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'.
[  135.337303][ T9926] batadv0: entered promiscuous mode
[  135.341701][ T9926] macvtap2: entered promiscuous mode
[  135.344288][ T9926] macvtap2: entered allmulticast mode
[  135.348638][ T9926] batadv0: entered allmulticast mode
[  135.353527][ T9926] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  135.364632][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'.
[  135.371882][ T9926] batadv0: left allmulticast mode
[  135.374304][ T9926] batadv0: left promiscuous mode
[  135.698253][ T9926] macvtap2: left promiscuous mode
[  135.700318][ T9926] macvtap2: left allmulticast mode
[  135.708259][ T9932] sit0: entered promiscuous mode
[  135.713319][ T9932] validate_nla: 4 callbacks suppressed
[  135.713332][ T9932] netlink: 'syz.2.1800': attribute type 1 has an invalid length.
[  135.721289][ T9932] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1800'.
[  135.912368][ T9947] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.944440][ T9947] syzkaller0: entered promiscuous mode
[  135.946898][ T9947] syzkaller0: entered allmulticast mode
[  135.950735][ T9947] tipc: Resetting bearer <eth:syzkaller0>
[  135.974162][ T9946] tipc: Resetting bearer <eth:syzkaller0>
[  136.968665][ T9946] tipc: Disabling bearer <eth:syzkaller0>
[  137.066723][ T9971] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  137.127466][ T9975] netlink: 'syz.2.1817': attribute type 1 has an invalid length.
[  137.481144][ T9997] lo speed is unknown, defaulting to 1000
[  137.653984][ T9999] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.656917][ T9999] 8021q: adding VLAN 0 to HW filter on device team0
[  137.662180][ T9999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.688219][ T9999] bridge_slave_0: entered promiscuous mode
[  137.707083][ T9999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  137.711541][ T9999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  137.720249][ T9999] veth1_vlan: left promiscuous mode
[  137.723377][ T9999] veth0_vlan: left promiscuous mode
[  137.726351][ T9999] veth0_vlan: entered promiscuous mode
[  137.731373][ T9999] veth1_vlan: entered promiscuous mode
[  137.738765][ T9999] veth1_macvtap: left promiscuous mode
[  137.741982][ T9999] veth0_macvtap: left promiscuous mode
[  137.745179][ T9999] veth0_macvtap: entered promiscuous mode
[  137.749460][ T9999] veth1_macvtap: entered promiscuous mode
[  137.757165][ T9999] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  137.761861][ T9999] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  137.765679][ T9999] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  137.769786][ T9999] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  137.780353][ T9999] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  137.827424][ T6055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.842093][ T6055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.854369][ T6055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.865444][ T6055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.877658][ T5668] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.882311][ T5668] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.885476][ T5668] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  137.889075][ T5668] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  137.898808][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.919217][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  137.950244][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  138.045877][T10005] netlink: 'syz.2.1829': attribute type 10 has an invalid length.
[  138.058822][T10005] syz_tun: entered promiscuous mode
[  138.076549][T10005] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  138.136791][T10009] netlink: 'syz.1.1831': attribute type 2 has an invalid length.
[  138.271181][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  138.599093][ T2224] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  138.754099][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  138.829260][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  138.960258][T10068] netlink: 'syz.1.1856': attribute type 1 has an invalid length.
[  138.963577][T10068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1856'.
[  138.999869][T10070] netlink: 'syz.1.1857': attribute type 3 has an invalid length.
[  139.024680][T10070] block nbd1: NBD_DISCONNECT
[  139.037650][T10070] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  139.043849][T10070] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  139.052681][T10070] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  139.066870][T10070] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  139.196434][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'.
[  139.205025][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1860'.
[  139.372573][T10093] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[  139.539937][T10109] syzkaller0: entered promiscuous mode
[  139.542949][T10109] syzkaller0: entered allmulticast mode
[  139.747074][T10131] netlink: 'syz.1.1886': attribute type 21 has an invalid length.
[  139.939823][T10149] lo speed is unknown, defaulting to 1000
[  140.011981][   T56] block nbd1: Receive control failed (result -32)
[  140.075458][T10159] syzkaller1: entered promiscuous mode
[  140.083623][T10159] syzkaller1: entered allmulticast mode
[  140.695800][T10203] syzkaller0: entered promiscuous mode
[  140.697536][T10203] syzkaller0: entered allmulticast mode
[  140.730300][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'.
[  140.733739][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'.
[  140.764739][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1917'.
[  140.934082][T10219] netlink: 153712 bytes leftover after parsing attributes in process `syz.1.1923'.
[  141.215668][T10232] netlink: 'syz.0.1929': attribute type 9 has an invalid length.
[  141.319409][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1933'.
[  141.332471][T10241] vlan2: entered promiscuous mode
[  141.334734][T10241] bond0: entered promiscuous mode
[  141.336876][T10241] bond_slave_0: entered promiscuous mode
[  141.343468][T10241] bond_slave_1: entered promiscuous mode
[  141.765687][T10276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.795162][T10276] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  142.014084][T10302] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1961'.
[  142.029994][T10304] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1962'.
[  142.158723][T10312] tipc: Can't bind to reserved service type 0
[  142.191461][T10318] nbd: must specify a device to reconfigure
[  142.260678][T10324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.601558][T10348] xt_CT: You must specify a L4 protocol and not use inversions on it
[  142.735227][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1988'.
[  143.346978][T10405] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  143.645815][T10436] syzkaller1: entered allmulticast mode
[  144.394648][T10482] __nla_validate_parse: 2 callbacks suppressed
[  144.394664][T10482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2044'.
[  144.538133][   T33] audit: type=1800 audit(1778599697.519:5): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2048" name=CB dev="tmpfs" ino=3714 res=0 errno=0
[  144.720592][T10509] tipc: New replicast peer: 255.255.255.255
[  144.723919][T10509] tipc: Enabled bearer <udp:syz2>, priority 5
[  144.942125][T10525] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2063'.
[  145.141485][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2075'.
[  145.351232][T10574] netlink: 'syz.1.2089': attribute type 9 has an invalid length.
[  145.353710][T10574] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.2089'.
[  145.376428][T10578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2091'.
[  145.381036][T10578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2091'.
[  145.385856][T10578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2091'.
[  145.391493][T10578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2091'.
[  146.015445][T10654] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2129'.
[  146.425978][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'.
[  146.557024][T10691] openvswitch: netlink: IP tunnel dst address not specified
[  147.546089][T10706] lo speed is unknown, defaulting to 1000
[  148.175969][T10738] lo speed is unknown, defaulting to 1000
[  148.261973][ T2224] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  148.261988][ T2224] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  148.273850][ T2224] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.311582][T10753] netlink: 'syz.2.2171': attribute type 3 has an invalid length.
[  148.513047][T10762] lo speed is unknown, defaulting to 1000
[  149.076502][ T2224] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  149.148905][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  149.158037][ T2224] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  149.166791][T10796] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  149.203405][T10796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.409376][T10820] Bluetooth: MGMT ver 1.23
[  149.584519][T10838] netlink: 'syz.0.2207': attribute type 4 has an invalid length.
[  149.587168][T10838] __nla_validate_parse: 3 callbacks suppressed
[  149.587176][T10838] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2207'.
[  149.930476][T10875] nbd2: detected capacity change from 0 to 63
[  149.941546][T10880] block nbd2: NBD_DISCONNECT
[  149.953493][T10873] lo speed is unknown, defaulting to 1000
[  149.954130][T10880] block nbd2: Disconnected due to user request.
[  149.979802][T10880] block nbd2: shutting down sockets
[  149.982336][ T9998] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  150.003181][ T9998] Buffer I/O error on dev nbd2, logical block 0, async page read
[  150.029967][  T997] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  150.033893][  T997] Buffer I/O error on dev nbd2, logical block 1, async page read
[  150.037237][  T997] Buffer I/O error on dev nbd2, logical block 2, async page read
[  150.041377][  T997] Buffer I/O error on dev nbd2, logical block 3, async page read
[  150.048924][ T9998] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  150.057928][ T9998] Buffer I/O error on dev nbd2, logical block 0, async page read
[  150.068267][ T9998] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  150.078802][ T9998] Buffer I/O error on dev nbd2, logical block 1, async page read
[  150.082377][ T9998] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  150.086044][ T9998] Buffer I/O error on dev nbd2, logical block 2, async page read
[  150.090085][ T9998] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  150.093677][ T9998] Buffer I/O error on dev nbd2, logical block 3, async page read
[  150.096887][ T9998] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  150.101061][ T9998] Buffer I/O error on dev nbd2, logical block 0, async page read
[  150.104086][ T9998] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  150.107793][ T9998] Buffer I/O error on dev nbd2, logical block 1, async page read
[  150.112211][ T9998] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  150.116448][ T9998] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  150.121490][ T9998] ldm_validate_partition_table(): Disk read failed.
[  150.126131][ T9998] Dev nbd2: unable to read RDB block 0
[  150.129143][ T9998]  nbd2: unable to read partition table
[  150.139722][ T9998] ldm_validate_partition_table(): Disk read failed.
[  150.142623][ T9998] Dev nbd2: unable to read RDB block 0
[  150.145447][ T9998]  nbd2: unable to read partition table
[  150.323834][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2235'.
[  150.411861][T10908] xt_TPROXY: Can be used only with -p tcp or -p udp
[  150.641625][T10929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2249'.
[  150.724581][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2259'.
[  150.743000][T10951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2259'.
[  150.752778][T10951] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  150.765034][T10951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2259'.
[  150.768968][T10951] 8021q: adding VLAN 0 to HW filter on device bond5
[  150.770670][T10956] xt_nfacct: accounting object `syz0' does not exist
[  150.772298][T10954] syzkaller0: entered promiscuous mode
[  150.777319][T10954] syzkaller0: entered allmulticast mode
[  150.813162][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'.
[  150.817766][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2264'.
[  150.827963][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2264'.
[  150.864740][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2265'.
[  150.881029][T10964] syzkaller0: entered promiscuous mode
[  150.882775][T10964] syzkaller0: entered allmulticast mode
[  151.069112][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  151.295260][   T33] audit: type=1804 audit(1778599704.279:6): pid=11020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2290" name="/newroot/740/cgroup.controllers" dev="tmpfs" ino=3751 res=1 errno=0
[  151.303873][   T33] audit: type=1800 audit(1778599704.279:7): pid=11020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2290" name="cgroup.controllers" dev="tmpfs" ino=3751 res=0 errno=0
[  151.345159][T11027] xt_l2tp: missing protocol rule (udp|l2tpip)
[  151.692517][T11061] xfrm1: entered allmulticast mode
[  152.384878][T11118] netlink: 'syz.1.2337': attribute type 3 has an invalid length.
