last executing test programs:

1.072794092s ago: executing program 1 (id=4780):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x98})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000200000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600034000010000060001400017000014000000110001"], 0xd8}}, 0x0)
mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x300000e, 0x11, r0, 0x9cc21000)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendfile(r4, r4, &(0x7f00000000c0)=0x4, 0x12)

1.003474938s ago: executing program 1 (id=4783):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, 0x0)

953.839129ms ago: executing program 1 (id=4787):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in=@local, 0xee24, 0x0, 0x2000, 0x3, 0x2}, {0x81000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x1, 0x9}, {0x5, 0x0, 0x0, 0x1}, 0x5, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x3501, 0x4, 0x8, 0x0, 0x9075, 0x11, 0x7}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c)

953.292372ms ago: executing program 1 (id=4789):
socket$netlink(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10)
listen(0xffffffffffffffff, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, 0x140f, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x34}}, 0xc080)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x4044)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00'], 0x34}, 0x1, 0x0, 0x0, 0x20004185}, 0x4040800)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000180)="51c0c2cf0033d1af0c5ae2f153666730c61162fef92d79", &(0x7f00000004c0)=@tcp6}, 0xffffffffffffff2c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050019000400000008000a", @ANYRES32=r5, @ANYBLOB="cf323223317b54dd940c9f391478ccf2bc60d0198f9fbb7c51a11ce611a03c2b0acc4fdef80eba8faa09866c291a9b064133fe777119ca577a66bf86937c5419011aa2d1da9a1e55918565cded8325a2a422d4925d5f12b6146f12fa773cbf9e2d4aaef9544b440468290f83563d585b5f"], 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x8044)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={&(0x7f0000000180)="51f13738ed947eb49afab9a2b549c45bfbfe78ad28be0ce0559bba29703099c4c345c9458780edd7", &(0x7f0000000340)=""/68, &(0x7f0000000400), &(0x7f0000000440)="eb737198fec2876d644da772e0ba2dd2fad06c72f77f360b7517e6047732d67b7754a73378a135f81656f25255b0ed4767cc8c7a6166db3db93afecfc8ca1728051ca62c85d9a771014cff9f7319852f85431477c256c925e6af0951e4700e88f0676b1e8f", 0x2, r0, 0x4}, 0x38)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000000001010400000000000000000200000014001880080001400000000408000240000000012400018014000180080001000400000000000000e00000010c0002802074598edcb5bf25"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x2, 0x8}, 0x50)

682.877201ms ago: executing program 2 (id=4800):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

542.253285ms ago: executing program 2 (id=4801):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000002000000850000006c000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

542.06463ms ago: executing program 2 (id=4802):
socket$igmp6(0xa, 0x3, 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f000000bb80))

443.736644ms ago: executing program 0 (id=4804):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000b200000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r0, &(0x7f0000000380), &(0x7f0000000600)=""/72}, 0x20)

443.52888ms ago: executing program 0 (id=4805):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x130, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x42, 0x21800000, 0x7fff, 0x1, 0x0, 0x0, 0x101, 0x78, 0x40}, {0x8001}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)

381.804319ms ago: executing program 0 (id=4806):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
close(0x4)
close(0x3)

381.501474ms ago: executing program 0 (id=4807):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, r1, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0)

303.514662ms ago: executing program 0 (id=4808):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002200), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002240)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0)

303.273886ms ago: executing program 0 (id=4809):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000a"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

243.978306ms ago: executing program 2 (id=4810):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040)

243.423139ms ago: executing program 2 (id=4811):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

53.779452ms ago: executing program 1 (id=4812):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x30}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

504.9µs ago: executing program 1 (id=4813):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)

0s ago: executing program 2 (id=4814):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4080)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x20, 0x0, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000100)=0x20)
socket$inet_sctp(0x2, 0x1, 0x84)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
socket$l2tp(0x2, 0x2, 0x73)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r8, @ANYBLOB="140004006e6963766630000000000000000000000800050007"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890)

kernel console output (not intermixed with test programs):

