last executing test programs:

1.798459842s ago: executing program 2 (id=4642):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)

1.798302589s ago: executing program 2 (id=4643):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r0, 0x37}, 0x20)

1.72120076s ago: executing program 2 (id=4645):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/133, 0x85}, {&(0x7f0000001400)="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", 0x181}], 0x3}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r2, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRES8=r2], 0x58}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010029bd7000bf90227b9e1b8631ffff9500000300"/34], 0x1c}}, 0x8000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket(0x2, 0x80805, 0x0)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r13=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r11, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={r13, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={r13, 0x9c, &(0x7f0000000240)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x7, @remote, 0x89fb}, @in6={0xa, 0x4e21, 0xfffffffa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x3}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x4}, @in6={0xa, 0x4e20, 0x608, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000380)=0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r16=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r16, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)

878.131831ms ago: executing program 2 (id=4667):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x188, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff, 0x200000000000000}, {0x0, 0x0, 0x2000000}, 0x70bd2d, 0x3500, 0xa, 0x4, 0x1, 0x58}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @algo_auth_trunc={0x4c, 0x14, {{'nhpoly1305\x00'}, 0x0, 0x80}}]}, 0x188}, 0x1, 0x0, 0x0, 0x880}, 0x0)

810.145702ms ago: executing program 2 (id=4670):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)

718.122288ms ago: executing program 2 (id=4671):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/74, 0x4a}], 0x1}, 0x10012)

217.755672ms ago: executing program 0 (id=4687):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x12, 0x0, 0x48, 0x0, 0x0, 0x1b, 0x64}, 0x8)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000740)=ANY=[], 0x80)

217.539897ms ago: executing program 0 (id=4688):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffc, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')

217.416598ms ago: executing program 1 (id=4689):
syz_emit_ethernet(0x3ae, &(0x7f0000000940)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x378, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffe, 0x300, [{0x3, 0x9, "a78ce54006598080a80300faffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27de3e347ccea6795ada70e97adac15084dbaf736b41e5af1802"}, {0x5, 0x1, "0000e10b0000000026086700"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x26, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e01000000be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

140.790304ms ago: executing program 0 (id=4690):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100))

140.610545ms ago: executing program 1 (id=4691):
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, {[@eol]}}}}}}}, 0x0)

140.358403ms ago: executing program 0 (id=4692):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0)

139.829661ms ago: executing program 1 (id=4693):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x13f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)

60.794994ms ago: executing program 1 (id=4694):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

60.497654ms ago: executing program 0 (id=4695):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0)

60.169105ms ago: executing program 0 (id=4696):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000820000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r3, r1, 0x25, 0x0, @val=@tracing={0x0, 0xa}}, 0x20)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0)

60.063202ms ago: executing program 1 (id=4697):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x39}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)

0s ago: executing program 1 (id=4698):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x1, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008"], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000780)={0x2cc, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2b8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\'{[[[!!${]*)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+\xcc%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c48}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '}-\\}T+(]([-\\-($/{$!&\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "a3e577f878981792f4472a180430b3fca585302be9adcdce3791c24caa901df117f515e07780a59688d8c6f9c3a4d9584ad24a22202e333232d815a59c402a3479f3f64633909cdf309ae2d9c7ad09088626f7a4d91783de956a88e0a802c5eb74fb9c8cf885aad64fd66bee2b8581633449dc8314ccaa52340c2a83168b078ce15b92c1ed6785ad6e122bad92d7da597433083010089049afc54a93f4f23add184c0e6b91af2c385b225b4137920a2cc6810c9918e2a65be7f59dc5cd9eb18e187e0b6ca8c8aa253348a3c9de1ae6d6c71f2019a7f4eb6300bcddbcef"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "813f449bbd8f96fac5caf0f3240f60c328df568be2e3818ced8d5b0c59d2901a36a0f723698803"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xef=]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[^$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x559}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4008044}, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, 0x0, 0x100000, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c)
sendto$inet(r2, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
recvmmsg(r2, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000120, 0x0)

kernel console output (not intermixed with test programs):