[  152.917023][T11165] veth5: entered allmulticast mode
[  152.933130][T11165] bond6: (slave veth5): Enslaving as an active interface with an up link
[  152.943900][T11165] bond6 (unregistering): (slave veth5): Releasing backup interface
[  152.951510][T11165] bond6 (unregistering): Released all slaves
[  153.017182][T11177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.233597][T11195] batadv_slave_1: entered promiscuous mode
[  153.236409][T11194] batadv_slave_1: left promiscuous mode
[  153.665963][T11216] tunl0: left promiscuous mode
[  153.674796][T11216] sit0: left promiscuous mode
[  153.683657][T11216] syz_tun: left promiscuous mode
[  153.697672][T11216] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.704100][T11216] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.727256][T11216] team_slave_0: entered promiscuous mode
[  153.730412][T11216] team_slave_1: entered promiscuous mode
[  153.734511][T11216] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.739233][T11216] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.747307][T11216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  153.751765][T11216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.758286][T11216] veth1_macvtap: left promiscuous mode
[  153.761184][T11216] veth0_macvtap: left promiscuous mode
[  153.763740][T11216] veth0_macvtap: entered promiscuous mode
[  153.769571][T11216] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  153.773466][T11216] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  153.776832][T11216] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  153.780892][T11216] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  153.787687][T11216] 8021q: adding VLAN 0 to HW filter on device bond1
[  153.793676][T11216] bond2: left promiscuous mode
[  153.795442][T11216] 8021q: adding VLAN 0 to HW filter on device bond2
[  153.798664][T11216] 8021q: adding VLAN 0 to HW filter on device bond3
[  153.813430][T11216] batman_adv: batadv0: Interface activated: ipvlan2
[  153.815986][T11216] veth0_to_team: entered promiscuous mode
[  153.821398][T11216] 8021q: adding VLAN 0 to HW filter on device bond4
[  153.837820][ T2224] lo speed is unknown, defaulting to 1000
[  153.841817][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.844068][   T65] bridge0: port 1(bridge_slave_0) entered listening state
[  153.846421][ T2224] sqz0: Port: 1 Link ACTIVE
[  153.849931][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.852168][   T65] bridge0: port 2(bridge_slave_1) entered listening state
[  153.871728][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.880067][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.883958][   T10] lo speed is unknown, defaulting to 1000
[  153.889359][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.892981][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.941042][   T33] audit: type=1804 audit(1778599706.929:8): pid=11221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2382" name="/newroot/825/memory.events" dev="tmpfs" ino=4177 res=1 errno=0
[  153.950895][   T33] audit: type=1800 audit(1778599706.929:9): pid=11221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2382" name="memory.events" dev="tmpfs" ino=4177 res=0 errno=0
[  153.957770][   T33] audit: type=1804 audit(1778599706.939:10): pid=11221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2382" name="/newroot/825/memory.events" dev="tmpfs" ino=4177 res=1 errno=0
[  154.394725][T11238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.429706][T11238] syzkaller0: entered promiscuous mode
[  154.431455][T11238] syzkaller0: entered allmulticast mode
[  154.433589][T11238] tipc: Resetting bearer <eth:syzkaller0>
[  154.436100][T11231] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  154.445808][T11231] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  154.452413][T11237] tipc: Resetting bearer <eth:syzkaller0>
[  155.158986][T11273] netlink: 'syz.2.2404': attribute type 1 has an invalid length.
[  155.171160][T11275] __nla_validate_parse: 18 callbacks suppressed
[  155.171176][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'.
[  155.178170][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2407'.
[  155.184479][T11275] netlink: 'syz.1.2407': attribute type 18 has an invalid length.
[  155.322961][T11278] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2404'.
[  155.716117][T11237] tipc: Disabling bearer <eth:syzkaller0>
[  155.741017][T11273] 8021q: adding VLAN 0 to HW filter on device bond6
[  155.762713][T11276] bond6: (slave veth9): Enslaving as an active interface with a down link
[  155.769156][T11277] bond0: (slave dummy0): Releasing backup interface
[  155.805790][T11277] bond6: (slave dummy0): making interface the new active one
[  155.812742][T11277] dummy0: entered promiscuous mode
[  155.815499][T11277] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  155.824179][T11278] bond6: (slave dummy0): Releasing active interface
[  155.827417][T11278] dummy0 (unregistering): left promiscuous mode
[  156.015884][T11288] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  159.512702][T11333] netlink: 'syz.2.2416': attribute type 1 has an invalid length.
[  159.523376][T11333] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2416'.
[  159.620809][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'.
[  159.814704][T11354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2426'.
[  159.892416][T11368] netlink: 'syz.1.2434': attribute type 1 has an invalid length.
[  159.897474][T11368] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2434'.
[  159.952775][T11373] netlink: 'syz.2.2437': attribute type 29 has an invalid length.
[  159.974676][T11373] netlink: 'syz.2.2437': attribute type 29 has an invalid length.
[  159.984009][T11378] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  159.987091][T11373] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2437'.
[  159.992239][T11373] unsupported nla_type 58
[  160.012277][T11380] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2440'.
[  160.081387][T11389] netlink: 'syz.2.2444': attribute type 3 has an invalid length.
[  160.166157][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'.
[  160.271478][T11407] netlink: 'syz.2.2450': attribute type 1 has an invalid length.
[  160.316862][T11407] bond7: entered promiscuous mode
[  160.319946][T11407] 8021q: adding VLAN 0 to HW filter on device bond7
[  160.348005][T11407] 8021q: adding VLAN 0 to HW filter on device bond7
[  160.353412][T11407] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  160.356806][T11407] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  160.366924][T11407] bond7: (slave ip6gre1): making interface the new active one
[  160.369500][T11407] ip6gre1: entered promiscuous mode
[  160.372008][T11407] bond7: (slave ip6gre1): Enslaving as an active interface with an up link
[  160.424100][T11414] syzkaller0: entered promiscuous mode
[  160.428667][T11414] syzkaller0: entered allmulticast mode
[  160.500385][T11422] netem: change failed
[  160.687497][T11441] netlink: 'syz.0.2466': attribute type 6 has an invalid length.
[  160.881742][T11456] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[  160.926623][T11458] __nla_validate_parse: 1 callbacks suppressed
[  160.926638][T11458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2475'.
[  160.959489][T11463] netlink: 'syz.1.2478': attribute type 1 has an invalid length.
[  160.984306][T11463] 8021q: adding VLAN 0 to HW filter on device bond2
[  160.988417][T11463] bond2: option tlb_dynamic_lb: unable to set because the bond device is up
[  161.005238][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'.
[  161.008241][T11458] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.055357][T11458] batman_adv: batadv0: Interface deactivated: ipvlan2
[  161.066444][T11458] batman_adv: batadv0: Removing interface: ipvlan2
[  161.082043][T11458] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.115740][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2481'.
[  161.333466][T11503] netlink: 'syz.0.2495': attribute type 1 has an invalid length.
[  161.336187][T11503] netlink: 'syz.0.2495': attribute type 2 has an invalid length.
[  161.343248][T11503] netlink: 'syz.0.2495': attribute type 1 has an invalid length.
[  161.349130][T11503] netlink: 'syz.0.2495': attribute type 2 has an invalid length.
[  161.479743][T11522] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2504'.
[  161.589045][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'.
[  161.592350][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'.
[  161.612697][T11540] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  161.629227][T11542] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2514'.
[  161.827486][T11572] netlink: 'syz.0.2511': attribute type 1 has an invalid length.
[  161.827800][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2526'.
[  161.837731][T11571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2526'.
[  161.878770][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.882728][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.886240][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.889795][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.983380][T11587] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.2533'.
[  162.012162][T11590] bridge3: entered allmulticast mode
[  162.729228][T11616] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  162.732489][T11616] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  163.250818][T11655] syzkaller0: entered promiscuous mode
[  163.252596][T11655] syzkaller0: entered allmulticast mode
[  163.655200][T11675] lo speed is unknown, defaulting to 1000
[  164.518570][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  164.839172][T11720] netlink: 'syz.0.2594': attribute type 2 has an invalid length.
[  165.053023][T11734] smbdirect: ib_dev[syz0] renamed to [syz2]
[  165.275484][T11744] netlink: 'syz.1.2606': attribute type 4 has an invalid length.
[  165.284646][T11744] netlink: 'syz.1.2606': attribute type 4 has an invalid length.
[  165.309708][T11743] netlink: set zone limit has 4 unknown bytes
[  165.359146][T11743] netlink: set zone limit has 4 unknown bytes
[  166.020980][T11791] netlink: 'syz.1.2628': attribute type 11 has an invalid length.
[  166.262711][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.265591][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.269415][ T6054] syz2: Port: 1 Link DOWN
[  166.271684][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.274326][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.346278][T11815] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  166.412561][T11822] __nla_validate_parse: 5 callbacks suppressed
[  166.412576][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'.
[  166.440369][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'.
[  166.444017][T11822] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2638'.
[  166.447623][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'.
[  166.458835][T11822] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2638'.
[  166.471674][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'.
[  166.603746][T11836] SET target dimension over the limit!
[  166.851483][T11847] xt_CT: You must specify a L4 protocol and not use inversions on it
[  166.857870][T11847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2651'.
[  166.997481][T11864] netlink: 'syz.2.2659': attribute type 39 has an invalid length.
[  167.074548][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.078064][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.081731][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.085134][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.088671][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.092152][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.095751][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.099354][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.102718][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.335651][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2667'.
[  167.622888][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2677'.
[  167.652926][T11905] lo speed is unknown, defaulting to 1000
[  167.979735][T11925] bond4: Removing last arp target with arp_interval on
[  168.083225][T11932] xt_TPROXY: Can be used only with -p tcp or -p udp
[  168.106925][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2691'.
[  168.136682][T11938] bond5: Invalid ad_actor_system MAC address.
[  168.139519][T11938] bond5: option ad_actor_system: invalid value (7)
[  168.139732][T11941] netlink: 'syz.2.2693': attribute type 21 has an invalid length.
[  168.145441][T11938] bond5 (unregistering): Released all slaves
[  168.369455][T11959] lo speed is unknown, defaulting to 1000
[  168.523247][T11973] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  169.247427][T11998] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  169.251890][T11998] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  169.657733][T12010] netlink: 'syz.2.2719': attribute type 5 has an invalid length.
[  170.180932][T12024] netem: change failed
[  171.788617][    C1] net_ratelimit: 85 callbacks suppressed
[  171.788631][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.793410][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.795986][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.798608][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.961417][T12037] __nla_validate_parse: 5 callbacks suppressed
[  171.961428][T12037] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2731'.
[  172.122414][T12058] netlink: 'syz.0.2740': attribute type 1 has an invalid length.
[  172.126649][T12058] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2740'.
[  172.321201][T12076] openvswitch: netlink: IP tunnel dst address not specified
[  172.425880][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2756'.
[  172.524784][T12100] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2761'.
[  172.527617][T12100] veth0_to_bond: default FDB implementation only supports local addresses
[  172.626099][T12110] vlan2: entered promiscuous mode
[  172.628286][T12110] geneve1: entered promiscuous mode
[  172.631341][T12110] vlan2: entered allmulticast mode
[  172.633524][T12110] geneve1: entered allmulticast mode
[  173.084919][T12153] bond8: entered promiscuous mode
[  173.087244][T12153] 8021q: adding VLAN 0 to HW filter on device bond8
[  173.180686][T12165] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  173.253746][T12173] syzkaller0: entered promiscuous mode
[  173.259345][T12173] syzkaller0: entered allmulticast mode
[  173.284622][T12175] bridge4: the hash_elasticity option has been deprecated and is always 16
[  173.287315][T12175] bridge4: entered allmulticast mode
[  173.439150][T12189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2804'.
[  173.442167][T12189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2804'.
[  175.068730][ T5614] Bluetooth: hci2: command 0x0401 tx timeout
[  175.069897][ T5615] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  176.472930][T12191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  176.522578][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'.
[  176.526090][T12248] netlink: 'syz.2.2825': attribute type 30 has an invalid length.
[  176.611107][T12258] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  176.661171][T12266] netlink: 'syz.0.2832': attribute type 1 has an invalid length.
[  176.664225][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2833'.
[  176.727189][T12275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2833'.
[  176.810167][T12271] sctp: [Deprecated]: syz.0.2836 (pid 12271) Use of int in max_burst socket option.
[  176.810167][T12271] Use struct sctp_assoc_value instead
[  177.017087][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2842'.
[  177.356064][T12311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2850'.
[  177.676797][T12331] lo speed is unknown, defaulting to 1000
[  178.138182][T12369] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2874'.
[  178.143166][T12369] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  178.208482][T12373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2876'.
[  178.213815][T12373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2876'.
[  178.508707][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.513243][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.516745][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.767546][T12420] sch_tbf: peakrate 67108864 is lower than or equals to rate 4294966145 !
[  178.793958][T12418] tap0: tun_chr_ioctl cmd 1074025677
[  178.797567][T12418] tap0: linktype set to 778
[  178.980324][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2906'.
[  178.988917][T12439] nbd: illegal input index -1113835520
[  179.069450][T12448] IPv6: addrconf: prefix option has invalid lifetime
[  179.122802][T12456] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2915'.