177][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'.
[   92.789445][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   92.792156][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.142485][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1053'.
[   93.393758][ T8188] IPv6: NLM_F_REPLACE set, but no existing node found!
[   93.546830][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7
[   93.567692][ T8211] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   93.714644][ T8224] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1077'.
[   93.830041][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.793822][ T8251] netlink: 'syz.1.1087': attribute type 11 has an invalid length.
[   94.869442][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.269536][ T6961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.909556][ T6956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   95.928471][  T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.266214][ T8280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1099'.
[   96.271385][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1099'.
[   96.274664][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1099'.
[   96.313960][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.465624][ T8296] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   96.803354][ T8315] geneve0: entered promiscuous mode
[   96.819446][ T8315] geneve0: left promiscuous mode
[   96.952384][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.968673][ T8331] netlink: 2736 bytes leftover after parsing attributes in process `syz.0.1123'.
[   97.309660][ T8349] raw_sendmsg: syz.2.1131 forgot to set AF_INET. Fix it!
[   97.326219][ T8351] syzkaller0: entered promiscuous mode
[   97.329974][ T8351] syzkaller0: entered allmulticast mode
[   97.412258][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'.
[   97.472737][ T8357] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.476114][ T8362] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   97.560921][ T8367] tc action pedit offset must be on 32 bit boundaries
[   97.564094][ T8367] tc action pedit offset must be on 32 bit boundaries
[   97.566209][ T8367] tc action pedit offset must be on 32 bit boundaries
[   97.569382][ T8367] tc action pedit offset must be on 32 bit boundaries
[   97.571529][ T8367] tc action pedit offset must be on 32 bit boundaries
[   97.573728][ T8367] tc action pedit offset must be on 32 bit boundaries
[   97.575799][ T8367] tc action pedit offset must be on 32 bit boundaries
[   97.577865][ T8367] tc action pedit offset must be on 32 bit boundaries
[   97.580007][ T8367] tc action pedit offset must be on 32 bit boundaries
[   97.582087][ T8367] tc action pedit offset must be on 32 bit boundaries
[   97.584143][ T8367] TC_ACT_REPEAT abuse ?
[   97.914026][ T8392] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1152'.
[   97.926540][ T8394] netlink: 'syz.1.1153': attribute type 13 has an invalid length.
[   97.952012][ T8394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1153'.
[   97.956145][ T8394] bond0: (slave bond_slave_0): Releasing backup interface
[   97.989452][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.006480][ T8394] bond_slave_0: entered promiscuous mode
[   98.009552][ T8394] bond_slave_0: entered allmulticast mode
[   98.174089][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'.
[   98.474447][ T8440] netlink: 'syz.1.1167': attribute type 1 has an invalid length.
[   98.648401][ T8452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.652851][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.677029][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'.
[   98.681955][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'.
[   99.030020][ T6956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.343460][ T8520] netlink: 'syz.0.1203': attribute type 20 has an invalid length.
[   99.350261][ T6961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   99.365789][ T5658] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.371403][ T8520] netlink: 'syz.0.1203': attribute type 20 has an invalid length.
[   99.374770][ T5658] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.383588][ T5658] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.387645][ T5658] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.458284][ T8525] erspan0: left allmulticast mode
[   99.466250][ T8525] erspan0: left promiscuous mode
[   99.468015][ T8525] bridge1: port 1(erspan0) entered disabled state
[   99.482120][ T8525] bridge_slave_0: left allmulticast mode
[   99.483872][ T8525] bridge_slave_0: left promiscuous mode
[   99.485760][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.493954][ T8525] bridge_slave_1: left allmulticast mode
[   99.495502][ T8527] xt_limit: Overflow, try lower: 324382443/0
[   99.495818][ T8525] bridge_slave_1: left promiscuous mode
[   99.501336][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.521905][ T8525] team0: Port device team_slave_0 removed
[   99.531044][ T8525] team0: Port device team_slave_1 removed
[   99.535136][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.537955][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.543180][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.546120][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.567645][ T8525] team0: Port device xfrm0 added
[   99.671937][ T8543] lo speed is unknown, defaulting to 1000
[   99.675474][ T8543] lo speed is unknown, defaulting to 1000
[   99.688658][ T8543] lo speed is unknown, defaulting to 1000
[   99.691690][ T8543] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   99.697526][ T8543] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   99.703914][ T8543] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   99.716384][ T8543] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   99.726211][ T8543] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   99.745809][ T8543] lo speed is unknown, defaulting to 1000
[   99.751884][ T8543] lo speed is unknown, defaulting to 1000
[   99.755765][ T8543] lo speed is unknown, defaulting to 1000
[  100.544014][ T8619] netlink: 'syz.0.1249': attribute type 83 has an invalid length.
[  100.691290][ T8637] xt_cgroup: xt_cgroup: no path or classid specified
[  100.783732][ T8644] ieee802154 phy0 wpan0: encryption failed: -22
[  101.620872][ T8673] 8021q: adding VLAN 0 to HW filter on device bond6
[  101.858308][ T8688] net_ratelimit: 29 callbacks suppressed
[  101.858318][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.867621][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.871354][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.874907][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.878429][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.882644][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.885702][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.888872][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.892753][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.896268][ T8688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  101.979505][ T8692] __nla_validate_parse: 8 callbacks suppressed
[  101.979519][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'.
[  102.026144][ T8694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1283'.
[  102.045096][ T8696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1284'.
[  102.069339][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  102.170351][ T8706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1289'.
[  102.437372][ T8723] bond2: entered allmulticast mode
[  102.440927][ T8723] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.530306][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'.
[  102.725483][ T8751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1307'.
[  102.893499][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'.
[  103.038389][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1319'.
[  104.035622][ T8787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.252552][ T8819] SET target dimension over the limit!
[  104.255205][ T8819] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002
[  104.265417][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1338'.
[  104.272692][ T8819] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  104.338737][ T8825] tc_dump_action: action bad kind
[  104.393736][ T8829] ip6tnl2: entered allmulticast mode
[  104.485977][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'.
[  105.144898][ T8874] lo: Caught tx_queue_len zero misconfig
[  105.371749][ T8886] bond7: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  105.383844][ T8886] bond7 (unregistering): Released all slaves
[  105.555346][ T8907] wg2 speed is unknown, defaulting to 1000
[  105.562574][ T8907] wg2 speed is unknown, defaulting to 1000
[  105.564869][ T8907] wg2 speed is unknown, defaulting to 1000
[  105.567126][ T8907] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  105.574975][ T8907] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  105.583171][ T8907] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  105.601529][ T8907] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  105.645605][ T8907] wg2 speed is unknown, defaulting to 1000
[  105.657508][ T8907] wg2 speed is unknown, defaulting to 1000
[  105.664540][ T8907] wg2 speed is unknown, defaulting to 1000
[  105.778722][ T8931] syzkaller0: entered promiscuous mode
[  105.780659][ T8931] syzkaller0: entered allmulticast mode
[  105.891190][ T8946] xt_hashlimit: size too large, truncated to 1048576
[  106.009041][ T8957] netlink: 'syz.0.1402': attribute type 8 has an invalid length.
[  106.216693][ T8977] syzkaller0: entered promiscuous mode
[  106.218471][ T8977] syzkaller0: entered allmulticast mode
[  106.607072][ T9015] netlink: 'syz.2.1429': attribute type 13 has an invalid length.
[  106.624754][ T9015] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  106.631612][ T9015] syzkaller0: entered promiscuous mode
[  106.633561][ T9015] syzkaller0: entered allmulticast mode
[  106.649630][ T6961] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  107.134432][ T9030] SET target dimension over the limit!
[  107.190246][ T6948] net_ratelimit: 186 callbacks suppressed
[  107.190257][ T6948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.330153][ T9036] __nla_validate_parse: 9 callbacks suppressed
[  107.330176][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'.
[  107.350490][ T6961] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  108.027643][ T8977] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  108.116148][ T9053] macsec1: entered promiscuous mode
[  108.117888][ T9053] dummy0: entered promiscuous mode
[  108.119847][ T9053] macsec1: entered allmulticast mode
[  108.121561][ T9053] dummy0: entered allmulticast mode
[  108.126651][ T9053] dummy0: left allmulticast mode
[  108.134298][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'.
[  108.144588][ T6948] dummy0: left promiscuous mode
[  108.147379][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1444'.
[  108.318540][ T9070] syzkaller1: entered promiscuous mode
[  108.320577][ T9070] syzkaller1: entered allmulticast mode
[  108.418499][ T9077] netlink: 'syz.1.1454': attribute type 1 has an invalid length.
[  108.441682][ T9077] bond4: entered promiscuous mode
[  108.443599][ T9077] 8021q: adding VLAN 0 to HW filter on device bond4
[  108.458745][ T9077] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  108.462763][ T9077] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  108.465958][ T9077] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  108.481693][ T9082] netlink: 'syz.2.1456': attribute type 3 has an invalid length.
[  108.772574][ T5350] netdevsim netdevsim2 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  108.782036][ T5350] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  108.844504][ T9113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1468'.
[  109.037534][ T9130] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1474'.
[  109.095406][ T9134] netlink: zone id is out of range
[  109.097483][ T9134] netlink: zone id is out of range
[  109.100161][ T9134] netlink: zone id is out of range
[  109.102273][ T9134] netlink: zone id is out of range
[  109.104449][ T9134] netlink: zone id is out of range
[  109.106630][ T9134] netlink: zone id is out of range
[  109.108744][ T9134] netlink: zone id is out of range
[  109.113287][ T9134] netlink: zone id is out of range
[  109.115460][ T9134] netlink: zone id is out of range
[  109.218220][ T9136] batman_adv: batadv0: Interface deactivated: wlan0
[  109.477252][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88817337e800: rx timeout, send abort
[  109.710158][ T9117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  109.848371][ T9183] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1482'.
[  109.926212][ T9189] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  109.979964][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88817337e800: abort rx timeout. Force session deactivation
[  110.050170][ T9197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.078899][ T9202] veth0: entered promiscuous mode
[  110.082347][ T9203] pim6reg1: entered promiscuous mode
[  110.084466][ T9203] pim6reg1: entered allmulticast mode
[  110.087719][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'.
[  110.102526][ T9202] bond0: (slave bond_slave_1): Releasing backup interface
[  110.106978][ T9197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.183263][ T9208] dummy0: Caught tx_queue_len zero misconfig
[  110.207419][ T9200] veth0: left promiscuous mode
[  110.371953][ T9206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.393595][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'.
[  110.644842][ T9243] syzkaller0: entered promiscuous mode
[  110.647010][ T9243] syzkaller0: entered allmulticast mode
[  110.782173][ T9257] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1516'.
[  111.431596][ T9298] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1536'.
[  111.526351][ T9310] netlink: 'syz.2.1542': attribute type 1 has an invalid length.
[  111.528858][ T9310] netlink: 'syz.2.1542': attribute type 12 has an invalid length.
[  111.682798][ T9325] sctp: [Deprecated]: syz.0.1549 (pid 9325) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.682798][ T9325] Use struct sctp_sack_info instead
[  112.657992][ T9371] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  112.691987][ T9375] __nla_validate_parse: 5 callbacks suppressed
[  112.691997][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'.
[  112.700588][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'.
[  112.731448][ T9369] bond0: Caught tx_queue_len zero misconfig
[  112.774907][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'.
[  112.787935][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'.
[  112.824234][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'.
[  113.047737][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1583'.
[  113.135215][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'.
[  113.600607][ T6961] net_ratelimit: 9 callbacks suppressed
[  113.600621][ T6961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  113.606274][ T6961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.398360][ T9483] lo speed is unknown, defaulting to 1000
[  114.403273][ T9483] wg2 speed is unknown, defaulting to 1000
[  114.444929][ T9488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.448188][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  114.581926][ T9499] syzkaller0: entered promiscuous mode
[  114.584427][ T9499] syzkaller0: entered allmulticast mode
[  114.998820][ T9532] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1644'.
[  115.164349][ T9542] netlink: 'syz.2.1649': attribute type 4 has an invalid length.
[  115.171783][ T9542] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1649'.
[  115.338431][ T9557] set match dimension is over the limit!
[  115.397068][ T9564] Bluetooth: MGMT ver 1.23
[  115.442339][ T9570] batadv_slave_0: Caught tx_queue_len zero misconfig
[  115.568714][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1671'.
[  115.647528][ T9591] syzkaller0: entered promiscuous mode
[  115.650943][ T9591] syzkaller0: entered allmulticast mode
[  115.666614][ T9591] simple: bas]9oς>Q/ic_2
[  115.668907][ T9591] simple: bas]9oς>Q/ic_4
[  115.670526][ T9591] simple: bas]9oς>Q/ic_6
[  115.672323][ T9591] simple: bas]9oς>Q/ic_8
[  115.673833][ T9591] simple: bas]9oς>Q/ic_10
[  115.675339][ T9591] simple: bas]9oς>Q/ic_12
[  115.676936][ T9591] simple: bas]9oς>Q/ic_14
[  115.678557][ T9591] simple: bas]9oς>Q/ic_16
[  115.680299][ T9591] simple: bas]9oς>Q/ic_18
[  115.681927][ T9591] simple: bas]9oς>Q/ic_20
[  115.683447][ T9591] simple: bas]9oς>Q/ic_22
[  115.684958][ T9591] simple: bas]9oς>Q/ic_24
[  115.686523][ T9591] simple: bas]9oς>Q/ic_26
[  115.688147][ T9591] simple: bas]9oς>Q/ic_28
[  115.689699][ T9591] simple: bas]9oς>Q/ic_30
[  115.691239][ T9591] simple: bas]9oς>Q/ic_32
[  115.692754][ T9591] simple: bas]9oς>Q/ic_34
[  115.694278][ T9591] simple: bas]9oς>Q/ic_36
[  115.695850][ T9591] simple: bas]9oς>Q/ic_38
[  115.697422][ T9591] simple: bas]9oς>Q/ic_40
[  115.699202][ T9591] simple: bas]9oς>Q/ic_42
[  115.701167][ T9591] simple: bas]9oς>Q/ic_44
[  115.702879][ T9591] simple: bas]9oς>Q/ic_46
[  115.704424][ T9591] simple: bas]9oς>Q/ic_48
[  115.705930][ T9591] simple: bas]9oς>Q/ic_50
[  115.707449][ T9591] simple: bas]9oς>Q/ic_52
[  115.708911][ T9591] simple: bas]9oς>Q/ic_54
[  115.710501][ T9591] simple: bas]9oς>Q/ic_56
[  115.712493][ T9591] simple: bas]9oς>Q/ic_58
[  115.714114][ T9591] simple: bas]9oς>Q/ic_60
[  115.715643][ T9591] simple: bas]9oς>Q/ic_62
[  115.717188][ T9591] simple: bas]9oς>Q/ic_64
[  115.718705][ T9591] TC_ACT_REPEAT abuse ?
[  115.783897][ T9599] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  115.793865][ T6954] IPVS: starting estimator thread 0...
[  115.879488][ T9606] IPVS: using max 44 ests per chain, 105600 per kthread
