last executing test programs:

1.027181715s ago: executing program 2 (id=5417):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa81002f000800cafb00204000e000062f90"], 0x36)

797.707956ms ago: executing program 1 (id=5421):
r0 = socket(0x1, 0x803, 0x0)
sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000140)=@ethernet={0x1, @remote}, 0x80, 0x0}, 0x4000)

797.323367ms ago: executing program 1 (id=5422):
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1})

659.126367ms ago: executing program 2 (id=5423):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c)
shutdown(r0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x68}], 0x2c)

658.843244ms ago: executing program 1 (id=5424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

539.800736ms ago: executing program 1 (id=5426):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

470.149934ms ago: executing program 2 (id=5427):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x22020600)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)

406.403415ms ago: executing program 0 (id=5428):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)

378.077995ms ago: executing program 1 (id=5429):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f0000001bc0)={@empty, @random="0b1b00002e78", @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x3}}, {@generic={0x201, "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"}}}, 0x0)

288.560782ms ago: executing program 2 (id=5430):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4002, 0x100000, @mcast1}, 0x1c)

288.138348ms ago: executing program 0 (id=5431):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000040)={0x0, 0x10}, 0x1b}, 0x20040050)

198.665952ms ago: executing program 2 (id=5432):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x220, 0x2f0, 0xfeffffff, 0xf8, 0x2f0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x40, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)

198.553456ms ago: executing program 0 (id=5433):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

99.836269ms ago: executing program 1 (id=5434):
close(0x4)
syz_open_procfs$namespace(0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xd, &(0x7f0000001200)=ANY=[@ANYBLOB="180500d6464e0006000000000061da2bc1d6402139000077690fd1c3ab356389f8a6804a6f3c1d8843b967b8cbaa4eca07782e836f890e7d37614d6788e6ea6370946e01800000bae245f58584526a101bf277612d411fedaac72b9c1f7f4e2e151c3d6cdb9a115e168429dfce0aaee2f4f31f9a1d5348cb5f754501d35691d9bbf9bcb8c83cf723c05010e4fb6d2b3c2708366b1052fd1b275842aa68c71de50383f2e906af98219c234d570ced986b6ad3b3c02601f293bffbc1c0b4cc26c1874a924f4e81b230cdf74eca57705ab0012c10c7176f66", @ANYRES32=r0, @ANYBLOB="000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000022000000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_xfrm(0x10, 0x3, 0x6)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0), 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x800448d3, &(0x7f0000000080)="755ee3ccb1")
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000011c0)={0xffffffffffffffff, r4, 0x4, 0x0, @val=@kprobe_multi=@syms={0x0, 0x3, &(0x7f0000001180)=[&(0x7f0000001080)=':\'.&@\x00', &(0x7f00000010c0)='\x00', &(0x7f0000001100)='ns/pid_for_children\x00'], 0x0, 0x10}}, 0x30)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
r7 = socket(0xa, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x29, 0x0, &(0x7f0000000100))

99.562745ms ago: executing program 0 (id=5435):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38)

99.121812ms ago: executing program 2 (id=5436):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882d6939c7c4e4727f8d8979ce9bb883f9213faf51834517bed4d0bfc521236439a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d237e66", 0x63}, {0x0}], 0x3, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xfd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xfffffffc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r12 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x10)

250.753µs ago: executing program 0 (id=5437):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x65}]}]}, 0x30}}, 0x0)

0s ago: executing program 0 (id=5438):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000080)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001a00ffff"], 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

