last executing test programs:

1.317060443s ago: executing program 2 (id=4485):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4)

1.316846957s ago: executing program 1 (id=4486):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x80008001, 0x80)

1.237159279s ago: executing program 1 (id=4487):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xe, "202416ed56"}], 0x18}, 0x0)

1.236996618s ago: executing program 2 (id=4488):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10001)

1.170246561s ago: executing program 1 (id=4489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800356a000000000000001b0a800000ff030006000007001401000000"], 0x30}}, 0x0)

1.17001887s ago: executing program 2 (id=4490):
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000008400000000000000ff5ba622"], 0x18, 0x20000001}, 0x20008000)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, 0x3}, 0x8)

1.147294337s ago: executing program 1 (id=4491):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e1ff46bd3bf574b7c1f6f585862b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1.069308708s ago: executing program 1 (id=4492):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xff, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)
recvmsg$can_j1939(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

388.751749ms ago: executing program 0 (id=4502):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

288.264938ms ago: executing program 0 (id=4503):
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0x3, 0x9, 0x0, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x200000, 0x2, 0x0, 0xb, 0xe, 0x2b}, 0x20)

288.028802ms ago: executing program 0 (id=4504):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

194.276699ms ago: executing program 0 (id=4505):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0xa}, 0x1c)

193.519698ms ago: executing program 1 (id=4506):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0400fcffffff0400f2ff1e000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x24040040)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, <r5=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001000)={'bridge_slave_0\x00', @random="e4a8b032869c"})
getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB], 0x7c}}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001080)=r8, 0x4)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x8000)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

193.416081ms ago: executing program 2 (id=4507):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a010400000000000000000700000008000840000000010900010073797a30000000001c000980100002800c00018008000140000000020800014060000000080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

147.243106ms ago: executing program 0 (id=4508):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x2, 0x3, 0xd, 0x4101}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))

88.893154ms ago: executing program 0 (id=4509):
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5)
vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000)
close(r0)
r2 = socket$inet6(0xa, 0x3, 0x8)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000001, 0x0, 0x1, 0x900, 0x0, 0xfffffffc}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x4)

372.96µs ago: executing program 2 (id=4510):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000200}, {0x85, 0x0, 0x0, 0xcb}}]}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)

0s ago: executing program 2 (id=4511):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
pipe(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, 0x0, 0x0, 0x200488b4, &(0x7f00000002c0)={0x23, 0x46, 0x6, 0xc}, 0xffffffce)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x11, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
listen(0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00), 0x0, 0x4810)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
close(0x3)
ioctl$FITHAW(r3, 0xc0045878)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gretap0\x00', &(0x7f00000013c0)={'erspan0\x00', 0x0, 0x8000, 0x8, 0x7, 0x4, {{0x32, 0x4, 0x1, 0x17, 0xc8, 0x66, 0x0, 0x86, 0x4, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x4, 0xd3, 0x3, 0x8}, @end, @timestamp_prespec={0x44, 0x2c, 0xae, 0x3, 0x3, [{@loopback, 0x800}, {@local, 0x1}, {@remote, 0xffffff49}, {@private=0xa010100, 0xfb}, {@broadcast, 0x1ff}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xde, 0x1, 0xb, [{@rand_addr=0x64010102, 0xa}, {@local, 0x26}, {@multicast2, 0x3fd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@remote, 0x4}]}, @rr={0x7, 0xf, 0xad, [@initdev={0xac, 0x1e, 0xff, 0x0}, @remote, @remote]}, @timestamp_addr={0x44, 0xc, 0xe5, 0x1, 0x2, [{@remote, 0x200}]}, @end, @rr={0x7, 0x1b, 0x9d, [@multicast2, @empty, @loopback, @empty, @rand_addr=0x64010100, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0xc5, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x782b7a3e}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}}}})

kernel console output (not intermixed with test programs):