[  115.893015][ T9609] netlink: 'syz.2.1681': attribute type 13 has an invalid length.
[  115.985925][ T9617] syzkaller1: entered promiscuous mode
[  115.988974][ T9617] syzkaller1: entered allmulticast mode
[  116.295147][ T9655] sch_tbf: peakrate 11 is lower than or equals to rate 2048 !
[  116.332177][ T9659] gretap0: entered promiscuous mode
[  116.352374][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.356243][ T9659] 8021q: adding VLAN 0 to HW filter on device team0
[  116.363531][ T9659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.416176][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.420341][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.427581][ T9659] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  116.435771][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.438160][ T6882] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.443956][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.446254][ T6882] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.487239][ T9666] vxcan2: entered allmulticast mode
[  116.586426][ T9673] bridge6: entered promiscuous mode
[  116.588259][ T9673] bridge6: entered allmulticast mode
[  116.617063][ T9677] 8021q: adding VLAN 0 to HW filter on device bond5
[  117.254160][ T9751] team0: Caught tx_queue_len zero misconfig
[  117.401389][ T9763] ip6tnl2: entered allmulticast mode
[  117.406020][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  117.408717][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  117.431477][ T6961] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  117.469545][ T6961] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  117.759457][ T6961] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  118.079168][ T9817] netlink: 'syz.1.1773': attribute type 2 has an invalid length.
[  118.086454][ T9817] __nla_validate_parse: 9 callbacks suppressed
[  118.086464][ T9817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1773'.
[  118.123936][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1774'.
[  118.126894][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1774'.
[  118.266451][ T9834] netlink: del zone limit has 8 unknown bytes
[  118.317510][ T9838] syzkaller1: entered promiscuous mode
[  118.319511][ T9838] syzkaller1: entered allmulticast mode
[  118.577448][ T9846] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1786'.
[  118.586404][ T9848] tipc: Started in network mode
[  118.588807][ T9848] tipc: Node identity fa1a73acd394, cluster identity 4711
[  118.599602][ T9848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.604935][ T9848] syzkaller0: entered promiscuous mode
[  118.607251][ T9848] syzkaller0: entered allmulticast mode
[  118.613595][ T9848] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  118.642109][ T9848] tipc: Resetting bearer <eth:syzkaller0>
[  118.647212][ T9847] tipc: Resetting bearer <eth:syzkaller0>
[  118.664795][ T9847] tipc: Disabling bearer <eth:syzkaller0>
[  118.724670][ T6962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.727297][ T6962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.814413][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.817461][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.026675][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.047251][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.089061][ T9854] vlan0: left promiscuous mode
[  119.094988][ T9854] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  119.098569][ T9854] vti0: left promiscuous mode
[  119.101085][ T9854] geneve2: left promiscuous mode
[  119.102743][ T9854] geneve2: left allmulticast mode
[  119.104705][ T9854] bridge3: left promiscuous mode
[  119.106376][ T9854] bridge3: left allmulticast mode
[  119.131083][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'.
[  119.138560][ T9854] bond2: left allmulticast mode
[  119.145049][ T9854] bond4: left promiscuous mode
[  119.222609][ T9895] openvswitch: netlink: Actions may not be safe on all matching packets
[  119.451767][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'.
[  119.584556][ T9935] syzkaller0: entered promiscuous mode
[  119.586421][ T9935] syzkaller0: entered allmulticast mode
[  119.660485][ T9937] IPv6: NLM_F_CREATE should be specified when creating new route
[  119.775611][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1826'.
[  120.358305][ T9958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.364174][ T9958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.367552][ T9958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.377156][ T9958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.386511][ T9958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.390494][ T9958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.394152][ T9958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.416619][ T9958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1831'.
[  120.465707][ T9968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1836'.
[  120.587973][ T9978] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1841'.
[  120.629343][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  120.887539][T10008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.926457][T10008] tipc: Resetting bearer <eth:syzkaller0>
[  120.935584][T10006] tipc: Resetting bearer <eth:syzkaller0>
[  121.189397][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  121.863935][T10006] tipc: Disabling bearer <eth:syzkaller0>
[  121.956618][T10038] netlink: 'syz.2.1867': attribute type 322 has an invalid length.
[  122.151926][T10062] netlink: 'syz.0.1879': attribute type 1 has an invalid length.
[  122.233001][T10069] --map-set only usable from mangle table
[  122.344104][T10079] netlink: 'syz.2.1887': attribute type 8 has an invalid length.
[  122.443774][T10085] netlink: 'syz.2.1890': attribute type 1 has an invalid length.
[  123.021805][T10121] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  123.258278][T10132] __nla_validate_parse: 6 callbacks suppressed
[  123.258290][T10132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'.
[  123.283639][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1911'.
[  123.394609][T10136] syzkaller0: entered promiscuous mode
[  123.396508][T10136] syzkaller0: entered allmulticast mode
[  123.754415][T10160] netlink: 'syz.2.1925': attribute type 1 has an invalid length.
[  123.816522][T10164] netlink: 'syz.1.1927': attribute type 28 has an invalid length.
[  123.819102][T10164] netlink: 'syz.1.1927': attribute type 3 has an invalid length.
[  123.821674][T10164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1927'.
[  124.007915][T10181] gre0: Caught tx_queue_len zero misconfig
[  124.069900][    C1] net_ratelimit: 54 callbacks suppressed
[  124.069909][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.090805][T10193] bond0: Caught tx_queue_len zero misconfig
[  124.247997][T10204] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1946'.
[  124.254184][T10204] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1946'.
[  124.469640][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.473773][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.488425][T10227] TCP: TCP_TX_DELAY enabled
[  124.629737][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'.
[  125.117372][T10255] netlink: 'syz.1.1970': attribute type 83 has an invalid length.
[  125.355967][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1981'.
[  125.369044][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'.
[  125.372637][T10277] netlink: 'syz.1.1981': attribute type 1 has an invalid length.
[  125.397808][T10281] netlink: 'syz.2.1983': attribute type 1 has an invalid length.
[  125.401338][T10281] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1983'.
[  125.777933][T10326] syzkaller0: entered promiscuous mode
[  125.789661][T10326] syzkaller0: entered allmulticast mode
[  125.902516][T10337] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2010'.
[  126.091187][   T33] audit: type=1107 audit(1785125414.644:3): pid=10346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  126.117670][T10351] openvswitch: netlink: IPv4 tunnel dst address is zero
[  126.283537][T10362] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  126.524035][T10381] bond0: ARP target 0.0.0.2 is already present
[  126.526238][T10381] bond0: option arp_ip_target: invalid value (33554432)
[  126.645710][T10395] batman_adv: batadv0: Adding interface: dummy0
[  126.652710][T10395] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  126.671789][T10395] batman_adv: batadv0: Interface activated: dummy0
[  126.685780][T10397] netlink: 'syz.1.2039': attribute type 3 has an invalid length.
[  127.321626][T10448] lo speed is unknown, defaulting to 1000
[  127.327146][T10448] wg2 speed is unknown, defaulting to 1000
[  127.419549][T10448] lo: Caught tx_queue_len zero misconfig
[  127.509567][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.754857][T10460] netlink: 'syz.2.2064': attribute type 2 has an invalid length.
[  127.758255][T10460] netlink: 'syz.2.2064': attribute type 2 has an invalid length.
[  127.927823][T10471] netlink: 'syz.1.2069': attribute type 1 has an invalid length.
[  127.981449][T10481] batman_adv: batadv0: Adding interface: dummy0
[  127.983550][T10481] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  127.994177][T10481] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  128.312458][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.316288][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.320169][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.323446][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.381462][T10493] xfrm0 speed is unknown, defaulting to 1000
[  128.387911][T10493] xfrm0 speed is unknown, defaulting to 1000
[  128.394524][T10493] xfrm0 speed is unknown, defaulting to 1000
[  128.517051][T10497] __nla_validate_parse: 8 callbacks suppressed
[  128.517059][T10497] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2081'.
[  128.535216][T10493] infiniband syz0: set down
[  128.537790][ T5659] xfrm0 speed is unknown, defaulting to 1000
[  128.540184][T10493] infiniband syz0: added xfrm0
[  128.549762][T10493] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  128.554366][T10493] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  128.559825][T10493] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  128.575903][T10493] RDS/IB: syz0: added
[  128.579618][T10493] smc: adding ib device syz0 with port count 1
[  128.581851][T10493] smc:    ib device syz0 port 1 has no pnetid
[  128.585796][T10502] tc_dump_action: action bad kind
[  128.590874][T10493] xfrm0 speed is unknown, defaulting to 1000
[  128.594314][ T5659] xfrm0 speed is unknown, defaulting to 1000
[  128.697431][T10493] xfrm0 speed is unknown, defaulting to 1000
[  128.790956][T10493] xfrm0 speed is unknown, defaulting to 1000
[  128.949350][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  129.395356][T10518] netlink: 'syz.2.2087': attribute type 1 has an invalid length.
[  129.453107][T10518] bond7: entered promiscuous mode
[  129.456145][T10518] 8021q: adding VLAN 0 to HW filter on device bond7
[  129.493612][T10518] 8021q: adding VLAN 0 to HW filter on device bond7
[  129.499639][T10518] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  129.503885][T10518] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  129.512527][T10518] bond7: (slave ip6gre1): making interface the new active one
[  129.517307][T10518] ip6gre1: entered promiscuous mode
[  129.530856][T10518] bond7: (slave ip6gre1): Enslaving as an active interface with an up link
[  129.964564][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'.
[  130.169900][T10569] netlink: 'syz.2.2108': attribute type 1 has an invalid length.
[  130.203115][T10571] ip6gre2: entered promiscuous mode
[  130.204859][T10571] ip6gre2: entered allmulticast mode
[  130.209606][ T5496] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  130.213716][ T5496] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  130.229607][ T6961] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  130.399485][ T6961] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  130.439466][ T6961] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  131.065683][T10596] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2121'.
[  131.217218][T10609] gretap0: left promiscuous mode
[  131.234464][T10609] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.237504][T10609] 8021q: adding VLAN 0 to HW filter on device team0
[  131.243901][T10609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.270975][T10609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.276922][T10609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.284453][T10609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  131.288248][T10609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  131.296525][T10609] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  131.308113][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.311042][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.316550][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.319794][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.365062][ T6962] xfrm0 speed is unknown, defaulting to 1000
[  131.375469][ T6962] syz0: Port: 1 Link ACTIVE
[  131.398177][ T6962] xfrm0 speed is unknown, defaulting to 1000
[  131.408960][T10606] lo speed is unknown, defaulting to 1000
[  131.434289][T10606] wg2 speed is unknown, defaulting to 1000
[  131.470056][T10606] xfrm0 speed is unknown, defaulting to 1000
[  131.733249][T10623] syzkaller0: entered promiscuous mode
[  131.735080][T10623] syzkaller0: entered allmulticast mode
[  131.783846][T10632] bridge6: the hash_elasticity option has been deprecated and is always 16
[  132.790415][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  132.947344][T10751] sit0: Caught tx_queue_len zero misconfig
[  134.072098][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.075439][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.078757][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.082112][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.086032][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.089177][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.092348][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.095371][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.389390][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  134.709685][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.594877][T10723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.800684][T10779] syzkaller0: entered promiscuous mode
[  135.803159][T10779] syzkaller0: entered allmulticast mode
[  135.842707][T10785] netlink: 'syz.2.2182': attribute type 4 has an invalid length.
[  135.878028][T10787] syz_tun: entered allmulticast mode
[  135.931415][T10786] syz_tun: left allmulticast mode
[  136.049688][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2189'.
[  136.092412][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2192'.
[  136.099478][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2192'.
[  136.137554][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2194'.
[  136.140478][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2194'.
[  136.211086][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2194'.
[  136.214089][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2194'.
[  136.255037][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2202'.
[  136.358711][T10832] netlink: 'syz.0.2206': attribute type 1 has an invalid length.
[  136.523591][T10851] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2215'.
[  136.527696][T10851] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2215'.
[  136.575955][T10856] batadv0: entered promiscuous mode
[  136.581934][T10856] net_ratelimit: 2 callbacks suppressed
[  136.581946][T10856] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  136.747093][T10881] ip6gre1: entered promiscuous mode
[  136.749075][T10881] ip6gre1: entered allmulticast mode
[  136.755287][T10881] netlink: 'syz.1.2228': attribute type 6 has an invalid length.
[  136.769919][T10881] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  136.773160][T10881] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  136.817387][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.834475][T10887] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.145073][T10913] ip6tnl0: Caught tx_queue_len zero misconfig
[  137.193100][T10917] syzkaller0: entered promiscuous mode
[  137.194887][T10917] syzkaller0: entered allmulticast mode
[  137.528245][T10934] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  137.534433][T10934] bond8 (unregistering): Released all slaves
[  137.752768][T10946] netlink: 'syz.2.2254': attribute type 23 has an invalid length.
[  137.775670][T10946] netlink: 'syz.2.2254': attribute type 1 has an invalid length.
[  138.122410][T10954] IPVS: lc: FWM 3 0x00000003 - no destination available
[  138.125074][T10954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.173944][T10958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.176800][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.180605][T10958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.184059][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.186944][T10958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.189900][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.192790][T10958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.535829][T10968] netlink: 'syz.2.2266': attribute type 1 has an invalid length.
[  138.570247][T10968] 8021q: adding VLAN 0 to HW filter on device bond8
[  138.607293][T10968] bond8: (slave geneve0): making interface the new active one
[  138.610792][T10968] bond8: (slave geneve0): Enslaving as an active interface with an up link
[  138.613625][ T5658] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.620446][ T5658] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.623519][ T5658] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.981605][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881680d1400: rx timeout, send abort