Memory cgroup stats for /syz0:
[  111.934260][ T8061] cache 0
[  111.937079][ T8061] rss 0
[  111.938083][ T8061] rss_huge 0
[  111.939249][ T8061] shmem 0
[  111.940217][ T8061] mapped_file 0
[  111.941730][ T8061] dirty 0
[  111.942838][ T8061] writeback 0
[  111.944162][ T8061] workingset_refault_anon 0
[  111.946172][ T8061] workingset_refault_file 0
[  111.947797][ T8061] swap 94208
[  111.949239][ T8061] swapcached 118784
[  111.966126][ T8061] pgpgin 33563
[  111.967384][ T8061] pgpgout 33560
[  111.968661][ T8061] pgfault 53677
[  111.973236][ T8061] pgmajfault 1
[  111.974502][ T8061] inactive_anon 8192
[  111.975878][ T8061] active_anon 4096
[  111.977503][ T8061] inactive_file 0
[  111.978863][ T8061] active_file 0
[  111.981559][ T8061] unevictable 0
[  111.982842][ T8061] hierarchical_memory_limit 314572800
[  111.984669][ T8061] hierarchical_memsw_limit 9223372036854771712
[  111.992432][ T8061] total_cache 0
[  111.993665][ T8061] total_rss 0
[  111.997474][ T8061] total_rss_huge 0
[  112.002868][ T8061] total_shmem 0
[  112.004078][ T8061] total_mapped_file 0
[  112.016413][ T8061] total_dirty 0
[  112.022726][ T8061] total_writeback 0
[  112.035935][ T8061] total_workingset_refault_anon 0
[  112.045847][ T8061] total_workingset_refault_file 0
[  112.052914][ T8061] total_swap 94208
[  112.066918][ T8061] total_swapcached 118784
[  112.086080][ T8061] total_pgpgin 33563
[  112.123741][ T8061] total_pgpgout 33560
[  112.125156][ T8061] total_pgfault 53677
[  112.168468][ T8061] total_pgmajfault 1
[  112.170272][ T8061] total_inactive_anon 8192
[  112.180931][ T8061] total_active_anon 4096
[  112.182742][ T8061] total_inactive_file 0
[  112.196812][ T8061] total_active_file 0
[  112.198172][ T8061] total_unevictable 0
[  112.203921][ T8061] anon_cost 0
[  112.205126][ T8061] file_cost 0
[  112.209268][ T8061] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.959,pid=8061,uid=0
[  112.227787][ T8061] Memory cgroup out of memory: Killed process 8061 (syz.0.959) total-vm:102160kB, anon-rss:1256kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  112.336798][ T8127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  113.108922][ T8169] netlink: 'syz.1.1001': attribute type 11 has an invalid length.
[  113.541917][ T8186] syzkaller1: entered promiscuous mode
[  113.544130][ T8186] syzkaller1: entered allmulticast mode
[  113.872902][ T8233] net_ratelimit: 337 callbacks suppressed
[  113.872913][ T8233] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  113.936965][ T8238] xt_hashlimit: size too large, truncated to 1048576
[  114.764145][ T8253] IPv6: NLM_F_CREATE should be specified when creating new route
[  114.766854][ T8253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.769189][ T8253] IPv6: NLM_F_CREATE should be set when creating new route
[  114.771863][ T8253] IPv6: NLM_F_CREATE should be set when creating new route
[  114.774346][ T8253] IPv6: NLM_F_CREATE should be set when creating new route
[  114.830259][ T8259] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1034'.
[  115.899410][ T8339] IPv6: addrconf: prefix option has invalid lifetime
[  116.506118][ T8389] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1093'.
[  116.565122][ T8397] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1097'.
[  116.653142][ T8403] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  116.656763][ T8402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1100'.
[  116.706612][ T8402] netlink: 'syz.1.1100': attribute type 2 has an invalid length.
[  117.055176][ T8419] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  117.062993][ T8419] bond4 (unregistering): Released all slaves
[  117.516091][ T8435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1114'.
[  117.951657][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'.
[  118.230470][ T8487] ip6gretap1: entered promiscuous mode
[  119.282359][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'.
[  119.294048][ T8561] vlan2: entered promiscuous mode
[  119.296303][ T8561] bridge0: entered promiscuous mode
[  119.433022][ T8563] bond1: option tlb_dynamic_lb: invalid value (5)
[  119.437426][ T8563] bond1 (unregistering): Released all slaves
[  119.455791][ T8565] tipc: Cannot configure node identity twice
[  120.848344][ T8602] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  120.851327][ T8602] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  121.257063][ T8636] netlink: 'syz.0.1200': attribute type 12 has an invalid length.
[  121.268692][ T8636] netlink: 'syz.0.1200': attribute type 2 has an invalid length.
[  121.281058][ T8636] netlink: 444 bytes leftover after parsing attributes in process `syz.0.1200'.
[  122.062366][ T8688] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  122.070592][ T8688] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  123.495692][ T8761] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1256'.
[  123.543098][ T8765] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1258'.
[  123.733012][ T8785] netlink: 'syz.1.1268': attribute type 9 has an invalid length.
[  123.737139][ T8788] netlink: 'syz.0.1270': attribute type 1 has an invalid length.
[  123.739708][ T8785] netlink: 'syz.1.1268': attribute type 11 has an invalid length.
[  123.745321][ T8785] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1268'.
[  123.781221][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'.
[  123.786374][ T8788] bond1: entered promiscuous mode
[  123.788157][ T8791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1271'.
[  123.792459][ T8788] 8021q: adding VLAN 0 to HW filter on device bond1
[  124.290721][ T5620] Bluetooth: hci2: command 0x0405 tx timeout
[  124.646516][ T8788] 8021q: adding VLAN 0 to HW filter on device bond1
[  124.648834][ T8788] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  124.652083][ T8788] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  124.656442][ T8788] bond1: (slave vti0): making interface the new active one
[  124.658775][ T8788] vti0: entered promiscuous mode
[  124.661395][ T8788] bond1: (slave vti0): Enslaving as an active interface with an up link
[  124.859079][ T8826] warning: `syz.1.1286' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  125.347512][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'.
[  125.351990][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'.
[  125.456427][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'.
[  125.463826][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'.
[  126.306231][ T8932] __nla_validate_parse: 1 callbacks suppressed
[  126.306250][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'.
[  126.774062][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'.
[  126.791616][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'.
[  126.800810][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'.
[  126.814171][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'.
[  126.821354][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'.
[  126.832410][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'.
[  126.836168][ T8914] syz.1.1320 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  126.838816][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'.
[  126.842489][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.1.1320 Not tainted syzkaller #0 PREEMPT(full) 
[  126.842508][ T8914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.842516][ T8914] Call Trace:
[  126.842521][ T8914]  <TASK>
[  126.842527][ T8914]  dump_stack_lvl+0xe8/0x150
[  126.842550][ T8914]  dump_header+0xd3/0x4c0
[  126.842571][ T8914]  oom_kill_process+0x3ab/0x970
[  126.842588][ T8914]  out_of_memory+0x106c/0x1410
[  126.842597][ T8914]  ? try_charge_memcg+0xbb9/0x1570
[  126.842611][ T8914]  ? __pfx___mutex_lock+0x10/0x10
[  126.842623][ T8914]  ? __pfx_out_of_memory+0x10/0x10
[  126.842632][ T8914]  ? do_raw_spin_unlock+0x4d/0x210
[  126.842649][ T8914]  try_charge_memcg+0xc77/0x1570
[  126.842667][ T8914]  ? __pfx_try_charge_memcg+0x10/0x10
[  126.842677][ T8914]  ? percpu_ref_tryget+0x15/0x180
[  126.842696][ T8914]  ? charge_memcg+0x23/0x2b0
[  126.842708][ T8914]  charge_memcg+0x1a2/0x2b0
[  126.842719][ T8914]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  126.842730][ T8914]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  126.842742][ T8914]  __swap_cache_prepare_and_add+0xdc/0x700
[  126.842755][ T8914]  ? page_rmappable_folio+0x9a/0x170
[  126.842775][ T8914]  swap_cache_alloc_folio+0xf1/0x240
[  126.842790][ T8914]  swap_cluster_readahead+0x355/0x670
[  126.842809][ T8914]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  126.842832][ T8914]  ? get_vma_policy+0x27b/0x3c0
[  126.842845][ T8914]  swapin_readahead+0x196/0xc50
[  126.842855][ T8914]  ? swap_table_get+0x1e/0x260
[  126.842866][ T8914]  ? __pfx_swapin_readahead+0x10/0x10
[  126.842906][ T8914]  ? swap_table_get+0x1e/0x260
[  126.842920][ T8914]  ? swap_table_get+0x1e/0x260
[  126.842931][ T8914]  ? swap_table_get+0x1e/0x260
[  126.842943][ T8914]  ? swap_table_get+0x216/0x260
[  126.842953][ T8914]  ? swap_cache_get_folio+0x2e4/0x2f0
[  126.842978][ T8914]  do_swap_page+0x555/0x5120
[  126.842998][ T8914]  ? __pte_offset_map+0x29/0x240
[  126.843014][ T8914]  ? __pte_offset_map+0x29/0x240
[  126.843034][ T8914]  ? do_swap_page+0x128/0x5120
[  126.843047][ T8914]  ? __pfx_do_swap_page+0x10/0x10
[  126.843059][ T8914]  ? __pte_offset_map+0x1ae/0x240
[  126.843076][ T8914]  ? pte_offset_map_rw_nolock+0xea/0x160
[  126.843093][ T8914]  handle_mm_fault+0x12d2/0x3170
[  126.843118][ T8914]  ? handle_mm_fault+0xee/0x3170
[  126.843137][ T8914]  ? __pfx_handle_mm_fault+0x10/0x10
[  126.843150][ T8914]  ? lock_vma_under_rcu+0x45a/0x500
[  126.843184][ T8914]  do_user_addr_fault+0xa73/0x1340
[  126.843204][ T8914]  ? rcu_is_watching+0x15/0xb0
[  126.843219][ T8914]  ? trace_page_fault_user+0x84/0x1e0
[  126.843233][ T8914]  exc_page_fault+0x6a/0xc0
[  126.843253][ T8914]  asm_exc_page_fault+0x26/0x30
[  126.843265][ T8914] RIP: 0033:0x7fc3bfc6a7be
[  126.843278][ T8914] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 f6 d5 3a 00 85 c0 0f 8e 53 fd ff ff <e8> 6d 7d fe ff 49 39 c4 73 88 48 8d 1d d1 b7 3a 00 83 3d d6 d5 3a
[  126.843288][ T8914] RSP: 002b:00007ffea85b6600 EFLAGS: 00010202
[  126.843301][ T8914] RAX: 0000000000000001 RBX: 00007fc3c0017da0 RCX: 0000555559f80808
[  126.843309][ T8914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  126.843316][ T8914] RBP: 00007fc3c0017da0 R08: 0000000000000000 R09: 0000000000000000
[  126.843323][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001ef15
[  126.843330][ T8914] R13: 00007fc3c0015fac R14: 000000000001ec07 R15: 00007ffea85b6700
[  126.843344][ T8914]  </TASK>
[  126.843348][ T8914] memory: usage 307200kB, limit 307200kB, failcnt 3258
[  126.962272][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'.
[  126.966321][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'.
[  126.970221][ T8914] memory+swap: usage 307308kB, limit 9007199254740988kB, failcnt 0
[  126.973086][ T8914] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  126.975753][ T8914] Memory cgroup stats for /syz1:
[  126.975815][ T8914] cache 4096
[  126.978589][ T8914] rss 0
[  126.979608][ T8914] rss_huge 0
[  126.980920][ T8914] shmem 0
[  126.982008][ T8914] mapped_file 0
[  126.983273][ T8914] dirty 0
[  126.984479][ T8914] writeback 0
[  126.985653][ T8914] workingset_refault_anon 0
[  126.987222][ T8914] workingset_refault_file 0
[  126.988797][ T8914] swap 110592
[  126.990075][ T8914] swapcached 110592
[  126.991528][ T8914] pgpgin 51659
[  126.992724][ T8914] pgpgout 51658
[  126.993947][ T8914] pgfault 86369
[  126.995032][ T8914] pgmajfault 2
[  126.996210][ T8914] inactive_anon 0
[  126.997470][ T8914] active_anon 0
[  126.998609][ T8914] inactive_file 4096
[  126.999899][ T8914] active_file 0
[  127.001301][ T8914] unevictable 0
[  127.002528][ T8914] hierarchical_memory_limit 314572800
[  127.004303][ T8914] hierarchical_memsw_limit 9223372036854771712
[  127.006483][ T8914] total_cache 4096
[  127.007747][ T8914] total_rss 0
[  127.008988][ T8914] total_rss_huge 0
[  127.010292][ T8914] total_shmem 0
[  127.011685][ T8914] total_mapped_file 0
[  127.013273][ T8914] total_dirty 0
[  127.014373][ T8914] total_writeback 0
[  127.015567][ T8914] total_workingset_refault_anon 0
[  127.017290][ T8914] total_workingset_refault_file 0
[  127.018254][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.019029][ T8914] total_swap 110592
[  127.019037][ T8914] total_swapcached 110592
[  127.019040][ T8914] total_pgpgin 51659
[  127.019043][ T8914] total_pgpgout 51658
[  127.019046][ T8914] total_pgfault 86369
[  127.019049][ T8914] total_pgmajfault 2
[  127.019052][ T8914] total_inactive_anon 0
[  127.019055][ T8914] total_active_anon 0
[  127.019059][ T8914] total_inactive_file 4096
[  127.019062][ T8914] total_active_file 0
[  127.019065][ T8914] total_unevictable 0
[  127.019068][ T8914] anon_cost 0
[  127.019070][ T8914] file_cost 0
[  127.019075][ T8914] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/
[  127.022379][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.024639][ T8914] ,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1320,pid=8914,uid=0
[  127.054332][ T8914] Memory cgroup out of memory: Killed process 8914 (syz.1.1320) total-vm:102160kB, anon-rss:1248kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  127.156389][ T8963] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.178265][ T8963] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.251999][ T8963] veth0_vlan: left promiscuous mode
[  127.543156][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.565034][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.586215][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.615999][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.737196][ T8985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.804665][ T8985] syzkaller0: entered promiscuous mode
[  127.810088][ T8985] syzkaller0: entered allmulticast mode
[  127.816225][ T8985] tipc: Resetting bearer <eth:syzkaller0>
[  127.831808][ T8984] tipc: Resetting bearer <eth:syzkaller0>
[  129.073899][ T8984] tipc: Disabling bearer <eth:syzkaller0>
[  129.081240][    T9] tipc: Node number set to 541868048
[  129.787965][ T9067] netlink: 'syz.0.1379': attribute type 2 has an invalid length.
[  131.020817][ T5617] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  131.030640][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  131.030656][ T5617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.030661][ T5617] Call Trace:
[  131.030665][ T5617]  <TASK>
[  131.030670][ T5617]  dump_stack_lvl+0xe8/0x150
[  131.030686][ T5617]  dump_header+0xd3/0x4c0
[  131.030700][ T5617]  oom_kill_process+0x3ab/0x970
[  131.030714][ T5617]  out_of_memory+0x106c/0x1410
[  131.030723][ T5617]  ? try_charge_memcg+0xbb9/0x1570
[  131.030736][ T5617]  ? __pfx___mutex_lock+0x10/0x10
[  131.030748][ T5617]  ? __pfx_out_of_memory+0x10/0x10
[  131.030756][ T5617]  ? do_raw_spin_unlock+0x4d/0x210
[  131.030772][ T5617]  try_charge_memcg+0xc77/0x1570
[  131.030789][ T5617]  ? __pfx_try_charge_memcg+0x10/0x10
[  131.030799][ T5617]  ? percpu_ref_tryget+0x15/0x180
[  131.030817][ T5617]  ? charge_memcg+0x23/0x2b0
[  131.030828][ T5617]  charge_memcg+0x1a2/0x2b0
[  131.030859][ T5617]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  131.030871][ T5617]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  131.030883][ T5617]  __swap_cache_prepare_and_add+0xdc/0x700
[  131.030895][ T5617]  ? page_rmappable_folio+0x9a/0x170
[  131.030909][ T5617]  swap_cache_alloc_folio+0xf1/0x240
[  131.030919][ T5617]  swap_cluster_readahead+0x355/0x670
[  131.030937][ T5617]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  131.030951][ T5617]  ? get_vma_policy+0x27b/0x3c0
[  131.030963][ T5617]  swapin_readahead+0x196/0xc50
[  131.030973][ T5617]  ? swap_table_get+0x1e/0x260
[  131.030982][ T5617]  ? __pfx_swapin_readahead+0x10/0x10
[  131.030992][ T5617]  ? swap_table_get+0x1e/0x260
[  131.030999][ T5617]  ? swap_table_get+0x1e/0x260
[  131.031006][ T5617]  ? swap_table_get+0x1e/0x260
[  131.031013][ T5617]  ? swap_table_get+0x216/0x260
[  131.031022][ T5617]  ? swap_cache_get_folio+0x2e4/0x2f0
[  131.031032][ T5617]  do_swap_page+0x555/0x5120
[  131.031043][ T5617]  ? __pte_offset_map+0x29/0x240
[  131.031053][ T5617]  ? __pte_offset_map+0x29/0x240
[  131.031065][ T5617]  ? do_swap_page+0x128/0x5120
[  131.031073][ T5617]  ? __pfx_do_swap_page+0x10/0x10
[  131.031080][ T5617]  ? __pte_offset_map+0x1ae/0x240
[  131.031090][ T5617]  ? pte_offset_map_rw_nolock+0xea/0x160
[  131.031099][ T5617]  handle_mm_fault+0x12d2/0x3170
[  131.031114][ T5617]  ? handle_mm_fault+0xee/0x3170
[  131.031125][ T5617]  ? __pfx_handle_mm_fault+0x10/0x10
[  131.031132][ T5617]  ? lock_vma_under_rcu+0x45a/0x500
[  131.031152][ T5617]  do_user_addr_fault+0xa73/0x1340
[  131.031164][ T5617]  ? rcu_is_watching+0x15/0xb0
[  131.031174][ T5617]  ? trace_page_fault_user+0x84/0x1e0
[  131.031182][ T5617]  exc_page_fault+0x6a/0xc0
[  131.031195][ T5617]  asm_exc_page_fault+0x26/0x30
[  131.031203][ T5617] RIP: 0033:0x7f860d75d60e
[  131.031212][ T5617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  131.031219][ T5617] RSP: 002b:00007ffc44565c18 EFLAGS: 00010246
[  131.031227][ T5617] RAX: 0000000000000000 RBX: 00005555718ca500 RCX: 00007f860d75d60e
[  131.031232][ T5617] RDX: 00007ffc44565c70 RSI: 0000000000000000 RDI: 0000000000000000
[  131.031237][ T5617] RBP: 00007ffc44565cdc R08: 0000000000000000 R09: 0000000000000000
[  131.031241][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  131.031245][ T5617] R13: 00000000000927c0 R14: 000000000001fc3d R15: 00007ffc44565d30
[  131.031256][ T5617]  </TASK>
[  131.031259][ T5617] memory: usage 307200kB, limit 307200kB, failcnt 4502
[  131.145636][ T5617] memory+swap: usage 300540kB, limit 9007199254740988kB, failcnt 0