[  179.314845][T12466] lo speed is unknown, defaulting to 1000
[  179.334008][T12478] syzkaller0: entered promiscuous mode
[  179.335907][T12478] syzkaller0: entered allmulticast mode
[  179.342870][T12478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2923'.
[  179.350392][T12478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2923'.
[  179.363120][T12478] 0: reclassify loop, rule prio 0, protocol 800
[  179.402482][T12483] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2925'.
[  179.720486][T12502] syzkaller1: entered promiscuous mode
[  179.724997][T12502] syzkaller1: entered allmulticast mode
[  180.123175][T12531] ip6tnl5: entered allmulticast mode
[  180.523193][T12542] netlink: 'syz.1.2953': attribute type 1 has an invalid length.
[  180.565034][T12542] bond3: entered promiscuous mode
[  180.567621][T12542] 8021q: adding VLAN 0 to HW filter on device bond3
[  180.593273][T12542] bond3: (slave bridge5): making interface the new active one
[  180.596254][T12542] bridge5: entered promiscuous mode
[  180.599367][T12542] bond3: (slave bridge5): Enslaving as an active interface with an up link
[  180.664951][T12551] netlink: 'syz.1.2957': attribute type 1 has an invalid length.
[  180.692298][T12554] netlink: 'syz.1.2958': attribute type 3 has an invalid length.
[  180.986901][T12559] infiniband syz0: set down
[  180.989357][T12559] infiniband syz0: added bridge_slave_1
[  181.004319][T12559] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  181.010488][T12559] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  181.017320][T12559] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  181.037995][T12559] RDS/IB: syz0: added
[  181.041108][T12559] smc: adding ib device syz0 with port count 1
[  181.044122][T12559] smc:    ib device syz0 port 1 has no pnetid
[  181.636997][T12579] netlink: 'syz.1.2964': attribute type 1 has an invalid length.
[  181.662201][T12579] 8021q: adding VLAN 0 to HW filter on device bond4
[  182.204671][T12633] __nla_validate_parse: 7 callbacks suppressed
[  182.204682][T12633] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2976'.
[  183.628646][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.632109][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.634884][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.963539][T12563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  184.346289][T12706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.351910][T12706] syzkaller0: entered promiscuous mode
[  184.354102][T12706] syzkaller0: entered allmulticast mode
[  184.364883][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  184.369169][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  184.380319][T12706] tipc: Resetting bearer <eth:syzkaller0>
[  184.387407][T12704] tipc: Resetting bearer <eth:syzkaller0>
[  184.419670][T12704] tipc: Disabling bearer <eth:syzkaller0>
[  184.582694][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3009'.
[  184.586363][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3009'.
[  184.590434][T12726] netlink: 'syz.1.3009': attribute type 20 has an invalid length.
[  184.636713][T12733] openvswitch: netlink: IP tunnel dst address not specified
[  184.705680][T12740] netlink: 34 bytes leftover after parsing attributes in process `syz.1.3016'.
[  184.784588][T12749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.946306][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'.
[  185.133114][T12779] netlink: 'syz.1.3035': attribute type 8 has an invalid length.
[  185.141001][T12779] netlink: 'syz.1.3035': attribute type 9 has an invalid length.
[  185.561282][T12799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3045'.
[  185.564306][T12799] netlink: 'syz.0.3045': attribute type 7 has an invalid length.
[  185.566747][T12799] netlink: 'syz.0.3045': attribute type 8 has an invalid length.
[  185.569697][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'.
[  185.601154][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'.
[  185.730530][T12805] xt_hashlimit: size too large, truncated to 1048576
[  186.125293][T12832] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  186.199573][T12839] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  186.206964][T12839] bond5 (unregistering): Released all slaves
[  186.317447][T12849] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3067'.
[  186.428854][ T5615] Bluetooth: hci1: command 0x0406 tx timeout
[  186.496107][T12867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3075'.
[  186.557059][T12871] netlink: 'syz.1.3077': attribute type 62 has an invalid length.
[  187.216712][T12889] __nla_validate_parse: 1 callbacks suppressed
[  187.216727][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'.
[  187.313699][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3089'.
[  187.400249][T12907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3094'.
[  187.565315][T12917] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3099'.
[  187.609311][T12923] netlink: 'syz.2.3102': attribute type 21 has an invalid length.
[  187.612627][T12923] IPv6: NLM_F_CREATE should be specified when creating new route
[  187.615827][T12923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  187.618935][T12923] IPv6: NLM_F_CREATE should be set when creating new route
[  187.621766][T12923] IPv6: NLM_F_CREATE should be set when creating new route
[  187.624065][T12923] IPv6: NLM_F_CREATE should be set when creating new route
[  187.827094][T12931] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3106'.
[  189.318581][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.321799][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.324552][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.388736][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.392290][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.395795][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.958777][T12941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  191.116109][T12975] openvswitch: netlink: Multiple metadata blocks provided
[  191.120990][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'.
[  191.124757][T12977] netlink: 'syz.2.3124': attribute type 20 has an invalid length.
[  191.948620][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.428710][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.432170][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.435475][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.703769][T13005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  195.257656][T13064] sock: sock_timestamping_bind_phc: sock not bind to device
[  195.409922][T13079] openvswitch: netlink: Duplicate or invalid key (type 0).
[  195.416814][T13079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.471356][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3167'.
[  195.477117][T13086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3168'.
[  195.537322][   T33] audit: type=1800 audit(1778599748.519:11): pid=13090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3170" name="blkio.bfq.time_recursive" dev="tmpfs" ino=5348 res=0 errno=0
[  195.553729][T13070] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  195.561783][T13070] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  195.654116][T13102] netlink: 'syz.1.3176': attribute type 32 has an invalid length.
[  195.763851][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'.
[  195.835884][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3180'.
[  196.934983][   T33] audit: type=1800 audit(1778599749.919:12): pid=13183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3209" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=5299 res=0 errno=0
[  197.149444][T13197] netlink: 'syz.1.3216': attribute type 61 has an invalid length.
[  197.216791][T13207] tc action pedit offset 20 out of bounds
[  197.395564][T13218] netlink: 'syz.0.3226': attribute type 7 has an invalid length.
[  198.159236][T13245] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3237'.
[  198.270614][T13255] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3242'.
[  198.294988][T13257] sctp: [Deprecated]: syz.2.3243 (pid 13257) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.294988][T13257] Use struct sctp_sack_info instead
[  200.268650][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.272140][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.275679][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.507885][T13236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  200.690768][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'.
[  200.695220][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'.
[  200.825322][T13320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3271'.
[  200.840592][T13320] ip6gre2: entered promiscuous mode
[  200.845529][T13320] ip6gre2: entered allmulticast mode
[  200.849930][ T6055] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  200.857528][ T6055] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  200.878852][ T6054] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  200.911154][T13329] netlink: 'syz.1.3275': attribute type 1 has an invalid length.
[  200.918988][T13329] netlink: 'syz.1.3275': attribute type 6 has an invalid length.
[  200.926469][T13331] syzkaller0: entered promiscuous mode
[  200.928203][T13329] netlink: 'syz.1.3275': attribute type 7 has an invalid length.
[  200.928263][T13331] syzkaller0: entered allmulticast mode
[  200.936276][T13329] netlink: 'syz.1.3275': attribute type 1 has an invalid length.
[  201.158161][T13361] bond7: entered allmulticast mode
[  201.170941][T13361] ip6gre1: entered allmulticast mode
[  201.186477][T13367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3296'.
[  201.189926][T13361] dvmrp8: entered allmulticast mode
[  201.194812][T13360] bond7: left allmulticast mode
[  201.197215][T13360] ip6gre1: left allmulticast mode
[  201.237116][T13371] dvmrp6: entered allmulticast mode
[  201.237540][T13375] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  201.265781][T13371] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.269695][T13371] 8021q: adding VLAN 0 to HW filter on device team0
[  201.276130][T13371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.288062][T13371] veth1: left promiscuous mode
[  201.291404][T13371] veth1: left allmulticast mode
[  201.302372][T13380] xt_connbytes: Forcing CT accounting to be enabled
[  201.492821][T13371] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  201.502581][T13382] sch_fq: defrate 8 ignored.
[  201.505186][ T5676] syz0: Port: 1 Link ACTIVE
[  201.708744][ T6054] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  201.711623][ T6054] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  201.737803][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3317'.
[  201.762764][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3319'.
[  201.828230][T13417] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  201.861098][T13417] bond10 (unregistering): Released all slaves
[  201.871734][T13432] netlink: 'syz.0.3325': attribute type 12 has an invalid length.
[  202.043877][T13445] netlink: 'syz.2.3332': attribute type 1 has an invalid length.
[  202.046600][T13445] netlink: 'syz.2.3332': attribute type 4 has an invalid length.
[  202.051382][T13445] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3332'.
[  202.326159][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.329098][T13473] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.692731][T13498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  202.696599][T13498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  202.704925][T13498] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  202.723426][ T6054] syz2: Port: 1 Link ACTIVE
[  203.006186][T13519] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  203.009339][T13519] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  203.139865][T13537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3370'.
[  203.270672][T13545] tipc: Resetting bearer <eth:syzkaller0>
[  203.351267][T13553] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3377'.
[  203.387023][T13555] netlink: 'syz.0.3378': attribute type 1 has an invalid length.
[  203.403970][T13555] 8021q: adding VLAN 0 to HW filter on device bond6
[  203.417079][T13555] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.420369][T13555] bond6: (slave bond0): Enslaving as a backup interface with an up link
[  203.476720][T13560] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1280) !
[  203.525411][T13564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3382'.
[  204.103750][T13594] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  204.107996][T13594] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  204.763909][T13648] netlink: 'syz.2.3421': attribute type 5 has an invalid length.
[  204.775911][T13648] geneve3: entered promiscuous mode
[  204.778101][T13648] geneve3: entered allmulticast mode
[  204.787813][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  204.800290][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  204.805481][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  204.814492][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  204.871809][T13658] netlink: 'syz.2.3426': attribute type 4 has an invalid length.
[  205.068559][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  205.161776][T13664] nbd3: detected capacity change from 0 to 63
[  205.172934][   T55] block nbd3: Receive control failed (result -104)
[  205.176943][T10878] block nbd3: Receive control failed (result -32)
[  205.327463][T13691] netlink: 'syz.0.3441': attribute type 4 has an invalid length.
[  205.707887][T13719] bond5: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  205.719711][T13719] bond5: entered promiscuous mode
[  205.721666][T13719] 8021q: adding VLAN 0 to HW filter on device bond5
[  205.833311][T13735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  205.889503][T13746] __nla_validate_parse: 11 callbacks suppressed
[  205.889522][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3466'.
[  205.894496][T13746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'.
[  205.898106][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3466'.
[  205.916250][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  205.920505][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3466'.
[  205.924199][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  205.927796][T13746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'.
[  205.933504][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  205.938449][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.940478][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3466'.
[  205.982928][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3467'.
[  205.986722][T13749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3467'.
[  206.086680][T13759] syzkaller0: entered promiscuous mode
[  206.091497][T13759] syzkaller0: entered allmulticast mode
[  206.261030][T13771] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  206.266786][T13771] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.269867][T13771] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.324577][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3479'.
[  208.857832][T13747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  209.124467][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3505'.
[  209.523306][T13854] bridge_slave_0 (unregistering): left allmulticast mode
[  209.526193][T13854] bridge_slave_0 (unregistering): left promiscuous mode
[  209.529488][T13854] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.660376][T13877] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  209.696880][T13881] netlink: 'syz.2.3526': attribute type 3 has an invalid length.
[  209.701585][T13881] netlink: 'syz.2.3526': attribute type 3 has an invalid length.
[  209.790353][T13891] xt_CT: You must specify a L4 protocol and not use inversions on it
[  209.942094][T13897] netlink: 'syz.2.3534': attribute type 1 has an invalid length.
[  209.969373][T13897] 8021q: adding VLAN 0 to HW filter on device bond10
[  210.260746][T13912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  211.147455][T13946] __nla_validate_parse: 3 callbacks suppressed
[  211.147472][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3554'.