 has an invalid length.
[  153.693953][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1400'.
[  154.201303][ T9094] netlink: ct family unspecified
[  154.205962][ T9094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.968759][ T9108] netlink: 'syz.1.1413': attribute type 1 has an invalid length.
[  155.018687][ T9108] 8021q: adding VLAN 0 to HW filter on device bond8
[  155.437106][ T9117] netlink: 'syz.2.1418': attribute type 1 has an invalid length.
[  155.937964][ T9121] netlink: 'syz.2.1419': attribute type 21 has an invalid length.
[  155.942263][ T9121] netlink: 'syz.2.1419': attribute type 6 has an invalid length.
[  155.946362][ T9121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1419'.
[  158.367231][ T9136] syzkaller0: entered promiscuous mode
[  158.387520][ T9136] syzkaller0: entered allmulticast mode
[  159.386286][ T9151] netlink: 'syz.1.1430': attribute type 13 has an invalid length.
[  159.393626][ T9151] netlink: 'syz.1.1430': attribute type 17 has an invalid length.
[  159.434347][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.523769][ T9148] batman_adv: batadv0: Interface deactivated: dummy0
[  159.764370][ T9148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.791411][ T9148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.117511][ T9151] erspan0: left promiscuous mode
[  160.153222][ T9151] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.163083][ T9151] 8021q: adding VLAN 0 to HW filter on device team0
[  160.165772][ T9151] batman_adv: batadv0: Interface activated: dummy0
[  160.170817][ T9151] batadv0: mtu less than device minimum
[  160.176120][ T9151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  160.180011][ T9151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  160.183729][ T9151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  160.187528][ T9151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  160.191282][ T9151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  160.195067][ T9151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  160.198937][ T9151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  160.203135][ T9151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  160.207084][ T9151] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  160.222713][ T9151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.271156][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.273477][ T9151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.285454][ T9151] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.326275][ T9151] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.369249][ T9151] veth1_vlan: left promiscuous mode
[  160.372409][ T9151] veth0_vlan: left promiscuous mode
[  160.375046][ T9151] veth0_vlan: entered promiscuous mode
[  160.379169][ T9151] veth1_vlan: entered promiscuous mode
[  160.385117][ T9151] veth1_macvtap: left promiscuous mode
[  160.387762][ T9151] veth0_macvtap: left promiscuous mode
[  160.391794][ T9151] veth0_macvtap: entered promiscuous mode
[  160.399646][ T9151] veth1_macvtap: entered promiscuous mode
[  160.408758][ T9151] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  160.412482][ T9151] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  160.417218][ T9151] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  160.422362][ T9151] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  160.426070][ T9151] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  160.434893][ T9151] 8021q: adding VLAN 0 to HW filter on device bond1
[  160.451746][ T9151] 8021q: adding VLAN 0 to HW filter on device bond2
[  160.455504][ T9151] 8021q: adding VLAN 0 to HW filter on device team1
[  160.459020][ T9151] 8021q: adding VLAN 0 to HW filter on device team2
[  160.467294][ T9151] 8021q: adding VLAN 0 to HW filter on device bond3
[  160.473433][ T9151] 8021q: adding VLAN 0 to HW filter on device bond4
[  160.478309][ T9151] erspan0: entered promiscuous mode
[  160.485611][ T9151] erspan1: left promiscuous mode
[  160.487737][ T9151] erspan1: left allmulticast mode
[  160.499272][ T9151] 8021q: adding VLAN 0 to HW filter on device macsec2
[  160.509725][ T9151] 8021q: adding VLAN 0 to HW filter on device bond5
[  160.525998][ T9151] bond6: left allmulticast mode
[  160.528752][ T9151] 8021q: adding VLAN 0 to HW filter on device bond6
[  160.545875][ T9151] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  160.565832][ T9151] 8021q: adding VLAN 0 to HW filter on device bond7
[  160.569351][ T9151] gretap1: left allmulticast mode
[  160.624749][ T9151] 8021q: adding VLAN 0 to HW filter on device bond8
[  160.644742][   T24] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  160.682047][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.720371][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.733322][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.783543][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.953576][ T7273] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  161.054768][ T9171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1436'.
[  161.185996][ T9171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1436'.
[  161.490813][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'.
[  163.361029][ T9159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  163.839312][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1449'.
[  163.846015][ T9208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.939518][ T9208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.004269][ T9201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.132704][ T9224] xt_TCPMSS: Only works on TCP SYN packets
[  164.265639][ T9229] x_tables: duplicate underflow at hook 2
[  164.294283][ T9232] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1459'.
[  164.821616][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  165.065017][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1469'.
[  165.170391][ T9273] netlink: 'syz.0.1476': attribute type 3 has an invalid length.
[  165.207195][ T9257] ipvlan2: entered allmulticast mode
[  165.209626][ T9257] syz_tun: entered allmulticast mode
[  165.311841][ T5452] net_ratelimit: 59 callbacks suppressed
[  165.311903][ T5452] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  165.445273][ T9284] netlink: 'syz.0.1481': attribute type 5 has an invalid length.
[  165.821778][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  165.873263][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'.
[  165.933245][ T9303] 8021q: adding VLAN 0 to HW filter on device bond3
[  166.057904][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'.
[  166.084198][ T9315] team1: entered promiscuous mode
[  166.087985][ T9315] team1: entered allmulticast mode
[  166.092055][ T9315] 8021q: adding VLAN 0 to HW filter on device team1
[  166.104286][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'.
[  166.110231][ T9315] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  166.133644][ T9315] team2: entered promiscuous mode
[  166.136954][ T9315] team2: entered allmulticast mode
[  166.140215][ T9315] 8021q: adding VLAN 0 to HW filter on device team2
[  166.272681][ T9323] netlink: 'syz.2.1498': attribute type 1 has an invalid length.
[  166.275352][ T9323] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1498'.
[  166.341223][ T7273] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  166.686262][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1506'.
[  166.851166][ T5452] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  166.998510][ T9354] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1511'.
[  167.112956][ T9360] syzkaller0: entered promiscuous mode
[  167.115291][ T9360] syzkaller0: entered allmulticast mode
[  167.228628][   T33] audit: type=1800 audit(1781131261.406:3): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1518" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2735 res=0 errno=0
[  167.316986][ T9373] netlink: 'syz.0.1520': attribute type 14 has an invalid length.
[  167.391445][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  167.400199][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'.
[  167.582033][ T9389] netlink: 'syz.2.1524': attribute type 13 has an invalid length.
[  167.597240][ T9389] netlink: 'syz.2.1524': attribute type 17 has an invalid length.
[  167.701792][ T9396] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  167.747210][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.753399][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.911045][ T7273] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  168.083407][ T9389] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.092115][ T9389] 8021q: adding VLAN 0 to HW filter on device team0
[  168.104955][ T9389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.158113][ T9389] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.162443][ T9389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.178131][ T9389] veth1_vlan: left promiscuous mode
[  168.183703][ T9389] veth0_vlan: left promiscuous mode
[  168.187374][ T9389] veth0_vlan: entered promiscuous mode
[  168.196280][ T9389] veth1_vlan: entered promiscuous mode
[  168.204786][ T9389] veth1_macvtap: left promiscuous mode
[  168.207831][ T9426] SET target dimension over the limit!
[  168.210074][ T9389] veth0_macvtap: left promiscuous mode
[  168.214671][ T9389] veth0_macvtap: entered promiscuous mode
[  168.224951][ T9389] veth1_macvtap: entered promiscuous mode
[  168.234803][ T9389] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  168.242808][ T9389] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  168.251511][ T9389] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  168.258887][ T9389] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  168.269704][ T9389] 8021q: adding VLAN 0 to HW filter on device bond1
[  168.284805][ T9389] ip6gre1: left promiscuous mode
[  168.286948][ T9389] ip6gre1: left allmulticast mode
[  168.296135][ T9432] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1542'.
[  168.349877][ T9389] 8021q: adding VLAN 0 to HW filter on device bond2
[  168.361791][ T9389] xfrm1: left promiscuous mode
[  168.363896][ T9389] xfrm1: left allmulticast mode
[  168.421936][ T5452] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  168.476825][ T9434] syzkaller0: entered promiscuous mode
[  168.478668][ T9434] syzkaller0: entered allmulticast mode
[  168.514633][ T7273] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  168.523608][ T7273] bond2: (slave veth9): link status definitely up, 10000 Mbps full duplex
[  168.530121][ T7273] bond2: (slave veth7): making interface the new active one
[  168.536983][ T7273] bond2: active interface up!
[  168.932043][ T7273] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  169.440687][ T5685] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  169.585959][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  170.462507][   T12] net_ratelimit: 1 callbacks suppressed
[  170.462548][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  170.668775][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1562'.
[  170.679275][ T9484] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048)
[  170.739124][ T9488] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1567'.
[  170.980700][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  171.503659][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  171.907477][ T9568] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1605'.
[  171.911539][ T9568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1605'.
[  172.034228][ T5685] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  172.550631][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  172.601006][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'.
[  172.609977][ T9619] netlink: 'syz.1.1627': attribute type 2 has an invalid length.
[  172.709843][ T9632] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  172.768125][ T9636] xt_limit: Overflow, try lower: 268435456/134217728
[  173.064050][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  173.092656][ T9672] tap0: tun_chr_ioctl cmd 1074025677
[  173.094895][ T9672] tap0: linktype set to 823
[  173.464671][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  173.592369][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  173.605561][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'.
[  173.682892][ T9742] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1657'.
[  173.764917][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1659'.
[  173.780630][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  173.789774][ T9748] vlan3: entered promiscuous mode
[  173.858298][ T9748] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1659'.
[  173.864660][ T9748] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1659'.
[  173.953325][ T9757] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.959441][ T9757] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.112104][ T5685] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  174.119624][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.126802][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.130323][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.134108][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.137532][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.142406][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.145952][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.149323][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.832544][ T9788] syzkaller1: entered promiscuous mode
[  174.834400][ T9788] syzkaller1: entered allmulticast mode
[  175.177245][ T9807] netlink: 'syz.1.1681': attribute type 1 has an invalid length.
[  175.190148][ T9807] bond9: entered promiscuous mode
[  175.192256][ T9807] 8021q: adding VLAN 0 to HW filter on device bond9
[  175.208797][ T9807] vlan3: entered allmulticast mode
[  175.210764][ T9807] bond9: entered allmulticast mode
[  175.223533][ T9807] bond9: (slave bridge4): making interface the new active one
[  175.226063][ T9807] bridge4: entered promiscuous mode
[  175.227882][ T9807] bridge4: entered allmulticast mode
[  175.231099][ T9807] bond9: (slave bridge4): Enslaving as an active interface with an up link
[  175.282124][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'.
[  175.586601][ T9817] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1685'.
[  175.650863][   T12] net_ratelimit: 2 callbacks suppressed
[  175.650874][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  176.160656][ T5685] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  176.522746][ T9847] IPv6: Can't replace route, no match found
[  176.525011][ T9847] IPv6: Can't replace route, no match found
[  176.670621][ T5685] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  176.812820][ T9864] syzkaller0: entered promiscuous mode
[  176.814574][ T9864] syzkaller0: entered allmulticast mode
[  177.027561][ T9882] __nla_validate_parse: 4 callbacks suppressed
[  177.027578][ T9882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1712'.
[  177.058722][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1712'.
[  177.127978][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'.
[  177.131039][ T9892] netlink: 261 bytes leftover after parsing attributes in process `syz.0.1717'.
[  177.190685][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  177.701669][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  178.211386][ T5452] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  178.301599][ T9922] syzkaller1: entered promiscuous mode
[  178.305921][ T9922] syzkaller1: entered allmulticast mode
[  178.495634][ T9942] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  178.499069][ T9942] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  178.548311][ T9948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1743'.
[  178.585683][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'.
[  178.589916][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1744'.
[  178.731588][ T5452] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  178.772955][ T9973] xt_TPROXY: Can be used only with -p tcp or -p udp
[  178.818058][ T9977] netlink: 'syz.0.1756': attribute type 3 has an invalid length.
[  178.822308][ T9977] netlink: 'syz.0.1756': attribute type 1 has an invalid length.
[  178.825034][ T9977] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1756'.
[  178.892785][ T9989] netlink: 'syz.1.1761': attribute type 3 has an invalid length.
[  179.028437][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1766'.
[  179.031894][T10005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1766'.
[  179.194025][T10016] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  179.251831][ T5452] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  179.299599][T10022] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  179.332294][T10024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.581322][T10031] xt_TPROXY: Can be used only with -p tcp or -p udp
[  180.007138][T10051] netlink: 'syz.1.1788': attribute type 1 has an invalid length.
[  180.485458][T10063] netlink: 'syz.2.1792': attribute type 1 has an invalid length.
[  180.506820][T10065] nbd: must specify at least one socket
[  180.725351][T10074] 8021q: adding VLAN 0 to HW filter on device bond3
[  180.786224][   T33] audit: type=1804 audit(1781131274.966:4): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1799" name="/newroot/551/cgroup.controllers" dev="tmpfs" ino=2796 res=1 errno=0
[  180.795259][   T12] net_ratelimit: 2 callbacks suppressed
[  180.795268][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  180.827284][   T33] audit: type=1800 audit(1781131274.966:5): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1799" name="cgroup.controllers" dev="tmpfs" ino=2796 res=0 errno=0
[  180.882410][T10088] openvswitch: netlink: IPv4 tun info is not correct
[  180.896435][T10091] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  181.227095][T10121] netlink: 'syz.1.1819': attribute type 62 has an invalid length.
[  181.300761][ T7273] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  181.810748][ T7273] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  182.321517][ T7273] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  182.430675][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  182.830775][ T7273] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  183.340649][ T7273] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  183.850632][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  183.951963][T10143] __nla_validate_parse: 6 callbacks suppressed