[  131.148510][ T5617] kmem: usage 300088kB, limit 9007199254740988kB, failcnt 0
[  131.151127][ T5617] Memory cgroup stats for /syz0:
[  131.151221][ T5617] cache 0
[  131.154190][ T5617] rss 0
[  131.155195][ T5617] rss_huge 0
[  131.156387][ T5617] shmem 0
[  131.157466][ T5617] mapped_file 0
[  131.158476][ T5617] dirty 0
[  131.159469][ T5617] writeback 0
[  131.192144][ T5617] workingset_refault_anon 5
[  131.200645][ T5617] workingset_refault_file 0
[  131.202303][ T5617] swap 102400
[  131.203344][ T5617] swapcached 217088
[  131.204597][ T5617] pgpgin 47210
[  131.205714][ T5617] pgpgout 47209
[  131.206833][ T5617] pgfault 78310
[  131.207943][ T5617] pgmajfault 12
[  131.209030][ T5617] inactive_anon 0
[  131.210183][ T5617] active_anon 4096
[  131.220557][ T5617] inactive_file 0
[  131.221951][ T5617] active_file 0
[  131.224915][ T5617] unevictable 0
[  131.227870][ T5617] hierarchical_memory_limit 314572800
[  131.231756][ T5617] hierarchical_memsw_limit 9223372036854771712
[  131.240609][ T5617] total_cache 0
[  131.242203][ T5617] total_rss 0
[  131.243587][ T5617] total_rss_huge 0
[  131.245204][ T5617] total_shmem 0
[  131.246612][ T5617] total_mapped_file 0
[  131.248210][ T5617] total_dirty 0
[  131.249598][ T5617] total_writeback 0
[  131.260578][ T5617] total_workingset_refault_anon 5
[  131.262265][ T5617] total_workingset_refault_file 0
[  131.263820][ T5617] total_swap 102400
[  131.265014][ T5617] total_swapcached 217088
[  131.266420][ T5617] total_pgpgin 47210
[  131.267873][ T5617] total_pgpgout 47209
[  131.269271][ T5617] total_pgfault 78310
[  131.280582][ T5617] total_pgmajfault 12
[  131.283794][ T5617] total_inactive_anon 0
[  131.287022][ T5617] total_active_anon 4096
[  131.290028][ T5617] total_inactive_file 0
[  131.293507][ T5617] total_active_file 0
[  131.296573][ T5617] total_unevictable 0
[  131.300633][ T5617] anon_cost 0
[  131.302716][ T5617] file_cost 0
[  131.305632][ T5617] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1392,pid=9099,uid=0
[  131.320605][ T5617] Memory cgroup out of memory: Killed process 9099 (syz.0.1392) total-vm:102160kB, anon-rss:1256kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  131.604106][ T9114] syzkaller0: entered promiscuous mode
[  131.607523][ T9114] syzkaller0: entered allmulticast mode
[  132.278194][ T9146] netlink: 'syz.0.1409': attribute type 1 has an invalid length.
[  132.292566][ T9146] netlink: 'syz.0.1409': attribute type 2 has an invalid length.
[  132.303297][ T9146] netlink: 'syz.0.1409': attribute type 2 has an invalid length.
[  132.310682][ T9146] netlink: 'syz.0.1409': attribute type 2 has an invalid length.
[  132.316301][ T9146] netlink: 'syz.0.1409': attribute type 1 has an invalid length.
[  132.324189][ T9146] netlink: 'syz.0.1409': attribute type 2 has an invalid length.
[  132.408070][ T9151] __nla_validate_parse: 150 callbacks suppressed
[  132.408084][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'.
[  133.087886][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'.
[  133.091976][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'.
[  133.105374][ T5729] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.109089][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'.
[  133.112694][ T5729] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.116276][ T5729] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.119769][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'.
[  133.123504][ T5729] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.148072][ T9195] netlink: 'syz.2.1427': attribute type 13 has an invalid length.
[  133.156565][ T5729] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  133.160624][ T9195] netlink: 'syz.2.1427': attribute type 17 has an invalid length.
[  133.163237][ T9195] netlink: 'syz.2.1427': attribute type 27 has an invalid length.
[  133.163614][ T5729] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  133.179326][ T5729] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  133.183508][ T5729] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  133.274717][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'.
[  133.647361][ T9211] syzkaller0: entered promiscuous mode
[  133.652330][ T9211] syzkaller0: entered allmulticast mode
[  134.039838][ T9241] bond0: entered promiscuous mode
[  134.047280][ T9241] bond_slave_0: entered promiscuous mode
[  134.052022][ T9241] bond_slave_1: entered promiscuous mode
[  134.061067][ T9241] syz_tun: entered promiscuous mode
[  134.068750][ T9241] batadv0: entered promiscuous mode
[  134.077679][ T9241] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  134.081863][ T9241] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  134.087129][ T9241] 8021q: adding VLAN 0 to HW filter on device hsr1
[  134.092123][ T9241] bond0: left promiscuous mode
[  134.093882][ T9241] bond_slave_0: left promiscuous mode
[  134.096155][ T9241] bond_slave_1: left promiscuous mode
[  134.098429][ T9241] syz_tun: left promiscuous mode
[  134.104667][ T9241] batadv0: left promiscuous mode
[  134.125577][ T9244] batman_adv: batadv0: Adding interface: ipvlan2
[  134.128276][ T9244] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  134.139878][ T9244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.144987][ T9244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.149094][ T9244] batman_adv: batadv0: Interface activated: ipvlan2
[  134.635496][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1463'.
[  134.638622][ T9278] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1463'.
[  134.900082][ T9290] xt_hashlimit: size too large, truncated to 1048576
[  135.352043][ T9294] ipt_rpfilter: unknown options
[  135.406950][ T9296] netlink: 'syz.2.1471': attribute type 61 has an invalid length.
[  135.409578][ T9296] netlink: 'syz.2.1471': attribute type 62 has an invalid length.
[  136.044949][ T9331] openvswitch: netlink: Missing key (keys=40, expected=80)
[  136.109401][ T9335] syzkaller1: entered promiscuous mode
[  136.112060][ T9335] syzkaller1: entered allmulticast mode
[  137.326165][ T9413] netlink: 'syz.1.1525': attribute type 1 has an invalid length.
[  137.335980][ T9413] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1525'.
[  137.804641][ T9443] netlink: 'syz.2.1538': attribute type 2 has an invalid length.
[  137.982455][ T9460] netlink: 'syz.2.1545': attribute type 21 has an invalid length.
[  137.990127][ T9460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1545'.
[  138.112900][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'.
[  138.435087][ T9506] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.635531][ T9526] netlink: 'syz.0.1571': attribute type 1 has an invalid length.
[  138.777425][ T9534] netlink: 'syz.2.1578': attribute type 1 has an invalid length.
[  138.800070][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1578'.
[  139.042196][ T9551] xt_hashlimit: size too large, truncated to 1048576
[  139.204448][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1588'.
[  139.349507][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1592'.
[  140.867706][ T9642] nbd: socks must be embedded in a SOCK_ITEM attr
[  141.841736][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'.
[  141.854074][ T5729] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.854083][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'.
[  141.859648][ T5729] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.863666][ T5729] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.866464][ T5729] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.294467][ T9723] netlink: 'syz.1.1653': attribute type 21 has an invalid length.
[  142.329881][ T5729] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.330893][ T9723] netlink: 'syz.1.1653': attribute type 21 has an invalid length.
[  142.336786][ T5729] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.344211][ T5729] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.384540][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'.
[  142.822121][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1661'.
[  143.084170][ T9750] bond2 (unregistering): Released all slaves
[  143.104977][ T9754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.111528][ T9749] syzkaller0: entered promiscuous mode
[  143.114073][ T9749] syzkaller0: entered allmulticast mode
[  143.138250][ T9749] tipc: Resetting bearer <eth:syzkaller0>
[  143.147033][ T9747] tipc: Resetting bearer <eth:syzkaller0>
[  143.183125][ T9747] tipc: Disabling bearer <eth:syzkaller0>
[  143.444994][ T9766] netlink: 'syz.0.1671': attribute type 1 has an invalid length.
[  143.448327][ T9766] netlink: 'syz.0.1671': attribute type 1 has an invalid length.
[  144.137565][ T9808] vxcan3: entered allmulticast mode
[  144.212683][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'.
[  144.516194][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'.
[  144.707514][ T9860] netlink: 'syz.1.1715': attribute type 2 has an invalid length.
[  144.720790][ T9860] netlink: 'syz.1.1715': attribute type 2 has an invalid length.
[  144.774144][ T9863] netlink: 'syz.1.1716': attribute type 33 has an invalid length.
[  144.979983][ T9879] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  144.983211][ T9879] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  145.191834][ T9891] syzkaller0: entered promiscuous mode
[  145.197412][ T9891] syzkaller0: entered allmulticast mode
[  145.211711][ T9891] TC_ACT_REPEAT abuse ?
[  145.574041][ T9919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.578430][ T9919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.585030][ T9919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2
[  145.589620][ T9919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.609200][ T9919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.614307][ T9919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.665186][ T9926] netlink: 'syz.1.1746': attribute type 1 has an invalid length.
[  145.806089][ T9935] netlink: 'syz.2.1749': attribute type 32 has an invalid length.
[  145.809467][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'.
[  145.833934][ T9935] bond4: option coupled_control: invalid value (16)
[  146.537152][ T9935] bond4 (unregistering): Released all slaves
[  146.578775][ T9939] syzkaller0: entered promiscuous mode
[  146.583927][ T9939] syzkaller0: entered allmulticast mode
[  146.586770][ T9946] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  146.589775][   T12] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96
[  146.697173][ T9952] netlink: 'syz.1.1754': attribute type 32 has an invalid length.
[  146.764927][ T9956] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  146.769220][ T9956] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  146.776538][ T9958] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  146.864308][ T9963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.614640][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'.
[  148.096527][T10026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1785'.
[  148.402160][T10041] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1792'.
[  148.411447][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'.
[  148.415836][T10041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1792'.
[  148.422638][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'.
[  148.430682][T10041] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1792'.
[  148.729607][T10062] validate_nla: 1 callbacks suppressed
[  148.729625][T10062] netlink: 'syz.1.1799': attribute type 1 has an invalid length.
[  148.763297][T10062] 8021q: adding VLAN 0 to HW filter on device bond2
[  148.784545][T10067] sctp: [Deprecated]: syz.0.1804 (pid 10067) Use of struct sctp_assoc_value in delayed_ack socket option.
[  148.784545][T10067] Use struct sctp_sack_info instead
[  148.792002][T10062] bond2: (slave geneve2): making interface the new active one
[  148.797192][T10062] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  148.974436][T10079] xt_TCPMSS: Only works on TCP SYN packets
[  149.014321][T10084] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  149.209947][T10090] bond0: (slave syz_tun): Releasing backup interface
[  149.214297][T10090] bridge_slave_0: left allmulticast mode
[  149.216546][T10090] bridge_slave_0: left promiscuous mode
[  149.218722][T10090] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.223563][T10090] bridge_slave_1: left allmulticast mode
[  149.225606][T10090] bridge_slave_1: left promiscuous mode
[  149.227857][T10090] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.233425][T10090] bond0: (slave bond_slave_0): Releasing backup interface
[  149.237456][T10090] bond0: (slave bond_slave_1): Releasing backup interface
[  149.242226][T10090] team0: Port device team_slave_0 removed
[  149.245752][T10090] team0: Port device team_slave_1 removed
[  149.248109][T10090] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.251243][T10090] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.254290][T10090] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  150.106149][T10132] __nla_validate_parse: 2 callbacks suppressed
[  150.106172][T10132] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1826'.
[  150.129762][T10132] syzkaller0: entered promiscuous mode
[  150.132742][T10132] syzkaller0: entered allmulticast mode
[  150.269082][T10142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1830'.
[  150.278584][T10142] unsupported nlmsg_type 40
[  150.392323][T10148] netlink: 'syz.2.1833': attribute type 21 has an invalid length.
[  150.395048][T10148] netlink: 'syz.2.1833': attribute type 20 has an invalid length.
[  150.582170][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'.
[  150.933812][T10186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1851'.
[  150.975934][T10190] netlink: 456 bytes leftover after parsing attributes in process `syz.0.1853'.
[  151.617471][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'.
[  152.368547][ T7975] hid-generic 0005:846D:0A0E.0001: item fetching failed at offset 0/1
[  152.391266][ T7975] hid-generic 0005:846D:0A0E.0001: probe with driver hid-generic failed with error -22
[  152.777314][T10332] syzkaller0: entered promiscuous mode
[  152.779566][T10332] syzkaller0: entered allmulticast mode
[  153.716513][T10384] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.1937'.
[  154.148021][T10421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1954'.
[  154.210183][T10426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.336140][ T6151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.339435][ T6151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.361714][T10441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.524900][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1969'.
[  154.796680][T10479] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  154.826322][T10481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1978'.
[  155.399922][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  156.104071][T10524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  156.337704][T10594] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  156.344284][T10594] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  156.536300][T10596] tipc: Resetting bearer <eth:hsr0>
[  156.542337][T10596] tipc: Resetting bearer <eth:hsr0>
[  157.224048][T10622] netlink: 'syz.2.2020': attribute type 4 has an invalid length.
[  157.227349][T10622] __nla_validate_parse: 2 callbacks suppressed
[  157.227364][T10622] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2020'.
[  157.353393][T10630] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  157.499002][T10640] vlan3: entered promiscuous mode
[  157.501024][T10640] bridge0: entered promiscuous mode
[  157.630769][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'.
[  157.640675][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2032'.
[  157.648439][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'.
[  157.660894][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2032'.
[  157.758376][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2037'.
[  157.830715][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2040'.
[  158.435962][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'.
[  158.438857][T10703] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2054'.
[  158.442371][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'.
[  159.070318][T10753] netlink: 'syz.2.2078': attribute type 1 has an invalid length.
[  159.485998][T10782] xt_TCPMSS: Only works on TCP SYN packets
[  160.178117][T10837] 8021q: adding VLAN 0 to HW filter on device bond2
[  160.196910][T10840] netlink: 'syz.2.2117': attribute type 1 has an invalid length.
[  160.200718][T10840] netlink: 'syz.2.2117': attribute type 2 has an invalid length.
[  160.203522][T10840] netlink: 'syz.2.2117': attribute type 1 has an invalid length.
[  160.206176][T10840] netlink: 'syz.2.2117': attribute type 3 has an invalid length.
[  160.215685][T10837] bond2: (slave veth3): Enslaving as an active interface with an up link
[  160.254437][T10837] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  160.365488][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.374229][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.379073][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.390867][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.720141][T10883] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.728480][T10883] syzkaller0: entered promiscuous mode
[  160.734095][T10883] syzkaller0: entered allmulticast mode
[  160.746525][T10883] tipc: Resetting bearer <eth:syzkaller0>
[  160.749697][T10881] tipc: Resetting bearer <eth:syzkaller0>
[  160.771168][T10881] tipc: Disabling bearer <eth:syzkaller0>
[  161.127830][T10910] macsec1: entered promiscuous mode
[  161.129667][T10910] virt_wifi0: entered promiscuous mode
[  162.485815][T10962] veth0_to_batadv: entered allmulticast mode