[  211.326676][T13960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3561'.
[  211.464707][T13976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3570'.
[  211.485290][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3570'.
[  211.571749][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3574'.
[  211.649851][ T5676] syz2: Port: 1 Link DOWN
[  211.655751][ T7747] smbdirect: ib_dev[syz2] removed
[  211.824716][T14010] lo speed is unknown, defaulting to 1000
[  212.333867][T14044] netlink: 'syz.1.3597': attribute type 8 has an invalid length.
[  212.427341][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'.
[  212.659487][T14070] erspan0: entered promiscuous mode
[  212.896448][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3619'.
[  213.416853][T14144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3640'.
[  213.420748][T14144] netlink: 'syz.1.3640': attribute type 7 has an invalid length.
[  213.425292][T14144] netlink: 'syz.1.3640': attribute type 8 has an invalid length.
[  213.429974][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3640'.
[  213.438201][T14144] gretap0: entered promiscuous mode
[  213.442056][T14144] gretap0: left promiscuous mode
[  213.788425][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  214.078665][T14122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  214.082542][T14155] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3645'.
[  214.087368][T14155] netlink: 'syz.0.3645': attribute type 2 has an invalid length.
[  214.660613][T14209] batman_adv: batadv0: Adding interface: gretap1
[  214.662688][T14209] batman_adv: batadv0: The MTU of interface gretap1 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem.
[  214.671044][T14209] batman_adv: batadv0: Interface activated: gretap1
[  214.712727][T14213] xt_CT: No such helper "snmp"
[  214.734644][T14218] IPv6: addrconf: prefix option has invalid lifetime
[  214.831093][ T5614] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  215.269625][T14256] bridge0: port 3(team0) entered disabled state
[  215.271930][T14256] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.274207][T14256] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.324905][T14256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.329590][T14256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.348168][T14256] batman_adv: batadv0: Interface deactivated: gretap1
[  215.365074][ T6045] syz1: Port: 1 Link DOWN
[  215.365125][ T5668] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.378467][ T5668] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.383321][ T5668] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.387070][ T5668] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.397654][T14256] bridge_slave_0 (unregistering): left allmulticast mode
[  215.400151][T14256] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.423029][T14262] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  216.870315][T14269] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  216.872687][T14269] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  216.914365][T14271] syzkaller1: entered promiscuous mode
[  216.916635][T14271] syzkaller1: entered allmulticast mode
[  217.527389][T14204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  217.533184][T14283] __nla_validate_parse: 1 callbacks suppressed
[  217.533197][T14283] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3699'.
[  217.552986][T14283] ksmbd: Unknown IPC event: 1, ignore.
[  217.827383][T14303] netlink: zone id is out of range
[  217.829683][T14303] netlink: zone id is out of range
[  217.831841][T14303] netlink: zone id is out of range
[  217.833948][T14303] netlink: zone id is out of range
[  217.835830][T14303] netlink: zone id is out of range
[  217.838097][T14303] netlink: zone id is out of range
[  217.841397][T14303] netlink: zone id is out of range
[  217.843534][T14303] netlink: zone id is out of range
[  217.882967][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3711'.
[  217.934793][T14312] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3712'.
[  217.940503][T14312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3712'.
[  218.177660][T14327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3719'.
[  218.194754][T14327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3719'.
[  218.454554][T14351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3731'.
[  219.791188][T14399] lo speed is unknown, defaulting to 1000
[  219.830706][T14394] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3751'.
[  219.914672][T14407] net_ratelimit: 101 callbacks suppressed
[  219.914688][T14407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  220.072087][T14414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.279707][T14425] bond11: option mode: invalid value (254)
[  220.291493][T14425] bond11 (unregistering): Released all slaves
[  220.430287][T14436] netlink: 'syz.1.3768': attribute type 1 has an invalid length.
[  220.433035][T14436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3768'.
[  220.715875][T14458] netlink: 'syz.0.3778': attribute type 1 has an invalid length.
[  220.768619][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3780'.
[  220.824252][T14466] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  220.921770][T14470] netlink: 'syz.0.3784': attribute type 1 has an invalid length.
[  222.698803][T14517] netlink: 'syz.2.3800': attribute type 1 has an invalid length.
[  222.701666][T14517] netlink: 'syz.2.3800': attribute type 1 has an invalid length.
[  222.704445][T14517] __nla_validate_parse: 1 callbacks suppressed
[  222.704452][T14517] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.3800'.
[  223.840511][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3816'.
[  223.851996][T14551] xt_TCPMSS: Only works on TCP SYN packets
[  224.034476][T14551] team0: left allmulticast mode
[  224.042339][T14551] team_slave_0: left allmulticast mode
[  224.044626][T14551] team_slave_1: left allmulticast mode
[  224.046811][T14551] team0: left promiscuous mode
[  224.049777][T14551] team_slave_0: left promiscuous mode
[  224.052876][T14551] team_slave_1: left promiscuous mode
[  224.056150][T14551] bridge0: port 3(team0) entered disabled state
[  224.061483][T14551] bridge_slave_1: left allmulticast mode
[  224.063831][T14551] bridge_slave_1: left promiscuous mode
[  224.066198][T14551] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.118177][T14565] netlink: 'syz.1.3822': attribute type 1 has an invalid length.
[  224.168653][T14569] tc_dump_action: action bad kind
[  224.413577][T14595] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3837'.
[  224.435423][T14595] bond6: (slave bond0): Removing an active aggregator
[  224.440017][T14595] bond6: (slave bond0): Releasing backup interface
[  224.445908][T14595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.450210][T14595] bond_slave_0: left promiscuous mode
[  224.453381][T14595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.456529][T14595] bond_slave_1: left promiscuous mode
[  224.458811][T14595] bond0 (unregistering): Released all slaves
[  224.484625][T14604] xt_hashlimit: size too large, truncated to 1048576
[  224.782283][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'.
[  224.785556][T14624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3847'.
[  224.811228][T14626] xt_TPROXY: Can be used only with -p tcp or -p udp
[  224.963464][T14635] netlink: 'syz.0.3852': attribute type 1 has an invalid length.
[  225.054875][T14644] netlink: 'syz.0.3856': attribute type 1 has an invalid length.
[  225.158987][T14646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3857'.
[  225.162817][T14646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3857'.
[  225.492734][T14666] netlink: 'syz.2.3865': attribute type 1 has an invalid length.
[  225.497037][T14666] netlink: 'syz.2.3865': attribute type 1 has an invalid length.
[  225.532935][T14670] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.535324][T14670] bridge0: port 2(bridge_slave_1) entered listening state
[  225.550146][T14670] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  225.810202][T14679] netlink: 'syz.1.3870': attribute type 1 has an invalid length.
[  225.830640][T14679] bond6: entered promiscuous mode
[  225.832592][T14679] 8021q: adding VLAN 0 to HW filter on device bond6
[  225.845313][T14679] veth5: entered promiscuous mode
[  225.846993][T14679] veth5: entered allmulticast mode
[  225.850846][T14679] bond6: (slave veth5): Enslaving as a backup interface with a down link
[  225.879342][T14682] netlink: set zone limit has 8 unknown bytes
[  226.086099][T14702] hsr0: entered promiscuous mode
[  226.168936][T14708] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3884'.
[  226.174513][T14709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.174586][T14708] syzkaller0: entered promiscuous mode
[  226.179812][T14708] syzkaller0: entered allmulticast mode
[  226.186033][T14709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3883'.
[  226.188739][T14708] tc action pedit 'at' offset -2147483647 out of bounds
[  226.188767][T14708] tc action pedit 'at' offset -2147483647 out of bounds
[  226.188773][T14708] tc action pedit 'at' offset -2147483647 out of bounds
[  226.188778][T14708] tc action pedit 'at' offset -2147483647 out of bounds
[  226.188784][T14708] tc action pedit 'at' offset -2147483647 out of bounds
[  226.188832][T14708] tc action pedit 'at' offset -2147483647 out of bounds
[  226.188870][T14708] tc action pedit 'at' offset -2147483647 out of bounds
[  226.207514][T14708] tc action pedit 'at' offset -2147483647 out of bounds
[  226.209979][T14708] tc action pedit 'at' offset -2147483647 out of bounds
[  226.212265][T14708] tc action pedit 'at' offset -2147483647 out of bounds
[  226.214399][T14708] 0: reclassify loop, rule prio 0, protocol 800
[  226.491351][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3891'.
[  226.778102][T14734] netlink: 'syz.2.3898': attribute type 2 has an invalid length.
[  226.782303][T14734] netlink: 'syz.2.3898': attribute type 2 has an invalid length.
[  226.799560][T14734] veth1_macvtap: entered promiscuous mode
[  226.802464][T14734] macsec0: entered promiscuous mode
[  226.805701][T14734] veth1_macvtap: left promiscuous mode
[  226.942758][T14757] Cannot find map_set index 17 as target
[  227.516831][T14811] vlan4: entered allmulticast mode
[  227.520174][T14811] veth0_to_bond: entered allmulticast mode
[  227.569631][T14744] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  227.572292][T14744] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  227.630770][T14827] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  228.206314][T14867] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  228.586875][T14876] team_slave_0: left promiscuous mode
[  228.594179][T14876] team_slave_1: left promiscuous mode
[  228.597544][T14876] team0: entered promiscuous mode
[  228.601536][T14876] team_slave_0: entered promiscuous mode
[  228.606131][T14876] team_slave_1: entered promiscuous mode
[  228.612715][T14876] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  228.773285][T14881] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  228.779374][T14881] bond11 (unregistering): Released all slaves
[  228.923207][T14890] xt_l2tp: unknown flags: 51
[  228.964525][T14892] __nla_validate_parse: 6 callbacks suppressed
[  228.964537][T14892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3968'.
[  228.970007][T14892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3968'.
[  229.004539][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3969'.
[  229.007801][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3969'.
[  229.011608][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3969'.
[  229.014437][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3969'.
[  229.152363][T14903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3972'.
[  229.182423][T14905] syzkaller1: entered promiscuous mode
[  229.184253][T14905] syzkaller1: entered allmulticast mode
[  229.366835][T10878] block nbd4: Receive control failed (result -32)
[  229.560116][T14917] lo speed is unknown, defaulting to 1000
[  230.463862][T14937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3985'.
[  230.818876][T14958] bond7: entered allmulticast mode
[  230.821074][T14958] ip6gre1: entered allmulticast mode
[  230.824392][T14958] ip6gre0: entered allmulticast mode
[  230.906756][T14957] bond7: left allmulticast mode
[  230.912277][T14957] ip6gre1: left allmulticast mode
[  231.138143][T14993] tipc: Enabled bearer <udp:s>, priority 5
[  231.141482][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4010'.
[  231.862943][T15032] netlink: 'syz.0.4027': attribute type 1 has an invalid length.
[  231.890561][T15032] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  231.894244][T15032] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  231.944112][T15038] bond7: (slave gretap2): making interface the new active one
[  231.947230][T15038] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  231.970687][T15032] macvlan2: entered promiscuous mode
[  231.972846][T15032] macvlan2: entered allmulticast mode
[  231.975347][T15032] bond7: entered promiscuous mode
[  231.977398][T15032] gretap2: entered promiscuous mode
[  231.980081][T15032] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  231.985431][T15032] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  231.990671][T15032] bond7: left promiscuous mode
[  231.992604][T15032] gretap2: left promiscuous mode
[  232.047687][T15032] syz.0.4027 (15032) used greatest stack depth: 19080 bytes left
[  232.322680][T15059] veth0_to_batadv: entered allmulticast mode
[  232.324931][T15059] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  232.387842][T15066] netlink: zone id is out of range
[  232.509355][T15085] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  232.973641][T15111] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  233.420647][T15125] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  233.434477][T15125] bond8: (slave lo): Enslaving as an active interface with an up link
[  233.438209][T15125] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  233.487550][T15128] netlink: 'syz.0.4071': attribute type 7 has an invalid length.
[  233.492738][T15128] netlink: 'syz.0.4071': attribute type 8 has an invalid length.