[  183.951973][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1826'.
[  184.254184][T10147] syzkaller0: entered promiscuous mode
[  184.257191][T10147] syzkaller0: entered allmulticast mode
[  184.360767][ T7273] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  184.455125][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1838'.
[  184.460775][T10167] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  184.870859][ T7273] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  185.667335][T10212] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.674545][T10212] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.749699][T10212] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.753247][T10212] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.804147][T10230] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  185.859943][T10212] bond0: (slave netdevsim1): Releasing backup interface
[  185.870297][T10212] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.879173][T10212] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.901188][   T12] net_ratelimit: 1 callbacks suppressed
[  185.901197][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  185.914178][T10238] netlink: 'syz.1.1870': attribute type 4 has an invalid length.
[  185.948345][T10212] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.954018][T10212] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.959376][T10240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1871'.
[  185.963120][T10240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1871'.
[  186.005073][ T7273] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.008931][ T7273] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.017607][ T7273] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.024040][ T7273] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.056491][ T7273] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.060010][ T7273] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.082855][ T7273] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.099811][ T7273] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.118742][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1874'.
[  186.343751][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1882'.
[  186.412973][   T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  186.763297][T10295] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  186.776277][T10302] netlink: 'syz.1.1895': attribute type 1 has an invalid length.
[  186.806535][T10302] 8021q: adding VLAN 0 to HW filter on device bond10
[  186.838586][T10302] bond10: (slave veth5): Enslaving as a backup interface with a down link
[  186.847409][T10302] batman_adv: batadv0: Interface deactivated: dummy0
[  186.854411][T10302] batman_adv: batadv0: Removing interface: dummy0
[  186.863877][T10302] bond10: (slave dummy0): Enslaving as a backup interface with an up link
[  186.869591][T10302] netlink: 'syz.1.1895': attribute type 10 has an invalid length.
[  186.872878][T10302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1895'.
[  186.875775][T10302] dummy0: entered promiscuous mode
[  186.879884][T10302] bond10: (slave dummy0): Releasing backup interface
[  186.981589][T10313] syzkaller1: entered promiscuous mode
[  186.983944][T10313] syzkaller1: entered allmulticast mode
[  187.021039][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1901'.
[  187.144436][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'.
[  187.156702][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1901'.
[  187.257244][T10324] bond11: option downdelay: invalid value (18446744073709551613)
[  187.260000][T10324] bond11: option downdelay: allowed values 0 - 2147483647
[  187.267835][T10324] bond11 (unregistering): Released all slaves
[  187.496719][T10338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.672975][T10348] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  188.497215][T10411] block nbd1: Receive control failed (result -32)
[  188.498831][   T54] block nbd1: Receive control failed (result -32)
[  188.518774][T10416] xt_TCPMSS: Only works on TCP SYN packets
[  188.623983][T10428] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  188.632787][T10428] syzkaller0: entered promiscuous mode
[  188.634697][T10428] syzkaller0: entered allmulticast mode
[  189.125193][T10450] __nla_validate_parse: 6 callbacks suppressed
[  189.125203][T10450] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1958'.
[  189.131099][T10450] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1958'.
[  189.430827][T10464] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  189.517951][T10471] IPVS: Error connecting to the multicast addr
[  189.564863][T10475] netlink: 6060 bytes leftover after parsing attributes in process `syz.2.1970'.
[  189.610203][T10479] netlink: 'syz.2.1972': attribute type 2 has an invalid length.
[  189.809143][T10493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1979'.
[  189.896759][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'.
[  189.902519][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1984'.
[  190.055942][T10515] syzkaller0: entered promiscuous mode
[  190.058679][T10515] syzkaller0: entered allmulticast mode
[  190.100757][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  190.209653][T10525] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1995'.
[  190.213595][T10525] netlink: 'syz.2.1995': attribute type 1 has an invalid length.
[  190.317020][T10531] syzkaller0: entered promiscuous mode
[  190.321938][T10531] syzkaller0: entered allmulticast mode
[  190.533130][T10545] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2005'.
[  190.536647][T10545] netlink: Conntrack attr has 3 unknown bytes
[  190.936128][T10560] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2012'.
[  191.778773][T10561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2012'.
[  191.947034][T10586] sctp: [Deprecated]: syz.2.2023 (pid 10586) Use of int in max_burst socket option.
[  191.947034][T10586] Use struct sctp_assoc_value instead
[  191.989766][T10590] netlink: 'syz.0.2026': attribute type 16 has an invalid length.
[  192.335348][T10617] batadv0: entered promiscuous mode
[  192.338293][T10617] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  192.679226][T10645] netlink: 'syz.0.2048': attribute type 13 has an invalid length.
[  192.682776][T10645] netlink: 'syz.0.2048': attribute type 17 has an invalid length.
[  192.772935][T10645] erspan0: left promiscuous mode
[  192.800072][T10645] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.803918][T10645] 8021q: adding VLAN 0 to HW filter on device team0
[  192.807027][T10645] batadv0: left promiscuous mode
[  192.808998][T10645] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.863538][T10645] veth1_vlan: left promiscuous mode
[  192.868720][T10645] vlan0: left promiscuous mode
[  192.872832][T10645] veth1_vlan: entered promiscuous mode
[  192.878523][T10645] veth1_macvtap: left promiscuous mode
[  192.881743][T10645] veth0_macvtap: left promiscuous mode
[  192.884568][T10645] veth0_macvtap: entered promiscuous mode
[  192.921898][T10645] veth1_macvtap: entered promiscuous mode
[  192.927345][T10645] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  192.929555][T10645] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  192.947490][T10645] ip6tnl1: left allmulticast mode
[  192.949888][T10645] 8021q: adding VLAN 0 to HW filter on device bond1
[  192.955639][T10645] 8021q: adding VLAN 0 to HW filter on device bond2
[  192.958330][T10645] erspan0: entered promiscuous mode
[  193.020043][T10645] 8021q: adding VLAN 0 to HW filter on device bond3
[  193.023018][T10645] team1: left promiscuous mode
[  193.024586][T10645] team1: left allmulticast mode
[  193.026359][T10645] 8021q: adding VLAN 0 to HW filter on device team1
[  193.029093][T10645] team2: left promiscuous mode
[  193.030775][T10645] team2: left allmulticast mode
[  193.032501][T10645] 8021q: adding VLAN 0 to HW filter on device team2
[  193.042560][T10645] 8021q: adding VLAN 0 to HW filter on device eth0
[  193.065622][T10645] 8021q: adding VLAN 0 to HW filter on device eth1
[  193.089198][T10645] 8021q: adding VLAN 0 to HW filter on device eth2
[  193.112603][T10645] 8021q: adding VLAN 0 to HW filter on device eth3
[  193.341462][ T5452] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  194.062199][T10714] nbd: must specify a size in bytes for the device
[  194.159742][   T33] audit: type=1804 audit(1781131288.336:6): pid=10721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2080" name="/newroot/629/cgroup.controllers" dev="tmpfs" ino=3188 res=1 errno=0
[  194.169490][   T33] audit: type=1800 audit(1781131288.336:7): pid=10721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2080" name="cgroup.controllers" dev="tmpfs" ino=3188 res=0 errno=0
[  194.188045][   T33] audit: type=1804 audit(1781131288.366:8): pid=10721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2080" name="/newroot/629/cgroup.controllers" dev="tmpfs" ino=3188 res=1 errno=0
[  194.328484][T10734] __nla_validate_parse: 10 callbacks suppressed
[  194.328498][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'.
[  194.499501][T10752] netlink: 'syz.1.2096': attribute type 3 has an invalid length.
[  194.698651][T10752] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  194.824286][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2104'.
[  194.870377][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2105'.
[  194.886781][ T5759] IPVS: starting estimator thread 0...
[  194.903080][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2105'.
[  194.942180][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2107'.
[  194.953054][T10784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2105'.
[  194.981044][T10779] IPVS: using max 81 ests per chain, 194400 per kthread
[  195.054032][T10791] IPv6: sit2: Disabled Multicast RS
[  195.185000][T10806] netlink: 'syz.0.2118': attribute type 4 has an invalid length.
[  195.194718][T10806] netlink: 'syz.0.2118': attribute type 4 has an invalid length.
[  195.314909][T10822] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2126'.
[  195.484563][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'.
[  195.538012][T10838] netlink: 'syz.2.2132': attribute type 16 has an invalid length.
[  195.632620][T10848] syzkaller0: entered promiscuous mode
[  195.635017][T10848] syzkaller0: entered allmulticast mode
[  196.660572][   T53] Bluetooth: hci1: command 0x0406 tx timeout
[  197.058254][T10920] syzkaller0: entered promiscuous mode
[  197.063434][T10920] syzkaller0: entered allmulticast mode
[  197.245747][T10934] xt_limit: Overflow, try lower: 324382443/0
[  197.257224][T10936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.287367][T10936] bridge0: port 1(syz_tun) entered blocking state
[  197.296639][T10936] bridge0: port 1(syz_tun) entered disabled state
[  197.302115][T10936] syz_tun: entered promiscuous mode
[  197.362014][T10947] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[  197.577505][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'.
[  197.630644][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  198.108891][T10995] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.2201'.
[  199.332327][T11090] netlink: 'syz.2.2228': attribute type 9 has an invalid length.
[  199.529324][T11094] bond11: option all_slaves_active: invalid value (127)
[  199.533250][T11094] bond11 (unregistering): Released all slaves
[  199.701919][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  199.749177][T11109] __nla_validate_parse: 3 callbacks suppressed
[  199.749191][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2235'.
[  199.936875][T11122] xfrm0 speed is unknown, defaulting to 1000
[  199.946833][T11122] xfrm0 speed is unknown, defaulting to 1000
[  199.955272][T11122] xfrm0 speed is unknown, defaulting to 1000
[  200.088453][   T31] xfrm0 speed is unknown, defaulting to 1000
[  200.092769][T11122] infiniband syz0: set down
[  200.094811][T11122] infiniband syz0: added xfrm0
[  200.110310][T11122] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  200.114189][T11137] netlink: 'syz.0.2247': attribute type 23 has an invalid length.
[  200.120652][T11122] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  200.128077][T11122] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  200.169005][T11122] RDS/IB: syz0: added
[  200.172765][T11122] smc: adding ib device syz0 with port count 1
[  200.175349][T11122] smc:    ib device syz0 port 1 has no pnetid
[  200.184959][   T31] xfrm0 speed is unknown, defaulting to 1000
[  200.202339][T11122] xfrm0 speed is unknown, defaulting to 1000
[  200.426363][T11122] xfrm0 speed is unknown, defaulting to 1000
[  200.491252][T11158] syzkaller0: entered promiscuous mode
[  200.493524][T11158] syzkaller0: entered allmulticast mode
[  200.626357][T11122] xfrm0 speed is unknown, defaulting to 1000
[  200.773863][T11168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2262'.
[  200.910951][T11176] syzkaller0: entered promiscuous mode
[  200.913188][T11176] syzkaller0: entered allmulticast mode
[  201.341865][T11201] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.346013][T11201] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.348826][T11201] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.351736][T11201] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.354595][T11201] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.357309][T11201] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.359764][T11201] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.362528][T11201] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.365333][T11201] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.368127][T11201] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.388098][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2280'.
[  201.394049][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  201.397852][T11208] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2278'.
[  201.402119][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  201.409954][T11208] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2278'.
[  201.419840][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  201.611990][T11223] syzkaller0: entered promiscuous mode
[  201.613952][T11223] syzkaller0: entered allmulticast mode
[  202.230852][T11243] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  202.257262][T11246] netlink: 'syz.0.2296': attribute type 2 has an invalid length.
[  202.787726][T11281] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  203.022011][T11293] syzkaller0: entered promiscuous mode
[  203.024479][T11293] syzkaller0: entered allmulticast mode
[  203.713371][T11322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2323'.
[  204.403414][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2317'.
[  204.659429][T11339] netlink: 'syz.1.2330': attribute type 1 has an invalid length.
[  204.695493][T11339] bond11: entered promiscuous mode
[  204.703023][T11339] 8021q: adding VLAN 0 to HW filter on device bond11
[  204.727330][T11339] ipvlan2: entered allmulticast mode
[  204.729572][T11339] bond11: entered allmulticast mode
[  204.750066][T11339] ipvlan3: entered allmulticast mode
[  204.771898][T11339] bond11: (slave bridge6): making interface the new active one
[  204.775538][T11339] bridge6: entered promiscuous mode
[  204.778990][T11339] bridge6: entered allmulticast mode
[  204.785790][T11339] bond11: (slave bridge6): Enslaving as an active interface with an up link
[  204.878577][T11352] netlink: 'syz.0.2336': attribute type 1 has an invalid length.
[  204.884132][T11352] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2336'.
[  204.935739][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'.
[  205.077512][T11374] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2347'.
[  205.086347][T11374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2347'.
[  205.098987][T11374] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  205.111362][T11374] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  205.121189][T11374] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  205.135802][T11372] hm3): entered promiscuous mode
[  205.326961][T11393] syzkaller0: entered promiscuous mode
[  205.329031][T11393] syzkaller0: entered allmulticast mode
[  205.431457][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2359'.
[  205.437856][T11399] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  205.471018][T11399] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.528934][T11404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2360'.
[  205.558852][T11406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2359'.
[  205.644632][T11410] syzkaller0: entered promiscuous mode
[  205.647080][T11410] syzkaller0: entered allmulticast mode
[  206.098636][T11447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2380'.
[  206.162660][T11452] netlink: 'syz.1.2383': attribute type 18 has an invalid length.
[  206.165803][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2383'.
[  206.167309][T11450] syzkaller1: entered promiscuous mode
[  206.179862][T11450] syzkaller1: entered allmulticast mode
[  206.243221][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'.
[  206.361726][T11465] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  206.364560][T11465] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  206.367603][T11465] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  206.735269][T11511] netlink: 'syz.1.2410': attribute type 8 has an invalid length.
[  206.751564][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  206.901771][   T10] page_pool_release_retry() stalled pool shutdown: id 50, 1 inflight 60 sec
[  206.951253][T11531] rdma_rxe: rxe_newlink: failed to add xfrm0
[  207.367005][T11562] netlink: 'syz.0.2434': attribute type 1 has an invalid length.
[  207.493861][T11578] xt_l2tp: invalid flags combination: 0
[  207.640248][T11592] netlink: 'syz.2.2446': attribute type 3 has an invalid length.
[  207.647673][T11592] netlink: 'syz.2.2446': attribute type 3 has an invalid length.
[  207.706508][T11600] netlink: 'syz.0.2450': attribute type 58 has an invalid length.
[  207.750764][T11604] sctp: [Deprecated]: syz.2.2452 (pid 11604) Use of struct sctp_assoc_value in delayed_ack socket option.
[  207.750764][T11604] Use struct sctp_sack_info instead
[  208.340669][ T5005] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  208.342546][   T53] Bluetooth: hci2: command 0x0419 tx timeout