tlink: 'syz.2.776': attribute type 3 has an invalid length.
[   93.739042][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'.
[   93.740848][ T7473] netlink: 'syz.2.776': attribute type 5 has an invalid length.
[   93.846250][ T7483] netlink: 'syz.1.780': attribute type 8 has an invalid length.
[   93.889182][ T7485] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   93.889182][ T7485] Please contact the netfilter-devel mailing list or update your nftables rules.
[   94.744186][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'.
[   94.746903][ T7532] xt_cgroup: path and classid specified
[   94.896450][ T7538] netlink: 'syz.0.807': attribute type 2 has an invalid length.
[   95.218778][ T7556] nbd: socks must be embedded in a SOCK_ITEM attr
[   95.604360][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'.
[   95.839828][ T7575] syzkaller0: entered promiscuous mode
[   95.842415][ T7575] syzkaller0: entered allmulticast mode
[   96.567585][ T7615] netlink: 'syz.1.841': attribute type 3 has an invalid length.
[   96.881114][ T7622] can: request_module (can-proto-3) failed.
[   96.935150][ T7620] net_ratelimit: 67 callbacks suppressed
[   96.942038][ T7620] ip_tables: iptables: counters copy to user failed while replacing table
[   97.194804][ T7642] netlink: 'syz.2.852': attribute type 1 has an invalid length.
[   97.272448][ T7642] bond3: entered promiscuous mode
[   97.279802][ T7642] 8021q: adding VLAN 0 to HW filter on device bond3
[   97.385848][ T7648] 8021q: adding VLAN 0 to HW filter on device bond4
[   97.404340][ T7648] bond3: (slave bond4): making interface the new active one
[   97.425451][ T7648] bond4: entered promiscuous mode
[   97.430590][ T7648] bond3: (slave bond4): Enslaving as an active interface with an up link
[   97.975616][ T7674] openvswitch: netlink: Duplicate or invalid key (type 0).
[   97.998252][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.866'.
[   98.018429][ T7676] netlink: 826 bytes leftover after parsing attributes in process `syz.0.867'.
[   98.221206][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'.
[   98.225653][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'.
[   98.342498][ T7699] ip_tables: iptables: counters copy to user failed while replacing table
[   98.349244][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'.
[   99.244151][ T7728] netlink: 60795 bytes leftover after parsing attributes in process `syz.1.892'.
[   99.592776][ T7737] xt_ecn: cannot match TCP bits for non-tcp packets
[  100.148425][ T7755] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  100.675910][ T7778] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  100.846944][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'.
[  101.115797][ T7798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.138489][ T7800] netlink: 'syz.2.925': attribute type 3 has an invalid length.
[  101.712160][ T7822] syzkaller1: entered promiscuous mode
[  101.712217][ T7822] syzkaller1: entered allmulticast mode
[  102.274318][ T7861] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  102.286402][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'.
[  102.366678][ T7867] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.958'.
[  102.605745][ T7879] netlink: 'syz.2.961': attribute type 1 has an invalid length.
[  102.605794][ T7879] netlink: 'syz.2.961': attribute type 2 has an invalid length.
[  102.982227][ T7901] syzkaller1: entered promiscuous mode
[  102.984716][ T7901] syzkaller1: entered allmulticast mode
[  103.383485][ T7920] syzkaller0: entered promiscuous mode
[  103.386741][ T7920] syzkaller0: entered allmulticast mode
[  103.456544][ T7927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.985'.
[  103.625515][ T7945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.992'.
[  103.853124][ T7964] syzkaller0: entered promiscuous mode
[  103.853174][ T7964] syzkaller0: entered allmulticast mode
[  104.010919][ T7974] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.014319][ T7974] syzkaller0: MTU too low for tipc bearer
[  104.016464][ T7974] tipc: Disabling bearer <eth:syzkaller0>
[  104.202325][ T7989] syzkaller0: entered promiscuous mode
[  104.204249][ T7989] syzkaller0: entered allmulticast mode
[  104.210965][ T7989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.223011][ T7989] tipc: Resetting bearer <eth:syzkaller0>
[  104.240699][ T7988] tipc: Resetting bearer <eth:syzkaller0>
[  104.262471][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1014'.
[  104.336643][ T7997] netlink: 'syz.1.1017': attribute type 2 has an invalid length.
[  104.340762][ T7988] tipc: Disabling bearer <eth:syzkaller0>
[  104.365565][ T7997] : entered promiscuous mode
[  104.368127][ T7999] netlink: 'syz.0.1013': attribute type 11 has an invalid length.
[  104.905305][ T8044] netlink: 'syz.1.1039': attribute type 1 has an invalid length.
[  104.905355][ T8044] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1039'.