[  233.495950][T15128] netlink: 'syz.0.4071': attribute type 8 has an invalid length.
[  233.499664][T15128] netlink: 'syz.0.4071': attribute type 4 has an invalid length.
[  233.502948][T15128] netlink: 'syz.0.4071': attribute type 7 has an invalid length.
[  233.506161][T15128] netlink: 207236 bytes leftover after parsing attributes in process `syz.0.4071'.
[  233.981851][T15175] xt_l2tp: v2 tid > 0xffff: 37482740
[  234.110808][T15192] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  234.156386][T15192] __nla_validate_parse: 4 callbacks suppressed
[  234.156397][T15192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4099'.
[  234.167314][T15192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4099'.
[  234.203260][T15199] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  234.262082][T15209] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4108'.
[  234.271546][T15209] syzkaller1: entered promiscuous mode
[  234.273418][T15209] syzkaller1: entered allmulticast mode
[  234.481544][T15226] netlink: 'syz.2.4116': attribute type 1 has an invalid length.
[  234.484294][T15226] nbd: couldn't find device at index -427251215
[  234.839826][T15255] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  234.848154][T15255] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  235.553197][  T997] block nbd3: Connection timed out, retrying (0/2 alive)
[  235.558234][  T997] block nbd3: Connection timed out, retrying (0/2 alive)
[  235.560842][  T997] block nbd3: Connection timed out, retrying (0/2 alive)
[  235.563414][  T997] block nbd3: Connection timed out, retrying (0/2 alive)
[  235.566098][  T997] block nbd3: Dead connection, failed to find a fallback
[  235.570484][  T997] block nbd3: shutting down sockets
[  235.573830][  T997] blk_print_req_error: 136 callbacks suppressed
[  235.573839][  T997] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  235.579700][  T997] buffer_io_error: 138 callbacks suppressed
[  235.579709][  T997] Buffer I/O error on dev nbd3, logical block 3, async page read
[  235.586117][  T997] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  235.591534][  T997] Buffer I/O error on dev nbd3, logical block 2, async page read
[  235.594217][  T997] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  235.597188][  T997] Buffer I/O error on dev nbd3, logical block 1, async page read
[  235.599799][  T997] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  235.602706][  T997] Buffer I/O error on dev nbd3, logical block 0, async page read
[  235.606164][T12195] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  235.614491][T12195] Buffer I/O error on dev nbd3, logical block 0, async page read
[  235.621715][T12195] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  235.627598][T12195] Buffer I/O error on dev nbd3, logical block 1, async page read
[  235.633303][T12195] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  235.660203][T12195] Buffer I/O error on dev nbd3, logical block 2, async page read
[  235.666586][T12195] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  235.674763][T12195] Buffer I/O error on dev nbd3, logical block 3, async page read
[  235.680933][T12195] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  235.687621][T12195] Buffer I/O error on dev nbd3, logical block 0, async page read
[  235.694671][T12195] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  235.701368][T12195] Buffer I/O error on dev nbd3, logical block 1, async page read
[  235.717446][T12195] ldm_validate_partition_table(): Disk read failed.
[  235.725118][T12195] Dev nbd3: unable to read RDB block 0
[  235.736503][T12195]  nbd3: unable to read partition table
[  235.757846][T12195] ldm_validate_partition_table(): Disk read failed.
[  235.761443][T12195] Dev nbd3: unable to read RDB block 0
[  235.764379][T12195]  nbd3: unable to read partition table
[  235.777939][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'.
[  235.780944][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'.
[  235.836159][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4146'.
[  235.839713][T15294] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4146'.
[  235.906330][T15304] tipc: New replicast peer: 172.20.20.170
[  235.908688][T15304] tipc: Enabled bearer <udp:syz2>, priority 5
[  236.097867][T15319] syz.2.4157 (15319) used obsolete PPPIOCDETACH ioctl
[  236.214769][T15323] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4159'.
[  236.243100][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'.
[  236.245908][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'.
[  236.356057][T15335] netlink: 'syz.1.4165': attribute type 19 has an invalid length.
[  237.028626][    T9] tipc: Node number set to 2699945252
[  238.283564][T15471] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  238.500525][T15491] netlink: 'syz.2.4233': attribute type 2 has an invalid length.
[  238.503824][T15491] netlink: 'syz.2.4233': attribute type 8 has an invalid length.
[  238.726196][T15503] openvswitch: netlink: Duplicate key (type 21).
[  239.377897][T15556] __nla_validate_parse: 16 callbacks suppressed
[  239.377912][T15556] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4262'.
[  240.017402][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4277'.
[  240.051608][T15616] bond0: (slave syz_tun): Releasing backup interface
[  240.150787][T15629] : renamed from bond0 (while UP)
[  240.166766][T15631] blkio.reset_stats is deprecated
[  240.326067][T15647] lo speed is unknown, defaulting to 1000
[  240.377068][T15654] netlink: 41 bytes leftover after parsing attributes in process `syz.2.4295'.
[  240.381124][T15654] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4295'.
[  240.384748][T15654] netlink: 41 bytes leftover after parsing attributes in process `syz.2.4295'.
[  240.548874][T15663] nbd: socks must be embedded in a SOCK_ITEM attr
[  240.551820][T15663] block nbd5: shutting down sockets
[  240.965347][T15692] : entered promiscuous mode
[  241.205154][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4320'.
[  241.378782][T15719] netlink: 'syz.1.4323': attribute type 1 has an invalid length.
[  241.382044][T15719] netlink: 476 bytes leftover after parsing attributes in process `syz.1.4323'.
[  241.385547][T15719] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.4323'.
[  241.539155][T15741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4333'.
[  241.665225][T15751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.837887][T15780] netlink: 'syz.2.4352': attribute type 1 has an invalid length.
[  241.882101][T15780] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  241.887982][T15780] bond11: (slave vxcan3): Error -95 calling set_mac_address
[  241.910102][T15788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4356'.
[  241.913705][T15788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.950245][T15791] bond11: (slave bridge8): Enslaving as an active interface with a down link
[  242.466838][T15851] netlink: 'syz.0.4385': attribute type 1 has an invalid length.
[  242.742286][T15873] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  243.335956][T15924] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  243.339513][T15924] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  243.460985][T15938] netlink: 'syz.2.4420': attribute type 6 has an invalid length.
[  243.545646][T15947] netem: incorrect ge model size
[  243.559790][T15947] netem: change failed
[  243.673581][T15941] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.684762][T15941] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.693843][T15941] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  243.714540][T15952] netlink: 'syz.0.4423': attribute type 12 has an invalid length.
[  243.775510][T15941] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.779424][T15941] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.782612][T15941] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  243.867048][T15941] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.872389][T15941] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.879346][T15941] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  243.892565][T15962] netlink: 'syz.1.4427': attribute type 2 has an invalid length.
[  243.898162][T15960] erspan0: left promiscuous mode
[  243.910275][T15960] 8021q: adding VLAN 0 to HW filter on device team0
[  243.914556][T15960] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.933055][T15960] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.936553][T15960] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.941934][T15960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  243.945098][T15960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  243.949360][T15960] hsr0: left promiscuous mode
[  243.952109][T15960] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  244.004332][T15941] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.010008][T15941] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.015491][T15941] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  244.107070][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  244.110655][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  244.115767][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  244.142192][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  244.147479][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  244.150929][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  244.180380][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  244.185527][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  244.194831][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  244.212754][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  244.216784][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  244.223384][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  244.286772][T15988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  244.289823][T15988] IPv6: NLM_F_CREATE should be set when creating new route
[  244.372804][T15997] syzkaller0: entered promiscuous mode
[  244.376442][T15997] syzkaller0: entered allmulticast mode
[  244.392555][T16001] netlink: 'syz.0.4446': attribute type 7 has an invalid length.
[  244.395854][T16001] netlink: 'syz.0.4446': attribute type 8 has an invalid length.
[  244.434380][T16005] tipc: Failed to remove unknown binding: 66,1,1/955240773:2288018279/2288018281
[  244.442996][T16005] tipc: Failed to remove unknown binding: 66,1,1/955240773:2288018279/2288018281
[  244.447342][T16005] tipc: Failed to remove unknown binding: 66,1,1/955240773:2288018279/2288018281
[  244.481545][T16009] __nla_validate_parse: 16 callbacks suppressed
[  244.481556][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4450'.
[  244.490576][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4450'.
[  244.701004][T16026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4458'.
[  244.713790][T16026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4458'.
[  244.716533][T16026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4458'.
[  244.720251][T16026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4458'.
[  244.723367][T16026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4458'.
[  244.727734][T16026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4458'.
[  244.731551][T16026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4458'.
[  244.735549][T16026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4458'.
[  244.779473][T16026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.784175][T16026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.006676][T16045] netlink: 'syz.0.4466': attribute type 1 has an invalid length.
[  245.026421][T16045] 8021q: adding VLAN 0 to HW filter on device bond9
[  245.043480][T16045] bond9: (slave veth7): Enslaving as an active interface with a down link
[  245.059251][T16045] 8021q: adding VLAN 0 to HW filter on device batadv1
[  245.063434][T16045] bond9: (slave batadv1): making interface the new active one
[  245.067593][T16045] batadv1: entered promiscuous mode
[  245.077343][T16045] bond9: (slave batadv1): Enslaving as an active interface with an up link
[  245.090688][T16045] bond9 (unregistering): (slave veth7): Releasing active interface
[  245.097650][T16045] bond9 (unregistering): (slave batadv1): Releasing active interface
[  245.103526][T16045] bond9 (unregistering): Released all slaves
[  245.583223][T16088] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  245.586868][T16088] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  246.022110][T16113] netlink: 'syz.1.4494': attribute type 1 has an invalid length.
[  246.025323][T16113] netlink: 'syz.1.4494': attribute type 3 has an invalid length.
[  246.488649][T16123] netlink: 'syz.0.4499': attribute type 10 has an invalid length.
[  247.156391][T16131] bond0: entered promiscuous mode
[  247.159117][T16131] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.254973][T16144] dvmrp6: left allmulticast mode
[  247.302532][T16148] netlink: 'syz.0.4511': attribute type 1 has an invalid length.
[  247.432848][T16158] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  247.435598][T16158] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  247.656143][T16177] netlink: 'syz.1.4524': attribute type 3 has an invalid length.
[  247.828642][T16179] batadv_slave_1: left allmulticast mode
[  247.836131][T16179] nbd: must specify a device to reconfigure
[  248.373576][T16204] lo speed is unknown, defaulting to 1000
[  248.817173][T16214] netlink: 'syz.0.4538': attribute type 11 has an invalid length.
[  249.077660][T16236] openvswitch: netlink: IPv6 tunnel dst address is zero
[  249.234519][ T5647] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  250.658188][T16272] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.672249][T16274] netlink: 'syz.2.4562': attribute type 13 has an invalid length.
[  250.681580][T16274] netlink: 'syz.2.4562': attribute type 17 has an invalid length.
[  251.273239][ T6045] lo speed is unknown, defaulting to 1000
[  251.318181][T16274] ip6gre0: left allmulticast mode
[  251.330516][T16274] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.334147][T16274] team0: left promiscuous mode
[  251.336252][T16274] team_slave_0: left promiscuous mode
[  251.338899][T16274] team_slave_1: left promiscuous mode
[  251.361312][T16274] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.363992][T16274] bridge0: port 2(bridge_slave_1) entered listening state
[  251.370949][T16274] veth0_to_team: left promiscuous mode
[  251.376741][T16274] veth0_to_batadv: left allmulticast mode
[  251.391758][T16274] hsr0: left promiscuous mode
[  251.396501][T16274] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  251.420542][T16213] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.428542][T16213] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  251.434408][T16213] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  251.441448][T16213] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.448399][T16213] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  251.453443][T16213] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  251.458526][ T6031] lo speed is unknown, defaulting to 1000
[  251.463702][ T7620] lo speed is unknown, defaulting to 1000
[  251.466055][T16213] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.473571][T16213] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  251.477558][T16213] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  251.483435][T16213] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.486877][T16213] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  251.491569][T16213] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  252.159052][T16243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  252.229870][T16324] __nla_validate_parse: 83 callbacks suppressed
[  252.229886][T16324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4584'.