[  208.406337][T11638] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  208.406337][T11638] Please contact the netfilter-devel mailing list or update your nftables rules.
[  208.724444][T11650] vlan4: entered promiscuous mode
[  209.187146][T11684] IPv6: NLM_F_CREATE should be specified when creating new route
[  209.189334][T11682] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  209.302436][T11686] lo: entered allmulticast mode
[  209.304794][T11686] lo: left allmulticast mode
[  209.794911][T11743] netlink: 'syz.0.2517': attribute type 10 has an invalid length.
[  209.797929][T11743] syz_tun: entered promiscuous mode
[  209.805801][T11743] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  209.826014][T11746] netlink: 'syz.1.2518': attribute type 1 has an invalid length.
[  209.867027][T11749] netlink: 'syz.2.2519': attribute type 12 has an invalid length.
[  209.987870][T11757] __nla_validate_parse: 17 callbacks suppressed
[  209.987881][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'.
[  210.014323][T11757] macsec0: entered promiscuous mode
[  210.043420][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2519'.
[  210.065626][T11757] macsec0 (unregistering): left promiscuous mode
[  210.193061][T11772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2530'.
[  210.314413][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2531'.
[  210.565712][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2545'.
[  210.586095][T11810] syz_tun: Device is already in use.
[  210.635689][T11818] netlink: 'syz.2.2549': attribute type 11 has an invalid length.
[  210.638705][T11818] netlink: 'syz.2.2549': attribute type 4 has an invalid length.
[  210.643763][T11818] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.2549'.
[  210.718433][T11822] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2551'.
[  210.761955][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2553'.
[  210.765143][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2553'.
[  210.816623][T11832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2555'.
[  211.103103][T11865] syzkaller0: entered promiscuous mode
[  211.106970][T11865] syzkaller0: entered allmulticast mode
[  212.220012][T11897] netlink: 'syz.2.2588': attribute type 26 has an invalid length.
[  212.793811][T11963] netlink: 'syz.2.2617': attribute type 7 has an invalid length.
[  212.802098][T11963] netlink: 'syz.2.2617': attribute type 7 has an invalid length.
[  213.992469][T11995] kthread_run failed with err -4
[  214.384167][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.391252][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.342693][T12054] __nla_validate_parse: 11 callbacks suppressed
[  215.342709][T12054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2652'.
[  215.352820][T12054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2652'.
[  215.375731][T12056] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  215.678030][T12090] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  215.742791][T12097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2674'.
[  215.754707][T12091] netlink: 81 bytes leftover after parsing attributes in process `syz.1.2670'.
[  215.829305][T12105] netlink: 298 bytes leftover after parsing attributes in process `syz.0.2677'.
[  215.834907][T12105] net_ratelimit: 3320 callbacks suppressed
[  215.834917][T12105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.864672][T12107] syzkaller0: entered promiscuous mode
[  215.867993][T12107] syzkaller0: entered allmulticast mode
[  216.076844][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2689'.
[  216.198809][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'.
[  216.201765][T12142] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  216.201804][T12142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.249497][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'.
[  216.334273][T12155] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2700'.
[  217.251115][T12190] netlink: 'syz.2.2715': attribute type 21 has an invalid length.
[  217.336224][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'.
[  218.421354][   T53] Bluetooth: hci2: command 0x0419 tx timeout
[  219.575530][T12362] tun0: tun_chr_ioctl cmd 2148553947
[  219.658525][T12369] syzkaller0: entered promiscuous mode
[  219.660975][T12369] syzkaller0: entered allmulticast mode
[  221.276790][T12282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  221.337515][T12410] __nla_validate_parse: 6 callbacks suppressed
[  221.337529][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2800'.
[  221.451940][T12419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2801'.
[  221.558563][T12432] netlink: 'syz.0.2809': attribute type 8 has an invalid length.
[  221.562475][T12432] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.2809'.
[  221.628456][T12438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2812'.
[  221.974943][T12459] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2822'.
[  222.029277][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2824'.
[  222.032942][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'.
[  222.033396][T12464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2824'.
[  222.049766][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2825'.
[  222.446097][T12496] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2840'.
[  222.463565][T12496] openvswitch: netlink: Key type 769 is out of range max 32
[  223.391248][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  223.506023][T12566] syzkaller0: entered promiscuous mode
[  223.507817][T12566] syzkaller0: entered allmulticast mode
[  224.090208][T12588] SET target dimension over the limit!
[  224.571910][T12618] tipc: Started in network mode
[  224.576075][T12618] tipc: Node identity 4e2a9829ab19, cluster identity 4711
[  224.581938][T12618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.599658][T12618] syzkaller0: entered promiscuous mode
[  224.602187][T12618] syzkaller0: entered allmulticast mode
[  224.618968][T12618] tipc: Resetting bearer <eth:syzkaller0>
[  224.625922][T12617] tipc: Resetting bearer <eth:syzkaller0>
[  224.643636][T12617] tipc: Disabling bearer <eth:syzkaller0>
[  224.754941][ T5452] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.759703][ T5452] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.767112][ T5452] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.773894][ T5452] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  224.831112][   T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  224.835855][T12638] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  224.911335][T12646] tipc: Enabled bearer <eth:batadv0>, priority 27
[  225.029863][T12666] openvswitch: netlink: Message has 2 unknown bytes.
[  225.112001][T12670] bond12: entered allmulticast mode
[  225.310660][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  225.922392][   T10] tipc: Node number set to 2007533468
[  225.997477][T12680] netlink: 'syz.2.2926': attribute type 1 has an invalid length.
[  226.289391][T12701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  226.423004][   T53] Bluetooth: hci2: command 0x0419 tx timeout
[  226.628574][T12723] geneve2: entered promiscuous mode
[  226.638523][T10648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.644704][T10648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.652609][T10648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.660213][T10648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.914590][T12747] __nla_validate_parse: 20 callbacks suppressed
[  226.914607][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2954'.
[  227.030422][T12758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2961'.
[  227.040940][T12758] ip6gre2: entered promiscuous mode
[  227.042869][T12758] ip6gre2: entered allmulticast mode
[  227.163740][T12772] tipc: Enabled bearer <udp:syz2>, priority 10
[  227.168188][T12772] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  227.293542][T12773] tipc: Failed to remove unknown binding: 66,0,0/0:2270799604/2270799606
[  227.296875][T12773] tipc: Failed to remove unknown binding: 66,0,0/0:2270799604/2270799605
[  227.391685][T12761] tipc: Failed to remove unknown binding: 66,0,0/0:2270799604/2270799606
[  227.396303][T12761] tipc: Failed to remove unknown binding: 66,0,0/0:2270799604/2270799605
[  227.638164][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2978'.
[  227.789058][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'.
[  228.160844][ T5759] tipc: Node number set to 3845363753
[  228.220313][T12840] sctp: [Deprecated]: syz.2.2995 (pid 12840) Use of int in max_burst socket option.
[  228.220313][T12840] Use struct sctp_assoc_value instead
[  228.229936][T12840] netlink: 'syz.2.2995': attribute type 1 has an invalid length.
[  228.236836][T12840] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2995'.
[  228.310986][T12841] xfrm0 speed is unknown, defaulting to 1000
[  228.582744][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2997'.
[  228.588569][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2997'.
[  228.767043][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'.
[  228.773526][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3002'.
[  228.781785][T12857] netlink: 'syz.0.3002': attribute type 6 has an invalid length.
[  228.786355][T12857] netlink: 'syz.0.3002': attribute type 5 has an invalid length.
[  228.793911][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'.
[  228.799189][T12857] netlink: 'syz.0.3002': attribute type 6 has an invalid length.
[  228.805400][T12857] netlink: 'syz.0.3002': attribute type 5 has an invalid length.
[  229.004176][T12871] netlink: 'syz.2.3009': attribute type 7 has an invalid length.
[  229.145142][T12877] ip6gre2: entered promiscuous mode
[  229.146985][T12877] ip6gre2: entered allmulticast mode
[  229.150069][T10648] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  229.163829][T10648] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  229.171265][ T5759] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  229.352961][T12906] netlink: 'syz.1.3026': attribute type 3 has an invalid length.
[  229.365360][T12906] netlink: 'syz.1.3026': attribute type 1 has an invalid length.
[  229.368958][T12906] NCSI netlink: No device for ifindex 2147483648
[  229.476376][T12921] netlink: 'syz.2.3033': attribute type 8 has an invalid length.
[  229.502194][ T5759] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  229.521545][ T5759] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  229.533738][T12922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.758368][T12943] 8021q: adding VLAN 0 to HW filter on device bond5
[  229.779194][T12943] bond5: (slave veth15): Enslaving as an active interface with a down link
[  229.785578][T12949] syz.2.3044: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  229.803042][T12949] CPU: 1 UID: 0 PID: 12949 Comm: syz.2.3044 Not tainted syzkaller #0 PREEMPT(full) 
[  229.803056][T12949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  229.803061][T12949] Call Trace:
[  229.803065][T12949]  <TASK>
[  229.803068][T12949]  dump_stack_lvl+0xe8/0x150
[  229.803081][T12949]  warn_alloc+0x249/0x340
[  229.803094][T12949]  ? stack_trace_save+0xa9/0x100
[  229.803108][T12949]  ? __pfx_warn_alloc+0x10/0x10
[  229.803121][T12949]  ? kasan_save_track+0x4f/0x80
[  229.803132][T12949]  ? kasan_save_track+0x3e/0x80
[  229.803142][T12949]  ? __kasan_kmalloc+0x93/0xb0
[  229.803152][T12949]  ? __kmalloc_cache_noprof+0x31c/0x660
[  229.803165][T12949]  ? xskq_create+0x56/0x170
[  229.803176][T12949]  ? xsk_setsockopt+0x54c/0x990
[  229.803185][T12949]  ? do_sock_setsockopt+0x17c/0x1b0
[  229.803194][T12949]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  229.803201][T12949]  ? do_syscall_64+0x174/0xf80
[  229.803211][T12949]  __vmalloc_node_range_noprof+0x132/0x1750
[  229.803232][T12949]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  229.803244][T12949]  ? __kasan_kmalloc+0x93/0xb0
[  229.803256][T12949]  vmalloc_user_noprof+0xad/0xe0
[  229.803266][T12949]  ? xskq_create+0xbf/0x170
[  229.803301][T12949]  xskq_create+0xbf/0x170
[  229.803309][T12949]  xsk_init_queue+0x8a/0xe0
[  229.803323][T12949]  xsk_setsockopt+0x54c/0x990
[  229.803335][T12949]  ? __pfx_xsk_setsockopt+0x10/0x10
[  229.803347][T12949]  ? __pfx_aa_sk_perm+0x10/0x10
[  229.803360][T12949]  ? aa_sock_opt_perm+0xff/0x1a0
[  229.803372][T12949]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  229.803382][T12949]  ? __pfx_xsk_setsockopt+0x10/0x10
[  229.803393][T12949]  do_sock_setsockopt+0x17c/0x1b0
[  229.803403][T12949]  __x64_sys_setsockopt+0x13d/0x1b0
[  229.803413][T12949]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.803421][T12949]  do_syscall_64+0x174/0xf80
[  229.803428][T12949]  ? trace_irq_disable+0x3b/0x140
[  229.803441][T12949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.803449][T12949] RIP: 0033:0x7ff31b39ce59
[  229.803458][T12949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.803464][T12949] RSP: 002b:00007ff31c2a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  229.803473][T12949] RAX: ffffffffffffffda RBX: 00007ff31b615fa0 RCX: 00007ff31b39ce59
[  229.803479][T12949] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  229.803483][T12949] RBP: 00007ff31b432d6f R08: 0000000000000004 R09: 0000000000000000
[  229.803487][T12949] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  229.803492][T12949] R13: 00007ff31b616038 R14: 00007ff31b615fa0 R15: 00007ffc5b4b2d78
[  229.803503][T12949]  </TASK>
[  229.803507][T12949] Mem-Info:
[  229.916507][T12949] active_anon:8200 inactive_anon:0 isolated_anon:0
[  229.916507][T12949]  active_file:12289 inactive_file:38397 isolated_file:0
[  229.916507][T12949]  unevictable:1768 dirty:277 writeback:0
[  229.916507][T12949]  slab_reclaimable:10525 slab_unreclaimable:229593
[  229.916507][T12949]  mapped:21369 shmem:5236 pagetables:1017
[  229.916507][T12949]  sec_pagetables:0 bounce:0
[  229.916507][T12949]  kernel_misc_reclaimable:0
[  229.916507][T12949]  free:980521 free_pcp:21423 free_cma:0
[  229.936088][T12949] Node 0 active_anon:20084kB inactive_anon:0kB active_file:35936kB inactive_file:123292kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40496kB dirty:964kB writeback:0kB shmem:16248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5320kB pagetables:2036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  229.955515][T12949] Node 1 active_anon:12716kB inactive_anon:0kB active_file:13220kB inactive_file:30296kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44980kB dirty:144kB writeback:0kB shmem:4696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7836kB pagetables:2016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  229.968618][T12949] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  229.979424][T12949] lowmem_reserve[]: 0 1587 2118 2118 2118
[  229.982370][T12949] Node 0 DMA32 free:1124360kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11164kB inactive_anon:0kB active_file:4980kB inactive_file:10488kB unevictable:0kB writepending:32kB zspages:0kB present:2080636kB managed:1625688kB mlocked:0kB bounce:0kB free_pcp:8924kB local_pcp:68kB free_cma:0kB
[  229.995556][T12949] lowmem_reserve[]: 0 0 530 530 530
[  229.997793][T12949] Node 0 Normal free:10484kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8952kB inactive_anon:0kB active_file:30956kB inactive_file:112804kB unevictable:3536kB writepending:932kB zspages:0kB present:1572868kB managed:543172kB mlocked:0kB bounce:0kB free_pcp:1572kB local_pcp:100kB free_cma:0kB
[  230.010766][T12949] lowmem_reserve[]: 0 0 0 0 0
[  230.012833][T12949] Node 1 Normal free:2771880kB boost:0kB min:56340kB low:70424kB high:84508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12716kB inactive_anon:0kB active_file:13220kB inactive_file:30296kB unevictable:3536kB writepending:144kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:75464kB local_pcp:42256kB free_cma:0kB
[  230.028539][T12949] lowmem_reserve[]: 0 0 0 0 0
[  230.030816][T12949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  230.036020][T12949] Node 0 DMA32: 134*4kB (U) 206*8kB (UE) 214*16kB (UE) 297*32kB (UM) 227*64kB (UME) 121*128kB (UME) 50*256kB (UE) 11*512kB (UME) 10*1024kB (UME) 13*2048kB (UM) 250*4096kB (UM) = 1124424kB
[  230.043849][T12949] Node 0 Normal: 27*4kB (UME) 132*8kB (UME) 183*16kB (UE) 16*32kB (UME) 36*64kB (UME) 14*128kB (UME) 3*256kB (E) 2*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 10492kB
[  230.050828][T12949] Node 1 Normal: 588*4kB (UME) 269*8kB (UE) 221*16kB (UM) 232*32kB (UM) 56*64kB (UM) 77*128kB (UME) 53*256kB (UM) 25*512kB (UME) 9*1024kB (UM) 8*2048kB (UM) 657*4096kB (UM) = 2771944kB
[  230.058009][T12949] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  230.061216][T12949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  230.064141][T12949] 55943 total pagecache pages
[  230.065598][T12949] 0 pages in swap cache
[  230.066867][T12949] Free swap  = 124996kB
[  230.068304][T12949] Total swap = 124996kB
[  230.069663][T12949] 1834877 pages RAM
[  230.071338][T12949] 0 pages HighMem/MovableOnly
[  230.073252][T12949] 390151 pages reserved
[  230.074980][T12949] 0 pages cma reserved
[  230.685737][T13008] syzkaller0: entered promiscuous mode
[  230.687471][T13008] syzkaller0: entered allmulticast mode
[  230.747650][T13014] bond13: entered promiscuous mode
[  230.751426][T13014] bond13: entered allmulticast mode
[  230.753395][T13014] 8021q: adding VLAN 0 to HW filter on device bond13
[  230.923647][T13030] tipc: New replicast peer: 255.255.255.255
[  230.925970][T13030] tipc: Enabled bearer <udp:syz1>, priority 10
[  231.941474][T13064] validate_nla: 4 callbacks suppressed
[  231.941489][T13064] netlink: 'syz.2.3088': attribute type 3 has an invalid length.
[  232.002249][T13068] __nla_validate_parse: 9 callbacks suppressed
[  232.002293][T13068] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3090'.
[  232.007801][T13068] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3090'.
[  232.011835][T13068] netlink: 'syz.2.3090': attribute type 6 has an invalid length.
[  232.015451][T13068] netlink: 'syz.2.3090': attribute type 5 has an invalid length.
[  232.017816][T13068] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3090'.
[  232.122509][T13074] xt_hl: Unknown TTL match mode: 237
[  232.137337][T13074] syzkaller0: entered promiscuous mode
[  232.141844][T13074] syzkaller0: entered allmulticast mode