[  138.985043][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881680d1400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  139.034477][ T5658] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.038397][T11014] ieee802154 phy1 wpan1: encryption failed: -22
[  139.039475][ T5658] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.048263][ T5658] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.115873][T11019] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  139.128340][T11019] bond5 (unregistering): Released all slaves
[  139.712278][T11087] Cannot find del_set index 4 as target
[  139.991378][T11109] netlink: 'syz.2.2332': attribute type 142 has an invalid length.
[  140.676022][T11145] syzkaller0: entered promiscuous mode
[  140.678403][T11145] syzkaller0: entered allmulticast mode
[  140.694403][T11145] tipc: Started in network mode
[  140.696591][T11145] tipc: Node identity f6c8e0a6a6f4, cluster identity 4711
[  140.700744][T11145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.705964][T11144] tipc: Resetting bearer <eth:syzkaller0>
[  140.733225][T11144] tipc: Disabling bearer <eth:syzkaller0>
[  140.791008][T11154] erspan1: entered allmulticast mode
[  140.908402][T11167] netlink: 'syz.2.2357': attribute type 1 has an invalid length.
[  141.243167][T11197] __nla_validate_parse: 17 callbacks suppressed
[  141.243180][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'.
[  141.324547][T11201] netlink: 'syz.2.2373': attribute type 1 has an invalid length.
[  141.348660][T11201] 8021q: adding VLAN 0 to HW filter on device bond9
[  141.593258][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'.
[  141.605383][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'.
[  141.732372][T11234] 8021q: VLANs not supported on lo
[  141.906963][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2396'.
[  143.032656][T11260] net_ratelimit: 903 callbacks suppressed
[  143.032669][T11260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.194652][ T5680] wg2 speed is unknown, defaulting to 1000
[  143.265471][T11279] bridge0: entered promiscuous mode
[  143.270192][T11279] bridge0: entered allmulticast mode
[  143.281612][T11279] team0: Device bridge0 is of different type
[  143.301579][T11293] syzkaller1: entered promiscuous mode
[  143.304948][T11293] syzkaller1: entered allmulticast mode
[  143.427859][T11297] bond5: entered promiscuous mode
[  143.496746][T11306] netlink: 'syz.2.2415': attribute type 4 has an invalid length.
[  143.505254][T11306] netlink: 'syz.2.2415': attribute type 4 has an invalid length.
[  143.515674][ T6962] lo speed is unknown, defaulting to 1000
[  143.518147][ T6962] syz2: Port: 1 Link ACTIVE
[  143.728211][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2426'.
[  143.758109][T11332] netlink: 'syz.0.2428': attribute type 24 has an invalid length.
[  143.830811][T11338] syzkaller0: entered promiscuous mode
[  143.833101][T11338] syzkaller0: entered allmulticast mode
[  143.994620][T11348] netlink: 'syz.0.2436': attribute type 1 has an invalid length.
[  144.870954][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.874142][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.877543][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.880999][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.953499][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.956878][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.959624][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.962369][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.116691][T11413] netlink: 'syz.2.2455': attribute type 10 has an invalid length.
[  145.120447][T11413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2455'.
[  145.124129][T11413] bond0: entered promiscuous mode
[  145.125868][T11413] bond_slave_0: entered promiscuous mode
[  145.129127][T11413] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.132533][T11413] bridge0: port 3(bond0) entered blocking state
[  145.135221][T11413] bridge0: port 3(bond0) entered disabled state
[  145.137819][T11413] bond0: entered allmulticast mode
[  145.144450][T11413] bond_slave_0: entered allmulticast mode
[  145.234937][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2459'.
[  145.504689][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'.
[  145.733026][T11462] netlink: 'syz.2.2476': attribute type 21 has an invalid length.
[  145.773826][T11466] batadv_slave_0: entered allmulticast mode
[  145.777605][T11466] batadv_slave_0: left allmulticast mode
[  145.943510][T11476] bond6: invalid ARP target 0.0.0.0 specified for addition
[  145.946501][T11476] bond6: option arp_ip_target: invalid value (0)
[  145.955421][T11476] bond6 (unregistering): Released all slaves
[  146.145930][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'.
[  146.348493][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2504'.
[  146.386183][T11523] xt_TCPMSS: Only works on TCP SYN packets
[  146.869130][T11547] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.872094][T11547] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.066317][T11547] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.195227][ T5659] xfrm0 speed is unknown, defaulting to 1000
[  147.198436][ T5659] syz0: Port: 1 Link DOWN
[  147.201598][ T5659] xfrm0 speed is unknown, defaulting to 1000
[  147.303655][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2524'.
[  147.422515][T11587] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.428050][T11584] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  147.438271][T11584] bond10 (unregistering): Released all slaves
[  148.024817][T11635] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  148.276813][T11589] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  148.284791][T11589] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  148.304211][T11589] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  148.307240][T11589] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  148.788379][T11682] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2566'.
[  148.795352][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'.
[  148.799682][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.939071][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2571'.
[  149.929373][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'.
[  150.054323][T11723] veth0_macvtap: Caught tx_queue_len zero misconfig
[  150.078247][T11724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.091709][T11724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.123527][T11721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.231219][T11733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.234811][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.257202][T11737] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2592'.
[  150.265833][T11737] vlan2: entered allmulticast mode
[  150.267562][T11737] gretap0: entered allmulticast mode
[  150.557032][T11749] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2598'.
[  150.713937][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.717203][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.719988][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.723014][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.117632][T11768] netlink: 'syz.2.2606': attribute type 11 has an invalid length.
[  151.216914][T11774] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2609'.
[  151.227025][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2610'.
[  151.273771][T11776] batman_adv: batadv0: Interface deactivated: dummy0
[  151.315328][T11782] xfrm0: Caught tx_queue_len zero misconfig
[  151.503331][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'.
[  151.961753][T11821] lo speed is unknown, defaulting to 1000
[  151.969065][T11821] wg2 speed is unknown, defaulting to 1000
[  151.982596][T11821] xfrm0 speed is unknown, defaulting to 1000
[  152.445547][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2643'.
[  152.450634][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2643'.
[  152.459125][T11853] netlink: 'syz.1.2643': attribute type 12 has an invalid length.
[  152.462303][T11853] netlink: 'syz.1.2643': attribute type 11 has an invalid length.
[  152.763535][T11869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2651'.
[  152.833253][T11874] netlink: 'syz.0.2653': attribute type 1 has an invalid length.
[  152.836355][T11874] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2653'.
[  153.014296][T11889] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2661'.
[  153.048557][T11887] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  153.053421][T11887] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.123428][T11887] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  153.126793][T11887] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.225153][T11887] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  153.233013][T11887] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.308804][T11887] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  153.313481][T11887] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.395668][ T5496] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  153.400663][ T5496] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.421399][ T5496] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  153.425697][ T5496] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.435510][ T5496] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  153.438878][ T5496] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.450999][ T5496] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  153.454329][ T5496] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.656335][T11929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2677'.
[  153.792354][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'.
[  153.798063][T11937] netlink: 'syz.0.2676': attribute type 10 has an invalid length.
[  154.130599][T11939] syzkaller1: entered promiscuous mode
[  154.132484][T11939] syzkaller1: entered allmulticast mode
[  154.405253][T11949] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  154.853317][T11990] net_ratelimit: 9 callbacks suppressed
[  154.853326][T11990] IPVS: lc: FWM 3 0x00000003 - no destination available
[  154.917125][T11998] batman_adv: batadv0: Removing interface: dummy0
[  154.935206][T11998] team0: Port device xfrm0 removed
[  154.945039][T11998] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  154.962847][T12005] netdevsim netdevsim2 : renamed from netdevsim0
[  154.981580][T11998] team0: Mode changed to "loadbalance"
[  155.314193][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2725'.
[  155.425091][T12052] syzkaller0: entered promiscuous mode
[  155.427451][T12052] syzkaller0: entered allmulticast mode
[  155.435717][T12052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.442149][T12052] tipc: Resetting bearer <eth:syzkaller0>
[  155.446049][T12050] tipc: Resetting bearer <eth:syzkaller0>
[  155.457269][T12050] tipc: Disabling bearer <eth:syzkaller0>
[  155.533200][T12058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2734'.
[  155.565092][T12063] pim6reg0: tun_chr_ioctl cmd 35111
[  155.795788][T12074] syzkaller0: entered promiscuous mode
[  155.797629][T12074] syzkaller0: entered allmulticast mode
[  156.076036][T12087] 0X: renamed from batadv0
[  156.078924][T12087] 0X: entered allmulticast mode
[  156.081539][T12087] 8021q: adding VLAN 0 to HW filter on device 60X
[  156.083884][T12087] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  157.639119][T12151] syzkaller0: entered promiscuous mode
[  157.643388][T12151] syzkaller0: entered allmulticast mode
[  158.015964][T12182] __nla_validate_parse: 3 callbacks suppressed
[  158.015976][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2791'.
[  158.041088][T12185] netlink: 'syz.0.2792': attribute type 12 has an invalid length.
[  158.125591][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2792'.
[  158.131188][T12190] macsec0: entered promiscuous mode
[  158.135845][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2792'.
[  158.146327][T12190] veth1_macvtap: left promiscuous mode
[  158.159977][T12190] macsec0 (unregistering): left promiscuous mode
[  158.238803][T12196] openvswitch: netlink: IP tunnel dst address not specified
[  158.241686][T12196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.407655][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2801'.
[  158.867517][T12233] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2815'.
[  158.894670][T12233] syzkaller1: entered promiscuous mode
[  158.897191][T12233] syzkaller1: entered allmulticast mode
[  158.933164][T12237] netlink: 'syz.0.2817': attribute type 1 has an invalid length.
[  158.963132][T12237] 8021q: adding VLAN 0 to HW filter on device bond6
[  158.982172][T12237] bond6: (slave veth5): Enslaving as an active interface with a down link
[  159.004834][T12237] 8021q: adding VLAN 0 to HW filter on device team0
[  159.026012][T12237] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  159.074165][T12237] 8021q: adding VLAN 0 to HW filter on device batadv2
[  159.081923][T12237] bond6: (slave batadv2): making interface the new active one
[  159.087208][T12237] batadv2: entered promiscuous mode
[  159.090410][T12237] bond6: (slave batadv2): Enslaving as an active interface with an up link
[  159.112629][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'.
[  159.411590][T12278] netlink: 'syz.1.2835': attribute type 13 has an invalid length.
[  159.425133][T12278] netlink: 'syz.1.2835': attribute type 13 has an invalid length.
[  159.428835][ T5658] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.437774][ T5658] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.442223][ T5658] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.463560][ T5658] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.543396][T12316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2856'.
[  160.839105][T12355] netlink: 'syz.0.2875': attribute type 4 has an invalid length.
[  160.842889][T12355] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2875'.
[  160.887212][T12359] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8
[  161.591046][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.594340][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.597749][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.601213][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.606199][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.609504][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.612594][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.615775][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.624041][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2902'.
[  161.674865][ T6789] block nbd2: Receive control failed (result -107)
[  161.963570][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2909'.
[  161.974579][T12438] netlink: 'syz.2.2911': attribute type 1 has an invalid length.
[  162.281082][T12462] syzkaller1: entered promiscuous mode
[  162.282811][T12462] syzkaller1: entered allmulticast mode
[  162.286199][T12462] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96
[  162.336979][T12466] syzkaller0: entered promiscuous mode
[  162.338920][T12466] syzkaller0: entered allmulticast mode
[  162.869471][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.480700][T12491] __nla_validate_parse: 4 callbacks suppressed
[  163.480710][T12491] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2936'.
[  163.490146][T12491] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2936'.
[  163.497343][T12491] netlink: 'syz.1.2936': attribute type 6 has an invalid length.
[  163.711589][T12519] xt_hashlimit: size too large, truncated to 1048576
[  163.735421][T12520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2947'.
[  163.743201][T12520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2947'.
[  163.750295][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2947'.
[  164.341005][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2964'.
[  164.434284][T12570] tipc: Can't bind to reserved service type 0
[  164.452653][T12570] bond10 (unregistering): Released all slaves
[  164.518292][T12583] macvlan0: entered promiscuous mode
[  164.522404][T12583] macvlan0: entered allmulticast mode
[  164.524805][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'.
[  164.530291][T12583] macvlan0 (unregistering): left promiscuous mode
[  164.532836][T12583] macvlan0 (unregistering): left allmulticast mode
[  164.765573][T12591] netlink: 'syz.1.2979': attribute type 3 has an invalid length.
[  164.881180][T12602] lo speed is unknown, defaulting to 1000
[  164.883722][T12602] wg2 speed is unknown, defaulting to 1000
[  164.887761][T12602] xfrm0 speed is unknown, defaulting to 1000
[  165.429816][T12622] syzkaller1: entered promiscuous mode
[  165.434978][T12622] syzkaller1: entered allmulticast mode
[  165.512566][T12629] block nbd0: must specify backend
[  165.594714][T12633] netlink: 'syz.2.2997': attribute type 2 has an invalid length.
[  165.674506][T12643] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3002'.
[  165.773056][T12657] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3009'.
[  166.629886][   T26] net_ratelimit: 5 callbacks suppressed
[  166.629896][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.634290][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.637196][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.640001][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.848402][T12700] netlink: 'syz.1.3026': attribute type 23 has an invalid length.
[  166.971239][T12704] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.3028'.
[  167.353054][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.356484][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.359879][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.363207][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.656082][T12721] bridge0: port 3(bond0) entered blocking state