[  252.238623][T16324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4584'.
[  252.251029][T16324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4584'.
[  252.258517][T16324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4584'.
[  252.414561][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4594'.
[  252.537343][T16357] netlink: 'syz.2.4600': attribute type 6 has an invalid length.
[  252.565273][T16362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4602'.
[  252.666566][T16378] openvswitch: netlink: IPv4 tun info is not correct
[  252.698070][T16382] bond12: option miimon: invalid value (18446744073709551607)
[  252.701443][T16382] bond12: option miimon: allowed values 0 - 2147483647
[  252.707671][T16382] bond12 (unregistering): Released all slaves
[  252.812041][T16393] team0: entered promiscuous mode
[  252.824008][T16393] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  252.849018][T16397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4620'.
[  252.991074][T16406] xt_hashlimit: max too large, truncated to 1048576
[  253.205532][T16426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4632'.
[  253.212730][T16426] vlan0: entered promiscuous mode
[  253.214412][T16426] bridge0: entered promiscuous mode
[  253.267273][T16432] netlink: 'syz.0.4635': attribute type 8 has an invalid length.
[  253.273160][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4635'.
[  253.281795][T16432] bond0: entered promiscuous mode
[  253.285086][T16432] gretap0: entered promiscuous mode
[  253.288957][T16432] team0: entered promiscuous mode
[  253.291095][T16432] team_slave_0: entered promiscuous mode
[  253.293540][T16432] team_slave_1: entered promiscuous mode
[  253.297159][T16432] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  253.302957][T16432] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  253.307182][T16432] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network
[  253.314669][T16432] hsr1: entered promiscuous mode
[  253.932195][T16446] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  254.030003][T16451] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4643'.
[  254.264482][T16465] netlink: 'syz.2.4650': attribute type 1 has an invalid length.
[  255.117375][T16550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  255.934054][T16594] netlink: 'syz.0.4710': attribute type 11 has an invalid length.
[  256.878235][T16647] netlink: 'syz.0.4733': attribute type 10 has an invalid length.
[  257.163349][T16669] syzkaller0: entered promiscuous mode
[  257.165317][T16669] syzkaller0: entered allmulticast mode
[  258.492891][T16683] team0 (unregistering): left promiscuous mode
[  258.495260][T16683] team_slave_0: left promiscuous mode
[  258.497139][T16683] team_slave_1: left promiscuous mode
[  258.503069][T16683] team0 (unregistering): Port device team_slave_0 removed
[  258.510603][T16683] team0 (unregistering): Port device team_slave_1 removed
[  258.515018][T16683] team0 (unregistering): Port device bridge3 removed
[  258.802277][T16709] __nla_validate_parse: 11 callbacks suppressed
[  258.802289][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4760'.
[  258.921238][T16727] netlink: 428 bytes leftover after parsing attributes in process `syz.1.4765'.
[  258.930636][T16727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4765'.
[  259.818106][T16745] tun0: tun_chr_ioctl cmd 1074025672
[  259.820306][T16745] tun0: ignored: set checksum disabled
[  259.895553][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4773'.
[  259.902174][T16747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4773'.
[  259.933384][T16747] geneve4: entered promiscuous mode
[  259.940015][T16747] geneve4: entered allmulticast mode
[  259.948060][ T6055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.958531][ T6055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.970586][ T6055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.980041][ T6055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.984636][T16753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4776'.
[  260.027558][T16757] syzkaller1: entered promiscuous mode
[  260.032328][T16757] syzkaller1: entered allmulticast mode
[  260.347638][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4795'.
[  260.352057][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4795'.
[  260.395837][T16801] netlink: 'syz.2.4796': attribute type 1 has an invalid length.
[  260.415395][T16801] bond12: entered promiscuous mode
[  260.417842][T16801] 8021q: adding VLAN 0 to HW filter on device bond12
[  260.563097][T16819] syzkaller0: entered promiscuous mode
[  260.565165][T16819] syzkaller0: entered allmulticast mode
[  260.805872][T16843] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4806'.
[  260.811895][T16843] 0: renamed from hsr0 (while UP)
[  260.824662][T16843] 0: entered allmulticast mode
[  260.826849][T16843] hsr_slave_0: entered allmulticast mode
[  260.833575][T16843] hsr_slave_1: entered allmulticast mode
[  260.835978][T16843] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  261.221477][T16868] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4813'.
[  261.305835][T16878] netlink: 'syz.0.4819': attribute type 1 has an invalid length.
[  261.311683][T16878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.485658][T16895] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.495712][T16901] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  261.522929][T16895] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.526843][T16903] No such timeout policy "syz1"
[  261.530906][T16895] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.537508][T16895] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  261.633140][T16912] netlink: 'syz.1.4833': attribute type 1 has an invalid length.
[  261.966660][ T6055] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  261.971486][ T6055] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  261.974314][ T6055] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  261.977859][ T6055] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  262.043066][T16942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.045994][T16942] syzkaller0: entered promiscuous mode
[  262.047997][T16942] syzkaller0: entered allmulticast mode
[  262.070889][T16942] tipc: Resetting bearer <eth:syzkaller0>
[  262.079403][T16941] tipc: Resetting bearer <eth:syzkaller0>
[  262.100812][T16941] tipc: Disabling bearer <eth:syzkaller0>
[  262.113398][T16946] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.116623][T16946] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  262.119234][T16946] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  262.134407][T16946] tipc: Resetting bearer <eth:syzkaller0>
[  262.557413][T16988] netlink: 'syz.0.4869': attribute type 62 has an invalid length.
[  262.865495][T17017] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.897423][T17019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  262.993946][T17026] nicvf0: tun_chr_ioctl cmd 1074812117
[  263.044733][T17024] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  263.049065][T17024] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  263.116172][T17031] netlink: 'syz.1.4888': attribute type 6 has an invalid length.
[  263.119612][T17031] netlink: 'syz.1.4888': attribute type 1 has an invalid length.
[  263.122906][T17031] block nbd2: Unsupported socket: should be TCP or UNIX.
[  263.905984][T17079] tap0: tun_chr_ioctl cmd 1074025680
[  264.609959][T17098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.635262][T17098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.941214][T17115] __nla_validate_parse: 7 callbacks suppressed
[  264.941231][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4923'.
[  265.061601][T17119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4925'.
[  265.315179][T17134] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  265.492450][T17141] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.4935'.
[  265.607446][T17151] tipc: Disabling bearer <udp:syz2>
[  265.662099][T17160] netlink: 'syz.1.4944': attribute type 2 has an invalid length.
[  265.664613][T17160] netlink: 'syz.1.4944': attribute type 1 has an invalid length.
[  265.667051][T17160] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4944'.
[  266.008021][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4961'.
[  266.037226][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4962'.
[  266.154834][T17218] openvswitch: netlink: Actions may not be safe on all matching packets
[  266.324083][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4975'.
[  266.419266][T17239] ip6t_rpfilter: unknown options
[  266.842438][T17257] syzkaller0: entered promiscuous mode
[  266.844876][T17257] syzkaller0: entered allmulticast mode
[  266.853853][T17257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.857569][T17256] tipc: Resetting bearer <eth:syzkaller0>
[  266.870471][T17256] tipc: Disabling bearer <eth:syzkaller0>
[  267.016485][T17263] xt_policy: neither incoming nor outgoing policy selected
[  267.035732][T17265] pimreg: entered allmulticast mode
[  267.041117][T17265] pimreg: left allmulticast mode
[  267.071445][T17267] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  267.264973][T17284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5000'.
[  267.566780][   T33] audit: type=1804 audit(1778599820.549:13): pid=17301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5008" name="/newroot/1680/memory.events" dev="tmpfs" ino=8505 res=1 errno=0
[  267.576056][   T33] audit: type=1800 audit(1778599820.549:14): pid=17301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5008" name="memory.events" dev="tmpfs" ino=8505 res=0 errno=0
[  267.603804][T17301] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  267.609406][T17301] bond13 (unregistering): Released all slaves
[  268.275564][T17359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5023'.
[  268.336801][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5024'.
[  268.347026][T17364] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  268.976579][T17415] lo speed is unknown, defaulting to 1000
[  270.079766][T17490] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  270.143179][T17498] __nla_validate_parse: 10 callbacks suppressed
[  270.143191][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5087'.
[  270.152847][T17498] netlink: 'syz.1.5087': attribute type 1 has an invalid length.
[  270.156226][T17498] netlink: 568 bytes leftover after parsing attributes in process `syz.1.5087'.
[  270.253804][T17514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.323416][T17522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5098'.
[  270.326942][T17522] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5098'.
[  270.382000][T17528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5101'.
[  270.417806][T17528] 8021q: adding VLAN 0 to HW filter on device bond13
[  270.567362][T17544] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  270.740926][T17550] netlink: 'syz.0.5111': attribute type 1 has an invalid length.
[  270.767182][T17554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5113'.
[  270.797783][   T56] block nbd2: Receive control failed (result -1)
[  271.990776][T17614] netlink: 25 bytes leftover after parsing attributes in process `syz.0.5141'.
[  271.995060][T17614] netlink: 'syz.0.5141': attribute type 13 has an invalid length.
[  271.998264][T17614] netlink: 'syz.0.5141': attribute type 17 has an invalid length.
[  272.005952][T17618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5140'.
[  272.016873][T17614] gretap0: refused to change device tx_queue_len
[  272.019940][T17614] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  272.284019][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5147'.
[  272.344367][T17645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5150'.
[  272.408865][T17649] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  272.551527][T17659] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  272.704348][T17677] netlink: 'syz.1.5166': attribute type 30 has an invalid length.
[  272.749701][T17677] netlink: 'syz.1.5166': attribute type 30 has an invalid length.
[  273.251577][T17739] sctp: [Deprecated]: syz.2.5196 (pid 17739) Use of int in maxseg socket option.