[  232.571783][T13103] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  232.577585][T13103] bond14 (unregistering): Released all slaves
[  232.865711][T13116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.869214][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3112'.
[  232.870010][T13116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.918860][T13119] team0: Failed to send options change via netlink (err -105)
[  232.924886][T13119] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  232.930857][T13119] team0: Port device team_slave_0 removed
[  232.964301][T13116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  232.968422][T13116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.042811][T13116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  233.047699][T13116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.083697][T13121] tipc: New replicast peer: 255.255.255.255
[  233.086977][T13121] tipc: Enabled bearer <udp:syz2>, priority 10
[  233.090379][T13121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'.
[  233.096758][T13121] netlink: 'syz.0.3114': attribute type 1 has an invalid length.
[  233.119491][T13121] bond6: entered promiscuous mode
[  233.122477][T13121] 8021q: adding VLAN 0 to HW filter on device bond6
[  233.149421][T13121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3114'.
[  233.158199][T13116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  233.162498][T13116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.172235][T13121] bond6: entered allmulticast mode
[  233.184444][T13121] bond6: (slave bridge5): making interface the new active one
[  233.187172][T13121] bridge5: entered promiscuous mode
[  233.188980][T13121] bridge5: entered allmulticast mode
[  233.193557][T13121] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  233.230617][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  233.311190][T13124] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.324945][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  233.329431][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.333812][T13124] syzkaller0: entered promiscuous mode
[  233.336200][T13124] syzkaller0: entered allmulticast mode
[  233.354775][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  233.358086][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.362558][T13124] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  233.405320][T10648] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  233.409099][T10648] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.423164][T13124] tipc: Resetting bearer <eth:syzkaller0>
[  233.442930][T10648] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  233.450901][T10648] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.457469][T13123] tipc: Resetting bearer <eth:syzkaller0>
[  233.486247][T13123] tipc: Disabling bearer <eth:syzkaller0>
[  233.957398][T13167] IPVS: Error connecting to the multicast addr
[  234.132838][T13180] xt_hashlimit: size too large, truncated to 1048576
[  234.261273][T13186] netlink: 'syz.1.3142': attribute type 1 has an invalid length.
[  234.263753][T13186] netlink: 476 bytes leftover after parsing attributes in process `syz.1.3142'.
[  234.266935][T13186] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3142'.
[  234.349244][T13192] netlink: 'syz.2.3145': attribute type 4 has an invalid length.
[  234.356298][T13192] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.3145'.
[  234.370576][   T10] tipc: Node number set to 4269801492
[  234.539315][T13202] netlink: 'syz.2.3150': attribute type 2 has an invalid length.
[  234.815525][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3156'.
[  234.924388][T13220] hm3): entered promiscuous mode
[  236.343406][T13269] syzkaller0: entered promiscuous mode
[  236.345217][T13269] syzkaller0: entered allmulticast mode
[  236.698895][T13294] 0: reclassify loop, rule prio 0, protocol 700
[  237.004179][T13313] xt_CT: No such helper "snmp"
[  237.220160][T13326] netlink: 'syz.2.3201': attribute type 10 has an invalid length.
[  237.234959][T13326] team0: Port device veth1_to_hsr added
[  237.567661][T13349] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  237.656424][T13352] bond5: option ad_user_port_key: invalid value (65535)
[  237.662900][T13352] bond5: option ad_user_port_key: allowed values 0 - 1023
[  237.677548][T13352] bond5 (unregistering): Released all slaves
[  238.263623][T13403] __nla_validate_parse: 1 callbacks suppressed
[  238.263639][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3232'.
[  238.274440][T13407] syzkaller1: entered promiscuous mode
[  238.276962][T13407] syzkaller1: entered allmulticast mode
[  238.316712][T13409] netlink: 'syz.0.3234': attribute type 23 has an invalid length.
[  238.319397][T13409] netlink: 'syz.0.3234': attribute type 21 has an invalid length.
[  238.322304][T13409] IPv6: NLM_F_CREATE should be specified when creating new route
[  238.442634][T13419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3238'.
[  239.237124][T13492] xt_hashlimit: max too large, truncated to 1048576
[  239.240259][T13492] xt_ecn: cannot match TCP bits for non-tcp packets
[  239.803385][T13517] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3282'.
[  240.271314][T13527] SET target dimension over the limit!
[  240.376299][T13540] netlink: 'syz.1.3292': attribute type 1 has an invalid length.
[  240.386261][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3291'.
[  240.446609][T13545] syz_tun: entered allmulticast mode
[  240.531553][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3296'.
[  240.571060][T13552] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3297'.
[  240.580627][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  240.843370][T13568] xt_HMARK: spi-set and port-set can't be combined
[  240.938494][T13577] netlink: 'syz.0.3309': attribute type 1 has an invalid length.
[  240.988125][T13577] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  241.029355][T13577] veth17: entered promiscuous mode
[  241.034722][T13577] bond7: (slave veth17): Enslaving as a backup interface with a down link
[  241.053364][T13577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3309'.
[  241.058273][T13577] 8021q: adding VLAN 0 to HW filter on device bond7
[  241.062264][T10648] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  241.181697][T10648] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  241.300679][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  241.440255][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3327'.
[  241.541986][T13625] netlink: 556 bytes leftover after parsing attributes in process `syz.0.3331'.
[  241.620537][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  241.633391][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'.
[  241.657046][T13640] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[  241.706217][T13644] netlink: 'syz.0.3341': attribute type 4 has an invalid length.
[  241.920393][T13662] netlink: 'syz.1.3350': attribute type 23 has an invalid length.
[  242.168704][T13678] netlink: 'syz.1.3356': attribute type 2 has an invalid length.
[  242.316271][T13688] openvswitch: netlink: Message has 4 unknown bytes.
[  242.660620][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  243.550764][T10648] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  243.553722][T10648] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.556572][T10648] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  243.562099][T10648] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.568833][T10648] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  243.576482][T10648] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.582107][T10648] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  243.591924][T10648] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.645272][T13754] __nla_validate_parse: 1 callbacks suppressed
[  243.645282][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'.
[  243.657187][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3381'.
[  243.700532][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  243.770275][T13767] 8021q: adding VLAN 0 to HW filter on device bond14
[  243.894712][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3395'.
[  244.127529][T13805] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.3403'.
[  244.648565][T13829] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3411'.
[  244.740562][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  245.107312][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3426'.
[  245.229283][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3429'.
[  245.356861][T13873] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  245.659284][T13896] netlink: 'syz.0.3442': attribute type 1 has an invalid length.
[  245.728274][T13904] netlink: 'syz.1.3445': attribute type 2 has an invalid length.
[  245.780568][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  246.256587][T13950] SET target dimension over the limit!
[  246.672951][T13966] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3474'.
[  246.714516][T13968] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3475'.
[  246.795739][T13979] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  246.819304][T13983] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3482'.
[  246.820672][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  247.596697][T14037] bond8: Removing last arp target with arp_interval on
[  247.844040][T14069] syzkaller0: entered promiscuous mode
[  247.846315][T14069] syzkaller0: entered allmulticast mode
[  247.860585][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  248.219397][T14085] bond15: option primary_reselect: invalid value (6)
[  248.222693][T14085] bond15 (unregistering): Released all slaves
[  248.837224][T14105] netem: unknown loss type 0
[  248.841095][T14105] netem: change failed
[  248.900562][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  249.061614][T14119] __nla_validate_parse: 7 callbacks suppressed
[  249.061629][T14119] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3541'.
[  249.241483][T14133] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3548'.
[  249.244369][T14133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  249.252427][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3547'.
[  249.314102][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3547'.
[  249.374059][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3556'.
[  249.435771][T14158] xt_NFQUEUE: number of total queues is 0
[  249.550229][T14172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3567'.
[  249.560330][T14172] ip6gre1: entered promiscuous mode
[  249.562373][T14172] ip6gre1: entered allmulticast mode
[  249.578103][T14172] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  249.583663][T14172] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  249.940687][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  250.278845][T14219] sctp: [Deprecated]: syz.0.3588 (pid 14219) Use of struct sctp_assoc_value in delayed_ack socket option.
[  250.278845][T14219] Use struct sctp_sack_info instead
[  250.427739][T14234] netlink: 'syz.0.3593': attribute type 1 has an invalid length.
[  250.458377][T14234] bond9: entered promiscuous mode
[  250.465410][T14234] 8021q: adding VLAN 0 to HW filter on device bond9
[  250.498699][T14234] vlan2: entered allmulticast mode
[  250.506455][T14234] bond9: entered allmulticast mode
[  250.530928][T14234] bond9: (slave bridge6): making interface the new active one
[  250.533916][T14234] bridge6: entered promiscuous mode
[  250.536222][T14234] bridge6: entered allmulticast mode
[  250.555724][T14234] bond9: (slave bridge6): Enslaving as an active interface with an up link
[  250.593946][T14249] netlink: 5220 bytes leftover after parsing attributes in process `syz.2.3601'.
[  250.603510][T14249] netlink: 964 bytes leftover after parsing attributes in process `syz.2.3601'.
[  250.608241][T14249] netlink: 5220 bytes leftover after parsing attributes in process `syz.2.3601'.
[  250.905030][T14292] ipip0: entered promiscuous mode
[  250.906733][T14292] ipip0: entered allmulticast mode
[  250.980639][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  250.984740][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3625'.
[  251.034856][T14306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.058370][T14307] tipc: Enabled bearer <eth:ip6gre0>, priority 2
[  251.096145][T14308] xt_l2tp: invalid flags combination: 8
[  251.103610][T14308] netlink: 'syz.1.3625': attribute type 1 has an invalid length.
[  251.122657][T14302] gre0: entered promiscuous mode
[  251.128390][T14302] gre0: entered allmulticast mode
[  251.256732][T14313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  251.324438][T14326] netlink: 'syz.2.3630': attribute type 1 has an invalid length.
[  251.339521][T14326] bond5: entered promiscuous mode
[  251.341519][T14326] 8021q: adding VLAN 0 to HW filter on device bond5
[  251.375549][T14326] 8021q: adding VLAN 0 to HW filter on device bond5
[  251.378172][T14326] bond5: (slave vcan1): The slave device specified does not support setting the MAC address
[  251.382513][T14326] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  251.389569][T14326] bond5: (slave vcan1): making interface the new active one
[  251.392407][T14326] vcan1: entered promiscuous mode
[  251.395063][T14326] bond5: (slave vcan1): Enslaving as an active interface with an up link
[  251.560389][T14331] veth0_macvtap: entered allmulticast mode
[  251.569436][T14331] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  251.998098][T14352] netlink: 'syz.0.3640': attribute type 13 has an invalid length.
[  252.020698][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  252.147079][T14355] xfrm0 speed is unknown, defaulting to 1000
[  252.544795][T14368] netlink: 'syz.2.3646': attribute type 1 has an invalid length.
[  252.854012][T14389] netlink: 'syz.2.3656': attribute type 32 has an invalid length.
[  253.060660][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  253.236297][T14406] veth19: entered allmulticast mode
[  253.254917][T14406] bond10: (slave veth19): Enslaving as an active interface with an up link
[  253.280419][T14406] bond10 (unregistering): (slave veth19): Releasing backup interface
[  253.289700][T14406] bond10 (unregistering): Released all slaves
[  253.611582][T14424] netlink: 'syz.0.3668': attribute type 29 has an invalid length.
[  253.657504][T14426] tipc: Resetting bearer <eth:batadv0>
[  253.661465][T14426] bridge_slave_1: left allmulticast mode
[  253.665514][T14426] bridge_slave_1: left promiscuous mode
[  253.672057][T14426] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.686754][T14426] bond0: (slave bond_slave_0): Releasing backup interface
[  253.701667][T14426] bond0: (slave bond_slave_1): Releasing backup interface
[  253.717734][T14426] team0: Port device team_slave_1 removed
[  253.719877][T14435] netlink: 'syz.0.3673': attribute type 1 has an invalid length.
[  253.727536][T14426] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.730070][T14426] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.735065][T14426] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.737447][T14426] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.740939][T14426] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  253.753001][T14432] team0: Mode changed to "roundrobin"
[  253.801931][T14435] bond10: entered promiscuous mode
[  253.803945][T14435] 8021q: adding VLAN 0 to HW filter on device bond10
[  253.816513][T14439] macvtap2: entered allmulticast mode
[  253.818955][T14426] tipc: Enabled bearer <eth:team0>, priority 0
[  253.861103][T14435] bond10: (slave bridge7): making interface the new active one
[  253.864398][T14435] bridge7: entered promiscuous mode
[  253.867969][T14435] bond10: (slave bridge7): Enslaving as an active interface with an up link
[  254.036381][T14451] vlan3: entered promiscuous mode
[  254.042499][T14451] batadv0: entered promiscuous mode
[  254.087836][T14457] __nla_validate_parse: 11 callbacks suppressed
[  254.087851][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3680'.
[  254.100650][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  254.118473][T14457] vlan3: entered promiscuous mode
[  254.128761][T14460] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3683'.
[  254.136547][T14460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3683'.
[  254.140281][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3683'.
[  254.256440][T14468] tipc: Enabled bearer <eth:ip6gre0>, priority 2
[  254.409247][T14478] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.3691'.
[  254.777442][T14503] netlink: 'syz.1.3703': attribute type 1 has an invalid length.
[  254.792922][T14503] 8021q: adding VLAN 0 to HW filter on device bond15
[  254.808811][T14503] bond15: (slave gretap2): making interface the new active one
[  254.812702][T14503] bond15: (slave gretap2): Enslaving as an active interface with an up link
[  254.857214][T14506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3704'.
[  255.140587][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  255.143649][T14520] netlink: 'syz.1.3711': attribute type 12 has an invalid length.
[  255.692311][T14552] xt_l2tp: invalid flags combination: 0
[  255.770193][T14556] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3726'.
[  255.774248][T14556] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3726'.
[  255.829115][T14558] xfrm0 speed is unknown, defaulting to 1000
[  256.062427][T14573] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3732'.
[  256.068666][T14573] team0: Port device bond0 removed
[  256.072416][T14573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.076755][T14573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.080378][T14573] bond0 (unregistering): Released all slaves
[  256.150209][T14576] xt_time: invalid argument - start or stop time greater than 23:59:59
[  256.165577][T14576] netlink: 'syz.0.3733': attribute type 21 has an invalid length.
[  256.180673][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  256.813542][T14609] netlink: 'syz.1.3747': attribute type 10 has an invalid length.
[  256.816931][T14609] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3747'.
[  257.220531][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  258.135303][T14654] netlink: 'syz.2.3767': attribute type 3 has an invalid length.
[  258.143539][T14654] rdma_op ffff888174b971f0 conn xmit_rdma 0000000000000000