[  167.658620][T12721] bridge0: port 3(bond0) entered listening state
[  167.685814][T12721] netlink: 'syz.2.3036': attribute type 1 has an invalid length.
[  167.688906][T12721] netlink: 'syz.2.3036': attribute type 2 has an invalid length.
[  167.967079][T12754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.991596][T12758] batman_adv: batadv0: Adding interface: vlan3
[  167.999527][T12758] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  168.145398][T12760] smbdirect: ib_dev[syz1] removed
[  168.498824][T12784] __nla_validate_parse: 2 callbacks suppressed
[  168.498838][T12784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3066'.
[  169.007670][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3080'.
[  169.448050][T12857] veth8: entered allmulticast mode
[  169.495764][T12859] tipc: Enabling of bearer <utp:s> rejected, media not registered
[  170.044985][T12920] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3129'.
[  170.137853][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3133'.
[  170.175007][T12934] syzkaller0: entered promiscuous mode
[  170.176959][T12934] syzkaller0: entered allmulticast mode
[  170.270362][T12945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3138'.
[  170.300771][   T13] batadv2: left promiscuous mode
[  170.373256][T12953] netlink: 'syz.2.3144': attribute type 1 has an invalid length.
[  170.402239][T12957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3145'.
[  170.406214][T12953] 8021q: adding VLAN 0 to HW filter on device bond10
[  170.574721][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3155'.
[  171.037812][T13016] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  171.040557][T13016] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  171.078804][T13018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.090115][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3174'.
[  171.673382][T13050] netlink: 'syz.2.3185': attribute type 13 has an invalid length.
[  171.708608][T13050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.712770][T13050] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  171.719892][T13050] syzkaller0: entered promiscuous mode
[  171.721695][T13050] syzkaller0: entered allmulticast mode
[  171.727865][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3185'.
[  171.735196][T13050] tipc: Resetting bearer <eth:syzkaller0>
[  171.740469][T13049] tipc: Resetting bearer <eth:syzkaller0>
[  171.752806][T13049] tipc: Disabling bearer <eth:syzkaller0>
[  171.940757][T13067] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3191'.
[  172.009189][T13071] bond0: Caught tx_queue_len zero misconfig
[  172.204783][T13074] lo: Caught tx_queue_len zero misconfig
[  172.389398][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.471366][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.474277][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.477151][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.479735][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.483299][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.485991][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.488678][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.491283][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.536120][T13094] batadv0: Caught tx_queue_len zero misconfig
[  172.727275][T13108] syzkaller0: entered promiscuous mode
[  172.729102][T13108] syzkaller0: entered allmulticast mode
[  174.040414][T13143] __nla_validate_parse: 3 callbacks suppressed
[  174.040425][T13143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3227'.
[  174.075570][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3229'.
[  174.142156][T13159] netlink: 'syz.2.3234': attribute type 16 has an invalid length.
[  174.213567][T13165] netlink: 'syz.1.3237': attribute type 10 has an invalid length.
[  174.242402][T13169] netlink: 'syz.2.3238': attribute type 1 has an invalid length.
[  174.272938][T13169] bond11: entered promiscuous mode
[  174.275541][T13169] 8021q: adding VLAN 0 to HW filter on device bond11
[  174.299559][T13169] 8021q: adding VLAN 0 to HW filter on device bond11
[  174.302702][T13169] bond11: (slave gre2): The slave device specified does not support setting the MAC address
[  174.306982][T13169] bond11: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  174.314027][T13169] bond11: (slave gre2): making interface the new active one
[  174.317181][T13169] gre2: entered promiscuous mode
[  174.320732][T13169] bond11: (slave gre2): Enslaving as an active interface with an up link
[  174.338958][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3238'.
[  174.353334][T13169] bond11 (unregistering): (slave gre2): Releasing backup interface
[  174.356111][T13169] gre2: left promiscuous mode
[  174.358509][T13169] bond11 (unregistering): Released all slaves
[  174.576578][T13194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.660679][T13198] 8021q: adding VLAN 0 to HW filter on device team0
[  174.663665][T13198] batman_adv: batadv0: Interface activated: dummy0
[  174.680171][T13198] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.700662][T13198] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.714307][T13198] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.728999][T13198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  174.735553][ T5659] batman_adv: batadv0: Interface activated: vlan3
[  174.750670][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.752985][ T6882] bridge0: port 1(bridge_slave_0) entered listening state
[  174.756131][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.758474][ T6882] bridge0: port 2(bridge_slave_1) entered listening state
[  174.877600][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'.
[  174.878334][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'.
[  174.883786][T13212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3257'.
[  175.071999][T13239] netlink: 'syz.1.3270': attribute type 2 has an invalid length.
[  175.112343][T13241] netlink: 'syz.1.3273': attribute type 1 has an invalid length.
[  175.127651][T13241] bond7: entered promiscuous mode
[  175.130261][T13241] 8021q: adding VLAN 0 to HW filter on device bond7
[  175.148520][T13241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3273'.
[  175.155556][T13241] bond7: entered allmulticast mode
[  175.166786][T13241] bond7: (slave bridge9): making interface the new active one
[  175.169526][T13241] bridge9: entered promiscuous mode
[  175.171723][T13241] bridge9: entered allmulticast mode
[  175.174401][T13241] bond7: (slave bridge9): Enslaving as an active interface with an up link
[  175.227795][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3277'.
[  175.392594][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3287'.
[  175.568687][T13280] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.572760][T13280] 8021q: adding VLAN 0 to HW filter on device team0
[  175.640770][T13291] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3293'.
[  175.723239][T13280] batman_adv: 60X: Interface activated: batadv_slave_1
[  175.738370][T13280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  175.749363][T13280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.763513][ T3041] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.766454][ T3041] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.777931][ T3041] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.780711][ T3041] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.818404][ T5659] xfrm0 speed is unknown, defaulting to 1000
[  175.825348][ T5659] syz0: Port: 1 Link ACTIVE
[  175.862894][ T5659] xfrm0 speed is unknown, defaulting to 1000
[  176.215782][T13322] xt_hashlimit: size too large, truncated to 1048576
[  176.868408][T13367] syzkaller1: entered promiscuous mode
[  176.875705][T13367] syzkaller1: entered allmulticast mode
[  176.907644][T13371] netlink: 'syz.0.3326': attribute type 11 has an invalid length.
[  177.228314][T13399] : renamed from bond_slave_0 (while UP)
[  177.752783][ T6962] net_ratelimit: 110 callbacks suppressed
[  177.752792][ T6962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.879873][T13001] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  178.076567][T13494] netlink: 'syz.2.3373': attribute type 2 has an invalid length.
[  178.229783][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.233018][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.235625][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.238575][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.241787][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.244861][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.247745][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.250449][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.275465][T13505] xt_hashlimit: max too large, truncated to 1048576
[  178.278050][T13505] xt_hashlimit: overflow, try lower: 2/0
[  181.094939][T13510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.120946][T13510] syzkaller0: entered promiscuous mode
[  181.123012][T13510] syzkaller0: entered allmulticast mode
[  181.132157][T13510] tipc: Resetting bearer <eth:syzkaller0>
[  181.167013][T13509] tipc: Resetting bearer <eth:syzkaller0>
[  181.219151][T13509] tipc: Disabling bearer <eth:syzkaller0>
[  181.487092][T13527] __nla_validate_parse: 4 callbacks suppressed
[  181.487105][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'.
[  181.494701][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3388'.
[  181.498552][T13525] syzkaller1: entered promiscuous mode
[  181.502466][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'.
[  181.505396][T13525] syzkaller1: entered allmulticast mode
[  181.507423][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3388'.
[  181.622522][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'.
[  181.825362][T13539] xt_hashlimit: size too large, truncated to 1048576
[  182.658144][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3397'.
[  182.668751][T13001] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0
[  182.672447][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3397'.
[  182.675972][T13001] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.681999][T13001] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.761092][T13485] net_ratelimit: 14 callbacks suppressed
[  182.761107][T13485] Set syz1 is full, maxelem 65536 reached
[  182.768494][T13557] lo speed is unknown, defaulting to 1000
[  182.781734][T13557] lo speed is unknown, defaulting to 1000
[  182.787962][T13557] lo speed is unknown, defaulting to 1000
[  182.907535][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3405'.
[  182.966726][T13569] syzkaller0: entered promiscuous mode
[  182.972730][T13569] syzkaller0: entered allmulticast mode
[  182.984938][T13557] infiniband syz1: set active
[  182.986819][ T5659] lo speed is unknown, defaulting to 1000
[  182.989166][T13557] infiniband syz1: added lo
[  182.998486][T13557] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  183.004339][T13557] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  183.011014][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  183.016749][T13557] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  183.054296][T13557] RDS/IB: syz1: added
[  183.062658][T13557] smc: adding ib device syz1 with port count 1
[  183.076264][T13557] smc:    ib device syz1 port 1 has no pnetid
[  183.079150][ T6962] lo speed is unknown, defaulting to 1000
[  183.086816][T13557] lo speed is unknown, defaulting to 1000
[  183.143579][T13581] syzkaller0: entered promiscuous mode
[  183.145573][T13581] syzkaller0: entered allmulticast mode
[  183.150114][T13581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3412'.
[  183.153529][T13581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3412'.
[  183.412691][T13557] lo speed is unknown, defaulting to 1000
[  183.531286][ T5496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  183.632512][T13557] lo speed is unknown, defaulting to 1000
[  183.666562][T13609] 8021q: adding VLAN 0 to HW filter on device bond8
[  183.735863][T13614] xt_NFQUEUE: number of total queues is 0
[  183.832185][ T6962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.990449][ T6962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.994225][ T6962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.000570][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.003934][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.007240][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.010547][ T3041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.350097][T13659] ipvlan0: Caught tx_queue_len zero misconfig
[  184.418014][T13665] pimreg: entered allmulticast mode
[  184.431033][T13662] pimreg: left allmulticast mode
[  184.543200][ T6962] lo speed is unknown, defaulting to 1000
[  184.873531][T13704] bond8: Unable to set peer notification delay as MII monitoring is disabled
[  184.877700][T13704] bond8 (unregistering): Released all slaves
[  185.168600][T13725] tipc: Cannot configure node identity twice
[  185.884589][T13763] tunl0: Caught tx_queue_len zero misconfig
[  186.178211][T13771] bond0: option arp_validate: invalid value (55553)
[  186.178430][ T5496] bond0: (slave bond_slave_1): interface is now down
[  186.200355][ T5496] bond0: now running without any active interface!
[  186.256239][T13776] netlink: 'syz.1.3501': attribute type 1 has an invalid length.
[  186.301511][T13776] 8021q: adding VLAN 0 to HW filter on device bond9
[  186.352187][T13776] bond9: (slave geneve3): making interface the new active one
[  186.359531][T13776] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  186.362630][ T5496] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.365986][ T5496] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.373351][ T5496] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.379311][ T5496] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.537415][T13798] __nla_validate_parse: 8 callbacks suppressed
[  186.537424][T13798] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3510'.
[  186.651548][T13807] sock: sock_timestamping_bind_phc: sock not bind to device
[  186.747768][T13818] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3518'.
[  186.864780][T13832] netlink: 'syz.1.3525': attribute type 2 has an invalid length.
[  186.876240][T13832] netlink: 'syz.1.3525': attribute type 11 has an invalid length.
[  186.882536][T13832] netlink: 4312 bytes leftover after parsing attributes in process `syz.1.3525'.
[  186.890218][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3525'.
[  187.358365][T13879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3543'.
[  187.367976][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3543'.
[  187.530188][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3552'.
[  187.533816][T13900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3552'.
[  187.537368][T13900] tc_dump_action: action bad kind
[  187.786260][T13916] SET target dimension over the limit!
[  187.791184][T13916] netlink: 'syz.0.3557': attribute type 10 has an invalid length.
[  188.129962][T13001] net_ratelimit: 25 callbacks suppressed
[  188.129977][T13001] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  188.371350][T13937] bond0: Error: Cannot enslave bond to itself.
[  188.504576][T13943] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  188.639693][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  188.671463][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3575'.
[  188.679453][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3575'.
[  188.933139][T13963] 0: renamed from hsr0 (while UP)
[  188.942790][T13963] 0: entered allmulticast mode
[  188.947957][T13963] hsr_slave_0: entered allmulticast mode
[  188.952390][T13963] hsr_slave_1: entered allmulticast mode
[  188.958379][T13963] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  189.165391][ T5496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  189.691981][ T5496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  189.912091][ T6961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.220555][T13001] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  190.377970][T14073] geneve2: entered promiscuous mode
[  190.380947][T14073] geneve2: entered allmulticast mode
[  190.685057][T14110] lo: entered allmulticast mode
[  190.691859][T14110] lo: left allmulticast mode
[  190.739649][ T5496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  191.042153][ T6882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.062991][T14145] netlink: 'syz.2.3661': attribute type 7 has an invalid length.
[  191.277866][ T6961] lo speed is unknown, defaulting to 1000
[  191.285813][ T6961] syz1: Port: 1 Link DOWN
[  191.287816][ T6961] lo speed is unknown, defaulting to 1000
[  191.513989][T14179] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1
[  192.003905][T14230] __nla_validate_parse: 9 callbacks suppressed
[  192.003914][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'.
[  192.202098][T14248] netlink: 'syz.0.3708': attribute type 29 has an invalid length.
[  192.205103][T14248] netlink: 'syz.0.3708': attribute type 1 has an invalid length.
[  192.215809][T14251] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.3709'.
[  192.218847][T14251] ip6gre0: Caught tx_queue_len zero misconfig
[  192.264283][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3711'.
[  193.158821][T14314] netlink: 'syz.1.3736': attribute type 1 has an invalid length.
[  193.162307][T14314] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3736'.
[  193.165446][T14314] netlink: 'syz.1.3736': attribute type 1 has an invalid length.
[  193.300693][ T5496] net_ratelimit: 9 callbacks suppressed
[  193.300702][ T5496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  193.576440][T14355] batadv_slave_1: entered promiscuous mode
[  193.581327][T14354] batadv_slave_1: left promiscuous mode
[  193.691049][   T33] audit: type=1804 audit(1785125482.254:4): pid=14368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3760" name="/newroot/1219/memory.events" dev="tmpfs" ino=6153 res=1 errno=0