[  273.251577][T17739] Use struct sctp_assoc_value instead
[  273.350067][T17750] syzkaller0: entered promiscuous mode
[  273.353347][T17750] syzkaller0: entered allmulticast mode
[  273.880792][T17752] syz.2.5202 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  273.898963][T17752] CPU: 1 UID: 0 PID: 17752 Comm: syz.2.5202 Not tainted syzkaller #0 PREEMPT(full) 
[  273.898984][T17752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  273.898992][T17752] Call Trace:
[  273.898998][T17752]  <TASK>
[  273.899005][T17752]  dump_stack_lvl+0xe8/0x150
[  273.899025][T17752]  dump_header+0xd3/0x4c0
[  273.899048][T17752]  oom_kill_process+0x3ab/0x970
[  273.899068][T17752]  out_of_memory+0x106c/0x1410
[  273.899084][T17752]  ? try_charge_memcg+0xbb9/0x1570
[  273.899104][T17752]  ? __pfx___mutex_lock+0x10/0x10
[  273.899130][T17752]  ? __pfx_out_of_memory+0x10/0x10
[  273.899144][T17752]  ? do_raw_spin_unlock+0x4d/0x210
[  273.899171][T17752]  try_charge_memcg+0xc77/0x1570
[  273.899203][T17752]  ? __pfx_try_charge_memcg+0x10/0x10
[  273.899220][T17752]  ? percpu_ref_tryget+0x15/0x180
[  273.899254][T17752]  ? charge_memcg+0x23/0x2b0
[  273.899273][T17752]  charge_memcg+0x1a2/0x2b0
[  273.899299][T17752]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  273.899316][T17752]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  273.899337][T17752]  __swap_cache_prepare_and_add+0xdc/0x700
[  273.899357][T17752]  ? page_rmappable_folio+0x9a/0x170
[  273.899383][T17752]  swap_cache_alloc_folio+0xf1/0x240
[  273.899402][T17752]  swap_cluster_readahead+0x355/0x670
[  273.899422][T17752]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  273.899448][T17752]  ? get_vma_policy+0x27b/0x3c0
[  273.899470][T17752]  swapin_readahead+0x196/0xc50
[  273.899488][T17752]  ? swap_table_get+0x1e/0x260
[  273.899507][T17752]  ? __pfx_swapin_readahead+0x10/0x10
[  273.899524][T17752]  ? swap_table_get+0x1e/0x260
[  273.899538][T17752]  ? swap_table_get+0x1e/0x260
[  273.899550][T17752]  ? swap_table_get+0x1e/0x260
[  273.899565][T17752]  ? swap_table_get+0x216/0x260
[  273.899581][T17752]  ? swap_cache_get_folio+0x2e4/0x2f0
[  273.899601][T17752]  do_swap_page+0x555/0x5120
[  273.899620][T17752]  ? __pte_offset_map+0x29/0x240
[  273.899637][T17752]  ? __pte_offset_map+0x29/0x240
[  273.899686][T17752]  ? do_swap_page+0x128/0x5120
[  273.899701][T17752]  ? __pfx_do_swap_page+0x10/0x10
[  273.899714][T17752]  ? __pte_offset_map+0x1ae/0x240
[  273.899733][T17752]  ? pte_offset_map_rw_nolock+0xea/0x160
[  273.899751][T17752]  handle_mm_fault+0x12d2/0x3170
[  273.899778][T17752]  ? handle_mm_fault+0xee/0x3170
[  273.899799][T17752]  ? __pfx_handle_mm_fault+0x10/0x10
[  273.899814][T17752]  ? lock_vma_under_rcu+0x45a/0x500
[  273.899851][T17752]  do_user_addr_fault+0xa73/0x1340
[  273.899871][T17752]  ? rcu_is_watching+0x15/0xb0
[  273.899888][T17752]  ? trace_page_fault_user+0x84/0x1e0
[  273.899904][T17752]  exc_page_fault+0x6a/0xc0
[  273.899923][T17752]  asm_exc_page_fault+0x26/0x30
[  273.899937][T17752] RIP: 0033:0x7f1686c6a7be
[  273.899951][T17752] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 f6 d5 3a 00 85 c0 0f 8e 53 fd ff ff <e8> 6d 7d fe ff 49 39 c4 73 88 48 8d 1d d1 b7 3a 00 83 3d d6 d5 3a
[  273.899963][T17752] RSP: 002b:00007ffdbb698e20 EFLAGS: 00010202
[  273.899975][T17752] RAX: 0000000000000001 RBX: 00007f1687017da0 RCX: 000055557f219808
[  273.899985][T17752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  273.899992][T17752] RBP: 00007f1687017da0 R08: 0000000000000000 R09: 0000000000000000
[  273.900001][T17752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000042e98
[  273.900009][T17752] R13: 00007f168701609c R14: 0000000000042bdc R15: 00007f1687016090
[  273.900031][T17752]  </TASK>
[  273.900037][T17752] memory: usage 307200kB, limit 307200kB, failcnt 2357
[  274.024109][T17752] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0
[  274.027124][T17752] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  274.030301][T17752] Memory cgroup stats for /syz2:
[  274.030390][T17752] cache 0
[  274.060039][T17752] rss 0
[  274.061341][T17752] rss_huge 0
[  274.062723][T17752] shmem 0
[  274.063952][T17752] mapped_file 0
[  274.065424][T17752] dirty 0
[  274.066671][T17752] writeback 0
[  274.068047][T17752] workingset_refault_anon 19
[  274.088438][T17752] workingset_refault_file 103
[  274.090564][T17752] swap 184320
[  274.092010][T17752] swapcached 286720
[  274.093594][T17752] pgpgin 155978
[  274.095046][T17752] pgpgout 155973
[  274.096402][T17752] pgfault 316522
[  274.097873][T17752] pgmajfault 12
[  274.108506][T17752] inactive_anon 16384
[  274.110273][T17752] active_anon 4096
[  274.111923][T17752] inactive_file 0
[  274.113503][T17752] active_file 0
[  274.114973][T17752] unevictable 0
[  274.116428][T17752] hierarchical_memory_limit 314572800
[  274.128252][T17790] netlink: 'syz.0.5219': attribute type 1 has an invalid length.
[  274.133606][T17752] hierarchical_memsw_limit 9223372036854771712
[  274.138481][T17752] total_cache 0
[  274.148454][T17752] total_rss 0
[  274.151923][T17752] total_rss_huge 0
[  274.158431][T17752] total_shmem 0
[  274.160006][T17752] total_mapped_file 0
[  274.161679][T17752] total_dirty 0
[  274.163120][T17752] total_writeback 0
[  274.164676][T17752] total_workingset_refault_anon 19
[  274.166675][T17752] total_workingset_refault_file 103
[  274.175780][T17752] total_swap 184320
[  274.178990][T17752] total_swapcached 286720
[  274.181753][T17752] total_pgpgin 155978
[  274.183440][T17752] total_pgpgout 155973
[  274.185100][T17752] total_pgfault 316527
[  274.186739][T17752] total_pgmajfault 12
[  274.188250][T17752] total_inactive_anon 16384
[  274.190461][T17752] total_active_anon 4096
[  274.192177][T17752] total_inactive_file 0
[  274.193836][T17752] total_active_file 0
[  274.195441][T17752] total_unevictable 0
[  274.197072][T17752] anon_cost 0
[  274.204685][T17752] file_cost 0
[  274.205766][T17752] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5202,pid=17752,uid=0
[  274.214797][T17752] Memory cgroup out of memory: Killed process 17752 (syz.2.5202) total-vm:104340kB, anon-rss:1244kB, file-rss:22732kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  274.538760][T17800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  274.583337][T17800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  274.597631][T17800] bond0 (unregistering): Released all slaves
[  274.737848][T17815] 
[  274.738897][T17815] ======================================================
[  274.741672][T17815] WARNING: possible circular locking dependency detected
[  274.744419][T17815] syzkaller #0 Not tainted
[  274.746277][T17815] ------------------------------------------------------
[  274.749082][T17815] syz.0.5231/17815 is trying to acquire lock:
[  274.751487][T17815] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650
[  274.755183][T17815] 
[  274.755183][T17815] but task is already holding lock:
[  274.758129][T17815] ffff8881ba55e538 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  274.761753][T17815] 
[  274.761753][T17815] which lock already depends on the new lock.
[  274.761753][T17815] 
[  274.765989][T17815] 
[  274.765989][T17815] the existing dependency chain (in reverse order) is:
[  274.769375][T17815] 
[  274.769375][T17815] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  274.772330][T17815]        __might_fault+0xcb/0x130
[  274.774283][T17815]        _copy_from_user+0x28/0xb0
[  274.776269][T17815]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  274.778748][T17815]        ip_generic_getfrag+0x149/0x2d0
[  274.780954][T17815]        __ip6_append_data+0x39cd/0x3f60
[  274.783161][T17815]        ip6_append_data+0x10f/0x280
[  274.785263][T17815]        rawv6_sendmsg+0x12d3/0x18e0
[  274.787379][T17815]        ____sys_sendmsg+0x80a/0x9f0
[  274.789464][T17815]        ___sys_sendmsg+0x2a5/0x360
[  274.791502][T17815]        __x64_sys_sendmsg+0x1bd/0x2a0
[  274.793686][T17815]        do_syscall_64+0x15f/0xf80
[  274.795683][T17815]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.798178][T17815] 
[  274.798178][T17815] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  274.801206][T17815]        lock_sock_nested+0x41/0x100
[  274.803296][T17815]        inet_shutdown+0x6a/0x390
[  274.805302][T17815]        nbd_mark_nsock_dead+0x2e9/0x560
[  274.807525][T17815]        recv_work+0x1c2e/0x1d40
[  274.809488][T17815]        process_scheduled_works+0xb5d/0x1860
[  274.811852][T17815]        worker_thread+0xa53/0xfc0
[  274.813899][T17815]        kthread+0x388/0x470
[  274.815691][T17815]        ret_from_fork+0x514/0xb70
[  274.817717][T17815]        ret_from_fork_asm+0x1a/0x30
[  274.819906][T17815] 
[  274.819906][T17815] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  274.822997][T17815]        __mutex_lock+0x1a3/0x1550
[  274.825108][T17815]        nbd_queue_rq+0x37b/0x1100
[  274.827196][T17815]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  274.829674][T17815]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  274.832420][T17815]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  274.835093][T17815]        blk_mq_run_hw_queue+0x348/0x4f0
[  274.837355][T17815]        blk_mq_dispatch_list+0xd16/0xe10
[  274.839566][T17815]        blk_mq_flush_plug_list+0x48d/0x570
[  274.841998][T17815]        __blk_flush_plug+0x3ed/0x4d0
[  274.844189][T17815]        __submit_bio+0x28d/0x580
[  274.846224][T17815]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  274.848661][T17815]        block_read_full_folio+0x599/0x830
[  274.851030][T17815]        filemap_read_folio+0x137/0x3b0
[  274.853236][T17815]        do_read_cache_folio+0x358/0x590
[  274.855463][T17815]        read_part_sector+0xb6/0x2b0
[  274.857666][T17815]        adfspart_check_ICS+0xb1/0x960
[  274.859921][T17815]        bdev_disk_changed+0x817/0x1770
[  274.862207][T17815]        blkdev_get_whole+0x380/0x510
[  274.864419][T17815]        bdev_open+0x31e/0xd30
[  274.866413][T17815]        blkdev_open+0x470/0x610
[  274.868473][T17815]        do_dentry_open+0x785/0x14e0
[  274.870672][T17815]        vfs_open+0x3b/0x340
[  274.872551][T17815]        path_openat+0x2e08/0x3860
[  274.874669][T17815]        do_file_open+0x23e/0x4a0
[  274.876748][T17815]        do_sys_openat2+0x113/0x200
[  274.878875][T17815]        __x64_sys_openat+0x138/0x170
[  274.881048][T17815]        do_syscall_64+0x15f/0xf80
[  274.883181][T17815]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.885806][T17815] 
[  274.885806][T17815] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  274.888769][T17815]        __mutex_lock+0x1a3/0x1550
[  274.890870][T17815]        nbd_queue_rq+0xc6/0x1100
[  274.892945][T17815]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  274.895398][T17815]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  274.898167][T17815]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  274.900769][T17815]        blk_mq_run_hw_queue+0x348/0x4f0
[  274.903081][T17815]        blk_mq_dispatch_list+0xd16/0xe10