[  258.163817][T14658] tipc: Resetting bearer <eth:batadv0>
[  258.166623][T14658] tipc: Resetting bearer <eth:batadv0>
[  258.169118][T14658] batadv0: entered promiscuous mode
[  258.183558][T14658] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  258.260535][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  258.362882][T14684] netlink: 'syz.1.3780': attribute type 1 has an invalid length.
[  258.565514][T14707] bond0: option xmit_hash_policy: invalid value (10)
[  258.573009][T14707] bond0 (unregistering): Released all slaves
[  259.024228][T14733] nbd0: detected capacity change from 0 to 63
[  259.035560][T14747] block nbd0: NBD_DISCONNECT
[  259.050401][T14747] block nbd0: Disconnected due to user request.
[  259.059607][T14747] block nbd0: shutting down sockets
[  259.068632][T14752] erspan0: left promiscuous mode
[  259.074633][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.078604][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  259.082035][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.085902][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  259.089135][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.092981][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  259.096263][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.099942][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  259.106543][T14679] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.120401][T14752] syz_tun: left promiscuous mode
[  259.123075][T14679] Buffer I/O error on dev nbd0, logical block 0, async page read
[  259.133708][T14679] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.141400][T14679] Buffer I/O error on dev nbd0, logical block 1, async page read
[  259.146971][T14679] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.154032][T14679] Buffer I/O error on dev nbd0, logical block 2, async page read
[  259.158075][T14679] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.165512][T14679] Buffer I/O error on dev nbd0, logical block 3, async page read
[  259.168891][T14679] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.172771][T14679] Buffer I/O error on dev nbd0, logical block 0, async page read
[  259.176451][T14679] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.180062][T14679] Buffer I/O error on dev nbd0, logical block 1, async page read
[  259.186612][T14679] ldm_validate_partition_table(): Disk read failed.
[  259.192383][T14679] Dev nbd0: unable to read RDB block 0
[  259.196323][T14679]  nbd0: unable to read partition table
[  259.196547][T14752] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.208948][T14752] 8021q: adding VLAN 0 to HW filter on device team0
[  259.216681][T14752] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.219350][T14679] ldm_validate_partition_table(): Disk read failed.
[  259.227578][T14679] Dev nbd0: unable to read RDB block 0
[  259.236835][T14679]  nbd0: unable to read partition table
[  259.267722][T14752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  259.274556][T14752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  259.289896][T14752] veth1_vlan: left promiscuous mode
[  259.294018][T14752] veth0_vlan: left promiscuous mode
[  259.297884][T14752] veth0_vlan: entered promiscuous mode
[  259.300589][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  259.303208][T14752] veth1_vlan: entered promiscuous mode
[  259.308528][T14752] veth1_macvtap: left promiscuous mode
[  259.312356][T14752] veth0_macvtap: left promiscuous mode
[  259.314980][T14752] veth0_macvtap: entered promiscuous mode
[  259.323668][T14752] veth1_macvtap: entered promiscuous mode
[  259.346663][T14752] 8021q: adding VLAN 0 to HW filter on device bond1
[  259.353867][T14752] 8021q: adding VLAN 0 to HW filter on device bond2
[  259.356505][T14752] erspan0: entered promiscuous mode
[  259.367126][T14752] 8021q: adding VLAN 0 to HW filter on device bond3
[  259.369927][T14752] 8021q: adding VLAN 0 to HW filter on device team1
[  259.373914][T14752] 8021q: adding VLAN 0 to HW filter on device team2
[  259.383016][T14752] 8021q: adding VLAN 0 to HW filter on device eth0
[  259.388852][T14752] 8021q: adding VLAN 0 to HW filter on device eth1
[  259.394575][T14752] 8021q: adding VLAN 0 to HW filter on device eth2
[  259.399876][T14752] 8021q: adding VLAN 0 to HW filter on device eth3
[  259.418316][T14752] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  259.425489][T14752] 8021q: adding VLAN 0 to HW filter on device bond4
[  259.432417][T14752] ip6gre2: left promiscuous mode
[  259.435036][T14752] 8021q: adding VLAN 0 to HW filter on device bond5
[  259.441764][T14752] bond6: left promiscuous mode
[  259.443395][T14752] bridge5: left promiscuous mode
[  259.445737][T14752] 8021q: adding VLAN 0 to HW filter on device bond6
[  259.453635][T14752] 8021q: adding VLAN 0 to HW filter on device bond7
[  259.461239][T14752] veth17: left promiscuous mode
[  259.467989][T14752] 8021q: adding VLAN 0 to HW filter on device bond8
[  259.472359][ T5452] bond7: (slave ip6gretap1): link status up again after 0 ms
[  259.477001][T14752] bond9: left promiscuous mode
[  259.479811][T14752] bridge6: left promiscuous mode
[  259.486822][T14752] bond10: left promiscuous mode
[  259.488458][T14752] bridge7: left promiscuous mode
[  259.490927][T14752] bond10: entered allmulticast mode
[  259.492901][T14752] bridge7: entered allmulticast mode
[  259.496271][T14752] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  259.500093][T14752] bridge7: entered promiscuous mode
[  259.503179][ T5452] bond7: (slave ip6gretap1): link status up again after 0 ms
[  259.507791][T14752] 8021q: adding VLAN 0 to HW filter on device batadv1
[  259.520657][ T5452] bond7: (slave ip6gretap1): link status up again after 0 ms
[  259.544858][   T13] bond7: (slave ip6gretap1): link status up again after 0 ms
[  259.560688][   T13] bond7: (slave ip6gretap1): link status up again after 0 ms
[  259.580985][   T13] bond7: (slave ip6gretap1): link status up again after 0 ms
[  259.586898][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  259.591046][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.595985][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  259.603870][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.610770][   T13] bond7: (slave ip6gretap1): link status up again after 0 ms
[  259.630614][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  259.638390][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.654877][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  259.662235][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.675852][ T9418] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  259.682643][ T9418] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  259.696770][ T9418] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  259.705029][T13742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  259.709991][ T9418] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  259.719585][ T9418] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  259.723531][T13742] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  259.730914][ T9418] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  259.753044][T13741] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  259.775580][ T9418] bond7: (slave veth17): link status definitely up, 10000 Mbps full duplex
[  259.788097][ T9418] bond7: active interface up!
[  259.796410][   T13] bond5: (slave veth15): link status definitely up, 10000 Mbps full duplex
[  259.812192][   T13] bond5: (slave veth15): making interface the new active one
[  259.819239][   T13] bond5: active interface up!
[  259.864997][T14792] netlink: 'syz.0.3815': attribute type 1 has an invalid length.
[  259.981702][T13741] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  260.135874][T14810] __nla_validate_parse: 7 callbacks suppressed
[  260.135884][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3823'.
[  260.162684][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3823'.
[  260.553799][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3829'.
[  260.784397][T14836] : renamed from bond0 (while UP)
[  260.796297][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3836'.
[  260.806550][   T33] audit: type=1107 audit(1781131354.986:9): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  260.817811][T14836] team3: entered promiscuous mode
[  260.823500][T14836] team3: entered allmulticast mode
[  260.827623][T14836] 8021q: adding VLAN 0 to HW filter on device team3
[  260.835932][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3836'.
[  260.839835][T14836] team4 (uninitialized): Failed to send options change via netlink (err -105)
[  260.853606][T14836] team4: entered promiscuous mode
[  260.855397][T14836] team4: entered allmulticast mode
[  260.857312][T14836] 8021q: adding VLAN 0 to HW filter on device team4
[  261.148841][T14863] netlink: 'syz.0.3849': attribute type 3 has an invalid length.
[  261.545478][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3866'.
[  261.865854][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3868'.
[  261.869570][T14915] netlink: 'syz.0.3868': attribute type 5 has an invalid length.
[  261.873605][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3868'.
[  261.883544][T14915] geneve2: entered promiscuous mode
[  261.885613][T14915] geneve2: entered allmulticast mode
[  261.889200][ T5452] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 45610 - 0
[  261.893691][ T5452] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 45610 - 0
[  261.897694][ T5452] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 45610 - 0
[  261.902931][ T5452] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 45610 - 0
[  262.705300][T14972] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3896'.
[  262.785426][T14983] syzkaller0: entered promiscuous mode
[  262.787794][T14983] syzkaller0: entered allmulticast mode
[  262.804567][T14983] tc action pedit offset 4096 out of bounds
[  262.901811][T14989] syzkaller0: entered promiscuous mode
[  262.903759][T14989] syzkaller0: entered allmulticast mode
[  263.016340][T14994] netlink: 'syz.0.3906': attribute type 11 has an invalid length.
[  263.190782][ T5452] net_ratelimit: 41 callbacks suppressed
[  263.190800][ T5452] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  263.286292][T15002] dvmrp0: left allmulticast mode
[  263.300639][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  263.321683][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3909'.
[  263.410663][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  263.464051][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  263.520623][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  263.630666][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  263.740690][ T5452] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  263.850660][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  263.960739][ T5452] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  264.070708][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  264.149788][T15050] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  264.156238][T15050] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  264.783457][T15084] netlink: 'syz.2.3945': attribute type 11 has an invalid length.
[  264.805028][T15084] netlink: 'syz.2.3945': attribute type 11 has an invalid length.
[  264.849776][T15084] 8021q: adding VLAN 0 to HW filter on device team0
[  264.856949][T15084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.867237][T15084] wireguard: wg0: Could not create IPv4 socket
[  265.408082][T15114] tipc: Resetting bearer <eth:team0>
[  265.444621][T15125] syzkaller0: entered promiscuous mode
[  265.450914][T15125] syzkaller0: entered allmulticast mode
[  265.475921][T15114] netlink: 'syz.1.3958': attribute type 16 has an invalid length.
[  265.478446][T15114] netlink: 'syz.1.3958': attribute type 17 has an invalid length.
[  265.501803][T15114] gre0: left promiscuous mode
[  265.506051][T15114] gre0: left allmulticast mode
[  265.519422][T15114] tipc: Resetting bearer <eth:team0>
[  265.524418][T15114] tipc: Resetting bearer <eth:team0>
[  265.531891][T15114] dummy0: left promiscuous mode
[  265.536754][T15114] batadv0: left promiscuous mode
[  265.543720][T15114] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.552803][T15114] tipc: Resetting bearer <eth:batadv0>
[  265.583822][T15114] veth0_macvtap: left allmulticast mode
[  265.619167][T15114] bond9: left promiscuous mode
[  265.622783][T15114] bridge4: left promiscuous mode
[  265.627807][T15114] vlan3: left allmulticast mode
[  265.629765][T15114] bond9: left allmulticast mode
[  265.632606][T15114] bridge4: left allmulticast mode
[  265.648557][T15114] bond11: left promiscuous mode
[  265.651647][T15114] bridge6: left promiscuous mode
[  265.655750][T15114] ipvlan2: left allmulticast mode
[  265.658216][T15114] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  265.663455][T15114] ipvlan3: left allmulticast mode
[  265.665642][T15114] bond11: left allmulticast mode
[  265.667829][T15114] bridge6: left allmulticast mode
[  265.670341][T15114] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  265.678337][T15114] vlan4: left promiscuous mode
[  265.686896][T15114] bond12: left allmulticast mode
[  265.689254][T15114] 8021q: adding VLAN 0 to HW filter on device bond12
[  265.717967][T15114] bond13: left promiscuous mode
[  265.719881][T15114] bond13: left allmulticast mode
[  265.723075][T15114] 8021q: adding VLAN 0 to HW filter on device eth0
[  265.726616][T15114] 8021q: adding VLAN 0 to HW filter on device eth1
[  265.729961][T15114] 8021q: adding VLAN 0 to HW filter on device eth2
[  265.733792][T15114] 8021q: adding VLAN 0 to HW filter on device eth3
[  265.739842][T15114] ip6gre1: left promiscuous mode
[  265.742305][T15114] ip6gre1: left allmulticast mode
[  265.746018][T15114] team3: left promiscuous mode
[  265.747682][T15114] team3: left allmulticast mode
[  265.749746][T15114] team4: left promiscuous mode
[  265.751482][T15114] team4: left allmulticast mode
[  265.754206][T15114] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.822386][   T13] bond10: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  265.857833][   T13] bond10: active interface up!
[  265.934897][T15150] tipc: Can't bind to reserved service type 2
[  266.094939][T15166] netlink: 'syz.0.3984': attribute type 1 has an invalid length.
[  266.175148][T15172] netlink: 'syz.0.3987': attribute type 1 has an invalid length.
[  266.206058][T15172] bond11: entered promiscuous mode
[  266.208476][T15172] 8021q: adding VLAN 0 to HW filter on device bond11
[  266.239035][T15172] bond11: (slave veth21): making interface the new active one
[  266.242663][T15172] veth21: entered promiscuous mode
[  266.246062][T15172] bond11: (slave veth21): Enslaving as an active interface with an up link
[  266.345586][T15185] sock: sock_timestamping_bind_phc: sock not bind to device
[  266.744350][T15191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  266.975625][T15203] netlink: 'syz.2.4001': attribute type 1 has an invalid length.
[  266.997085][T15203] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.015651][T15203] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  267.022657][T15203] bond0: entered promiscuous mode
[  267.024445][T15203] bond0: entered allmulticast mode
[  267.117286][T15208] bridge5: entered promiscuous mode
[  267.119617][T15208] bridge5: entered allmulticast mode
[  267.409636][   T33] audit: type=1800 audit(1781131361.586:10): pid=15233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4015" name="memory.events" dev="tmpfs" ino=7369 res=0 errno=0
[  267.587036][T15237] __nla_validate_parse: 3 callbacks suppressed
[  267.587048][T15237] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.4016'.
[  268.261159][   T13] net_ratelimit: 41 callbacks suppressed
[  268.261178][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  268.370930][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  268.472806][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'.
[  268.540678][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  268.650698][T10648] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  268.660690][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  268.692426][T15261] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4027'.
[  268.760778][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  268.872799][ T5452] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  268.886187][T15268] syzkaller0: entered promiscuous mode
[  268.888100][T15268] syzkaller0: entered allmulticast mode
[  268.980599][T10648] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  269.090607][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  269.201605][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  270.113198][T15294] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4042'.
[  270.166283][T15296] syzkaller1: entered promiscuous mode
[  270.168702][T15296] syzkaller1: entered allmulticast mode
[  270.472806][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4050'.
[  270.643130][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4056'.
[  270.653003][T15327] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4058'.
[  270.653622][T15325] GUP no longer grows the stack in syz.1.4057 (15325): 200000003000-20000000a000 (200000001000)
[  270.664493][T15325] CPU: 1 UID: 0 PID: 15325 Comm: syz.1.4057 Not tainted syzkaller #0 PREEMPT(full) 
[  270.664516][T15325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.664524][T15325] Call Trace:
[  270.664530][T15325]  <TASK>
[  270.664536][T15325]  dump_stack_lvl+0xe8/0x150
[  270.664557][T15325]  __get_user_pages+0x2378/0x2720
[  270.664578][T15325]  ? __gup_longterm_locked+0xc4e/0x1630
[  270.664624][T15325]  ? __gup_longterm_locked+0xc4e/0x1630
[  270.664641][T15325]  ? down_read_killable+0x1bb/0x340
[  270.664664][T15325]  __gup_longterm_locked+0xdcf/0x1630
[  270.664685][T15325]  ? lock_acquire+0x106/0x350
[  270.664713][T15325]  gup_fast_fallback+0x1d84/0x20d0
[  270.664770][T15325]  ? __pfx_gup_fast_fallback+0x10/0x10
[  270.664790][T15325]  ? is_valid_gup_args+0x11f/0x200
[  270.664806][T15325]  ? get_user_pages_fast+0x4d/0xb0
[  270.664821][T15325]  __iov_iter_get_pages_alloc+0x370/0xa10
[  270.664842][T15325]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  270.664871][T15325]  iov_iter_get_pages2+0x5e/0xa0
[  270.664886][T15325]  __se_sys_vmsplice+0x7c7/0x1620