[  105.024184][ T8054] netlink: 'syz.2.1044': attribute type 2 has an invalid length.
[  105.028185][ T8054] netlink: 'syz.2.1044': attribute type 2 has an invalid length.
[  105.075200][ T8058] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  105.119038][ T8060] bond5: Unable to set peer notification delay as MII monitoring is disabled
[  105.144742][ T8060] bond5 (unregistering): Released all slaves
[  105.674842][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1063'.
[  105.871605][ T8109] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1068'.
[  106.052285][   T47] wlan1 speed is unknown, defaulting to 1000
[  106.082720][  T990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  106.117765][   T47] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  106.269718][ T8140] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1084'.
[  106.273346][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'.
[  106.417493][   T47] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  106.922865][ T8165] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  106.990870][ T8165] bond2 (unregistering): Released all slaves
[  107.196017][ T8180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1098'.
[  107.275906][ T8184] batman_adv: batadv0: Adding interface: macvtap1
[  107.282211][ T8184] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.293886][ T8184] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  107.760829][   T47] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  108.183447][ T4993] Bluetooth: hci2: link tx timeout
[  108.184614][ T4993] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.697836][ T5678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  109.565322][ T8152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  110.213084][ T4993] Bluetooth: hci2: command 0x0406 tx timeout
[  110.914624][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'.
[  110.915141][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1123'.
[  110.917630][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'.
[  110.917638][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1123'.
[  112.650761][ T8310] netlink: 'syz.1.1158': attribute type 7 has an invalid length.
[  112.654310][ T8310] netlink: 'syz.1.1158': attribute type 3 has an invalid length.
[  112.658285][ T8310] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1158'.
[  113.379023][ T8343] xt_connbytes: Forcing CT accounting to be enabled
[  113.443007][ T8347] netlink: 3596 bytes leftover after parsing attributes in process `syz.2.1173'.
[  113.550892][ T8351] netlink: 'syz.2.1175': attribute type 9 has an invalid length.
[  113.902750][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'.
[  114.411687][ T8379] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1187'.
[  114.418715][ T8379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1187'.
[  114.751923][ T8393] Cannot find del_set index 17 as target
[  114.865995][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'.
[  115.044182][ T8405] tipc: Can't bind to reserved service type 0
[  115.156733][ T8411] netlink: 'syz.2.1202': attribute type 15 has an invalid length.
[  115.169935][ T8411] netlink: 'syz.2.1202': attribute type 15 has an invalid length.
[  115.187355][ T5631] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  115.187421][ T5631] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  115.187475][ T5631] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  115.187519][ T5631] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0
[  115.337012][ T8419] syzkaller1: entered promiscuous mode
[  115.342531][ T8419] syzkaller1: entered allmulticast mode
[  116.402578][ T8434] netlink: 'syz.0.1214': attribute type 5 has an invalid length.
[  116.533643][ T8445] tipc: Started in network mode
[  116.535978][ T8445] tipc: Node identity b2688e686751, cluster identity 4711
[  116.540081][ T8445] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  116.650027][ T8447] __nla_validate_parse: 1 callbacks suppressed
[  116.653183][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'.
[  116.734038][ T8442] tipc: Resetting bearer <eth:syzkaller0>
[  116.768863][ T8442] tipc: Disabling bearer <eth:syzkaller0>
[  117.161694][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.163047][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.481143][ T8448] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.494199][ T8448] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.887238][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  118.006698][ T8448] bridge1: left promiscuous mode
[  118.011219][ T8448] bridge1: left allmulticast mode
[  118.021779][ T8448] bond1: left promiscuous mode
[  118.067459][ T5674] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.068005][ T5674] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.068021][ T5674] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.068033][ T5674] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.179824][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'.