[  162.488845][T10962] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  162.538490][T10966] __nla_validate_parse: 7 callbacks suppressed
[  162.538501][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'.
[  162.685142][T10981] netlink: 'syz.2.2182': attribute type 1 has an invalid length.
[  162.712492][T10981] 8021q: adding VLAN 0 to HW filter on device bond4
[  162.721476][T10981] bond4: option tlb_dynamic_lb: unable to set because the bond device is up
[  162.932102][T11005] sock: sock_set_timeout: `syz.0.2191' (pid 11005) tries to set negative timeout
[  163.019726][T11014] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2195'.
[  163.139946][T11028] netlink: 'syz.0.2202': attribute type 8 has an invalid length.
[  163.192768][T11035] netlink: 'syz.0.2204': attribute type 6 has an invalid length.
[  163.290190][T11043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2208'.
[  163.598538][T11067] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  163.601746][T11067] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  163.698139][T11075] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2223'.
[  163.701312][T11075] netlink: 'syz.1.2223': attribute type 1 has an invalid length.
[  164.013707][T11081] netlink: 'syz.2.2226': attribute type 49 has an invalid length.
[  164.274947][T11092] bond5: (slave bond_slave_1): Device is not bonding slave
[  164.277308][T11092] bond5: option active_slave: invalid value (bond_slave_1)
[  164.282691][T11092] bond5 (unregistering): Released all slaves
[  164.792640][T11141] bond3: entered promiscuous mode
[  164.794519][T11141] bond3: entered allmulticast mode
[  164.796774][T11141] 8021q: adding VLAN 0 to HW filter on device bond3
[  165.633375][T11220] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2276'.
[  166.389073][T11270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.709388][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2295'.
[  166.881399][T11303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2301'.
[  167.141517][T11311] netlink: 'syz.0.2304': attribute type 12 has an invalid length.
[  167.144839][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'.
[  167.148583][T11311] bond0: option primary_reselect: invalid value (191)
[  167.834496][T11323] bridge0: port 1(erspan0) entered blocking state
[  167.836888][T11323] bridge0: port 1(erspan0) entered disabled state
[  167.839158][T11323] erspan0: entered allmulticast mode
[  167.851853][T11323] erspan0: left allmulticast mode
[  167.871616][T11323] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2309'.
[  167.881042][T11323] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2309'.
[  168.320174][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'.
[  168.323432][T11355] openvswitch: netlink: Invalid VLAN frame
[  168.480456][T11374] netlink: 'syz.0.2330': attribute type 49 has an invalid length.
[  168.906927][T11412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2347'.
[  169.111332][T11422] netlink: 750 bytes leftover after parsing attributes in process `syz.1.2351'.
[  169.222544][T11417] nbd0: detected capacity change from 0 to 63
[  169.227089][T11423] block nbd0: NBD_DISCONNECT
[  169.236880][T11423] block nbd0: Disconnected due to user request.
[  169.240344][T11423] block nbd0: shutting down sockets
[  169.247464][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.251212][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  169.253790][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.256707][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  169.259198][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.262370][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  169.265192][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.268096][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  169.272385][ T5612] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.276285][ T5612] Buffer I/O error on dev nbd0, logical block 0, async page read
[  169.278808][ T5612] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.296309][ T5612] Buffer I/O error on dev nbd0, logical block 1, async page read
[  169.303763][ T5612] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.314701][ T5612] Buffer I/O error on dev nbd0, logical block 2, async page read
[  169.317777][ T5612] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.330153][ T5612] Buffer I/O error on dev nbd0, logical block 3, async page read
[  169.333900][ T5612] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.341078][ T5612] Buffer I/O error on dev nbd0, logical block 0, async page read
[  169.344685][ T5612] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.349833][ T5612] Buffer I/O error on dev nbd0, logical block 1, async page read
[  169.361775][ T5612] ldm_validate_partition_table(): Disk read failed.
[  169.367852][ T5612] Dev nbd0: unable to read RDB block 0
[  169.373897][ T5612]  nbd0: unable to read partition table
[  169.394137][ T5612] ldm_validate_partition_table(): Disk read failed.
[  169.397415][ T5612] Dev nbd0: unable to read RDB block 0
[  169.400187][ T5612]  nbd0: unable to read partition table
[  170.740792][T11489] netlink: 'syz.2.2378': attribute type 21 has an invalid length.
[  170.749151][T11489] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2378'.
[  170.860059][T11497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.986263][T11506] xt_CT: No such helper "snmp_trap"
[  171.151553][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2390'.
[  171.157169][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2390'.
[  171.168626][T11514] netlink: 58 bytes leftover after parsing attributes in process `syz.2.2390'.
[  171.743461][T11564] netlink: 'syz.2.2414': attribute type 13 has an invalid length.
[  171.747398][T11564] netlink: 'syz.2.2414': attribute type 17 has an invalid length.
[  171.762774][T11564] erspan0: left promiscuous mode
[  171.776909][T11564] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.783878][T11564] 8021q: adding VLAN 0 to HW filter on device team0
[  171.795798][T11564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.824971][T11564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  171.828555][T11564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  171.835055][T11564] veth1_vlan: left promiscuous mode
[  171.837668][T11564] veth0_vlan: entered promiscuous mode
[  171.841129][T11564] veth1_vlan: entered promiscuous mode
[  171.844550][T11564] veth1_macvtap: left promiscuous mode
[  171.846881][T11564] veth0_macvtap: left promiscuous mode
[  171.849238][T11564] veth0_macvtap: entered promiscuous mode
[  171.851935][T11564] veth1_macvtap: entered promiscuous mode
[  171.858598][T11564] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  171.865115][T11564] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  171.868450][T11571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2417'.
[  171.872849][T11564] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  171.876978][T11564] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  171.889699][T11564] 8021q: adding VLAN 0 to HW filter on device bond1
[  171.916009][T11564] 8021q: adding VLAN 0 to HW filter on device bond2
[  171.918766][T11564] erspan0: entered promiscuous mode
[  171.925283][T11564] 8021q: adding VLAN 0 to HW filter on device bond3
[  171.933245][T11564] ip6gretap1: left promiscuous mode
[  171.998600][ T5729] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.006232][ T5729] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.012585][ T5729] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.017923][ T5729] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.033813][ T5729] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.039458][ T5729] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.062564][ T5729] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.067165][ T5729] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.159548][T11582] tipc: Resetting bearer <eth:hsr0>
[  172.161921][T11582] tipc: Resetting bearer <eth:hsr0>
[  172.205789][T11582] virt_wifi0: left promiscuous mode
[  172.208546][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  172.212598][ T5729] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.215521][ T5729] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.219410][ T5729] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.225103][ T5729] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.228130][ T5729] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.231565][ T5729] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.017681][T11577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  175.486022][T11635] __nla_validate_parse: 1 callbacks suppressed
[  175.486032][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2443'.
[  175.717397][T11643] veth3: entered promiscuous mode
[  176.210763][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  176.341023][T11684] bond4 (unregistering): Released all slaves
[  176.611121][T11701] sch_tbf: burst 0 is lower than device sit0 mtu (1480) !
[  176.830095][T11719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.832922][T11719] syzkaller0: entered promiscuous mode
[  176.834662][T11719] syzkaller0: entered allmulticast mode
[  176.847436][T11719] tipc: Resetting bearer <eth:syzkaller0>
[  176.850407][T11718] tipc: Resetting bearer <eth:syzkaller0>
[  176.864919][T11718] tipc: Disabling bearer <eth:syzkaller0>
[  177.403900][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'.
[  177.943720][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2496'.
[  178.520671][T11772] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2502'.
[  178.637520][T11786] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2508'.
[  178.784994][T11799] netlink: 'syz.1.2513': attribute type 6 has an invalid length.
[  178.807128][T11802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2514'.
[  178.899784][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2518'.
[  178.954189][T11816] netlink: 'syz.2.2521': attribute type 8 has an invalid length.
[  178.992828][T11820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.541797][T11848] xt_hashlimit: max too large, truncated to 1048576
[  180.379145][T11875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2550'.
[  180.440006][T11880] batadv_slave_1: entered promiscuous mode
[  180.447319][T11878] batadv_slave_1: left promiscuous mode
[  180.486309][T11879] IPVS: Scheduler module ip_vs_sip not found
[  180.594381][T11887] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  180.598795][T11887] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  180.960459][T11885] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2554'.
[  180.964493][T11885] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2554'.
[  181.738656][T11918] netlink: 'syz.2.2566': attribute type 13 has an invalid length.
[  181.741749][T11918] netlink: 'syz.2.2566': attribute type 17 has an invalid length.
[  181.778609][T11918] veth3: left promiscuous mode
[  181.782811][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2567'.
[  181.809628][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'.
[  181.918494][T11925] bridge_slave_0: left allmulticast mode
[  181.923556][T11925] bridge_slave_0: left promiscuous mode
[  181.926203][T11925] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.933904][T11925] bridge_slave_1: left allmulticast mode
[  181.936514][T11925] bridge_slave_1: left promiscuous mode
[  181.939020][T11925] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.948102][T11925] bond0: (slave bond_slave_0): Releasing backup interface
[  181.958107][T11925] bond0: (slave bond_slave_1): Releasing backup interface
[  181.967318][T11925] team0: Port device team_slave_0 removed
[  181.971220][T11925] team0: Port device team_slave_1 removed
[  181.974762][T11925] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.978930][T11925] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.987496][T11925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  182.025039][T11928] veth1: entered promiscuous mode
[  182.027276][T11928] veth1: entered allmulticast mode
[  182.353113][T11947] syzkaller0: entered promiscuous mode
[  182.356041][T11947] syzkaller0: entered allmulticast mode
[  183.044425][T11983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2595'.
[  183.456954][T12012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2610'.
[  183.598043][T12021] xt_hashlimit: size too large, truncated to 1048576
[  183.914475][T12047] syzkaller1: entered promiscuous mode
[  183.919859][T12047] syzkaller1: entered allmulticast mode
[  184.464967][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2644'.
[  184.468899][T12088] tc_dump_action: action bad kind
[  184.527316][T12093] netlink: 'syz.1.2646': attribute type 30 has an invalid length.
[  184.774123][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  185.049114][T12129] netlink: 'syz.0.2664': attribute type 3 has an invalid length.
[  185.153190][T12131] syzkaller0: entered promiscuous mode
[  185.155689][T12131] syzkaller0: entered allmulticast mode
[  185.164758][T12131] 0: reclassify loop, rule prio 0, protocol 800
[  185.481299][T12149] sctp: [Deprecated]: syz.1.2671 (pid 12149) Use of int in max_burst socket option.
[  185.481299][T12149] Use struct sctp_assoc_value instead
[  186.213069][ T5614] Bluetooth: hci1: command 0x0406 tx timeout
[  186.612953][T12168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  187.086706][T12219] syzkaller0: entered promiscuous mode
[  187.090172][T12219] syzkaller0: entered allmulticast mode
[  187.118044][T12222] netlink: 'syz.2.2703': attribute type 58 has an invalid length.
[  187.121574][T12222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2703'.
[  187.355241][T12234] netlink: 'syz.2.2706': attribute type 3 has an invalid length.
[  187.837076][T12262] netlink: 'syz.0.2719': attribute type 3 has an invalid length.
[  187.929582][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2722'.
[  187.947763][T12268] bond4: option broadcast_neighbor: invalid value (30)
[  187.956099][T12268] bond4 (unregistering): Released all slaves
[  188.064869][T12276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2725'.
[  188.079637][T12276] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2725'.
[  188.083458][T12276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2725'.
[  188.090670][T12276] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2725'.
[  188.195891][T12285] netlink: 'syz.0.2729': attribute type 1 has an invalid length.
[  188.218809][T12285] bond4: (slave geneve2): making interface the new active one
[  188.222582][T12285] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  188.225489][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  188.228442][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  188.233091][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  188.236335][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  188.315187][T12294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.558704][T12317] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2744'.
[  188.563922][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2744'.
[  188.568605][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'.
[  188.908456][T12355] netlink: 'syz.2.2762': attribute type 29 has an invalid length.
[  188.913613][T12355] netlink: 'syz.2.2762': attribute type 29 has an invalid length.
[  188.916675][T12355] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2762'.
[  189.283851][T12388] syzkaller1: entered promiscuous mode
[  189.286221][T12388] syzkaller1: entered allmulticast mode
[  190.291527][T12431] syzkaller1: entered promiscuous mode
[  190.296075][T12431] syzkaller1: entered allmulticast mode
[  190.346693][T12438] : renamed from wg2
[  190.795139][  T797] IPVS: starting estimator thread 0...
[  190.901590][T12464] IPVS: using max 81 ests per chain, 194400 per kthread
[  191.347649][T12517] netlink: 'syz.0.2826': attribute type 22 has an invalid length.
[  191.374415][ T5729] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  191.374417][T12517] netlink: 'syz.0.2826': attribute type 22 has an invalid length.
[  191.374474][ T5729] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  191.401403][ T5729] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  191.405301][ T5729] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  191.697178][T12550] syzkaller0: entered promiscuous mode
[  191.699708][T12550] syzkaller0: entered allmulticast mode
[  192.013500][T12573] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  192.343130][T12586] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  192.346560][T12586] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  192.558051][T12593] xt_hashlimit: max too large, truncated to 1048576
[  192.561763][T12593] xt_hashlimit: overflow, try lower: 2/0
[  193.855930][T12656] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  193.862009][T12656] bond5 (unregistering): Released all slaves
[  194.013975][T12662] xt_hashlimit: invalid rate
[  194.534603][ T5620] Bluetooth: hci2: link tx timeout
[  194.537961][ T5620] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.545388][ T5614] Bluetooth: hci2: link tx timeout
[  194.547557][ T5614] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.664223][ T5614] Bluetooth: hci2: link tx timeout
[  194.668919][ T5614] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.702044][ T5614] Bluetooth: hci2: link tx timeout
[  194.703828][ T5614] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  194.932229][ T5614] Bluetooth: hci2: link tx timeout
[  194.934538][ T5614] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  195.065133][T12733] netlink: 'syz.1.2916': attribute type 15 has an invalid length.
[  195.160713][T12741] netlink: 'syz.1.2919': attribute type 21 has an invalid length.