[  270.664916][T15325]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  270.664935][T15325]  ? __pfx_futex_wait+0x10/0x10
[  270.664995][T15325]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.665010][T15325]  do_syscall_64+0x174/0xf80
[  270.665022][T15325]  ? trace_irq_disable+0x3b/0x140
[  270.665045][T15325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.665059][T15325] RIP: 0033:0x7f365c39ce59
[  270.665071][T15325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  270.665082][T15325] RSP: 002b:00007f365d2ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  270.665098][T15325] RAX: ffffffffffffffda RBX: 00007f365c615fa0 RCX: 00007f365c39ce59
[  270.665136][T15325] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[  270.665144][T15325] RBP: 00007f365c432d6f R08: 0000000000000000 R09: 0000000000000000
[  270.665152][T15325] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  270.665161][T15325] R13: 00007f365c616038 R14: 00007f365c615fa0 R15: 00007ffda4cdfc88
[  270.665183][T15325]  </TASK>
[  270.756672][    C1] ip6_tnl_xmit_ctl: 8 callbacks suppressed
[  270.756686][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  270.949719][T15337] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  271.183552][T15369] syzkaller0: entered promiscuous mode
[  271.187021][T15369] syzkaller0: entered allmulticast mode
[  271.274795][T15375] sctp: [Deprecated]: syz.1.4075 (pid 15375) Use of int in maxseg socket option.
[  271.274795][T15375] Use struct sctp_assoc_value instead
[  272.671221][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  273.059954][T15426] 8021q: VLANs not supported on lo
[  273.291360][   T12] net_ratelimit: 424 callbacks suppressed
[  273.291376][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  273.301947][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  273.420734][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  273.459906][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4111'.
[  273.531070][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  273.550231][T15465] xt_cgroup: path and classid specified
[  273.641186][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  273.645303][T15469] xt_CT: No such helper "syz0"
[  273.752725][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  273.860662][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  273.863754][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  273.985904][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  274.003460][T15507] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  274.091998][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  274.177580][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4143'.
[  274.180664][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4143'.
[  274.183649][T15528] netlink: 304 bytes leftover after parsing attributes in process `syz.1.4143'.
[  274.207211][T10648] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  275.683483][T15627] pimreg: entered allmulticast mode
[  275.771848][ T5082] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  275.777690][ T5082] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  275.801646][ T5082] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  275.833723][ T5082] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  275.851010][ T5082] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  276.162055][T15653] xfrm0 speed is unknown, defaulting to 1000
[  276.191625][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4197'.
[  276.218408][T15660] netlink: 'syz.0.4198': attribute type 1 has an invalid length.
[  276.242202][T15660] bond12: entered promiscuous mode
[  276.312779][T15660] tipc: Resetting bearer <eth:ip6gre0>
[  276.334787][ T5759] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  276.358045][T15660] bond0: (slave syz_tun): Releasing backup interface
[  276.615429][T15659] bond12: left promiscuous mode
[  276.750328][T15671] netlink: 'syz.0.4201': attribute type 2 has an invalid length.
[  276.794257][T15674] syzkaller0: entered promiscuous mode
[  276.796006][T15674] syzkaller0: entered allmulticast mode
[  276.873227][T15680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4205'.
[  276.994348][T15682] tipc: Resetting bearer <eth:ip6gre0>
[  277.066497][ T5452] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.086803][ T5452] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.090847][ T5452] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.096241][ T5452] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.099376][ T5452] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.104641][ T5452] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.109122][ T5452] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  277.116735][ T5452] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.296628][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4216'.
[  277.358300][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4219'.
[  277.445300][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4221'.
[  277.445776][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4222'.
[  277.454136][T15713] tipc: Resetting bearer <eth:team0>
[  277.464061][T15713] tipc: Disabling bearer <eth:team0>
[  277.576621][T15724] tipc: New replicast peer: 172.30.0.2
[  277.578555][T15724] tipc: Enabled bearer <udp:syz2>, priority 10
[  277.581381][T15724] tipc: Disabling bearer <udp:syz2>
[  278.383367][T15764] vlan3: entered promiscuous mode
[  278.385481][T15764] geneve1: entered promiscuous mode
[  278.387759][T15764] vlan3: entered allmulticast mode
[  278.389877][T15764] geneve1: entered allmulticast mode
[  278.422410][ T7273] net_ratelimit: 39 callbacks suppressed
[  278.422426][ T7273] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  278.540589][T10648] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  278.583414][T15772] __nla_validate_parse: 5 callbacks suppressed
[  278.583424][T15772] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4247'.
[  278.661127][ T7273] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  278.770801][T10648] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  278.880874][ T5452] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  278.920315][T15784] sch_fq: defrate 0 ignored.
[  278.992556][ T5452] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  279.061096][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  279.063206][T15796] ip6t_REJECT: ECHOREPLY is not supported
[  279.078711][T15795] syzkaller1: entered promiscuous mode
[  279.088060][T15795] syzkaller1: entered allmulticast mode
[  279.140938][T10648] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  279.176698][T15802] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  279.250684][T10648] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  279.360740][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  279.458958][T15821] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4270'.
[  279.465031][T15821] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4270'.
[  279.747902][T15846] bridge8: entered promiscuous mode
[  279.750206][T15846] bridge8: entered allmulticast mode
[  279.813805][T15855] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4286'.
[  279.817415][T15856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4284'.
[  279.872511][T15860] netlink: 'syz.1.4286': attribute type 3 has an invalid length.
[  279.920132][T15851] netlink: 'syz.2.4284': attribute type 1 has an invalid length.
[  280.010250][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4293'.
[  280.014134][T15872] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4293'.
[  280.684053][T15910] syzkaller1: entered promiscuous mode
[  280.686558][T15910] syzkaller1: entered allmulticast mode
[  280.732158][T15911] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4311'.
[  281.158485][T15941] netlink: 'syz.1.4324': attribute type 11 has an invalid length.
[  281.161718][T15941] netlink: 'syz.1.4324': attribute type 4 has an invalid length.
[  281.164436][T15941] netlink: 199780 bytes leftover after parsing attributes in process `syz.1.4324'.
[  281.165576][T15943] netlink: 'syz.0.4325': attribute type 1 has an invalid length.
[  281.174636][T15943] netlink: 'syz.0.4325': attribute type 11 has an invalid length.
[  281.178014][T15943] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4325'.
[  281.286365][T15955] netlink: 'syz.0.4331': attribute type 10 has an invalid length.
[  281.679770][T15982] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  281.722880][T15982] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  281.731686][T15982] bond13: (slave lo): Enslaving as an active interface with an up link
[  281.858181][T15997] netlink: 'syz.1.4340': attribute type 1 has an invalid length.
[  281.867399][T15997] netlink: 'syz.1.4340': attribute type 1 has an invalid length.
[  282.287756][T16038] syzkaller0: refused to change device tx_queue_len
[  283.002448][T16026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  283.430732][   T13] net_ratelimit: 40 callbacks suppressed
[  283.430750][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  283.546276][T16093] bond14 (unregistering): Released all slaves
[  283.614630][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  283.730802][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  283.758162][T16117] netlink: 'syz.1.4384': attribute type 4 has an invalid length.
[  283.789352][T16117] netlink: 'syz.1.4384': attribute type 4 has an invalid length.
[  283.805750][T16122] __nla_validate_parse: 5 callbacks suppressed
[  283.805766][T16122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4386'.
[  283.841417][ T5452] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  283.952878][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  284.061526][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  284.065845][T16150] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4400'.
[  284.105943][T16152] bond13: (slave lo): Releasing backup interface
[  284.109752][T16152] bond13: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  284.118227][T16152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  284.120194][T16154] netlink: 'syz.1.4401': attribute type 27 has an invalid length.
[  284.134620][T16152] team0: Refused to change device type
[  284.145202][T16152] tipc: Enabled bearer <eth:team0>, priority 0
[  284.172262][ T5452] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  284.260642][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  284.292163][ T5452] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  284.992297][T16203] syzkaller0: entered promiscuous mode
[  284.994139][T16203] syzkaller0: entered allmulticast mode
[  285.207787][T16216] netlink: 'syz.2.4428': attribute type 1 has an invalid length.
[  285.492124][ T5759] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  285.557874][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4444'.
[  285.563490][T16250] netlink: 'syz.2.4444': attribute type 1 has an invalid length.
[  285.626926][T16258] syzkaller0: entered promiscuous mode
[  285.629298][T16258] syzkaller0: entered allmulticast mode
[  285.643357][T16258] simple: basic_1
[  285.646638][T16258] simple: basic_2
[  285.648612][T16258] simple: basic_3
[  285.651833][T16258] simple: basic_4
[  285.653383][T16258] simple: basic_5
[  285.654870][T16258] simple: basic_6
[  285.656441][T16258] simple: basic_7
[  285.658067][T16258] simple: basic_8
[  285.659570][T16258] simple: basic_9
[  285.661660][T16258] simple: basic_10
[  285.663174][T16258] simple: basic_11
[  285.664695][T16258] simple: basic_12
[  285.666285][T16258] simple: basic_13
[  285.667814][T16258] simple: basic_14
[  285.669355][T16258] simple: basic_15
[  285.671030][T16258] simple: basic_16
[  285.672929][T16258] simple: basic_17
[  285.828991][T16268] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  285.837806][T16270] IPVS: Error connecting to the multicast addr
[  285.894084][T16274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4456'.
[  285.897875][T16274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4456'.
[  286.045290][T16289] netlink: 'syz.2.4460': attribute type 29 has an invalid length.
[  286.262527][T13742] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  286.422971][T13742] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  286.424469][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4463'.
[  286.428929][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4463'.
[  286.537822][T16309] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.541366][T16309] tipc: Resetting bearer <eth:team0>
[  286.544263][T16309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.559642][T16310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  286.610971][T13730] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  286.615567][T16309] geneve2: left promiscuous mode
[  286.624386][T16309] bond11: left promiscuous mode
[  286.626005][T16309] veth21: left promiscuous mode
[  286.629333][T16309] 8021q: adding VLAN 0 to HW filter on device bond12
[  286.633118][T13730] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  286.637067][T16309] vlan3: left promiscuous mode
[  286.638844][T13730] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  286.641790][T16309] geneve1: left promiscuous mode
[  286.647659][T16309] 8021q: adding VLAN 0 to HW filter on device bond13
[  286.747119][ T5082] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  286.961163][ T5082] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  287.542428][ T5082] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  288.500718][   T12] net_ratelimit: 47 callbacks suppressed
[  288.500737][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  288.610737][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  288.671489][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  288.720631][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  288.830762][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  288.923614][T16276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  288.970116][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  288.977210][T16317] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.081002][ T5452] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  289.114072][T16334] xt_CT: You must specify a L4 protocol and not use inversions on it
[  289.192747][ T5452] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  289.206382][T16346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4482'.
[  289.212275][T16346] netlink: 'syz.1.4482': attribute type 1 has an invalid length.
[  289.226301][T16346] 8021q: adding VLAN 0 to HW filter on device bond16
[  289.238079][T16346] bond16: (slave geneve2): making interface the new active one
[  289.246790][T16346] bond16: (slave geneve2): Enslaving as an active interface with an up link
[  289.257267][T16346] netlink: 'syz.1.4482': attribute type 8 has an invalid length.
[  289.265372][T16346] sch_fq: defrate 0 ignored.
[  289.274866][T16346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4482'.
[  289.300843][ T5452] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  289.351323][T16359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4488'.
[  289.399417][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4491'.
[  289.403140][T16365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4491'.
[  289.407129][T16365] netlink: 'syz.2.4491': attribute type 11 has an invalid length.
[  289.412453][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  289.478468][T16377] netlink: 'syz.1.4497': attribute type 1 has an invalid length.
[  289.482531][T16377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4497'.
[  289.517819][T16384] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  289.534195][T16384] syzkaller0: entered promiscuous mode
[  289.536359][T16384] syzkaller0: entered allmulticast mode
[  289.674615][T16394] netlink: 'syz.2.4504': attribute type 1 has an invalid length.
[  289.688861][T16394] netlink: 'syz.2.4504': attribute type 2 has an invalid length.
[  289.692355][T16394] netlink: 'syz.2.4504': attribute type 3 has an invalid length.
[  290.210266][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4533'.
[  290.237763][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4533'.
[  290.305187][T16462] netlink: 'syz.2.4538': attribute type 2 has an invalid length.
[  290.372557][T16464] xt_hashlimit: size too large, truncated to 1048576
[  290.380163][T16464] xt_hashlimit: invalid interval
[  290.384833][T16466] macvtap0: entered allmulticast mode
[  290.387218][T16466] dummy0: entered allmulticast mode
[  290.393680][T16466] dummy0: left allmulticast mode
[  290.522482][T16479] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4546'.
[  290.691919][T16494] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  290.696002][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4550'.
[  290.737433][T16494] syz_tun (unregistering): left allmulticast mode
[  291.087897][T16511] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  291.694554][   T54] block nbd0: Receive control failed (result -1)
[  291.861255][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  291.862520][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  292.472202][T16578] netlink: 'syz.1.4586': attribute type 5 has an invalid length.
[  292.977932][T16578] bridge8: left promiscuous mode
[  293.076902][T16585] IPVS: persistence engine module ip_vs_pe_ not found
[  293.570624][   T12] net_ratelimit: 39 callbacks suppressed
[  293.570640][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  293.620648][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  293.680636][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  293.792001][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  293.911833][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  294.020826][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  294.136521][T16704] 8021q: adding VLAN 0 to HW filter on device team0
[  294.142944][T16704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  294.147392][T16704] wireguard: wg0: Could not create IPv4 socket
[  294.149480][T16704] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  294.154709][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.190911][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  294.229543][T16707] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  294.232130][T16707] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  294.300712][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  294.319753][T16713] No such timeout policy "syz0"