[  193.706390][   T33] audit: type=1800 audit(1785125482.254:5): pid=14368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3760" name="memory.events" dev="tmpfs" ino=6153 res=0 errno=0
[  193.714805][   T33] audit: type=1804 audit(1785125482.254:6): pid=14368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3760" name="/newroot/1219/memory.events" dev="tmpfs" ino=6153 res=1 errno=0
[  193.749386][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.831725][ T5496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  193.851174][T14381] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  193.895677][T14385] syzkaller0: entered promiscuous mode
[  193.897462][T14385] syzkaller0: entered allmulticast mode
[  194.340159][ T5496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  194.491217][T14442] syzkaller0: entered promiscuous mode
[  194.494300][T14442] syzkaller0: entered allmulticast mode
[  194.631623][T14451] netlink: 768 bytes leftover after parsing attributes in process `syz.1.3800'.
[  194.791719][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.849957][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  194.947187][T14479] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  194.984658][T14468] sctp: [Deprecated]: syz.1.3807 (pid 14468) Use of int in max_burst socket option.
[  194.984658][T14468] Use struct sctp_assoc_value instead
[  195.041392][   T33] audit: type=1804 audit(1785125483.604:7): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3816" name="/newroot/1251/cgroup.controllers" dev="tmpfs" ino=6329 res=1 errno=0
[  195.050363][   T33] audit: type=1800 audit(1785125483.604:8): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3816" name="cgroup.controllers" dev="tmpfs" ino=6329 res=0 errno=0
[  195.084985][T14492] openvswitch: netlink: IP tunnel TTL not specified.
[  195.087237][T14492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.114195][T14494] netlink: 'syz.2.3819': attribute type 2 has an invalid length.
[  195.135091][T14494] D'|o: entered promiscuous mode
[  195.201728][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3822'.
[  195.384187][T14496] 0: left allmulticast mode
[  195.389183][T14496] hsr_slave_0: left allmulticast mode
[  195.392295][T14496] hsr_slave_1: left allmulticast mode
[  195.458619][T14496] geneve1: left promiscuous mode
[  195.463256][T14496] ipip0: left promiscuous mode
[  195.531070][T14496] vlan2: left allmulticast mode
[  195.537374][T14496] bridge1: left allmulticast mode
[  195.540443][T14496] bond0: left promiscuous mode
[  195.542007][T14496] gre1: left promiscuous mode
[  195.667315][T14496] veth3: left allmulticast mode
[  195.692294][T14496] ip6tnl2: left allmulticast mode
[  195.731287][T14496] bridge6: left promiscuous mode
[  195.735610][T14496] bridge6: left allmulticast mode
[  195.758158][T14496] bond5: left promiscuous mode
[  195.921208][T14496] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  195.927759][T14496] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  195.938897][T14496] geneve2: left promiscuous mode
[  195.944968][T14496] geneve2: left allmulticast mode
[  195.960052][ T5658] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.971951][ T5658] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.977980][ T5658] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.983101][ T5658] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.987705][ T5658] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.991498][ T5658] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.994895][ T5658] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  195.998323][ T5658] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.222029][T14532] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3836'.
[  196.239804][T14530] syzkaller0: entered promiscuous mode
[  196.242466][T14530] syzkaller0: entered allmulticast mode
[  196.640526][T14559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3849'.
[  196.684937][T14559] bond8: entered promiscuous mode
[  196.687089][T14559] bond8: entered allmulticast mode
[  196.775765][T14577] sctp: [Deprecated]: syz.0.3858 (pid 14577) Use of struct sctp_assoc_value in delayed_ack socket option.
[  196.775765][T14577] Use struct sctp_sack_info instead
[  196.792719][T14577] sctp: [Deprecated]: syz.0.3858 (pid 14577) Use of struct sctp_assoc_value in delayed_ack socket option.
[  196.792719][T14577] Use struct sctp_sack_info instead
[  196.837565][T14587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3863'.
[  196.847908][T14590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3864'.
[  196.851005][T14587] netlink: 'syz.1.3863': attribute type 4 has an invalid length.
[  196.854986][T14587] netlink: 'syz.1.3863': attribute type 1 has an invalid length.
[  196.905496][T14594] netlink: 'syz.1.3866': attribute type 1 has an invalid length.
[  196.978938][T14594] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  196.995002][T14604] geneve3: entered promiscuous mode
[  197.004949][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 53064 - 0
[  197.008335][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 53064 - 0
[  197.019189][T14594] veth8: entered promiscuous mode
[  197.025165][T14594] bond10: (slave veth8): Enslaving as a backup interface with a down link
[  197.027916][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 53064 - 0
[  197.034085][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 53064 - 0
[  197.035032][T14594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3866'.
[  197.045119][T14594] 8021q: adding VLAN 0 to HW filter on device bond10
[  197.107016][T14610] bridge6: the hash_elasticity option has been deprecated and is always 16
[  197.112838][T14610] bridge6: entered allmulticast mode
[  197.148399][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3875'.
[  197.245622][T14622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3881'.
[  197.375816][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3889'.
[  197.514365][T14653] netlink: 64467 bytes leftover after parsing attributes in process `syz.1.3893'.
[  197.612535][T14661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3895'.
[  197.835494][T14691] netlink: 'syz.2.3912': attribute type 5 has an invalid length.
[  198.071710][    C0] bridge0: port 3(bond0) entered learning state
[  198.204324][T14702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3916'.
[  198.337062][T14710] bond11: Unable to set up delay as MII monitoring is disabled
[  198.341897][T14710] bond11 (unregistering): Released all slaves
[  198.449827][   T12] net_ratelimit: 14 callbacks suppressed
[  198.449844][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  198.730429][T14733] netlink: 'syz.2.3930': attribute type 11 has an invalid length.
[  198.843902][T14745] netlink: 207236 bytes leftover after parsing attributes in process `syz.1.3936'.
[  198.892014][T14751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.949522][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.969443][ T5496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  199.017919][T14765] xt_hashlimit: size too large, truncated to 1048576
[  199.030578][ T6384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.112656][T14773] syzkaller1: entered promiscuous mode
[  199.116446][T14773] syzkaller1: entered allmulticast mode
[  199.318818][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3957'.
[  199.322825][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3957'.
[  199.489379][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  199.996561][T14815] xt_TCPMSS: Only works on TCP SYN packets
[  199.999454][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.000153][T13001] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  200.047474][T14817] netlink: 'syz.2.3969': attribute type 5 has an invalid length.
[  200.338374][T14836] lo speed is unknown, defaulting to 1000
[  200.343007][T14836] xfrm0 speed is unknown, defaulting to 1000
[  200.509522][ T5496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  200.560326][T14836] lo speed is unknown, defaulting to 1000
[  200.603146][T14858] sctp: [Deprecated]: syz.2.3985 (pid 14858) Use of int in max_burst socket option.
[  200.603146][T14858] Use struct sctp_assoc_value instead
[  200.855720][T14878] netlink: 'syz.2.3994': attribute type 32 has an invalid length.
[  200.895957][T14878] bond11: option coupled_control: invalid value (255)
[  200.937365][T14878] bond11 (unregistering): Released all slaves
[  200.942471][   T33] audit: type=1800 audit(1785125489.504:9): pid=14883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3995" name="memory.events" dev="tmpfs" ino=6622 res=0 errno=0
[  201.031118][T13001] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  201.262633][T14904] xt_connbytes: Forcing CT accounting to be enabled
[  201.418909][T14916] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  201.472409][T14916] block nbd1: reconnected socket
[  201.518387][ T6789] block nbd1: Receive control failed (result -32)
[  201.841142][T14945] syzkaller1: entered promiscuous mode
[  201.843512][T14945] syzkaller1: entered allmulticast mode
[  202.454601][T14986] nftables ruleset with unbound set
[  202.673625][T15021] __nla_validate_parse: 10 callbacks suppressed
[  202.673638][T15021] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4057'.
[  202.825646][T15025] bridge10: entered promiscuous mode
[  202.827689][T15025] bridge10: entered allmulticast mode
[  202.852797][T15025] team0: Port device bridge10 added
[  202.857635][ T6384] IPVS: starting estimator thread 0...
[  202.867662][T15046] batman_adv: batadv0: Adding interface: dummy0
[  202.883801][T15046] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  202.893720][T15046] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  202.949838][T15047] IPVS: using max 84 ests per chain, 201600 per kthread
[  202.975179][T15055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4071'.
[  203.258074][T15073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4078'.
[  203.401704][T15079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4081'.
[  203.584147][T15087] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4085'.
[  203.589889][   T13] net_ratelimit: 8 callbacks suppressed
[  203.589901][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  203.687443][T15091] syzkaller0: entered promiscuous mode
[  203.690486][T15091] syzkaller0: entered allmulticast mode
[  203.834291][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4091'.
[  203.896618][T15115] xt_l2tp: missing protocol rule (udp|l2tpip)
[  203.927903][T15121] netlink: 'syz.1.4101': attribute type 13 has an invalid length.
[  203.985939][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4101'.
[  204.100795][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  204.104167][T15134] syzkaller0: entered promiscuous mode
[  204.109443][T15134] syzkaller0: entered allmulticast mode
[  204.116388][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.118927][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.208553][T15145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4112'.
[  204.229351][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.366735][T15170] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4124'.
[  204.423768][T15170] netlink: 'syz.2.4124': attribute type 1 has an invalid length.
[  204.482115][T15186] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4131'.
[  204.536927][T15178] netlink: 'syz.2.4124': attribute type 3 has an invalid length.
[  204.570149][T15178] 8021q: adding VLAN 0 to HW filter on device bond12
[  204.574025][T15178] bond11: (slave bond12): making interface the new active one
[  204.576497][T15178] bond11: (slave bond12): Enslaving as an active interface with an up link
[  204.585444][T15199] syzkaller0: entered promiscuous mode
[  204.587319][T15199] syzkaller0: entered allmulticast mode
[  204.609518][ T5496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  205.109527][ T6384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.109836][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  205.115104][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  205.129711][   T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  205.269335][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.325248][T15255] bond13: (slave bridge7): Enslaving as an active interface with an up link
[  205.333971][T15255] bond13: entered promiscuous mode
[  205.336243][T15255] bridge7: entered promiscuous mode
[  205.340381][T15255] bond13: entered allmulticast mode
[  205.342673][T15255] bridge7: entered allmulticast mode
[  205.346117][T15255] 8021q: adding VLAN 0 to HW filter on device bond13
[  205.572526][T15273] netlink: 'syz.1.4170': attribute type 1 has an invalid length.
[  205.591355][T15273] 8021q: adding VLAN 0 to HW filter on device bond11
[  205.615630][T15273] bond11: (slave veth12): Enslaving as an active interface with a down link
[  205.632947][T15273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.635251][T15273] bond11: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  205.651336][ T5496] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  205.670817][T15278] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.746080][T15280] xt_hashlimit: size too large, truncated to 1048576
[  205.933031][T15296] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  206.085360][T15310] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  206.935711][T15360] sch_tbf: burst 88 is lower than device veth14 mtu (1514) !
[  207.341098][T15381] tipc: New replicast peer: 255.255.255.255
[  207.345351][T15381] tipc: Enabled bearer <udp:syz2>, priority 26
[  207.362560][T15385] syzkaller0: entered promiscuous mode
[  207.364833][T15385] syzkaller0: entered allmulticast mode
[  207.610627][T15409] 0X: renamed from batadv0 (while UP)
[  207.617603][T15409] 0X: left promiscuous mode
[  207.623017][T15409] 0X: entered allmulticast mode
[  208.352101][ T5659] tipc: Node number set to 3462390618
[  208.682633][T15437] __nla_validate_parse: 18 callbacks suppressed
[  208.682644][T15437] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4240'.
[  208.729433][ T5496] net_ratelimit: 12 callbacks suppressed
[  208.729443][ T5496] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  208.886518][T15453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4247'.
[  208.937191][T15459] netlink: 380 bytes leftover after parsing attributes in process `syz.0.4250'.
[  208.948669][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4250'.
[  208.953517][T15459] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4250'.
[  209.144722][T15488] netlink: 'syz.2.4263': attribute type 1 has an invalid length.
[  209.158892][T15492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4266'.
[  209.161904][T15492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4266'.
[  209.167702][T15488] gretap2: entered allmulticast mode
[  209.174808][T15488] bond14: (slave gretap2): making interface the new active one
[  209.177797][T15488] bond14: (slave gretap2): Enslaving as an active interface with an up link
[  209.249418][ T5658] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  209.316578][T15516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4277'.
[  209.337691][T15518] netlink: 'syz.2.4278': attribute type 22 has an invalid length.
[  209.340247][T15518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4278'.
[  209.343397][T15518] netlink: 'syz.2.4278': attribute type 22 has an invalid length.
[  209.346726][T15518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4278'.
[  209.429609][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.628263][T15558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.717288][T15564] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  209.726742][T15564] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  209.729121][T15564] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  209.736658][T15564] syz1: rxe_newlink: already configured on lo
[  209.759424][ T5658] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  210.221365][T15586] vlan0: entered promiscuous mode
[  210.223138][T15586] batadv0: entered promiscuous mode
[  210.269742][ T5496] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  210.469391][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.524181][T15616] IPv6: NLM_F_CREATE should be specified when creating new route
[  210.526702][T15616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  210.528888][T15616] IPv6: NLM_F_CREATE should be set when creating new route
[  210.531122][T15616] IPv6: NLM_F_CREATE should be set when creating new route
[  210.533472][T15616] IPv6: NLM_F_CREATE should be set when creating new route
[  210.609037][T15620] netlink: 'syz.0.4325': attribute type 1 has an invalid length.
[  210.686902][T15624] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  210.779987][ T5496] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  211.190755][ T6387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.289385][T13001] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  211.335510][ T6387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.442239][T15654] bridge8: entered promiscuous mode
[  211.444323][T15654] bridge8: entered allmulticast mode
[  211.679873][T15682] syzkaller0: entered promiscuous mode
[  211.682020][T15682] syzkaller0: entered allmulticast mode
[  211.732329][T15691] ip6t_srh: unknown srh invflags 4000
[  212.465984][T15733] netlink: 'syz.1.4372': attribute type 11 has an invalid length.
[  212.468627][T15733] netlink: 'syz.1.4372': attribute type 4 has an invalid length.
[  212.788556][T15742] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.791196][T15742] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.989541][T15742] batman_adv: 60X: Interface deactivated: batadv_slave_1
[  213.233536][ T5681] xfrm0 speed is unknown, defaulting to 1000
[  213.239925][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.244871][ T5681] syz0: Port: 1 Link DOWN