[  195.165682][T12741] netlink: 'syz.1.2919': attribute type 7 has an invalid length.
[  195.191071][ T5614] Bluetooth: hci2: link tx timeout
[  195.193328][ T5614] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  195.222931][T12744] netlink: 'syz.0.2922': attribute type 1 has an invalid length.
[  195.225408][T12744] __nla_validate_parse: 9 callbacks suppressed
[  195.225416][T12744] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2922'.
[  195.352416][T12754] netlink: 'syz.1.2926': attribute type 1 has an invalid length.
[  195.359403][T12754] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2926'.
[  195.374676][T12754] netlink: 'syz.1.2926': attribute type 1 has an invalid length.
[  195.377780][T12754] netlink: 634 bytes leftover after parsing attributes in process `syz.1.2926'.
[  195.654525][ T5614] Bluetooth: hci2: link tx timeout
[  195.656195][ T5614] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  196.228441][ T5614] Bluetooth: hci2: link tx timeout
[  196.231545][ T5614] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  196.253117][ T5614] Bluetooth: hci2: link tx timeout
[  196.256166][ T5614] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  196.620682][ T5614] Bluetooth: hci2: command 0x0405 tx timeout
[  196.829744][T12811] bond3: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  196.836214][T12811] bond3 (unregistering): Released all slaves
[  196.947127][T12819] bond5: Unable to set down delay as MII monitoring is disabled
[  196.961503][T12819] bond5 (unregistering): Released all slaves
[  197.104067][T12834] syzkaller1: entered promiscuous mode
[  197.106449][T12834] syzkaller1: entered allmulticast mode
[  197.115685][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2960'.
[  197.125927][T12836] netlink: 'syz.0.2962': attribute type 4 has an invalid length.
[  197.268340][T12842] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2963'.
[  197.291087][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2963'.
[  197.306902][T12842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2963'.
[  197.752515][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'.
[  198.041542][T12838] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  198.052786][T12838] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  198.084296][T12838] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  198.089046][T12838] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  198.326107][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'.
[  198.519150][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2988'.
[  198.537878][T12935] 8021q: adding VLAN 0 to HW filter on device bond5
[  198.542497][T12935] netlink: 'syz.2.2988': attribute type 8 has an invalid length.
[  198.556892][T12935] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  198.565606][ T5729] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  198.571799][ T5729] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  198.575438][ T5729] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  198.590923][T12935] bond5 (unregistering): (slave geneve2): Releasing backup interface
[  198.598364][T12935] bond5 (unregistering): Released all slaves
[  198.617555][ T5729] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  198.621051][ T5729] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  198.623886][ T5729] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  199.245873][T12980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.248245][T12980] syzkaller0: entered promiscuous mode
[  199.249987][T12980] syzkaller0: entered allmulticast mode
[  199.265702][T12980] tipc: Resetting bearer <eth:syzkaller0>
[  199.271781][T12979] tipc: Resetting bearer <eth:syzkaller0>
[  199.284733][T12979] tipc: Disabling bearer <eth:syzkaller0>
[  199.615564][T13011] tc_dump_action: action bad kind
[  200.913862][T13052] __nla_validate_parse: 1 callbacks suppressed
[  200.913877][T13052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3034'.
[  201.072659][T13065] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3040'.
[  201.082949][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3040'.
[  201.086834][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3040'.
[  201.293531][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3045'.
[  201.384275][T13081] hsr0: entered allmulticast mode
[  201.389109][T13081] hsr_slave_0: entered allmulticast mode
[  201.396606][T13081] hsr_slave_1: entered allmulticast mode
[  201.411068][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  201.935185][T13112] syzkaller0: entered promiscuous mode
[  201.936985][T13112] syzkaller0: entered allmulticast mode
[  201.966627][T13117] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3063'.
[  201.998710][T13119] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3064'.
[  202.164904][T13133] ip6erspan0: entered allmulticast mode
[  203.226076][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3086'.
[  203.285164][T13173] pimreg: entered allmulticast mode
[  203.292266][T13172] pimreg: left allmulticast mode
[  203.448482][T13179] geneve4: entered promiscuous mode
[  203.451825][T13179] geneve4: entered allmulticast mode
[  203.454533][ T5729] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  203.459673][ T5729] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  203.470078][T13180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3089'.
[  203.478518][ T5729] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  203.484628][ T5729] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  203.601174][T13192] tipc: Enabled bearer <eth:gre0>, priority 27
[  203.784135][T13209] netlink: 'syz.1.3105': attribute type 21 has an invalid length.
[  203.786830][T13209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3105'.
[  204.184406][T13244] xt_connbytes: Forcing CT accounting to be enabled
[  206.775673][T13350] netlink: 'syz.0.3168': attribute type 3 has an invalid length.
[  206.958536][T13371] __nla_validate_parse: 7 callbacks suppressed
[  206.958552][T13371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3177'.
[  206.966767][T13371] netlink: 'syz.1.3177': attribute type 8 has an invalid length.
[  206.974996][T13371] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  207.163036][T13390] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3187'.
[  207.315451][T13402] netlink: 'syz.2.3190': attribute type 1 has an invalid length.
[  207.325164][T13402] netlink: 'syz.2.3190': attribute type 1 has an invalid length.
[  207.329690][T13402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3190'.
[  207.339351][T13402] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3190'.
[  207.546170][T13424] syzkaller0: entered promiscuous mode
[  207.549913][T13424] syzkaller0: entered allmulticast mode
[  207.727884][T13446] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3214'.
[  207.849801][T13442] veth0_vlan: left promiscuous mode
[  207.938579][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.943464][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.951599][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.962611][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.975768][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  207.983808][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.989960][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.000315][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.183928][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'.
[  208.540221][T13491] hsr0: entered promiscuous mode
[  208.546670][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3234'.
[  208.551403][T13493] netlink: 'syz.0.3235': attribute type 2 has an invalid length.
[  208.554954][T13491] hsr_slave_0: left promiscuous mode
[  208.563155][T13491] hsr_slave_1: left promiscuous mode
[  208.575821][T13491] hsr0 (unregistering): left promiscuous mode
[  209.152864][T13525] sctp: [Deprecated]: syz.2.3247 (pid 13525) Use of int in max_burst socket option deprecated.
[  209.152864][T13525] Use struct sctp_assoc_value instead
[  209.206467][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3250'.
[  210.068382][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'.
[  210.113609][T13560] netlink: 'syz.0.3264': attribute type 1 has an invalid length.
[  210.150366][T13560] 8021q: adding VLAN 0 to HW filter on device bond5
[  210.175727][T13560] bond5: (slave ip6gretap1): making interface the new active one
[  210.188623][T13560] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  210.356498][T13576] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3272'.
[  210.550207][T13595] vlan0: entered promiscuous mode
[  210.552430][T13595] gretap0: entered promiscuous mode
[  210.554610][T13595] vlan0: entered allmulticast mode
[  210.556387][T13595] gretap0: entered allmulticast mode
[  210.839121][T13611] syzkaller0: entered promiscuous mode
[  210.850119][T13611] syzkaller0: entered allmulticast mode
[  212.202376][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  212.205249][T13631] __nla_validate_parse: 3 callbacks suppressed
[  212.205258][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3295'.
[  212.207111][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  212.213957][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  212.342653][T13648] netlink: 'syz.1.3303': attribute type 3 has an invalid length.
[  212.345192][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'.
[  212.497562][T13655] netlink: 'syz.1.3306': attribute type 10 has an invalid length.
[  212.500394][T13655] syz_tun: entered promiscuous mode
[  212.508447][T13655] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  212.511879][T13655] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3306'.
[  212.514827][T13655] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3306'.
[  212.581970][T13658] netlink: 'syz.2.3307': attribute type 1 has an invalid length.
[  212.584527][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3307'.
[  212.591862][T13669] netlink: 'syz.1.3310': attribute type 3 has an invalid length.
[  212.698447][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3315'.
[  212.844759][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'.
[  212.916637][T13694] netlink: 'syz.2.3322': attribute type 11 has an invalid length.
[  212.919941][T13694] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.3322'.
[  212.953299][T13696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.008508][T13700] netlink: 'syz.2.3325': attribute type 3 has an invalid length.
[  213.026134][T13700] siw: device registration error -23
[  213.395386][T13724] openvswitch: netlink: IP tunnel dst address not specified
[  213.439864][T13722] erspan0: left promiscuous mode
[  213.659012][T13737] netlink: 'syz.2.3341': attribute type 61 has an invalid length.
[  213.662388][T13737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3341'.
[  214.080698][T13745] nbd0: detected capacity change from 0 to 63
[  214.095760][   T54] block nbd0: Receive control failed (result -32)
[  214.099192][T13757] block nbd0: Receive control failed (result -32)
[  214.105525][T13701] block nbd0: Dead connection, failed to find a fallback
[  214.121165][T13701] block nbd0: shutting down sockets
[  214.125079][T13701] blk_print_req_error: 138 callbacks suppressed
[  214.125091][T13701] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.133673][T13701] buffer_io_error: 138 callbacks suppressed
[  214.133681][T13701] Buffer I/O error on dev nbd0, logical block 0, async page read
[  214.138260][T13701] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.141581][T13701] Buffer I/O error on dev nbd0, logical block 1, async page read
[  214.148330][T13701] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.154944][T13701] Buffer I/O error on dev nbd0, logical block 2, async page read
[  214.158989][T13701] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.163063][T13701] Buffer I/O error on dev nbd0, logical block 3, async page read
[  214.166353][T13701] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.169457][T13701] Buffer I/O error on dev nbd0, logical block 0, async page read
[  214.172653][T13701] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.176053][T13701] Buffer I/O error on dev nbd0, logical block 1, async page read
[  214.179171][T13701] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.185772][T13701] Buffer I/O error on dev nbd0, logical block 2, async page read
[  214.188218][T13701] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.191751][T13701] Buffer I/O error on dev nbd0, logical block 3, async page read
[  214.195301][T13701] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.199201][T13701] Buffer I/O error on dev nbd0, logical block 0, async page read
[  214.205473][T13701] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  214.208529][T13701] Buffer I/O error on dev nbd0, logical block 1, async page read
[  214.212671][T13701] ldm_validate_partition_table(): Disk read failed.
[  214.215948][T13701] Dev nbd0: unable to read RDB block 0
[  214.223226][T13701]  nbd0: unable to read partition table
[  214.235824][T13701] ldm_validate_partition_table(): Disk read failed.
[  214.239247][T13701] Dev nbd0: unable to read RDB block 0
[  214.246113][T13701]  nbd0: unable to read partition table
[  214.294598][T13770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3353'.
[  214.393117][T13776] 8021q: adding VLAN 0 to HW filter on device bond6
[  214.402749][T13776] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  214.495422][T13794] netlink: 'syz.2.3364': attribute type 11 has an invalid length.
[  214.690171][T13820] batadv_slave_0: entered promiscuous mode
[  214.695799][T13819] batadv_slave_0: left promiscuous mode
[  214.715984][T13824] netem: change failed
[  216.587780][T13918] syzkaller0: entered promiscuous mode
[  216.594180][T13918] syzkaller0: entered allmulticast mode
[  216.602413][T13918] sch_tbf: burst 185 is lower than device syzkaller0 mtu (1500) !
[  217.256458][T13979] __nla_validate_parse: 7 callbacks suppressed
[  217.256468][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'.
[  217.440738][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3457'.
[  217.982506][T14039] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  218.317729][T14049] IPVS: set_ctl: invalid protocol: 136 172.30.0.1:20005
[  218.761934][T14075] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[  218.818123][T14079] syzkaller0: entered promiscuous mode
[  218.819918][T14079] syzkaller0: entered allmulticast mode
[  219.381326][T14113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.438236][T14121] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  219.504167][T14127] netlink: 'syz.1.3515': attribute type 11 has an invalid length.
[  219.931737][T14142] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3521'.
[  219.956910][T14144] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3522'.
[  220.455122][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'.
[  220.793786][T14198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3547'.
[  220.797528][T14198] netlink: 'syz.2.3547': attribute type 1 has an invalid length.
[  220.804152][T14198] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3547'.
[  220.807920][T14198] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3547'.
[  220.811757][T14198] netlink: 'syz.2.3547': attribute type 1 has an invalid length.
[  220.814435][T14198] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3547'.
[  221.174701][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3552'.
[  222.380912][T14244] __nla_validate_parse: 1 callbacks suppressed
[  222.380922][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'.
[  222.398008][T14249] netlink: 'syz.2.3567': attribute type 12 has an invalid length.
[  222.508739][T14256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3570'.
[  222.560031][T14260] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3572'.
[  222.563444][T14260] netlink: 'syz.1.3572': attribute type 2 has an invalid length.
[  222.684171][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'.
[  222.687568][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'.
[  223.244397][T14317] syz.2.3596: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  223.262913][T14317] CPU: 0 UID: 0 PID: 14317 Comm: syz.2.3596 Not tainted syzkaller #0 PREEMPT(full) 
[  223.262927][T14317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.262932][T14317] Call Trace:
[  223.262937][T14317]  <TASK>
[  223.262941][T14317]  dump_stack_lvl+0xe8/0x150
[  223.262956][T14317]  warn_alloc+0x249/0x340
[  223.262969][T14317]  ? stack_trace_save+0xa9/0x100
[  223.262983][T14317]  ? __pfx_warn_alloc+0x10/0x10
[  223.262996][T14317]  ? kasan_save_track+0x4f/0x80
[  223.263007][T14317]  ? kasan_save_track+0x3e/0x80
[  223.263017][T14317]  ? __kasan_kmalloc+0x93/0xb0
[  223.263026][T14317]  ? __kmalloc_cache_noprof+0x31c/0x660
[  223.263042][T14317]  ? xskq_create+0x56/0x170
[  223.263080][T14317]  ? xsk_setsockopt+0x54c/0x990
[  223.263094][T14317]  ? do_sock_setsockopt+0x17c/0x1b0
[  223.263110][T14317]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  223.263126][T14317]  ? do_syscall_64+0x15f/0xf80
[  223.263140][T14317]  __vmalloc_node_range_noprof+0x132/0x1750
[  223.263178][T14317]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  223.263199][T14317]  ? __kasan_kmalloc+0x93/0xb0
[  223.263216][T14317]  vmalloc_user_noprof+0xad/0xe0
[  223.263226][T14317]  ? xskq_create+0xbf/0x170
[  223.263236][T14317]  xskq_create+0xbf/0x170
[  223.263247][T14317]  xsk_init_queue+0x8a/0xe0
[  223.263258][T14317]  xsk_setsockopt+0x54c/0x990
[  223.263268][T14317]  ? __pfx_xsk_setsockopt+0x10/0x10
[  223.263277][T14317]  ? __pfx_aa_sk_perm+0x10/0x10
[  223.263287][T14317]  ? aa_sock_opt_perm+0xff/0x1a0
[  223.263298][T14317]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  223.263308][T14317]  ? __pfx_xsk_setsockopt+0x10/0x10