[  294.437446][T16717] __nla_validate_parse: 8 callbacks suppressed
[  294.437461][T16717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4651'.
[  294.484574][T16717] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  294.606109][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4655'.
[  294.792484][T16742] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  295.343439][T16773] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  295.483323][T16781] netlink: 'syz.0.4681': attribute type 1 has an invalid length.
[  295.486410][T16781] netlink: 'syz.0.4681': attribute type 2 has an invalid length.
[  295.919636][T16818] 
[  295.920634][T16818] ======================================================
[  295.923398][T16818] WARNING: possible circular locking dependency detected
[  295.926263][T16818] syzkaller #0 Not tainted
[  295.928138][T16818] ------------------------------------------------------
[  295.931077][T16818] syz.1.4698/16818 is trying to acquire lock:
[  295.933499][T16818] ffff8881012b4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0
[  295.937783][T16818] 
[  295.937783][T16818] but task is already holding lock:
[  295.940746][T16818] ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  295.944373][T16818] 
[  295.944373][T16818] which lock already depends on the new lock.
[  295.944373][T16818] 
[  295.948333][T16818] 
[  295.948333][T16818] the existing dependency chain (in reverse order) is:
[  295.951967][T16818] 
[  295.951967][T16818] -> #10 (&root->kernfs_rwsem){++++}-{4:4}:
[  295.954936][T16820] netlink: 'syz.1.4698': attribute type 1 has an invalid length.
[  295.955245][T16818]        down_write+0x96/0x200
[  295.955269][T16818]        kernfs_add_one+0x41/0x5c0
[  295.962421][T16818]        kernfs_create_dir_ns+0xde/0x130
[  295.964749][T16818]        internal_create_group+0x425/0x1180
[  295.967229][T16818]        cpuhp_invoke_callback+0x445/0x860
[  295.969662][T16818]        cpuhp_issue_call+0x430/0x7a0
[  295.971862][T16818]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  295.974613][T16818]        __cpuhp_setup_state+0x3f/0x60
[  295.976636][T16818]        do_one_initcall+0x250/0x870
[  295.978618][T16818]        do_initcall_level+0x104/0x190
[  295.980860][T16818]        do_initcalls+0x59/0xa0
[  295.982836][T16818]        kernel_init_freeable+0x2a6/0x3e0
[  295.985026][T16818]        kernel_init+0x1d/0x1d0
[  295.986952][T16818]        ret_from_fork+0x514/0xb70
[  295.989102][T16818]        ret_from_fork_asm+0x1a/0x30
[  295.991257][T16818] 
[  295.991257][T16818] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}:
[  295.994384][T16818] 
[  295.994384][T16818] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  295.997531][T16818]        cpus_read_lock+0x42/0x160
[  295.999626][T16818]        static_key_slow_inc+0x12/0x30
[  296.001821][T16818]        ipv6_flowlabel_opt+0x1b94/0x28e0
[  296.004168][T16818]        do_ipv6_setsockopt+0xd9f/0x3150
[  296.006444][T16818]        ipv6_setsockopt+0x59/0x170
[  296.008603][T16818]        do_sock_setsockopt+0x17c/0x1b0
[  296.010869][T16818]        __x64_sys_setsockopt+0x13d/0x1b0
[  296.013238][T16818]        do_syscall_64+0x174/0xf80
[  296.015330][T16818]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.017903][T16818] 
[  296.017903][T16818] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  296.020901][T16818]        lock_sock_nested+0x41/0x100
[  296.023777][T16818]        inet_shutdown+0x6a/0x390
[  296.025782][T16818]        nbd_mark_nsock_dead+0x2e9/0x560
[  296.028028][T16818]        recv_work+0x1c2e/0x1d40
[  296.030084][T16818]        process_scheduled_works+0xb5d/0x1860
[  296.032550][T16818]        worker_thread+0xa53/0xfc0
[  296.034548][T16818]        kthread+0x388/0x470
[  296.036349][T16818]        ret_from_fork+0x514/0xb70
[  296.038330][T16818]        ret_from_fork_asm+0x1a/0x30
[  296.040374][T16818] 
[  296.040374][T16818] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  296.043355][T16818]        __mutex_lock+0x1a3/0x1550
[  296.045370][T16818]        nbd_queue_rq+0x37b/0x1100
[  296.047306][T16818]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  296.049806][T16818]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  296.052507][T16818]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  296.054923][T16818]        blk_mq_run_hw_queue+0x348/0x4f0
[  296.057110][T16818]        blk_mq_dispatch_list+0xd16/0xe10
[  296.059288][T16818]        blk_mq_flush_plug_list+0x48d/0x570
[  296.061584][T16818]        __blk_flush_plug+0x3ed/0x4d0
[  296.063691][T16818]        __submit_bio+0x28d/0x580
[  296.065711][T16818]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  296.068085][T16818]        block_read_full_folio+0x599/0x830
[  296.070435][T16818]        filemap_read_folio+0x137/0x3b0
[  296.072564][T16818]        do_read_cache_folio+0x358/0x590
[  296.074830][T16818]        read_part_sector+0xb6/0x2b0
[  296.076917][T16818]        adfspart_check_ICS+0xb1/0x960
[  296.079038][T16818]        bdev_disk_changed+0x817/0x1770
[  296.081297][T16818]        blkdev_get_whole+0x380/0x510
[  296.083514][T16818]        bdev_open+0x31e/0xd30
[  296.085473][T16818]        blkdev_open+0x470/0x610
[  296.087510][T16818]        do_dentry_open+0x822/0x13a0
[  296.089664][T16818]        vfs_open+0x3b/0x340
[  296.091528][T16818]        path_openat+0x2e08/0x3860
[  296.093465][T16818]        do_file_open+0x23e/0x4a0
[  296.095496][T16818]        do_sys_openat2+0x113/0x200
[  296.097482][T16818]        __x64_sys_openat+0x138/0x170
[  296.099679][T16818]        do_syscall_64+0x174/0xf80
[  296.101752][T16818]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.104307][T16818] 
[  296.104307][T16818] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  296.107159][T16818]        __mutex_lock+0x1a3/0x1550
[  296.109265][T16818]        nbd_queue_rq+0xc6/0x1100
[  296.111336][T16818]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  296.113785][T16818]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  296.116522][T16818]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  296.119086][T16818]        blk_mq_run_hw_queue+0x348/0x4f0
[  296.121338][T16818]        blk_mq_dispatch_list+0xd16/0xe10
[  296.123606][T16818]        blk_mq_flush_plug_list+0x48d/0x570
[  296.125930][T16818]        __blk_flush_plug+0x3ed/0x4d0
[  296.128103][T16818]        __submit_bio+0x28d/0x580
[  296.130140][T16818]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  296.132554][T16818]        block_read_full_folio+0x599/0x830
[  296.134896][T16818]        filemap_read_folio+0x137/0x3b0
[  296.137074][T16818]        do_read_cache_folio+0x358/0x590
[  296.139259][T16818]        read_part_sector+0xb6/0x2b0
[  296.141338][T16818]        adfspart_check_ICS+0xb1/0x960
[  296.143511][T16818]        bdev_disk_changed+0x817/0x1770
[  296.145750][T16818]        blkdev_get_whole+0x380/0x510
[  296.147958][T16818]        bdev_open+0x31e/0xd30
[  296.149919][T16818]        blkdev_open+0x470/0x610
[  296.151943][T16818]        do_dentry_open+0x822/0x13a0
[  296.154095][T16818]        vfs_open+0x3b/0x340
[  296.155964][T16818]        path_openat+0x2e08/0x3860
[  296.158083][T16818]        do_file_open+0x23e/0x4a0
[  296.160143][T16818]        do_sys_openat2+0x113/0x200
[  296.162226][T16818]        __x64_sys_openat+0x138/0x170
[  296.164415][T16818]        do_syscall_64+0x174/0xf80
[  296.166510][T16818]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.169102][T16818] 
[  296.169102][T16818] -> #4 (set->srcu){.+.+}-{0:0}:
[  296.171918][T16818]        __synchronize_srcu+0xca/0x300
[  296.174077][T16818]        elevator_switch+0x1e8/0x7a0
[  296.176101][T16818]        elevator_change+0x2cc/0x450
[  296.178193][T16818]        elevator_set_default+0x36c/0x430
[  296.180234][T16818]        blk_register_queue+0x3e9/0x4e0
[  296.182507][T16818]        __add_disk+0x677/0xd50
[  296.184508][T16818]        add_disk_fwnode+0xfb/0x480
[  296.186636][T16818]        nbd_dev_add+0x72c/0xb50
[  296.188641][T16818]        nbd_init+0x168/0x1f0
[  296.190572][T16818]        do_one_initcall+0x250/0x870
[  296.192651][T16818]        do_initcall_level+0x104/0x190
[  296.194837][T16818]        do_initcalls+0x59/0xa0
[  296.196813][T16818]        kernel_init_freeable+0x2a6/0x3e0
[  296.199110][T16818]        kernel_init+0x1d/0x1d0
[  296.201115][T16818]        ret_from_fork+0x514/0xb70
[  296.203175][T16818]        ret_from_fork_asm+0x1a/0x30
[  296.205297][T16818] 
[  296.205297][T16818] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  296.208420][T16818]        __mutex_lock+0x1a3/0x1550
[  296.210480][T16818]        elevator_change+0x1b3/0x450
[  296.212619][T16818]        elevator_set_none+0xb5/0x140
[  296.214707][T16818]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  296.217199][T16818]        nbd_start_device+0x17f/0xb10
[  296.219346][T16818]        nbd_genl_connect+0x165b/0x1cf0
[  296.221555][T16818]        genl_family_rcv_msg_doit+0x22a/0x330
[  296.224029][T16818]        genl_rcv_msg+0x61c/0x7a0
[  296.226058][T16818]        netlink_rcv_skb+0x232/0x4b0
[  296.228137][T16818]        genl_rcv+0x28/0x40
[  296.229961][T16818]        netlink_unicast+0x75c/0x8e0
[  296.232047][T16818]        netlink_sendmsg+0x813/0xb40
[  296.234165][T16818]        ____sys_sendmsg+0x972/0x9f0
[  296.236269][T16818]        ___sys_sendmsg+0x2a5/0x360
[  296.238364][T16818]        __x64_sys_sendmsg+0x1bd/0x2a0
[  296.240536][T16818]        do_syscall_64+0x174/0xf80
[  296.242544][T16818]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.245131][T16818] 
[  296.245131][T16818] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  296.248208][T16818]        blk_alloc_queue+0x546/0x680
[  296.249948][T16818]        __blk_mq_alloc_disk+0x197/0x390
[  296.251737][T16818]        nbd_dev_add+0x499/0xb50
[  296.253462][T16818]        nbd_init+0x168/0x1f0
[  296.254916][T16818]        do_one_initcall+0x250/0x870
[  296.256664][T16818]        do_initcall_level+0x104/0x190
[  296.258441][T16818]        do_initcalls+0x59/0xa0
[  296.260877][T16818]        kernel_init_freeable+0x2a6/0x3e0
[  296.263165][T16818]        kernel_init+0x1d/0x1d0
[  296.264895][T16818]        ret_from_fork+0x514/0xb70
[  296.266512][T16818]        ret_from_fork_asm+0x1a/0x30
[  296.268175][T16818] 
[  296.268175][T16818] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  296.270407][T16818]        fs_reclaim_acquire+0x71/0x100
[  296.272099][T16818]        kmem_cache_alloc_noprof+0x40/0x650
[  296.273909][T16818]        __kernfs_iattrs+0xdf/0x320
[  296.275542][T16818]        kernfs_iop_setattr+0xea/0x3f0
[  296.277380][T16818]        notify_change+0xc1a/0xf40
[  296.279328][T16818]        do_truncate+0x1c2/0x250
[  296.281870][T16818]        path_openat+0x2f89/0x3860
[  296.283844][T16818]        do_file_open+0x23e/0x4a0
[  296.285858][T16818]        do_sys_openat2+0x113/0x200
[  296.287933][T16818]        __x64_sys_openat+0x138/0x170
[  296.290108][T16818]        do_syscall_64+0x174/0xf80
[  296.292127][T16818]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.294772][T16818] 
[  296.294772][T16818] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  296.298201][T16818]        __lock_acquire+0x15a5/0x2cf0
[  296.300429][T16818]        lock_acquire+0x106/0x350
[  296.302487][T16818]        down_write+0x96/0x200
[  296.304430][T16818]        kernfs_link_sibling+0x4ed/0x5c0
[  296.306701][T16818]        kernfs_add_one+0x1ca/0x5c0
[  296.308850][T16818]        kernfs_create_dir_ns+0xde/0x130
[  296.311125][T16818]        sysfs_create_dir_ns+0x12f/0x2a0
[  296.313426][T16818]        kobject_add_internal+0x62b/0xd00
[  296.315785][T16818]        kobject_add+0x163/0x240
[  296.317834][T16818]        device_add+0x408/0xbb0
[  296.319851][T16818]        tty_register_device_attr+0x422/0x950
[  296.322347][T16818]        rfcomm_dev_ioctl+0x1b73/0x21d0
[  296.324435][T16818]        sock_do_ioctl+0x101/0x320
[  296.326262][T16818]        sock_ioctl+0x5c6/0x7f0
[  296.327835][T16818]        __se_sys_ioctl+0xfc/0x170
[  296.329546][T16818]        do_syscall_64+0x174/0xf80
[  296.331227][T16818]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.333732][T16818] 
[  296.333732][T16818] other info that might help us debug this:
[  296.333732][T16818] 
[  296.337073][T16818] Chain exists of:
[  296.337073][T16818]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  296.337073][T16818] 
[  296.342320][T16818]  Possible unsafe locking scenario:
[  296.342320][T16818] 
[  296.345351][T16818]        CPU0                    CPU1
[  296.347531][T16818]        ----                    ----
[  296.349712][T16818]   lock(&root->kernfs_rwsem);
[  296.351654][T16818]                                lock(cpuhp_state_mutex);
[  296.354430][T16818]                                lock(&root->kernfs_rwsem);
[  296.357386][T16818]   lock(&root->kernfs_iattr_rwsem);
[  296.359548][T16818] 
[  296.359548][T16818]  *** DEADLOCK ***
[  296.359548][T16818] 
[  296.362799][T16818] 2 locks held by syz.1.4698/16818:
[  296.364932][T16818]  #0: ffffffff8ff6ece0 (rfcomm_ioctl_mutex){+.+.}-{4:4}, at: rfcomm_dev_ioctl+0x25f/0x21d0
[  296.369028][T16818]  #1: ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  296.372991][T16818] 
[  296.372991][T16818] stack backtrace:
[  296.375430][T16818] CPU: 1 UID: 0 PID: 16818 Comm: syz.1.4698 Not tainted syzkaller #0 PREEMPT(full) 
[  296.375447][T16818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.375455][T16818] Call Trace:
[  296.375462][T16818]  <TASK>
[  296.375470][T16818]  dump_stack_lvl+0xe8/0x150
[  296.375488][T16818]  print_circular_bug+0x2e1/0x300
[  296.375507][T16818]  check_noncircular+0x12e/0x150
[  296.375526][T16818]  __lock_acquire+0x15a5/0x2cf0
[  296.375542][T16818]  ? __lock_acquire+0x6b5/0x2cf0
[  296.375559][T16818]  ? kernfs_link_sibling+0x4ed/0x5c0
[  296.375575][T16818]  lock_acquire+0x106/0x350
[  296.375588][T16818]  ? kernfs_link_sibling+0x4ed/0x5c0
[  296.375607][T16818]  down_write+0x96/0x200
[  296.375629][T16818]  ? kernfs_link_sibling+0x4ed/0x5c0
[  296.375646][T16818]  ? __pfx_down_write+0x10/0x10
[  296.375662][T16818]  ? kernfs_root+0x1c/0x230
[  296.375677][T16818]  ? kernfs_root+0x1c/0x230
[  296.375692][T16818]  ? kernfs_root+0x1ea/0x230
[  296.375708][T16818]  kernfs_link_sibling+0x4ed/0x5c0
[  296.375728][T16818]  kernfs_add_one+0x1ca/0x5c0
[  296.375746][T16818]  kernfs_create_dir_ns+0xde/0x130
[  296.375766][T16818]  sysfs_create_dir_ns+0x12f/0x2a0
[  296.375781][T16818]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  296.375796][T16818]  ? do_raw_spin_unlock+0x4d/0x210
[  296.375815][T16818]  kobject_add_internal+0x62b/0xd00
[  296.375834][T16818]  kobject_add+0x163/0x240
[  296.375850][T16818]  ? __pfx_kobject_add+0x10/0x10
[  296.375865][T16818]  ? do_raw_spin_unlock+0x4d/0x210
[  296.375883][T16818]  ? get_device_parent+0x366/0x3a0
[  296.375899][T16818]  device_add+0x408/0xbb0
[  296.375917][T16818]  tty_register_device_attr+0x422/0x950
[  296.375933][T16818]  ? rfcomm_dev_ioctl+0x1675/0x21d0
[  296.375947][T16818]  ? __pfx___mutex_lock+0x10/0x10
[  296.375961][T16818]  ? __pfx_tty_register_device_attr+0x10/0x10
[  296.375980][T16818]  ? tty_port_register_device+0xca/0x150
[  296.376023][T16818]  rfcomm_dev_ioctl+0x1b73/0x21d0
[  296.376043][T16818]  ? kasan_quarantine_put+0xbb/0x1f0
[  296.376061][T16818]  ? __pfx_rfcomm_dev_ioctl+0x10/0x10
[  296.376076][T16818]  ? tomoyo_path_number_perm+0x219/0x630
[  296.376093][T16818]  ? tomoyo_path_number_perm+0x219/0x630
[  296.376110][T16818]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  296.376129][T16818]  sock_do_ioctl+0x101/0x320
[  296.376148][T16818]  ? __pfx_sock_do_ioctl+0x10/0x10
[  296.376164][T16818]  ? do_futex+0x333/0x420
[  296.376182][T16818]  sock_ioctl+0x5c6/0x7f0
[  296.376198][T16818]  ? __pfx_sock_ioctl+0x10/0x10
[  296.376213][T16818]  ? __fget_files+0x2a/0x420
[  296.376227][T16818]  ? __fget_files+0x3a0/0x420
[  296.376239][T16818]  ? __fget_files+0x2a/0x420
[  296.376254][T16818]  ? bpf_lsm_file_ioctl+0x9/0x20
[  296.376271][T16818]  ? __pfx_sock_ioctl+0x10/0x10
[  296.376287][T16818]  __se_sys_ioctl+0xfc/0x170
[  296.376305][T16818]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.376318][T16818]  do_syscall_64+0x174/0xf80
[  296.376332][T16818]  ? trace_irq_disable+0x3b/0x140
[  296.376352][T16818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.376367][T16818] RIP: 0033:0x7f365c39ce59
[  296.376379][T16818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.376391][T16818] RSP: 002b:00007f365d28b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  296.376405][T16818] RAX: ffffffffffffffda RBX: 00007f365c616090 RCX: 00007f365c39ce59
[  296.376414][T16818] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000005
[  296.376423][T16818] RBP: 00007f365c432d6f R08: 0000000000000000 R09: 0000000000000000
[  296.376430][T16818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.376438][T16818] R13: 00007f365c616128 R14: 00007f365c616090 R15: 00007ffda4cdfc88
[  296.376452][T16818]  </TASK>
[  298.610787][   T13] net_ratelimit: 43 callbacks suppressed
[  298.610804][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  298.720681][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  298.820565][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  298.831309][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  298.941053][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  299.051019][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  299.161071][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  299.270973][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  299.380923][ T7273] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  299.490747][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  303.710804][   T12] net_ratelimit: 41 callbacks suppressed
[  303.710816][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  303.820959][ T9418] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  303.930892][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  304.020590][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  304.040872][ T7273] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  304.150757][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  304.260819][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  304.370624][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  304.480799][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[  304.590856][   T12] bond7: (slave ip6gretap1): failed to get link speed/duplex