[  213.250202][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.274118][ T5681] xfrm0 speed is unknown, defaulting to 1000
[  213.278489][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.289505][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.292653][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.296594][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.310269][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.319583][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.325938][T15772] netlink: 'syz.1.4386': attribute type 12 has an invalid length.
[  213.669044][T15809] xt_hashlimit: size too large, truncated to 1048576
[  213.839322][T13001] net_ratelimit: 317 callbacks suppressed
[  213.839333][T13001] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  214.079795][ T6878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.349998][   T13] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  214.469308][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.472310][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.790302][T15828] __nla_validate_parse: 6 callbacks suppressed
[  214.790311][T15828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4405'.
[  214.795167][T15828] netlink: 356 bytes leftover after parsing attributes in process `syz.1.4405'.
[  214.798178][T15828] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4405'.
[  214.802650][T15828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4405'.
[  214.836637][T15830] netlink: 'syz.1.4406': attribute type 2 has an invalid length.
[  214.839915][T15830] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4406'.
[  214.870457][ T5658] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  214.880254][T15832] IPVS: length: 15 != 8
[  215.114121][T15846] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4414'.
[  215.167531][T15821] Bluetooth: hci0: Opcode 0x080f failed: -4
[  215.217387][T15853] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4417'.
[  215.341856][T15863] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  215.390977][ T5658] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  215.457216][T15874] netlink: 'syz.2.4427': attribute type 1 has an invalid length.
[  215.478134][T15874] bond16: entered promiscuous mode
[  215.480316][T15874] bond16: entered allmulticast mode
[  215.482316][T15874] 8021q: adding VLAN 0 to HW filter on device bond16
[  215.499556][T15874] erspan2: entered allmulticast mode
[  215.505018][T15874] bond16: (slave erspan2): making interface the new active one
[  215.508253][T15874] erspan2: entered promiscuous mode
[  215.510259][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.524065][T15874] bond16: (slave erspan2): Enslaving as an active interface with an up link
[  215.546652][T15874] syz.2.4427 (15874) used obsolete PPPIOCDETACH ioctl
[  215.899614][ T5658] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  216.320504][   T33] audit: type=1107 audit(1785125504.874:10): pid=15893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  216.409384][   T13] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  216.588891][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4450'.
[  216.597588][T15925] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4450'.
[  216.748934][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4457'.
[  216.823815][T15948] IPVS: ip_vs_add_dest(): server weight less than zero
[  217.147601][T15982] bond12: option xmit_hash_policy: invalid value (10)
[  217.151640][T15982] bond12 (unregistering): Released all slaves
[  217.334499][T16000] pimreg: entered allmulticast mode
[  217.337759][T16000] pimreg: left allmulticast mode
[  217.358391][T16002] netlink: 'syz.1.4484': attribute type 1 has an invalid length.
[  217.394630][T16002] bond12: (slave bridge11): Enslaving as a backup interface with an up link
[  217.412965][T16002] macvlan0: entered promiscuous mode
[  217.419341][T16002] macvlan0: entered allmulticast mode
[  217.422158][T16002] bond12: entered promiscuous mode
[  217.424342][T16002] bridge11: entered promiscuous mode
[  217.429673][T16002] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  217.434652][T16002] bond12: left promiscuous mode
[  217.436227][T16002] bridge11: left promiscuous mode
[  217.442399][T16006] netlink: 'syz.2.4485': attribute type 2 has an invalid length.
[  217.702394][T16030] syzkaller0: entered promiscuous mode
[  217.704203][T16030] syzkaller0: entered allmulticast mode
[  217.833312][T16035] syzkaller0: entered promiscuous mode
[  217.835680][T16035] syzkaller0: entered allmulticast mode
[  218.383922][T16083] xt_hashlimit: size too large, truncated to 1048576
[  218.446494][T16091] bridge_slave_0 (unregistering): left allmulticast mode
[  218.455535][T16091] bridge_slave_0 (unregistering): left promiscuous mode
[  218.458198][T16091] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.692075][T16114] netlink: 'syz.0.4533': attribute type 1 has an invalid length.
[  218.787667][T16124] syzkaller0: entered promiscuous mode
[  218.790169][T16124] syzkaller0: entered allmulticast mode
[  218.796099][T16124] simple: basic_1
[  218.798900][T16124] simple: basic_2
[  218.800481][T16124] simple: basic_3
[  218.801943][T16124] simple: basic_4
[  218.803425][T16124] simple: basic_5
[  218.804865][T16124] simple: basic_6
[  218.806392][T16124] simple: basic_7
[  218.807866][T16124] simple: basic_8
[  218.809403][T16124] simple: basic_9
[  218.810927][T16124] simple: basic_10
[  218.812475][T16124] simple: basic_11
[  218.813988][T16124] simple: basic_12
[  218.815467][T16124] simple: basic_13
[  218.816973][T16124] simple: basic_14
[  218.818467][T16124] simple: basic_15
[  218.820059][T16124] simple: basic_16
[  218.821540][T16124] simple: basic_17
[  218.979598][T13001] net_ratelimit: 10 callbacks suppressed
[  218.979612][T13001] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  219.293668][T16144] team0: Device vlan5 is already an upper device of the team interface
[  219.381494][T16146] netlink: 'syz.2.4548': attribute type 1 has an invalid length.
[  219.384189][T16146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.489718][T13001] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  219.834988][ T6882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.997204][T16189] __nla_validate_parse: 8 callbacks suppressed
[  219.997219][T16189] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4569'.
[  220.006981][T16189] team0 (unregistering): Port device team_slave_0 removed
[  220.019555][T13001] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  220.027127][T16189] team0 (unregistering): Port device team_slave_1 removed
[  220.033570][T16189] team0 (unregistering): Port device bridge1 removed
[  220.042614][T16189] team0 (unregistering): Port device bridge10 removed
[  220.059902][T16182] netlink: 'syz.0.4566': attribute type 1 has an invalid length.
[  220.094225][T16193] netlink: 'syz.2.4570': attribute type 1 has an invalid length.
[  220.124861][T16193] 8021q: adding VLAN 0 to HW filter on device bond17
[  220.142715][T16193] vlan5: entered allmulticast mode
[  220.144410][T16193] bond17: entered allmulticast mode
[  220.205470][T16193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.264142][T16193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.341907][T16211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4574'.
[  220.479789][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.487054][T16221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4580'.
[  220.496089][T16221] xt_l2tp: invalid flags combination: 8
[  220.498731][T16221] netlink: 'syz.1.4580': attribute type 1 has an invalid length.
[  220.504157][T16221] gre0: entered promiscuous mode
[  220.505703][T16221] gre0: entered allmulticast mode
[  220.529560][ T5658] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  220.553802][ T6384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.605793][T16225] syzkaller0: entered promiscuous mode
[  220.608162][T16225] syzkaller0: entered allmulticast mode
[  220.989884][T16253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4593'.
[  221.040638][ T5658] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  221.419031][T16281] lo: entered allmulticast mode
[  221.422028][T16281] tunl0: entered allmulticast mode
[  221.424392][T16281] gre0: entered allmulticast mode
[  221.426670][T16281] gretap0: entered allmulticast mode
[  221.428951][T16281] erspan0: entered allmulticast mode
[  221.433487][T16281] ip_vti0: entered allmulticast mode
[  221.436077][T16281] ip6_vti0: entered allmulticast mode
[  221.438303][T16281] sit0: entered allmulticast mode
[  221.441054][T16281] ip6tnl0: entered allmulticast mode
[  221.443392][T16281] ip6gre0: entered allmulticast mode
[  221.445574][T16281] syz_tun: entered allmulticast mode
[  221.447846][T16281] ip6gretap0: entered allmulticast mode
[  221.450372][T16281] vcan0: entered allmulticast mode
[  221.452528][T16281] team0: entered allmulticast mode
[  221.454505][T16281] 8021q: adding VLAN 0 to HW filter on device team0
[  221.457065][T16281] dummy0: entered allmulticast mode
[  221.459176][T16281] batman_adv: batadv0: Interface activated: dummy0
[  221.461924][T16281] nlmon0: entered allmulticast mode
[  221.464292][T16281] batadv0: entered allmulticast mode
[  221.466404][T16281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.468877][T16281] vxcan0: entered allmulticast mode
[  221.471622][T16281] vxcan1: entered allmulticast mode
[  221.473758][T16281] veth0: entered allmulticast mode
[  221.476209][T16281] veth1: entered allmulticast mode
[  221.478750][T16281] wg0: entered allmulticast mode
[  221.483305][T16281] wg1: entered allmulticast mode
[  221.489784][T16281] wg2: entered allmulticast mode
[  221.492424][T16281] veth0_to_bridge: entered allmulticast mode
[  221.495270][T16281] bridge_slave_0: entered allmulticast mode
[  221.497473][T16281] veth1_to_bridge: entered allmulticast mode
[  221.500655][T16281] bridge_slave_1: entered allmulticast mode
[  221.503883][T16281] veth0_to_bond: entered allmulticast mode
[  221.506267][T16281] : entered allmulticast mode
[  221.508583][T16281] veth1_to_bond: entered allmulticast mode
[  221.510529][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.514183][T16281] bond_slave_1: entered allmulticast mode
[  221.516447][T16281] veth0_to_team: entered allmulticast mode
[  221.518935][T16281] team_slave_0: entered allmulticast mode
[  221.521703][T16281] veth1_to_team: entered allmulticast mode
[  221.524439][T16281] team_slave_1: entered allmulticast mode
[  221.526708][T16281] xfrm0: entered allmulticast mode
[  221.528917][T16281] veth0_to_hsr: entered allmulticast mode
[  221.532050][T16281] hsr_slave_0: entered allmulticast mode
[  221.534340][T16281] veth1_to_hsr: entered allmulticast mode
[  221.537245][T16281] hsr_slave_1: entered allmulticast mode
[  221.539890][T16281] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  221.543086][T16281] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  221.548069][T16281] 0: entered allmulticast mode
[  221.550744][T16281] veth1_virt_wifi: entered allmulticast mode
[  221.553429][T16281] veth0_virt_wifi: entered allmulticast mode
[  221.555948][T16281] virt_wifi0: entered allmulticast mode
[  221.564440][ T5659] lo speed is unknown, defaulting to 1000
[  221.569174][ T5659] syz1: Port: 1 Link ACTIVE
[  221.582205][ T5659] lo speed is unknown, defaulting to 1000
[  222.051462][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4620'.
[  222.200364][T16329] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4626'.
[  222.343205][T16341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.530013][T16358] nbd3: detected capacity change from 0 to 63
[  222.535663][ T6789] block nbd3: Receive control failed (result -32)
[  222.540052][   T97] block nbd3: Send control failed (result -32)
[  222.543793][   T97] block nbd3: Request send failed, requeueing
[  222.551577][   T97] block nbd3: Dead connection, failed to find a fallback
[  222.554249][   T97] block nbd3: shutting down sockets
[  222.556177][   T97] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  222.559536][   T97] Buffer I/O error on dev nbd3, logical block 0, async page read
[  222.564196][   T97] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  222.567896][   T97] Buffer I/O error on dev nbd3, logical block 1, async page read
[  222.570651][   T97] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  222.573492][   T97] Buffer I/O error on dev nbd3, logical block 2, async page read
[  222.575797][   T97] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  222.578891][   T97] Buffer I/O error on dev nbd3, logical block 3, async page read
[  222.582234][   T97] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  222.585614][   T97] Buffer I/O error on dev nbd3, logical block 0, async page read
[  222.588211][   T97] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  222.592719][   T97] Buffer I/O error on dev nbd3, logical block 1, async page read
[  222.595707][   T97] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  222.599542][   T97] Buffer I/O error on dev nbd3, logical block 2, async page read
[  222.602339][   T97] Buffer I/O error on dev nbd3, logical block 3, async page read
[  222.606018][   T97] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  222.609042][   T97] Buffer I/O error on dev nbd3, logical block 0, async page read
[  222.612272][   T97] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  222.615442][   T97] Buffer I/O error on dev nbd3, logical block 1, async page read
[  222.618273][   T97] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  222.623249][T16337] ldm_validate_partition_table(): Disk read failed.
[  222.635660][T16337] Dev nbd3: unable to read RDB block 0
[  222.638684][T16337]  nbd3: unable to read partition table
[  222.645834][T16337] ldm_validate_partition_table(): Disk read failed.
[  222.649603][T16337] Dev nbd3: unable to read RDB block 0
[  222.654889][T16337]  nbd3: unable to read partition table
[  222.699180][T16371] netlink: 'syz.0.4642': attribute type 1 has an invalid length.
[  222.706686][T16371] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4642'.
[  222.778961][T16377] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4645'.
[  222.783698][T16377] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4645'.
[  222.988790][T16409] netlink: 'syz.2.4659': attribute type 21 has an invalid length.
[  222.995002][T16408] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4658'.
[  222.999918][T16404] can: request_module (can-proto-0) failed.
[  223.487207][T16466] netlink: 'syz.1.4685': attribute type 1 has an invalid length.
[  223.568895][T16476] ip6tnl0: Caught tx_queue_len zero misconfig
[  223.830362][T16500] sctp: [Deprecated]: syz.1.4702 (pid 16500) Use of struct sctp_assoc_value in delayed_ack socket option.
[  223.830362][T16500] Use struct sctp_sack_info instead
[  224.109711][T13001] net_ratelimit: 7 callbacks suppressed
[  224.109725][T13001] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  224.629418][T13001] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  224.687134][T16530] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  224.834762][T16545] netlink: 'syz.0.4722': attribute type 1 has an invalid length.
[  224.849170][T16545] 8021q: adding VLAN 0 to HW filter on device bond9
[  224.874429][T16545] bond9: (slave veth7): Enslaving as an active interface with a down link
[  224.902173][T16545] 8021q: adding VLAN 0 to HW filter on device batadv3
[  224.911858][T16545] bond9: (slave batadv3): making interface the new active one
[  224.916398][T16545] batadv3: entered promiscuous mode
[  224.919928][T16545] bond9: (slave batadv3): Enslaving as an active interface with an up link
[  224.992190][T16560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.117978][T16576] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  225.123487][T16576] tipc: Enabled bearer <udp:s>, priority 26
[  225.126785][T16574] syzkaller1: entered promiscuous mode
[  225.133484][T16574] syzkaller1: entered allmulticast mode
[  225.139799][   T13] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  225.243491][T16586] netlink: 'syz.2.4742': attribute type 1 has an invalid length.
[  225.249430][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  225.344749][T16595] netlink: 'syz.0.4745': attribute type 21 has an invalid length.
[  225.355644][T16595] __nla_validate_parse: 2 callbacks suppressed
[  225.355657][T16595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4745'.
[  225.472912][T16611] xt_hl: Unknown Hop Limit match mode: 206
[  225.519309][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  225.660993][   T13] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  225.743940][T16655] netlink: 'syz.1.4775': attribute type 2 has an invalid length.
[  225.940521][T16681] syzkaller0: entered promiscuous mode
[  225.948573][T16681] syzkaller0: entered allmulticast mode
[  226.049550][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  226.055746][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4789'.
[  226.179572][ T5658] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  226.238304][T16714] netlink: 'syz.2.4800': attribute type 1 has an invalid length.
[  226.253295][T16714] 8021q: adding VLAN 0 to HW filter on device bond18
[  226.271157][T16714] vlan6: entered promiscuous mode
[  226.273239][T16714] bond18: entered promiscuous mode
[  226.275583][T16714] vlan6: entered allmulticast mode
[  226.277687][T16714] bond18: entered allmulticast mode
[  226.293727][T16714] bond18: (slave bridge9): making interface the new active one
[  226.298100][T16714] bridge9: entered promiscuous mode
[  226.300619][T16714] bridge9: entered allmulticast mode
[  226.303181][T16714] bond18: (slave bridge9): Enslaving as an active interface with an up link
[  226.954074][T16745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4814'.
[  226.961210][T16745] 
[  226.962075][T16745] ======================================================
[  226.964349][T16745] WARNING: possible circular locking dependency detected