[  223.263317][T14317]  do_sock_setsockopt+0x17c/0x1b0
[  223.263330][T14317]  __x64_sys_setsockopt+0x13d/0x1b0
[  223.263341][T14317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.263349][T14317]  do_syscall_64+0x15f/0xf80
[  223.263356][T14317]  ? trace_irq_disable+0x3b/0x140
[  223.263369][T14317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.263376][T14317] RIP: 0033:0x7fc2cdb9cdd9
[  223.263385][T14317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.263391][T14317] RSP: 002b:00007fc2ceaf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  223.263401][T14317] RAX: ffffffffffffffda RBX: 00007fc2cde15fa0 RCX: 00007fc2cdb9cdd9
[  223.263407][T14317] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  223.263411][T14317] RBP: 00007fc2cdc32d69 R08: 0000000000000004 R09: 0000000000000000
[  223.263416][T14317] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.263420][T14317] R13: 00007fc2cde16038 R14: 00007fc2cde15fa0 R15: 00007ffdbc5bf258
[  223.263432][T14317]  </TASK>
[  223.263435][T14317] Mem-Info:
[  223.367117][T14317] active_anon:20042 inactive_anon:0 isolated_anon:0
[  223.367117][T14317]  active_file:12289 inactive_file:38377 isolated_file:0
[  223.367117][T14317]  unevictable:1768 dirty:172 writeback:0
[  223.367117][T14317]  slab_reclaimable:10867 slab_unreclaimable:124376
[  223.367117][T14317]  mapped:20987 shmem:5213 pagetables:962
[  223.367117][T14317]  sec_pagetables:0 bounce:0
[  223.367117][T14317]  kernel_misc_reclaimable:0
[  223.367117][T14317]  free:1059687 free_pcp:27260 free_cma:0
[  223.393888][T14317] Node 0 active_anon:21180kB inactive_anon:0kB active_file:13420kB inactive_file:134856kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46164kB dirty:268kB writeback:0kB shmem:4748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5080kB pagetables:2104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  223.408830][T14317] Node 1 active_anon:59088kB inactive_anon:0kB active_file:35736kB inactive_file:18652kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37784kB dirty:420kB writeback:0kB shmem:16104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8112kB pagetables:1744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  223.419527][T14317] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  223.429485][T14317] lowmem_reserve[]: 0 1587 2117 2117 2117
[  223.436169][T14317] Node 0 DMA32 free:1320932kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11844kB inactive_anon:0kB active_file:280kB inactive_file:32kB unevictable:0kB writepending:4kB zspages:0kB present:2080636kB managed:1625248kB mlocked:0kB bounce:0kB free_pcp:40848kB local_pcp:25952kB free_cma:0kB
[  223.448906][T14317] lowmem_reserve[]: 0 0 530 530 530
[  223.452513][T14317] Node 0 Normal free:23492kB boost:6144kB min:14656kB low:16784kB high:18912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9448kB inactive_anon:0kB active_file:13140kB inactive_file:134824kB unevictable:3536kB writepending:264kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:2448kB local_pcp:1420kB free_cma:0kB
[  223.465493][T14317] lowmem_reserve[]: 0 0 0 0 0
[  223.467596][T14317] Node 1 Normal free:2879056kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59288kB inactive_anon:0kB active_file:35736kB inactive_file:18652kB unevictable:3536kB writepending:420kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:65472kB local_pcp:28644kB free_cma:0kB
[  223.478501][T14317] lowmem_reserve[]: 0 0 0 0 0
[  223.482237][T14317] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  223.486540][T14317] Node 0 DMA32: 23*4kB (UM) 37*8kB (UME) 50*16kB (UME) 150*32kB (UME) 191*64kB (UME) 70*128kB (UME) 76*256kB (UME) 55*512kB (UE) 31*1024kB (UME) 19*2048kB (UM) 287*4096kB (UM) = 1320996kB
[  223.499286][T14317] Node 0 Normal: 140*4kB (UME) 21*8kB (UM) 31*16kB (M) 226*32kB (UM) 140*64kB (UM) 33*128kB (UM) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 23432kB
[  223.510979][T14317] Node 1 Normal: 4*4kB (ME) 3*8kB (UE) 51*16kB (U) 608*32kB (UME) 109*64kB (UM) 21*128kB (UM) 61*256kB (UME) 37*512kB (UME) 32*1024kB (UME) 16*2048kB (UM) 671*4096kB (UM) = 2878488kB
[  223.523017][T14317] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  223.528382][T14317] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  223.535169][T14317] 57301 total pagecache pages
[  223.538275][T14317] 0 pages in swap cache
[  223.545254][T14317] Free swap  = 124996kB
[  223.548265][T14317] Total swap = 124996kB
[  223.551474][T14317] 1834877 pages RAM
[  223.554286][T14317] 0 pages HighMem/MovableOnly
[  223.557430][T14317] 390266 pages reserved
[  223.560322][T14317] 0 pages cma reserved
[  223.742762][T14337] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  223.951272][T14350] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  223.956655][T14350] netlink: 'syz.0.3609': attribute type 1 has an invalid length.
[  223.975423][T14350] 8021q: adding VLAN 0 to HW filter on device bond6
[  223.997077][T14350] bond6: (slave geneve5): making interface the new active one
[  224.007541][T14350] bond6: (slave geneve5): Enslaving as an active interface with an up link
[  224.071544][T14355] netlink: 'syz.0.3610': attribute type 3 has an invalid length.
[  224.160273][T14359] netlink: 'syz.1.3612': attribute type 1 has an invalid length.
[  224.179259][T14359] 8021q: adding VLAN 0 to HW filter on device bond3
[  224.203957][T14359] bond3: (slave geneve3): making interface the new active one
[  224.207940][T14359] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  224.211737][ T5649] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.224115][ T5649] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.234349][ T5649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.437691][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'.
[  224.440866][T14384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3623'.
[  224.515375][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3626'.
[  225.174093][T14431] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  225.204162][T14434] netlink: 'syz.2.3646': attribute type 1 has an invalid length.
[  225.206745][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'.
[  225.362503][T14444] bond7 (unregistering): Released all slaves
[  225.425014][T14452] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  225.428740][T14452] Cannot find set identified by id 3 to match
[  225.549669][T14466] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3661'.
[  225.829763][T14496] macvtap1: entered promiscuous mode
[  225.831911][T14496] batadv0: entered promiscuous mode
[  225.833800][T14496] macvtap1: entered allmulticast mode
[  225.835628][T14496] batadv0: entered allmulticast mode
[  225.838021][T14496] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  225.851687][T14496] batadv0: left allmulticast mode
[  225.853802][T14496] batadv0: left promiscuous mode
[  225.855949][T14496] macvtap1: left promiscuous mode
[  225.858016][T14496] macvtap1: left allmulticast mode
[  225.883778][T14502] netlink: 'syz.0.3679': attribute type 5 has an invalid length.
[  225.926672][T14504] bond1: (slave bridge2): Releasing backup interface
[  226.021595][T14512] netlink: 'syz.2.3684': attribute type 1 has an invalid length.
[  226.946821][T14595] syzkaller0: entered promiscuous mode
[  226.948819][T14595] syzkaller0: entered allmulticast mode
[  227.277106][T14616] IPVS: Error connecting to the multicast addr
[  227.545848][T14644] netlink: 'syz.1.3743': attribute type 1 has an invalid length.
[  227.550351][T14644] __nla_validate_parse: 11 callbacks suppressed
[  227.550360][T14644] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3743'.
[  227.579836][T14644] vti0: entered promiscuous mode
[  227.799850][T14659] bond0: (slave syz_tun): Releasing backup interface
[  227.805479][T14659] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  227.861665][T14659] ip6gre2: entered allmulticast mode
[  228.032409][T14678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3758'.
[  228.417978][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3771'.
[  228.422665][T14708] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  228.425563][T14708] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  228.428699][T14708] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3771'.
[  228.563372][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'.
[  228.737545][T14733] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  228.794315][T14738] syzkaller0: entered promiscuous mode
[  228.796209][T14738] syzkaller0: entered allmulticast mode
[  228.927099][T14748] TCP: TCP_TX_DELAY enabled
[  228.965912][T14755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  228.968281][T14755] IPv6: NLM_F_CREATE should be set when creating new route
[  229.009120][T14759] xfrm1: entered allmulticast mode
[  229.021183][T14761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3795'.
[  230.003324][T14807] syzkaller1: entered promiscuous mode
[  230.005166][T14807] syzkaller1: entered allmulticast mode
[  230.019100][T14810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3818'.
[  230.111962][T14815] bond7: entered allmulticast mode
[  231.530265][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3838'.
[  231.635200][T14868] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  231.640652][T14868] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  231.648766][T14868] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  231.768618][T14876] syzkaller0: entered promiscuous mode
[  231.775794][T14876] syzkaller0: entered allmulticast mode
[  231.784374][T14876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.792335][T14873] tipc: Resetting bearer <eth:syzkaller0>
[  231.800385][T14882] netlink: 'syz.1.3847': attribute type 1 has an invalid length.
[  231.813013][T14882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3847'.
[  231.817250][T14873] tipc: Disabling bearer <eth:syzkaller0>
[  231.900128][T14891] syzkaller0: entered promiscuous mode
[  231.907204][T14891] syzkaller0: entered allmulticast mode
[  232.321372][T14927] syzkaller0: entered promiscuous mode
[  232.323562][T14927] syzkaller0: entered allmulticast mode
[  233.068534][T14946] syzkaller0: entered promiscuous mode
[  233.070458][T14946] syzkaller0: entered allmulticast mode
[  234.058780][T14973] netlink: 'syz.2.3883': attribute type 2 has an invalid length.
[  235.884813][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3901'.
[  236.750913][T15073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3925'.
[  237.007567][T15098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3936'.
[  237.098391][T15106] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[  237.107052][T15106] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  237.257892][T15112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  238.689557][T15179] xt_hashlimit: size too large, truncated to 1048576
[  238.829391][T15195] openvswitch: netlink: ufid size 32 bytes exceeds the range (1, 16)
[  238.837767][T15195] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  239.207877][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4000'.
[  239.466150][T15268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4013'.
[  239.597495][T15281] netlink: 5102 bytes leftover after parsing attributes in process `syz.1.4020'.
[  239.600795][T15281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.909671][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4035'.
[  239.922548][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4035'.
[  240.440192][T15353] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  240.511861][T15357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4054'.
[  240.892389][T15371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4061'.
[  241.008019][T15392] raw_sendmsg: syz.1.4069 forgot to set AF_INET. Fix it!
[  241.047769][T15394] batman_adv: batadv0: Interface deactivated: ipvlan2
[  241.115851][ T5670] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.120332][ T5670] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  241.126231][ T5670] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  241.135111][ T5670] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.144167][ T5670] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  241.152230][ T5670] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  241.163641][ T5670] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.174404][ T5670] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  241.179805][ T5670] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0
[  241.183612][ T5670] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.187071][ T5670] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  241.189999][ T5670] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  241.575809][T15428] netlink: 'syz.1.4084': attribute type 1 has an invalid length.
[  241.720792][T15441] syzkaller0: entered promiscuous mode
[  241.723372][T15441] syzkaller0: entered allmulticast mode
[  241.885989][T15453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  242.061644][T15472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4105'.
[  242.145204][T15482] hsr0: entered promiscuous mode
[  242.148716][T15481] hsr0: left promiscuous mode
[  243.034392][T15532] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  243.407046][T15554] netlink: 'syz.2.4137': attribute type 29 has an invalid length.
[  243.624633][T15564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.770354][T15574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4148'.
[  243.834274][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4149'.
[  244.673495][T15630] netlink: 'syz.0.4169': attribute type 6 has an invalid length.
[  245.135031][T15678] netlink: 51 bytes leftover after parsing attributes in process `syz.1.4197'.
[  245.208556][T15682] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.212517][T15682] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.289212][T15682] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.293567][T15682] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.372019][T15682] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.378914][T15682] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.523512][ T5670] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  245.528046][ T5670] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.545926][ T5670] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  245.549336][ T5670] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.568746][ T5670] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  245.572272][ T5670] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.588567][ T5670] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  245.592206][ T5670] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.865385][T15754] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4231'.
[  247.484178][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4233'.
[  247.499516][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4233'.
[  247.504215][T15762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4235'.
[  247.676449][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4242'.
[  247.679940][T15776] hsr_slave_0: left promiscuous mode
[  247.685929][T15776] hsr_slave_1: left promiscuous mode
[  247.693183][T15776] tipc: Disabling bearer <eth:hsr0>
[  249.264953][T15864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4269'.
[  249.275501][T15864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4269'.
[  249.498900][T15863] infiniband syz1: set down
[  249.501785][T15863] infiniband syz1: added syz_tun
[  249.512382][T15863] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  249.517337][T15863] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  249.523513][T15863] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  249.552511][T15863] RDS/IB: syz1: added
[  249.554825][T15863] smc: adding ib device syz1 with port count 1
[  249.556926][T15863] smc:    ib device syz1 port 1 has no pnetid
[  249.775752][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4290'.
[  249.785596][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4290'.
[  249.842738][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4291'.
[  250.150258][T15899] Bluetooth: MGMT ver 1.23
[  250.391506][   T33] audit: type=1800 audit(1778622274.029:2): pid=15902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4296" name="memory.events" dev="tmpfs" ino=7660 res=0 errno=0
[  251.011156][T15968] netlink: 'syz.2.4323': attribute type 10 has an invalid length.
[  251.015356][T15968] team0: Port device dummy0 added
[  251.018973][T15968] netlink: 'syz.2.4323': attribute type 10 has an invalid length.
[  251.028975][T15968] team0: Port device dummy0 removed
[  251.037944][T15968] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  252.177613][T16007] syzkaller0: entered promiscuous mode
[  252.179634][T16007] syzkaller0: entered allmulticast mode
[  253.480351][T16094] __nla_validate_parse: 2 callbacks suppressed
[  253.480366][T16094] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4377'.
[  254.386543][T16179] netlink: 'syz.0.4418': attribute type 61 has an invalid length.
[  254.389818][T16179] netlink: 'syz.0.4418': attribute type 62 has an invalid length.
[  255.198999][T16226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.933460][T16260] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4452'.
[  256.088461][T16269] syzkaller0: entered promiscuous mode
[  256.096492][T16269] syzkaller0: entered allmulticast mode
[  256.330977][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4469'.
[  256.331316][T16289] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.339365][T16289] syzkaller0: entered promiscuous mode
[  256.342640][T16289] syzkaller0: entered allmulticast mode
[  256.369914][T16289] tipc: Resetting bearer <eth:syzkaller0>
[  256.381067][T16287] tipc: Resetting bearer <eth:syzkaller0>