[  274.905419][T17815]        blk_mq_flush_plug_list+0x48d/0x570
[  274.907839][T17815]        __blk_flush_plug+0x3ed/0x4d0
[  274.910021][T17815]        __submit_bio+0x28d/0x580
[  274.912121][T17815]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  274.914674][T17815]        block_read_full_folio+0x599/0x830
[  274.917100][T17815]        filemap_read_folio+0x137/0x3b0
[  274.919387][T17815]        do_read_cache_folio+0x358/0x590
[  274.921692][T17815]        read_part_sector+0xb6/0x2b0
[  274.923865][T17815]        adfspart_check_ICS+0xb1/0x960
[  274.926070][T17815]        bdev_disk_changed+0x817/0x1770
[  274.928332][T17815]        blkdev_get_whole+0x380/0x510
[  274.930570][T17815]        bdev_open+0x31e/0xd30
[  274.932594][T17815]        blkdev_open+0x470/0x610
[  274.934633][T17815]        do_dentry_open+0x785/0x14e0
[  274.936871][T17815]        vfs_open+0x3b/0x340
[  274.938766][T17815]        path_openat+0x2e08/0x3860
[  274.940933][T17815]        do_file_open+0x23e/0x4a0
[  274.943030][T17815]        do_sys_openat2+0x113/0x200
[  274.945230][T17815]        __x64_sys_openat+0x138/0x170
[  274.947464][T17815]        do_syscall_64+0x15f/0xf80
[  274.949573][T17815]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.952220][T17815] 
[  274.952220][T17815] -> #3 (set->srcu){.+.+}-{0:0}:
[  274.955181][T17815]        __synchronize_srcu+0xca/0x300
[  274.957430][T17815]        elevator_switch+0x1e8/0x7a0
[  274.959575][T17815]        elevator_change+0x2cc/0x450
[  274.961786][T17815]        elevator_set_default+0x36c/0x430
[  274.964154][T17815]        blk_register_queue+0x3e9/0x4e0
[  274.966393][T17815]        __add_disk+0x677/0xd50
[  274.968421][T17815]        add_disk_fwnode+0xfb/0x480
[  274.970590][T17815]        nbd_dev_add+0x72c/0xb50
[  274.972658][T17815]        nbd_init+0x168/0x1f0
[  274.974601][T17815]        do_one_initcall+0x250/0x870
[  274.976779][T17815]        do_initcall_level+0x104/0x190
[  274.979037][T17815]        do_initcalls+0x59/0xa0
[  274.981067][T17815]        kernel_init_freeable+0x2a6/0x3e0
[  274.983462][T17815]        kernel_init+0x1d/0x1d0
[  274.985489][T17815]        ret_from_fork+0x514/0xb70
[  274.987610][T17815]        ret_from_fork_asm+0x1a/0x30
[  274.989811][T17815] 
[  274.989811][T17815] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  274.993008][T17815]        __mutex_lock+0x1a3/0x1550
[  274.995100][T17815]        elevator_change+0x1b3/0x450
[  274.997351][T17815]        elevator_set_none+0xb5/0x140
[  274.999581][T17815]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  275.002267][T17815]        nbd_start_device+0x17f/0xb10
[  275.004495][T17815]        nbd_genl_connect+0x165b/0x1cf0
[  275.006777][T17815]        genl_family_rcv_msg_doit+0x22a/0x330
[  275.009326][T17815]        genl_rcv_msg+0x61c/0x7a0
[  275.011399][T17815]        netlink_rcv_skb+0x232/0x4b0
[  275.013593][T17815]        genl_rcv+0x28/0x40
[  275.015538][T17815]        netlink_unicast+0x75c/0x8e0
[  275.017711][T17815]        netlink_sendmsg+0x813/0xb40
[  275.019894][T17815]        ____sys_sendmsg+0x972/0x9f0
[  275.022025][T17815]        ___sys_sendmsg+0x2a5/0x360
[  275.024186][T17815]        __x64_sys_sendmsg+0x1bd/0x2a0
[  275.026485][T17815]        do_syscall_64+0x15f/0xf80
[  275.028485][T17815]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.031076][T17815] 
[  275.031076][T17815] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  275.034563][T17815]        blk_alloc_queue+0x546/0x680
[  275.036804][T17815]        __blk_mq_alloc_disk+0x197/0x390
[  275.039082][T17815]        nbd_dev_add+0x499/0xb50
[  275.041128][T17815]        nbd_init+0x168/0x1f0
[  275.043086][T17815]        do_one_initcall+0x250/0x870
[  275.045327][T17815]        do_initcall_level+0x104/0x190
[  275.047759][T17815]        do_initcalls+0x59/0xa0
[  275.049936][T17815]        kernel_init_freeable+0x2a6/0x3e0
[  275.052057][T17815]        kernel_init+0x1d/0x1d0
[  275.054002][T17815]        ret_from_fork+0x514/0xb70
[  275.056155][T17815]        ret_from_fork_asm+0x1a/0x30
[  275.058484][T17815] 
[  275.058484][T17815] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  275.061688][T17815]        __lock_acquire+0x15a5/0x2cf0
[  275.063925][T17815]        lock_acquire+0x106/0x350
[  275.066016][T17815]        fs_reclaim_acquire+0x71/0x100
[  275.068184][T17815]        prepare_alloc_pages+0x152/0x650
[  275.070627][T17815]        __alloc_frozen_pages_noprof+0x12f/0x380
[  275.073452][T17815]        alloc_pages_mpol+0x235/0x490
[  275.075906][T17815]        alloc_pages_noprof+0xac/0x2a0
[  275.078282][T17815]        __pud_alloc+0x3a/0x460
[  275.080418][T17815]        handle_mm_fault+0x2046/0x3170
[  275.082849][T17815]        do_user_addr_fault+0x75b/0x1340
[  275.085249][T17815]        exc_page_fault+0x6a/0xc0
[  275.087291][T17815]        asm_exc_page_fault+0x26/0x30
[  275.089441][T17815]        rep_movs_alternative+0x33/0x90
[  275.091722][T17815]        _copy_to_user+0x8a/0xb0
[  275.093810][T17815]        x25_ioctl+0x243/0xfd0
[  275.095880][T17815]        sock_do_ioctl+0x101/0x320
[  275.098027][T17815]        sock_ioctl+0x5c6/0x7f0
[  275.100042][T17815]        __se_sys_ioctl+0xfc/0x170
[  275.102246][T17815]        do_syscall_64+0x15f/0xf80
[  275.104326][T17815]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.107058][T17815] 
[  275.107058][T17815] other info that might help us debug this:
[  275.107058][T17815] 
[  275.111249][T17815] Chain exists of:
[  275.111249][T17815]   fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock
[  275.111249][T17815] 
[  275.116513][T17815]  Possible unsafe locking scenario:
[  275.116513][T17815] 
[  275.119588][T17815]        CPU0                    CPU1
[  275.121842][T17815]        ----                    ----
[  275.124106][T17815]   rlock(&mm->mmap_lock);
[  275.125980][T17815]                                lock(sk_lock-AF_INET6);
[  275.128860][T17815]                                lock(&mm->mmap_lock);
[  275.131720][T17815]   lock(fs_reclaim);
[  275.133416][T17815] 
[  275.133416][T17815]  *** DEADLOCK ***
[  275.133416][T17815] 
[  275.136809][T17815] 2 locks held by syz.0.5231/17815:
[  275.138920][T17815]  #0: ffff88810cf5e260 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_ioctl+0x22d/0xfd0
[  275.142560][T17815]  #1: ffff8881ba55e538 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  275.146716][T17815] 
[  275.146716][T17815] stack backtrace:
[  275.149187][T17815] CPU: 1 UID: 0 PID: 17815 Comm: syz.0.5231 Not tainted syzkaller #0 PREEMPT(full) 
[  275.149202][T17815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  275.149211][T17815] Call Trace:
[  275.149217][T17815]  <TASK>
[  275.149223][T17815]  dump_stack_lvl+0xe8/0x150
[  275.149243][T17815]  print_circular_bug+0x2e1/0x300
[  275.149261][T17815]  check_noncircular+0x12e/0x150
[  275.149280][T17815]  __lock_acquire+0x15a5/0x2cf0
[  275.149295][T17815]  ? ima_match_policy+0x112/0x21e0
[  275.149313][T17815]  ? prepare_alloc_pages+0x152/0x650
[  275.149331][T17815]  lock_acquire+0x106/0x350
[  275.149343][T17815]  ? prepare_alloc_pages+0x152/0x650
[  275.149363][T17815]  ? __lock_acquire+0x6b5/0x2cf0
[  275.149377][T17815]  fs_reclaim_acquire+0x71/0x100
[  275.149394][T17815]  ? prepare_alloc_pages+0x152/0x650
[  275.149411][T17815]  prepare_alloc_pages+0x152/0x650
[  275.149431][T17815]  __alloc_frozen_pages_noprof+0x12f/0x380
[  275.149452][T17815]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  275.149472][T17815]  ? __pfx_policy_nodemask+0x10/0x10
[  275.149489][T17815]  ? __kasan_check_byte+0x12/0x40
[  275.149506][T17815]  ? rcu_is_watching+0x15/0xb0
[  275.149520][T17815]  ? __kasan_check_byte+0x12/0x40
[  275.149540][T17815]  alloc_pages_mpol+0x235/0x490
[  275.149559][T17815]  alloc_pages_noprof+0xac/0x2a0
[  275.149572][T17815]  __pud_alloc+0x3a/0x460
[  275.149587][T17815]  handle_mm_fault+0x2046/0x3170
[  275.149603][T17815]  ? __pfx_mt_find+0x10/0x10
[  275.149630][T17815]  ? handle_mm_fault+0xee/0x3170
[  275.149678][T17815]  ? __pfx_handle_mm_fault+0x10/0x10
[  275.149699][T17815]  ? lock_mm_and_find_vma+0xa7/0x340
[  275.149715][T17815]  do_user_addr_fault+0x75b/0x1340
[  275.149732][T17815]  exc_page_fault+0x6a/0xc0
[  275.149750][T17815]  asm_exc_page_fault+0x26/0x30
[  275.149762][T17815] RIP: 0010:rep_movs_alternative+0x33/0x90
[  275.149775][T17815] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  275.149786][T17815] RSP: 0018:ffffc90004e47a48 EFLAGS: 00010212
[  275.149796][T17815] RAX: 0000000000000000 RBX: 0000000000000032 RCX: 0000000000000032
[  275.149804][T17815] RDX: 0000000000000000 RSI: ffff88810cf5e7b4 RDI: 0000200000000000
[  275.149813][T17815] RBP: ffffc90004e47cb0 R08: ffff88810cf5e7e5 R09: 1ffff110219ebcfc
[  275.149821][T17815] R10: dffffc0000000000 R11: ffffed10219ebcfd R12: 0000200000000032
[  275.149829][T17815] R13: 00007ffffffff000 R14: ffff88810cf5e7b4 R15: 0000200000000000
[  275.149841][T17815]  _copy_to_user+0x8a/0xb0
[  275.149860][T17815]  x25_ioctl+0x243/0xfd0
[  275.149874][T17815]  ? __pfx_x25_ioctl+0x10/0x10
[  275.149891][T17815]  ? kasan_quarantine_put+0xbb/0x1f0
[  275.149908][T17815]  ? tomoyo_path_number_perm+0x219/0x630
[  275.149922][T17815]  ? tomoyo_path_number_perm+0x219/0x630
[  275.149935][T17815]  ? do_vfs_ioctl+0x1166/0x1530
[  275.149952][T17815]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  275.149969][T17815]  sock_do_ioctl+0x101/0x320
[  275.149982][T17815]  ? __pfx_sock_do_ioctl+0x10/0x10
[  275.149991][T17815]  ? do_futex+0x333/0x420
[  275.150008][T17815]  sock_ioctl+0x5c6/0x7f0
[  275.150018][T17815]  ? __pfx_sock_ioctl+0x10/0x10
[  275.150028][T17815]  ? __fget_files+0x2a/0x420
[  275.150039][T17815]  ? __fget_files+0x3a0/0x420
[  275.150061][T17815]  ? __fget_files+0x2a/0x420
[  275.150076][T17815]  ? bpf_lsm_file_ioctl+0x9/0x20
[  275.150093][T17815]  ? __pfx_sock_ioctl+0x10/0x10
[  275.150104][T17815]  __se_sys_ioctl+0xfc/0x170
[  275.150119][T17815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.150130][T17815]  do_syscall_64+0x15f/0xf80
[  275.150147][T17815]  ? trace_irq_disable+0x3b/0x140
[  275.150167][T17815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.150178][T17815] RIP: 0033:0x7f13f379cdd9
[  275.150190][T17815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.150200][T17815] RSP: 002b:00007f13f45d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  275.150211][T17815] RAX: ffffffffffffffda RBX: 00007f13f3a15fa0 RCX: 00007f13f379cdd9
[  275.150221][T17815] RDX: 0000200000000000 RSI: 00000000000089ea RDI: 0000000000000004
[  275.150230][T17815] RBP: 00007f13f3832d69 R08: 0000000000000000 R09: 0000000000000000
[  275.150237][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  275.150244][T17815] R13: 00007f13f3a16038 R14: 00007f13f3a15fa0 R15: 00007ffec07954e8
[  275.150258][T17815]  </TASK>
[  275.472537][T17819] __nla_validate_parse: 10 callbacks suppressed
[  275.472553][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5233'.
[  281.628681][    C0] bridge0: port 2(bridge_slave_1) entered learning state