[  226.966642][T16745] syzkaller #0 Not tainted
[  226.968369][T16745] ------------------------------------------------------
[  226.970873][T16745] syz.2.4814/16745 is trying to acquire lock:
[  226.973166][T16745] ffff8881012d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[  226.976819][T16745] 
[  226.976819][T16745] but task is already holding lock:
[  226.979236][T16745] ffff8881012d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  226.982876][T16745] 
[  226.982876][T16745] which lock already depends on the new lock.
[  226.982876][T16745] 
[  226.986604][T16745] 
[  226.986604][T16745] the existing dependency chain (in reverse order) is:
[  226.989381][T16745] 
[  226.989381][T16745] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  226.992313][T16745]        down_read+0x4a/0x330
[  226.993765][T16745]        kernfs_remove_by_name_ns+0x3f/0x140
[  226.995680][T16745]        internal_create_group+0x58e/0x1180
[  226.997903][T16745]        sysfs_update_groups+0x60/0x130
[  226.999665][T16745]        pmu_dev_alloc+0x29b/0x300
[  227.001420][T16745]        perf_event_sysfs_init+0x76/0x100
[  227.003336][T16745]        do_one_initcall+0x250/0x870
[  227.005106][T16745]        do_initcall_level+0x10a/0x1a0
[  227.006962][T16745]        do_initcalls+0x59/0xa0
[  227.008430][T16745]        kernel_init_freeable+0x29d/0x3e0
[  227.010319][T16745]        kernel_init+0x1d/0x1d0
[  227.011967][T16745]        ret_from_fork+0x514/0xb70
[  227.013520][T16745]        ret_from_fork_asm+0x1a/0x30
[  227.015200][T16745] 
[  227.015200][T16745] -> #9 (pmus_lock){+.+.}-{4:4}:
[  227.017374][T16745]        __mutex_lock+0x19d/0x1550
[  227.019017][T16745]        perf_event_init_cpu+0x1d1/0x7a0
[  227.020779][T16745]        cpuhp_invoke_callback+0x434/0x810
[  227.022701][T16745]        cpuhp_thread_fun+0x362/0x780
[  227.024480][T16745]        smpboot_thread_fn+0x57c/0xa80
[  227.026320][T16745]        kthread+0x388/0x470
[  227.027792][T16745]        ret_from_fork+0x514/0xb70
[  227.029387][T16745]        ret_from_fork_asm+0x1a/0x30
[  227.031081][T16745] 
[  227.031081][T16745] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[  227.033461][T16745]        cpuhp_thread_fun+0x127/0x780
[  227.035362][T16745]        smpboot_thread_fn+0x57c/0xa80
[  227.037424][T16745]        kthread+0x388/0x470
[  227.039065][T16745]        ret_from_fork+0x514/0xb70
[  227.040740][T16745]        ret_from_fork_asm+0x1a/0x30
[  227.042399][T16745] 
[  227.042399][T16745] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  227.044715][T16745]        cpus_read_lock+0x42/0x160
[  227.046338][T16745]        static_key_slow_inc+0x12/0x30
[  227.048089][T16745]        nbd_genl_reconfigure+0x1301/0x1e80
[  227.049933][T16745]        genl_family_rcv_msg_doit+0x233/0x340
[  227.052252][T16745]        genl_rcv_msg+0x614/0x7a0
[  227.054127][T16745]        netlink_rcv_skb+0x226/0x4a0
[  227.055788][T16745]        genl_rcv+0x28/0x40
[  227.057315][T16745]        netlink_unicast+0x7bb/0x940
[  227.059000][T16745]        netlink_sendmsg+0x813/0xb40
[  227.060695][T16745]        sock_sendmsg_nosec+0x13a/0x180
[  227.062377][T16745]        ____sys_sendmsg+0x54e/0x850
[  227.064036][T16745]        ___sys_sendmsg+0x2a5/0x360
[  227.065641][T16745]        __x64_sys_sendmsg+0x1b1/0x290
[  227.067353][T16745]        do_syscall_64+0x174/0x580
[  227.068951][T16745]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.070961][T16745] 
[  227.070961][T16745] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  227.073445][T16745]        __mutex_lock+0x19d/0x1550
[  227.074995][T16745]        nbd_queue_rq+0x373/0x1150
[  227.076748][T16745]        blk_mq_dispatch_rq_list+0x499/0x1990
[  227.078822][T16745]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  227.081211][T16745]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  227.083640][T16745]        blk_mq_run_work_fn+0x16c/0x300
[  227.085704][T16745]        process_scheduled_works+0xa8e/0x14e0
[  227.087955][T16745]        worker_thread+0xa47/0xfb0
[  227.089891][T16745]        kthread+0x388/0x470
[  227.091689][T16745]        ret_from_fork+0x514/0xb70
[  227.093686][T16745]        ret_from_fork_asm+0x1a/0x30
[  227.095674][T16745] 
[  227.095674][T16745] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  227.098141][T16745]        __mutex_lock+0x19d/0x1550
[  227.099933][T16745]        nbd_queue_rq+0xc1/0x1150
[  227.101718][T16745]        blk_mq_dispatch_rq_list+0x499/0x1990
[  227.103719][T16745]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  227.105878][T16745]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  227.107938][T16745]        blk_mq_run_work_fn+0x16c/0x300
[  227.109688][T16745]        process_scheduled_works+0xa8e/0x14e0
[  227.111639][T16745]        worker_thread+0xa47/0xfb0
[  227.113216][T16745]        kthread+0x388/0x470
[  227.114663][T16745]        ret_from_fork+0x514/0xb70
[  227.116268][T16745]        ret_from_fork_asm+0x1a/0x30
[  227.118155][T16745] 
[  227.118155][T16745] -> #4 (set->srcu){.+.+}-{0:0}:
[  227.120887][T16745]        __synchronize_srcu+0xc9/0x2f0
[  227.122874][T16745]        elevator_switch+0x1e8/0x7b0
[  227.124718][T16745]        elevator_change+0x2fa/0x480
[  227.126468][T16745]        elevator_set_default+0x375/0x440
[  227.128455][T16745]        blk_register_queue+0x3f3/0x4e0
[  227.130269][T16745]        __add_disk+0x6cb/0xe30
[  227.131754][T16745]        add_disk_fwnode+0x100/0x3a0
[  227.133384][T16745]        nbd_dev_add+0x733/0xb60
[  227.134929][T16745]        nbd_init+0x15f/0x1e0
[  227.136371][T16745]        do_one_initcall+0x250/0x870
[  227.138001][T16745]        do_initcall_level+0x10a/0x1a0
[  227.139660][T16745]        do_initcalls+0x59/0xa0
[  227.141140][T16745]        kernel_init_freeable+0x29d/0x3e0
[  227.142986][T16745]        kernel_init+0x1d/0x1d0
[  227.144791][T16745]        ret_from_fork+0x514/0xb70
[  227.146770][T16745]        ret_from_fork_asm+0x1a/0x30
[  227.148787][T16745] 
[  227.148787][T16745] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  227.151759][T16745]        __mutex_lock+0x19d/0x1550
[  227.153723][T16745]        elevator_change+0x1af/0x480
[  227.155755][T16745]        elevator_set_none+0xb5/0x140
[  227.157874][T16745]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  227.160329][T16745]        nbd_start_device+0x189/0xb30
[  227.162351][T16745]        nbd_genl_connect+0x1597/0x1c10
[  227.164447][T16745]        genl_family_rcv_msg_doit+0x233/0x340
[  227.166762][T16745]        genl_rcv_msg+0x614/0x7a0
[  227.168562][T16745]        netlink_rcv_skb+0x226/0x4a0
[  227.170222][T16745]        genl_rcv+0x28/0x40
[  227.171648][T16745]        netlink_unicast+0x7bb/0x940
[  227.173275][T16745]        netlink_sendmsg+0x813/0xb40
[  227.174927][T16745]        sock_sendmsg_nosec+0x13a/0x180
[  227.176648][T16745]        ____sys_sendmsg+0x54e/0x850
[  227.178279][T16745]        ___sys_sendmsg+0x2a5/0x360
[  227.179926][T16745]        __x64_sys_sendmsg+0x1b1/0x290
[  227.181608][T16745]        do_syscall_64+0x174/0x580
[  227.183242][T16745]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.185219][T16745] 
[  227.185219][T16745] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  227.187881][T16745]        blk_alloc_queue+0x544/0x690
[  227.189637][T16745]        __blk_mq_alloc_disk+0x194/0x390
[  227.191761][T16745]        nbd_dev_add+0x494/0xb60
[  227.193643][T16745]        nbd_init+0x15f/0x1e0
[  227.195412][T16745]        do_one_initcall+0x250/0x870
[  227.197428][T16745]        do_initcall_level+0x10a/0x1a0
[  227.199492][T16745]        do_initcalls+0x59/0xa0
[  227.201348][T16745]        kernel_init_freeable+0x29d/0x3e0
[  227.203359][T16745]        kernel_init+0x1d/0x1d0
[  227.204844][T16745]        ret_from_fork+0x514/0xb70
[  227.206417][T16745]        ret_from_fork_asm+0x1a/0x30
[  227.208017][T16745] 
[  227.208017][T16745] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  227.210206][T16745]        fs_reclaim_acquire+0x71/0x100
[  227.211893][T16745]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  227.213853][T16745]        alloc_inode+0xb8/0x1b0
[  227.215356][T16745]        iget_locked+0x131/0x6a0
[  227.217061][T16745]        kernfs_get_inode+0x4f/0x770
[  227.218887][T16745]        kernfs_get_tree+0x5cd/0x980
[  227.220740][T16745]        vfs_get_tree+0x92/0x2a0
[  227.222491][T16745]        do_new_mount+0x319/0xdc0
[  227.224128][T16745]        __se_sys_mount+0x31d/0x420
[  227.225877][T16745]        do_syscall_64+0x174/0x580
[  227.227591][T16745]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.229618][T16745] 
[  227.229618][T16745] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[  227.232095][T16745]        __lock_acquire+0x1520/0x2cf0
[  227.233742][T16745]        lock_acquire+0x106/0x350
[  227.235345][T16745]        down_write+0x96/0x200
[  227.236983][T16745]        kernfs_remove_by_name_ns+0x4e/0x140
[  227.238878][T16745]        sysfs_slab_add+0x51/0x260
[  227.240458][T16745]        do_kmem_cache_create+0x8bf/0x970
[  227.242226][T16745]        __kmem_cache_create_args+0x307/0x440
[  227.244114][T16745]        ieee80211_mesh_init_sdata+0x371/0x620
[  227.246062][T16745]        ieee80211_setup_sdata+0x858/0xc10
[  227.247948][T16745]        ieee80211_if_add+0xdd8/0x1600
[  227.249778][T16745]        ieee80211_add_iface+0xb4/0x5c0
[  227.251542][T16745]        nl80211_new_interface+0x7c5/0x1080
[  227.253368][T16745]        genl_family_rcv_msg_doit+0x233/0x340
[  227.255237][T16745]        genl_rcv_msg+0x614/0x7a0
[  227.257020][T16745]        netlink_rcv_skb+0x226/0x4a0
[  227.258726][T16745]        genl_rcv+0x28/0x40
[  227.260236][T16745]        netlink_unicast+0x7bb/0x940
[  227.261838][T16745]        netlink_sendmsg+0x813/0xb40
[  227.263446][T16745]        sock_sendmsg_nosec+0x13a/0x180
[  227.265169][T16745]        ____sys_sendmsg+0x54e/0x850
[  227.266866][T16745]        ___sys_sendmsg+0x2a5/0x360
[  227.268434][T16745]        __x64_sys_sendmsg+0x1b1/0x290
[  227.270091][T16745]        do_syscall_64+0x174/0x580
[  227.271622][T16745]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.273550][T16745] 
[  227.273550][T16745] other info that might help us debug this:
[  227.273550][T16745] 
[  227.276717][T16745] Chain exists of:
[  227.276717][T16745]   &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem
[  227.276717][T16745] 
[  227.280987][T16745]  Possible unsafe locking scenario:
[  227.280987][T16745] 
[  227.283230][T16745]        CPU0                    CPU1
[  227.284882][T16745]        ----                    ----
[  227.286531][T16745]   rlock(&root->kernfs_supers_rwsem);
[  227.288212][T16745]                                lock(pmus_lock);
[  227.290187][T16745]                                lock(&root->kernfs_supers_rwsem);
[  227.292751][T16745]   lock(&root->kernfs_rwsem);
[  227.294322][T16745] 
[  227.294322][T16745]  *** DEADLOCK ***
[  227.294322][T16745] 
[  227.296845][T16745] 5 locks held by syz.2.4814/16745:
[  227.298468][T16745]  #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  227.300955][T16745]  #1: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890
[  227.303793][T16745]  #2: ffff888111e507a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_new_interface+0xb9/0x1080
[  227.307237][T16745]  #3: ffffffff8ec67ba8 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x58/0x440
[  227.310194][T16745]  #4: ffff8881012d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  227.313674][T16745] 
[  227.313674][T16745] stack backtrace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  227.315607][T16745] CPU: 1 UID: 0 PID: 16745 Comm: syz.2.4814 Not tainted syzkaller #0 PREEMPT(full) 
[  227.315618][T16745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.315623][T16745] Call Trace:
[  227.315628][T16745]  <TASK>
[  227.315634][T16745]  dump_stack_lvl+0xe8/0x150
[  227.315647][T16745]  print_circular_bug+0x2e1/0x300
[  227.315657][T16745]  check_noncircular+0x12e/0x150
[  227.315665][T16745]  __lock_acquire+0x1520/0x2cf0
[  227.315677][T16745]  ? __lock_acquire+0x13e8/0x2cf0
[  227.315688][T16745]  ? do_syscall_64+0x174/0x580
[  227.315699][T16745]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  227.315706][T16745]  lock_acquire+0x106/0x350
[  227.315715][T16745]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  227.315724][T16745]  down_write+0x96/0x200
[  227.315733][T16745]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  227.315740][T16745]  ? __pfx_down_write+0x10/0x10
[  227.315751][T16745]  kernfs_remove_by_name_ns+0x4e/0x140
[  227.315759][T16745]  sysfs_slab_add+0x51/0x260
[  227.315770][T16745]  do_kmem_cache_create+0x8bf/0x970
[  227.315782][T16745]  __kmem_cache_create_args+0x307/0x440
[  227.315790][T16745]  ieee80211_mesh_init_sdata+0x371/0x620
[  227.315829][T16745]  ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10
[  227.315837][T16745]  ? __pfx_wiphy_delayed_work_timer+0x10/0x10
[  227.315849][T16745]  ? __raw_spin_lock_init+0x45/0x100
[  227.315858][T16745]  ieee80211_setup_sdata+0x858/0xc10
[  227.315871][T16745]  ieee80211_if_add+0xdd8/0x1600
[  227.315882][T16745]  ieee80211_add_iface+0xb4/0x5c0
[  227.315892][T16745]  ? __kmalloc_node_track_caller_noprof+0x2fd/0x730
[  227.315902][T16745]  ? nl80211_new_interface+0x682/0x1080
[  227.315909][T16745]  ? __pfx_ieee80211_add_iface+0x10/0x10
[  227.315919][T16745]  ? __alloc_skb+0x4cc/0x7a0
[  227.315932][T16745]  nl80211_new_interface+0x7c5/0x1080
[  227.315945][T16745]  ? __pfx_nl80211_new_interface+0x10/0x10
[  227.315958][T16745]  ? nl80211_pre_doit+0x547/0x890
[  227.315976][T16745]  genl_family_rcv_msg_doit+0x233/0x340
[  227.315996][T16745]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  227.316016][T16745]  ? bpf_lsm_capable+0x9/0x20
[  227.316029][T16745]  ? security_capable+0x7e/0x2c0
[  227.316043][T16745]  genl_rcv_msg+0x614/0x7a0
[  227.316070][T16745]  ? __pfx_genl_rcv_msg+0x10/0x10
[  227.316086][T16745]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  227.316097][T16745]  ? __pfx_nl80211_new_interface+0x10/0x10
[  227.316103][T16745]  ? __pfx_nl80211_post_doit+0x10/0x10
[  227.316114][T16745]  ? __pfx_ref_tracker_free+0x10/0x10
[  227.316128][T16745]  netlink_rcv_skb+0x226/0x4a0
[  227.316140][T16745]  ? __pfx_genl_rcv_msg+0x10/0x10
[  227.316156][T16745]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  227.316172][T16745]  ? down_read+0x2be/0x330
[  227.316189][T16745]  genl_rcv+0x28/0x40
[  227.316205][T16745]  netlink_unicast+0x7bb/0x940
[  227.316219][T16745]  netlink_sendmsg+0x813/0xb40
[  227.316235][T16745]  ? __pfx_netlink_sendmsg+0x10/0x10
[  227.316245][T16745]  ? aa_sock_msg_perm+0xf1/0x1b0
[  227.316253][T16745]  ? __pfx_netlink_sendmsg+0x10/0x10
[  227.316261][T16745]  sock_sendmsg_nosec+0x13a/0x180
[  227.316271][T16745]  ____sys_sendmsg+0x54e/0x850
[  227.316280][T16745]  ? __pfx_____sys_sendmsg+0x10/0x10
[  227.316289][T16745]  ? import_iovec+0x73/0xa0
[  227.316299][T16745]  ___sys_sendmsg+0x2a5/0x360
[  227.316307][T16745]  ? __lock_acquire+0x683/0x2cf0
[  227.316317][T16745]  ? __pfx____sys_sendmsg+0x10/0x10
[  227.316325][T16745]  ? futex_wake+0x51b/0x5f0
[  227.316337][T16745]  ? __fget_files+0x2a/0x420
[  227.316347][T16745]  ? __fget_files+0x3a2/0x420
[  227.316358][T16745]  __x64_sys_sendmsg+0x1b1/0x290
[  227.316366][T16745]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  227.316376][T16745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.316384][T16745]  do_syscall_64+0x174/0x580
[  227.316393][T16745]  ? trace_irq_disable+0x3b/0x140
[  227.316403][T16745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.316411][T16745] RIP: 0033:0x7f09e4d9de99
[  227.316420][T16745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.316427][T16745] RSP: 002b:00007f09e5c5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  227.316436][T16745] RAX: ffffffffffffffda RBX: 00007f09e5025fa0 RCX: 00007f09e4d9de99
[  227.316441][T16745] RDX: 000000002400c890 RSI: 00002000000004c0 RDI: 000000000000000c
[  227.316446][T16745] RBP: 00007f09e4e33eaf R08: 0000000000000000 R09: 0000000000000000
[  227.316450][T16745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.316454][T16745] R13: 00007f09e5026038 R14: 00007f09e5025fa0 R15: 00007ffc22da7ba8
[  227.316462][T16745]  </TASK>
[  227.472672][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4815'.
[  228.149329][    C0] bridge0: port 3(bond0) entered forwarding state
[  228.151570][    C0] bridge0: topology change detected, propagating
[  229.499524][ T5496] net_ratelimit: 7 callbacks suppressed
[  229.499548][ T5496] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  229.509605][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  230.009657][ T5496] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  230.519722][T13001] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  230.549364][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  231.029590][ T5496] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  231.539651][ T5496] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  231.589545][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  232.049714][ T5658] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  232.569508][ T5658] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  234.609620][T13001] net_ratelimit: 5 callbacks suppressed
[  234.609632][T13001] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  234.709448][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  235.119976][ T5658] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  235.189700][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.192655][    C1] bridge0: topology change detected, propagating
[  235.629613][ T5496] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  235.749553][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  236.139703][ T5658] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  236.379617][ T5496] batadv3: left promiscuous mode
[  236.649531][ T5496] batman_adv: 60X: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  236.789358][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