[  256.403695][T16287] tipc: Disabling bearer <eth:syzkaller0>
[  256.424861][T16302] netlink: 'syz.2.4470': attribute type 10 has an invalid length.
[  256.428567][T16302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4470'.
[  256.439276][T16302] team0: Port device geneve1 added
[  256.441988][ T5729] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.444954][ T5729] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.448857][ T5729] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.460680][ T5729] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.466908][T16302] tipc: Enabled bearer <eth:team0>, priority 0
[  256.497918][T16307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.503937][T16307] syzkaller0: entered promiscuous mode
[  256.507279][T16307] syzkaller0: entered allmulticast mode
[  256.527666][T16307] tipc: Resetting bearer <eth:syzkaller0>
[  256.533441][T16306] tipc: Resetting bearer <eth:syzkaller0>
[  256.547077][T16306] tipc: Disabling bearer <eth:syzkaller0>
[  256.550841][T16313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4475'.
[  256.572479][T16313] bond7: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  256.579917][T16313] bond7 (unregistering): Released all slaves
[  256.754116][T16337] netlink: 'syz.2.4486': attribute type 21 has an invalid length.
[  256.757175][T16337] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4486'.
[  256.884884][T16346] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4490'.
[  257.297299][T16368] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  257.345647][T16370] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4502'.
[  257.834532][T16407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4519'.
[  258.101677][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4532'.
[  258.917029][T16480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4553'.
[  259.353652][T16504] tipc: New replicast peer: 172.20.20.170
[  259.362557][T16504] tipc: Enabled bearer <udp:syz2>, priority 10
[  259.738090][T16529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.793365][T16533] openvswitch: netlink: IP tunnel dst address not specified
[  260.093219][T16560] syzkaller0: entered promiscuous mode
[  260.101042][T16560] syzkaller0: entered allmulticast mode
[  261.922458][T16642] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4625'.
[  261.976276][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4627'.
[  261.979767][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4627'.
[  262.474330][T16673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4639'.
[  262.478185][T16673] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4639'.
[  262.581233][T16679] syzkaller0: entered promiscuous mode
[  262.583370][T16679] syzkaller0: entered allmulticast mode
[  262.638374][T16662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4635'.
[  262.714522][T16689] netlink: 'syz.1.4647': attribute type 1 has an invalid length.
[  263.336206][T16750] netlink: 'syz.1.4676': attribute type 1 has an invalid length.
[  263.339703][T16750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.540334][T16763] syzkaller0: entered promiscuous mode
[  263.551064][T16763] syzkaller0: entered allmulticast mode
[  263.584782][T16770] netlink: 'syz.0.4686': attribute type 8 has an invalid length.
[  264.049216][T16786] bridge5: entered promiscuous mode
[  264.051755][T16786] bridge5: entered allmulticast mode
[  264.661768][T16806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4701'.
[  265.552819][T16857] netlink: 'syz.2.4722': attribute type 1 has an invalid length.
[  265.613518][T16857] 8021q: adding VLAN 0 to HW filter on device bond9
[  265.630745][T16862] bond9: (slave geneve3): making interface the new active one
[  265.636103][T16862] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  266.226272][T16896] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4742'.
[  266.234794][T16896] syzkaller0: entered promiscuous mode
[  266.236364][T16898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4743'.
[  266.237204][T16896] syzkaller0: entered allmulticast mode
[  266.605481][T16924] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4757'.
[  266.640439][T16930] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4759'.
[  266.646430][T16928] netlink: 456 bytes leftover after parsing attributes in process `syz.1.4758'.
[  267.215997][T16979] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4782'.
[  267.219966][T16979] .70X: renamed from veth1_virt_wifi
[  267.225824][T16979] .70X: entered allmulticast mode
[  267.229447][T16979] A link change request failed with some changes committed already. Interface .70X may have been left with an inconsistent configuration, please check.
[  267.242165][T16979] netlink: 'syz.1.4782': attribute type 13 has an invalid length.
[  267.251789][T16979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4782'.
[  267.274303][ T1170] smc: removing ib device syz1
[  267.326811][ T1170] smbdirect: ib_dev[syz1] removed
[  268.228138][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4793'.
[  268.611263][T17018] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.691793][T17018] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  268.870990][T17029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4802'.
[  269.201265][T17068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.363762][T17076] bond7 (unregistering): Released all slaves
[  269.437387][T17082] netlink: 'syz.2.4827': attribute type 1 has an invalid length.
[  269.531930][T17090] netlink: 'syz.2.4831': attribute type 14 has an invalid length.
[  269.535356][T17090] netlink: 'syz.2.4831': attribute type 11 has an invalid length.
[  270.099880][T17125] __nla_validate_parse: 3 callbacks suppressed
[  270.099900][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4848'.
[  270.145307][T17127] netlink: 'syz.2.4849': attribute type 3 has an invalid length.
[  270.240644][T17133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.290267][T17133] syzkaller0: entered promiscuous mode
[  270.299682][T17133] syzkaller0: entered allmulticast mode
[  270.304393][T17133] tipc: Resetting bearer <eth:syzkaller0>
[  270.316452][T17132] tipc: Resetting bearer <eth:syzkaller0>
[  270.861486][T17140] netlink: 'syz.2.4854': attribute type 1 has an invalid length.
[  271.692579][T17132] tipc: Disabling bearer <eth:syzkaller0>
[  271.699169][T17138] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  271.704080][T17140] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  271.776232][T17146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4856'.
[  272.092300][T17166] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  272.395722][T17180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4871'.
[  272.468217][T17186] syzkaller0: entered promiscuous mode
[  272.474023][T17186] syzkaller0: entered allmulticast mode
[  272.478151][T17186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4874'.
[  272.544110][T17196] syzkaller0: entered promiscuous mode
[  272.546457][T17196] syzkaller0: entered allmulticast mode
[  272.587658][T17196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.599835][T17196] tipc: Resetting bearer <eth:syzkaller0>
[  272.608131][T17196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.609441][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4882'.
[  272.614114][T17196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.624307][T17195] tipc: Resetting bearer <eth:syzkaller0>
[  272.646446][T17195] tipc: Disabling bearer <eth:syzkaller0>
[  272.716747][T17210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4885'.
[  272.833108][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4894'.
[  273.246653][T17262] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.4910'.
[  273.331012][T17276] netlink: 'syz.2.4917': attribute type 1 has an invalid length.
[  273.333974][T17276] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4917'.
[  273.388240][T17284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4921'.
[  273.404058][T17284] 8021q: adding VLAN 0 to HW filter on device bond10
[  273.419287][T17284] bond10: (slave veth5): Enslaving as an active interface with an up link
[  273.444041][T17284] bond10: (slave bridge5): Enslaving as an active interface with an up link
[  273.868776][T17326] syzkaller0: entered promiscuous mode
[  273.873552][T17326] syzkaller0: entered allmulticast mode
[  275.766260][T17421] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  275.773488][T17421] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  275.777546][T17423] __nla_validate_parse: 3 callbacks suppressed
[  275.777556][T17423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4981'.
[  276.543422][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4993'.
[  276.567521][T17454] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  276.728357][T17474] batman_adv: batadv0: Adding interface: vlan1
[  276.730365][T17474] batman_adv: batadv0: The MTU of interface vlan1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.739572][T17474] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active
[  277.002312][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5013'.
[  277.005226][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5013'.
[  277.059684][T17502] bond11: entered promiscuous mode
[  277.064478][T17502] bond11: entered allmulticast mode
[  277.069868][T17502] 8021q: adding VLAN 0 to HW filter on device bond11
[  277.254073][T17521] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5021'.
[  277.364492][T17527] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  277.375801][T17527] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  277.397248][T17527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.954268][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5047'.
[  278.302063][T17610] openvswitch: netlink: IPv4 tun info is not correct
[  278.514665][T17629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5074'.
[  279.019047][T17658] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.5087'.
[  279.023699][T17658] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  279.301312][T17672] netlink: 'syz.2.5094': attribute type 2 has an invalid length.
[  279.305124][T17672] netlink: 'syz.2.5094': attribute type 1 has an invalid length.
[  279.308470][T17672] netlink: 'syz.2.5094': attribute type 1 has an invalid length.
[  279.859806][T17735] syzkaller0: entered promiscuous mode
[  279.862964][T17735] syzkaller0: entered allmulticast mode
[  279.913528][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5126'.
[  280.045694][T17747] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5129'.
[  280.114926][T17757] atomic_op ffff888113a35198 conn xmit_atomic 0000000000000000
[  280.226143][T17770] netlink: 'syz.0.5140': attribute type 6 has an invalid length.
[  280.310357][T17776] netlink: 'syz.0.5143': attribute type 10 has an invalid length.
[  280.321010][T17776] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  280.697534][T17797] xt_HMARK: spi-set and port-set can't be combined
[  281.407112][T17824] __nla_validate_parse: 5 callbacks suppressed
[  281.407125][T17824] netlink: 296 bytes leftover after parsing attributes in process `syz.1.5164'.
[  281.459418][T17830] netlink: 'syz.2.5167': attribute type 4 has an invalid length.
[  281.533626][T17836] syzkaller1: entered promiscuous mode
[  281.537694][T17836] syzkaller1: entered allmulticast mode
[  281.818140][T17865] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  281.821093][T17865] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  282.007241][T17884] netlink: 'syz.2.5192': attribute type 1 has an invalid length.
[  282.165910][T17904] netlink: 'syz.0.5202': attribute type 7 has an invalid length.
[  282.175071][T17904] netlink: 'syz.0.5202': attribute type 3 has an invalid length.
[  282.177791][T17904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5202'.
[  282.406405][T17922] nbd: nbd0 already in use
[  282.577105][T17940] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  282.733855][T17954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5216'.
[  283.515702][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5235'.
[  283.711389][T17991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5238'.
[  283.886251][T17999] ipvlan1: entered promiscuous mode
[  283.893657][T17999] bridge0: port 1(ipvlan1) entered blocking state
[  283.896562][T17999] bridge0: port 1(ipvlan1) entered disabled state
[  283.899502][T17999] ipvlan1: entered allmulticast mode
[  283.901589][T17999] bridge0: entered allmulticast mode
[  283.904811][T17999] ipvlan1: left allmulticast mode
[  283.906441][T17999] bridge0: left allmulticast mode
[  283.970281][T18005] netlink: 280 bytes leftover after parsing attributes in process `syz.0.5245'.
[  284.168828][T18030] xt_hashlimit: max too large, truncated to 1048576
[  284.253754][T18035] netlink: 'syz.2.5259': attribute type 1 has an invalid length.
[  284.256903][T18035] netlink: 476 bytes leftover after parsing attributes in process `syz.2.5259'.
[  284.261247][T18035] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.5259'.
[  284.330192][T18049] syz.2.5265: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  284.338504][T18049] CPU: 1 UID: 0 PID: 18049 Comm: syz.2.5265 Not tainted syzkaller #0 PREEMPT(full) 
[  284.338519][T18049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.338524][T18049] Call Trace:
[  284.338529][T18049]  <TASK>
[  284.338556][T18049]  dump_stack_lvl+0xe8/0x150
[  284.338573][T18049]  warn_alloc+0x249/0x340
[  284.338588][T18049]  ? stack_trace_save+0xa9/0x100
[  284.338604][T18049]  ? __pfx_warn_alloc+0x10/0x10
[  284.338619][T18049]  ? kasan_save_track+0x4f/0x80
[  284.338633][T18049]  ? kasan_save_track+0x3e/0x80
[  284.338643][T18049]  ? __kasan_kmalloc+0x93/0xb0
[  284.338654][T18049]  ? __kmalloc_cache_noprof+0x31c/0x660
[  284.338664][T18049]  ? xskq_create+0x56/0x170
[  284.338676][T18049]  ? xsk_setsockopt+0x54c/0x990
[  284.338684][T18049]  ? do_sock_setsockopt+0x17c/0x1b0
[  284.338696][T18049]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  284.338706][T18049]  ? do_syscall_64+0x15f/0xf80
[  284.338714][T18049]  __vmalloc_node_range_noprof+0x132/0x1750
[  284.338738][T18049]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  284.338752][T18049]  ? __kasan_kmalloc+0x93/0xb0
[  284.338764][T18049]  vmalloc_user_noprof+0xad/0xe0
[  284.338775][T18049]  ? xskq_create+0xbf/0x170
[  284.338785][T18049]  xskq_create+0xbf/0x170
[  284.338796][T18049]  xsk_init_queue+0x8a/0xe0
[  284.338807][T18049]  xsk_setsockopt+0x54c/0x990
[  284.338818][T18049]  ? __pfx_xsk_setsockopt+0x10/0x10
[  284.338828][T18049]  ? __pfx_aa_sk_perm+0x10/0x10
[  284.338839][T18049]  ? aa_sock_opt_perm+0xff/0x1a0
[  284.338850][T18049]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  284.338861][T18049]  ? __pfx_xsk_setsockopt+0x10/0x10
[  284.338871][T18049]  do_sock_setsockopt+0x17c/0x1b0
[  284.338883][T18049]  __x64_sys_setsockopt+0x13d/0x1b0
[  284.338895][T18049]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.338903][T18049]  do_syscall_64+0x15f/0xf80
[  284.338910][T18049]  ? trace_irq_disable+0x3b/0x140
[  284.338925][T18049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.338934][T18049] RIP: 0033:0x7fc2cdb9cdd9
[  284.338943][T18049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  284.338951][T18049] RSP: 002b:00007fc2ceaf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  284.338960][T18049] RAX: ffffffffffffffda RBX: 00007fc2cde15fa0 RCX: 00007fc2cdb9cdd9
[  284.338965][T18049] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  284.338970][T18049] RBP: 00007fc2cdc32d69 R08: 0000000000000004 R09: 0000000000000000
[  284.338974][T18049] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.338979][T18049] R13: 00007fc2cde16038 R14: 00007fc2cde15fa0 R15: 00007ffdbc5bf258
[  284.338990][T18049]  </TASK>
[  284.338993][T18049] Mem-Info:
[  284.426733][T18049] active_anon:17420 inactive_anon:0 isolated_anon:0
[  284.426733][T18049]  active_file:12289 inactive_file:38401 isolated_file:0
[  284.426733][T18049]  unevictable:1768 dirty:104 writeback:0
[  284.426733][T18049]  slab_reclaimable:11475 slab_unreclaimable:126637
[  284.426733][T18049]  mapped:18132 shmem:2495 pagetables:1012
[  284.426733][T18049]  sec_pagetables:0 bounce:0
[  284.426733][T18049]  kernel_misc_reclaimable:0
[  284.426733][T18049]  free:1066908 free_pcp:19104 free_cma:0
[  284.452021][T18049] Node 0 active_anon:21964kB inactive_anon:0kB active_file:13388kB inactive_file:134916kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46100kB dirty:136kB writeback:0kB shmem:5248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4952kB pagetables:2168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  284.463296][T18049] Node 1 active_anon:47716kB inactive_anon:0kB active_file:35768kB inactive_file:18688kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26428kB dirty:280kB writeback:0kB shmem:4732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8348kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  284.475214][T18049] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  284.485658][T18049] lowmem_reserve[]: 0 1587 2117 2117 2117
[  284.488090][T18049] Node 0 DMA32 free:1337692kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11896kB inactive_anon:0kB active_file:280kB inactive_file:48kB unevictable:0kB writepending:4kB zspages:0kB present:2080636kB managed:1625248kB mlocked:0kB bounce:0kB free_pcp:15396kB local_pcp:14900kB free_cma:0kB
[  284.500290][T18049] lowmem_reserve[]: 0 0 530 530 530
[  284.502766][T18049] Node 0 Normal free:16728kB boost:6144kB min:14656kB low:16784kB high:18912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10100kB inactive_anon:0kB active_file:13108kB inactive_file:134868kB unevictable:3536kB writepending:132kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:4800kB local_pcp:4188kB free_cma:0kB
[  284.530706][T18049] lowmem_reserve[]: 0 0 0 0 0
[  284.532698][T18049] Node 1 Normal free:2897852kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47716kB inactive_anon:0kB active_file:35768kB inactive_file:18688kB unevictable:3536kB writepending:280kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:56448kB local_pcp:22664kB free_cma:0kB
[  284.543602][T18049] lowmem_reserve[]: 0 0 0 0 0
[  284.545739][T18049] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  284.550976][T18049] Node 0 DMA32: 307*4kB (UME) 30*8kB (ME) 206*16kB (UM) 363*32kB (UM) 170*64kB (UM) 106*128kB (UME) 70*256kB (UM) 56*512kB (UME) 33*1024kB (UM) 24*2048kB (UM) 285*4096kB (UM) = 1337724kB
[  284.558079][T18049] Node 0 Normal: 708*4kB (UM) 68*8kB (UM) 100*16kB (UM) 23*32kB (UM) 116*64kB (U) 22*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16720kB
[  284.564416][T18049] Node 1 Normal: 3*4kB (UME) 576*8kB (UME) 361*16kB (U) 834*32kB (UME) 483*64kB (UM) 136*128kB (UE) 66*256kB (UE) 24*512kB (UME) 34*1024kB (UME) 24*2048kB (UM) 659*4096kB (UM) = 2897820kB
[  284.572295][T18049] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  284.575491][T18049] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  284.581039][T18049] 53185 total pagecache pages
[  284.585194][T18049] 0 pages in swap cache
[  284.587405][T18049] Free swap  = 124996kB
[  284.589092][T18049] Total swap = 124996kB
[  284.594527][T18049] 1834877 pages RAM
[  284.600986][T18049] 0 pages HighMem/MovableOnly
[  284.608647][T18049] 390266 pages reserved
[  284.613235][T18049] 0 pages cma reserved
[  284.702190][T18063] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.705195][T18063] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  284.707867][T18063] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  284.713517][T18063] tipc: Resetting bearer <eth:syzkaller0>
[  284.991847][T18087] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5280'.
[  285.597241][T18117] netlink: 'syz.2.5296': attribute type 10 has an invalid length.
[  285.618706][T18117] bond0: (slave dummy0): Releasing backup interface
[  285.633139][T18117] team0: Port device dummy0 added
[  285.639836][T18117] netlink: 'syz.2.5296': attribute type 10 has an invalid length.
[  285.669492][T18117] team0: Port device dummy0 removed
[  285.679421][T18117] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  285.801477][T18121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5298'.
[  286.547329][T18151] netlink: 'syz.2.5311': attribute type 1 has an invalid length.
[  287.128969][T18158] netlink: 'syz.0.5314': attribute type 8 has an invalid length.
[  287.473864][T18164] netlink: 'syz.2.5317': attribute type 1 has an invalid length.
[  287.513873][T18164] 8021q: adding VLAN 0 to HW filter on device bond12
[  287.519821][T18169] netlink: 'syz.0.5319': attribute type 13 has an invalid length.
[  287.530793][T18169] netlink: 'syz.0.5319': attribute type 17 has an invalid length.
[  287.547966][T18169] batman_adv: batadv0: Interface activated: vlan1
[  287.551425][T18164] __nla_validate_parse: 1 callbacks suppressed
[  287.551443][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5317'.
[  287.751187][T18169] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.769338][T18169] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.838185][T18169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  287.842960][T18169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  287.850077][T18169] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  288.572267][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5336'.
[  288.575345][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5336'.
[  288.578971][T18208] netlink: 304 bytes leftover after parsing attributes in process `syz.2.5336'.
[  288.645297][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5339'.
[  288.904388][T18232] netlink: 'syz.0.5346': attribute type 1 has an invalid length.
[  290.311210][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5377'.
[  291.026912][T18313] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  291.320046][T18325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5388'.
[  291.361633][   T55] block nbd1: Receive control failed (result -1)
[  292.749401][T18385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5409'.
[  292.936088][T18393] bond4: entered promiscuous mode
[  293.530433][T18417] macvlan0: entered promiscuous mode
[  293.534624][T18417] macvlan0: entered allmulticast mode
[  293.606292][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5428'.
[  293.882042][T18437] xt_TCPMSS: Only works on TCP SYN packets
[  293.949627][T18440] netlink: 'syz.2.5436': attribute type 58 has an invalid length.
[  293.954444][T18440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5436'.
[  294.122169][ T8978] 
[  294.123232][ T8978] ======================================================
[  294.126066][ T8978] WARNING: possible circular locking dependency detected
[  294.128900][ T8978] syzkaller #0 Not tainted
[  294.130846][ T8978] ------------------------------------------------------
[  294.133662][ T8978] kworker/1:17/8978 is trying to acquire lock:
[  294.136036][ T8978] ffff88810ebe45e0 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: __mptcp_close_ssk+0x84/0x1180
[  294.139625][ T8978] 
[  294.139625][ T8978] but task is already holding lock:
[  294.141908][ T8978] ffff888171976a60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_worker+0x35/0x1420
[  294.144829][ T8978] 
[  294.144829][ T8978] which lock already depends on the new lock.
[  294.144829][ T8978] 
[  294.148280][ T8978] 
[  294.148280][ T8978] the existing dependency chain (in reverse order) is:
[  294.151119][ T8978] 
[  294.151119][ T8978] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  294.153474][ T8978]        lock_sock_nested+0x41/0x100
[  294.155161][ T8978]        inet_shutdown+0x6a/0x390
[  294.156793][ T8978]        nbd_mark_nsock_dead+0x2e9/0x560
[  294.158596][ T8978]        recv_work+0x1c2e/0x1d40
[  294.160312][ T8978]        process_scheduled_works+0xb5d/0x1860
[  294.162435][ T8978]        worker_thread+0xa53/0xfc0
[  294.164176][ T8978]        kthread+0x388/0x470
[  294.165668][ T8978]        ret_from_fork+0x514/0xb70
[  294.167362][ T8978]        ret_from_fork_asm+0x1a/0x30
[  294.169145][ T8978] 
[  294.169145][ T8978] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  294.172026][ T8978]        __mutex_lock+0x1a3/0x1550
[  294.174046][ T8978]        nbd_queue_rq+0x37b/0x1100
[  294.175792][ T8978]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  294.177918][ T8978]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  294.180134][ T8978]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  294.182763][ T8978]        blk_mq_run_hw_queue+0x348/0x4f0
[  294.184626][ T8978]        blk_mq_dispatch_list+0xd16/0xe10
[  294.186402][ T8978]        blk_mq_flush_plug_list+0x48d/0x570
[  294.188299][ T8978]        __blk_flush_plug+0x3ed/0x4d0
[  294.189994][ T8978]        __submit_bio+0x28d/0x580
[  294.191730][ T8978]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  294.194166][ T8978]        block_read_full_folio+0x599/0x830
[  294.196484][ T8978]        filemap_read_folio+0x137/0x3b0
[  294.198655][ T8978]        do_read_cache_folio+0x358/0x590
[  294.200840][ T8978]        read_part_sector+0xb6/0x2b0
[  294.202554][ T8978]        adfspart_check_ICS+0xb1/0x960
[  294.204278][ T8978]        bdev_disk_changed+0x817/0x1770
[  294.206129][ T8978]        blkdev_get_whole+0x380/0x510
[  294.207776][ T8978]        bdev_open+0x31e/0xd30
[  294.209255][ T8978]        blkdev_open+0x470/0x610
[  294.210808][ T8978]        do_dentry_open+0x785/0x14e0
[  294.212478][ T8978]        vfs_open+0x3b/0x340
[  294.213914][ T8978]        path_openat+0x2e08/0x3860
[  294.215505][ T8978]        do_file_open+0x23e/0x4a0
[  294.217089][ T8978]        do_sys_openat2+0x113/0x200
[  294.218776][ T8978]        __x64_sys_openat+0x138/0x170
[  294.220555][ T8978]        do_syscall_64+0x15f/0xf80
[  294.222153][ T8978]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.224591][ T8978] 
[  294.224591][ T8978] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  294.227002][ T8978]        __mutex_lock+0x1a3/0x1550
[  294.228660][ T8978]        nbd_queue_rq+0xc6/0x1100
[  294.230480][ T8978]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  294.232596][ T8978]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  294.234867][ T8978]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  294.236913][ T8978]        blk_mq_run_hw_queue+0x348/0x4f0
[  294.238657][ T8978]        blk_mq_dispatch_list+0xd16/0xe10
[  294.240712][ T8978]        blk_mq_flush_plug_list+0x48d/0x570
[  294.242728][ T8978]        __blk_flush_plug+0x3ed/0x4d0
[  294.244602][ T8978]        __submit_bio+0x28d/0x580
[  294.246588][ T8978]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  294.249002][ T8978]        block_read_full_folio+0x599/0x830
[  294.251325][ T8978]        filemap_read_folio+0x137/0x3b0
[  294.253400][ T8978]        do_read_cache_folio+0x358/0x590
[  294.255250][ T8978]        read_part_sector+0xb6/0x2b0
[  294.256937][ T8978]        adfspart_check_ICS+0xb1/0x960
[  294.258630][ T8978]        bdev_disk_changed+0x817/0x1770
[  294.260378][ T8978]        blkdev_get_whole+0x380/0x510
[  294.262096][ T8978]        bdev_open+0x31e/0xd30
[  294.263606][ T8978]        blkdev_open+0x470/0x610
[  294.265126][ T8978]        do_dentry_open+0x785/0x14e0
[  294.266856][ T8978]        vfs_open+0x3b/0x340
[  294.268339][ T8978]        path_openat+0x2e08/0x3860
[  294.270123][ T8978]        do_file_open+0x23e/0x4a0
[  294.272113][ T8978]        do_sys_openat2+0x113/0x200
[  294.274128][ T8978]        __x64_sys_openat+0x138/0x170
[  294.276168][ T8978]        do_syscall_64+0x15f/0xf80
[  294.278208][ T8978]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.281157][ T8978] 
[  294.281157][ T8978] -> #4 (set->srcu){.+.+}-{0:0}:
[  294.283887][ T8978]        __synchronize_srcu+0xca/0x300
[  294.286031][ T8978]        elevator_switch+0x1e8/0x7a0
[  294.287902][ T8978]        elevator_change+0x2cc/0x450
[  294.289617][ T8978]        elevator_set_default+0x36c/0x430
[  294.291593][ T8978]        blk_register_queue+0x3e9/0x4e0
[  294.293582][ T8978]        __add_disk+0x677/0xd50
[  294.295363][ T8978]        add_disk_fwnode+0xfb/0x480
[  294.297352][ T8978]        nbd_dev_add+0x72c/0xb50
[  294.299042][ T8978]        nbd_init+0x168/0x1f0
[  294.300719][ T8978]        do_one_initcall+0x250/0x870
[  294.302325][ T8978]        do_initcall_level+0x104/0x190
[  294.304152][ T8978]        do_initcalls+0x59/0xa0
[  294.305776][ T8978]        kernel_init_freeable+0x2a6/0x3e0
[  294.307674][ T8978]        kernel_init+0x1d/0x1d0
[  294.309578][ T8978]        ret_from_fork+0x514/0xb70
[  294.311606][ T8978]        ret_from_fork_asm+0x1a/0x30
[  294.313602][ T8978] 
[  294.313602][ T8978] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  294.316609][ T8978]        __mutex_lock+0x1a3/0x1550
[  294.318639][ T8978]        elevator_change+0x1b3/0x450
[  294.320724][ T8978]        elevator_set_none+0xb5/0x140
[  294.322746][ T8978]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  294.325216][ T8978]        nbd_start_device+0x17f/0xb10
[  294.327282][ T8978]        nbd_genl_connect+0x165b/0x1cf0
[  294.329439][ T8978]        genl_family_rcv_msg_doit+0x22a/0x330
[  294.331815][ T8978]        genl_rcv_msg+0x61c/0x7a0
[  294.333795][ T8978]        netlink_rcv_skb+0x232/0x4b0
[  294.335857][ T8978]        genl_rcv+0x28/0x40
[  294.337637][ T8978]        netlink_unicast+0x75c/0x8e0
[  294.339477][ T8978]        netlink_sendmsg+0x813/0xb40
[  294.341393][ T8978]        ____sys_sendmsg+0x972/0x9f0
[  294.343378][ T8978]        ___sys_sendmsg+0x2a5/0x360
[  294.345158][ T8978]        __x64_sys_sendmsg+0x1bd/0x2a0
[  294.347148][ T8978]        do_syscall_64+0x15f/0xf80
[  294.348846][ T8978]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.350886][ T8978] 
[  294.350886][ T8978] -> #2 (&q->q_usage_counter(io)#70){++++}-{0:0}:
[  294.353608][ T8978]        blk_alloc_queue+0x546/0x680
[  294.355316][ T8978]        __blk_mq_alloc_disk+0x197/0x390
[  294.357319][ T8978]        nbd_dev_add+0x499/0xb50
[  294.358975][ T8978]        nbd_genl_connect+0x962/0x1cf0
[  294.360703][ T8978]        genl_family_rcv_msg_doit+0x22a/0x330
[  294.362928][ T8978]        genl_rcv_msg+0x61c/0x7a0
[  294.364541][ T8978]        netlink_rcv_skb+0x232/0x4b0
[  294.366401][ T8978]        genl_rcv+0x28/0x40
[  294.368217][ T8978]        netlink_unicast+0x75c/0x8e0
[  294.370324][ T8978]        netlink_sendmsg+0x813/0xb40
[  294.372419][ T8978]        ____sys_sendmsg+0x972/0x9f0
[  294.374528][ T8978]        ___sys_sendmsg+0x2a5/0x360
[  294.376233][ T8978]        __x64_sys_sendmsg+0x1bd/0x2a0
[  294.378340][ T8978]        do_syscall_64+0x15f/0xf80
[  294.380224][ T8978]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.382625][ T8978] 
[  294.382625][ T8978] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  294.384805][ T8978]        fs_reclaim_acquire+0x71/0x100
[  294.386675][ T8978]        __kmalloc_cache_noprof+0x40/0x660
[  294.388866][ T8978]        ref_tracker_alloc+0x15a/0x4c0
[  294.390890][ T8978]        get_net_track+0x16e/0x230
[  294.392860][ T8978]        sk_net_refcnt_upgrade+0xb2/0x130
[  294.394919][ T8978]        mptcp_subflow_create_socket+0x32b/0x800
[  294.396975][ T8978]        __mptcp_nmpc_sk+0x155/0x790
[  294.399066][ T8978]        mptcp_setsockopt+0x17af/0x3520
[  294.401197][ T8978]        do_sock_setsockopt+0x17c/0x1b0
[  294.403283][ T8978]        __x64_sys_setsockopt+0x13d/0x1b0
[  294.405475][ T8978]        do_syscall_64+0x15f/0xf80
[  294.407471][ T8978]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.409914][ T8978] 
[  294.409914][ T8978] -> #0 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}:
[  294.413105][ T8978]        __lock_acquire+0x15a5/0x2cf0
[  294.415016][ T8978]        lock_acquire+0x106/0x350
[  294.416868][ T8978]        lock_sock_nested+0x41/0x100
[  294.418557][ T8978]        __mptcp_close_ssk+0x84/0x1180
[  294.420243][ T8978]        mptcp_pm_rm_addr_or_subflow+0x4ab/0x9d0
[  294.422235][ T8978]        mptcp_pm_worker+0x1b3/0x300
[  294.423898][ T8978]        mptcp_worker+0xd3/0x1420
[  294.425743][ T8978]        process_scheduled_works+0xb5d/0x1860
[  294.427860][ T8978]        worker_thread+0xa53/0xfc0
[  294.429568][ T8978]        kthread+0x388/0x470
[  294.430994][ T8978]        ret_from_fork+0x514/0xb70
[  294.432559][ T8978]        ret_from_fork_asm+0x1a/0x30
[  294.434180][ T8978] 
[  294.434180][ T8978] other info that might help us debug this:
[  294.434180][ T8978] 
[  294.437424][ T8978] Chain exists of:
[  294.437424][ T8978]   k-sk_lock-AF_INET6/1 --> &nsock->tx_lock --> sk_lock-AF_INET6
[  294.437424][ T8978] 
[  294.442880][ T8978]  Possible unsafe locking scenario:
[  294.442880][ T8978] 
[  294.445965][ T8978]        CPU0                    CPU1
[  294.448181][ T8978]        ----                    ----
[  294.450311][ T8978]   lock(sk_lock-AF_INET6);
[  294.452139][ T8978]                                lock(&nsock->tx_lock);
[  294.454893][ T8978]                                lock(sk_lock-AF_INET6);
[  294.457707][ T8978]   lock(k-sk_lock-AF_INET6/1);
[  294.459739][ T8978] 
[  294.459739][ T8978]  *** DEADLOCK ***
[  294.459739][ T8978] 
[  294.462980][ T8978] 3 locks held by kworker/1:17/8978:
[  294.464755][ T8978]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  294.468430][ T8978]  #1: ffffc90007c7fc40 ((work_completion)(&msk->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  294.472788][ T8978]  #2: ffff888171976a60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_worker+0x35/0x1420
[  294.476060][ T8978] 
[  294.476060][ T8978] stack backtrace:
[  294.477986][ T8978] CPU: 1 UID: 0 PID: 8978 Comm: kworker/1:17 Not tainted syzkaller #0 PREEMPT(full) 
[  294.477996][ T8978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.478002][ T8978] Workqueue: events mptcp_worker
[  294.478015][ T8978] Call Trace:
[  294.478019][ T8978]  <TASK>
[  294.478024][ T8978]  dump_stack_lvl+0xe8/0x150
[  294.478034][ T8978]  print_circular_bug+0x2e1/0x300
[  294.478045][ T8978]  check_noncircular+0x12e/0x150
[  294.478055][ T8978]  __lock_acquire+0x15a5/0x2cf0
[  294.478064][ T8978]  ? netlink_has_listeners+0x77/0x3f0
[  294.478074][ T8978]  ? netlink_has_listeners+0x77/0x3f0
[  294.478082][ T8978]  ? netlink_has_listeners+0x77/0x3f0
[  294.478091][ T8978]  ? netlink_has_listeners+0x339/0x3f0
[  294.478100][ T8978]  ? __mptcp_close_ssk+0x84/0x1180
[  294.478108][ T8978]  lock_acquire+0x106/0x350
[  294.478115][ T8978]  ? __mptcp_close_ssk+0x84/0x1180
[  294.478123][ T8978]  ? __pfx_mptcp_event+0x10/0x10
[  294.478132][ T8978]  lock_sock_nested+0x41/0x100
[  294.478141][ T8978]  ? __mptcp_close_ssk+0x84/0x1180
[  294.478149][ T8978]  __mptcp_close_ssk+0x84/0x1180
[  294.478157][ T8978]  ? mptcp_close_ssk+0x312/0x430
[  294.478166][ T8978]  mptcp_pm_rm_addr_or_subflow+0x4ab/0x9d0
[  294.478176][ T8978]  mptcp_pm_worker+0x1b3/0x300
[  294.478184][ T8978]  mptcp_worker+0xd3/0x1420
[  294.478194][ T8978]  ? process_scheduled_works+0xa70/0x1860
[  294.478201][ T8978]  ? process_scheduled_works+0xa70/0x1860
[  294.478208][ T8978]  process_scheduled_works+0xb5d/0x1860
[  294.478219][ T8978]  ? __pfx_process_scheduled_works+0x10/0x10
[  294.478227][ T8978]  ? assign_work+0x3d5/0x5e0
[  294.478234][ T8978]  worker_thread+0xa53/0xfc0
[  294.478250][ T8978]  kthread+0x388/0x470
[  294.478258][ T8978]  ? __pfx_worker_thread+0x10/0x10
[  294.478265][ T8978]  ? __pfx_kthread+0x10/0x10
[  294.478274][ T8978]  ret_from_fork+0x514/0xb70
[  294.478282][ T8978]  ? __pfx_ret_from_fork+0x10/0x10
[  294.478288][ T8978]  ? __switch_to+0xc79/0x1410
[  294.478299][ T8978]  ? __pfx_kthread+0x10/0x10
[  294.478307][ T8978]  ret_from_fork_asm+0x1a/0x30
[  294.478318][ T8978]  </TASK>