[  118.219699][ T8475] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  118.236880][ T8475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.243467][ T8475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.250451][ T8475] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  118.257946][ T8475] bond0 (unregistering): Released all slaves
[  119.167948][ T8488] netlink: 'syz.2.1231': attribute type 34 has an invalid length.
[  119.171398][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'.
[  119.479747][ T8499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1236'.
[  119.795814][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'.
[  119.985968][ T8461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  120.090458][ T8518] nbd2: detected capacity change from 0 to 127
[  120.098779][   T57] block nbd2: Receive control failed (result -104)
[  120.106485][   T98] block nbd2: Dead connection, failed to find a fallback
[  120.106561][   T98] block nbd2: shutting down sockets
[  120.106647][   T98] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  120.106726][   T98] Buffer I/O error on dev nbd2, logical block 1, async page read
[  120.121917][   T98] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  120.121976][   T98] Buffer I/O error on dev nbd2, logical block 2, async page read
[  120.131202][   T98] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  120.131253][   T98] Buffer I/O error on dev nbd2, logical block 3, async page read
[  120.233499][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'.
[  120.315488][ T8533] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1253'.
[  120.321005][ T8533] tc_dump_action: action bad kind
[  120.375126][ T8537] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  120.642755][ T8551] openvswitch: netlink: ct_state flags 806d0004 unsupported
[  120.713787][ T8557] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  120.808127][ T8562] netlink: 'syz.0.1268': attribute type 49 has an invalid length.
[  120.893790][ T8562] ip6gretap0: entered promiscuous mode
[  120.898138][ T8562] ip6gretap0: entered allmulticast mode
[  120.984669][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1272'.
[  121.024542][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816ae7c800: rx timeout, send abort
[  121.524679][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816ae7c800: abort rx timeout. Force session deactivation
[  121.524881][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bc51b000: rx timeout, send abort
[  122.025037][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bc51b000: abort rx timeout. Force session deactivation
[  122.294161][ T8633] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[  122.446407][ T8639] hsr0: entered allmulticast mode
[  122.450785][ T8639] hsr_slave_0: entered allmulticast mode
[  122.453329][ T8639] hsr_slave_1: entered allmulticast mode
[  122.656531][ T8648] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  122.979103][ T8657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1308'.
[  123.008726][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'.
[  123.107832][ T8665] trusted_key: syz.0.1307 sent an empty control message without MSG_MORE.
[  123.149194][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'.
[  123.149266][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'.
[  123.411070][   T98] block nbd2: Connection timed out, retrying (0/1 alive)
[  123.411388][   T98] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  123.411412][   T98] Buffer I/O error on dev nbd2, logical block 0, async page read
[  123.413183][   T98] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  123.413204][   T98] Buffer I/O error on dev nbd2, logical block 0, async page read
[  123.413293][   T98] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  123.413309][   T98] Buffer I/O error on dev nbd2, logical block 1, async page read
[  123.413374][   T98] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  123.413389][   T98] Buffer I/O error on dev nbd2, logical block 2, async page read
[  123.413455][   T98] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  123.413470][   T98] Buffer I/O error on dev nbd2, logical block 3, async page read
[  123.413648][   T98] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  123.413665][   T98] Buffer I/O error on dev nbd2, logical block 0, async page read
[  123.413729][   T98] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  123.413745][   T98] Buffer I/O error on dev nbd2, logical block 1, async page read
[  123.419031][ T8455] ldm_validate_partition_table(): Disk read failed.
[  123.424567][ T8455] Dev nbd2: unable to read RDB block 0
[  123.426979][ T8455]  nbd2: unable to read partition table
[  123.475287][ T8455] ldm_validate_partition_table(): Disk read failed.
[  123.477476][ T8455] Dev nbd2: unable to read RDB block 0
[  123.479624][ T8455]  nbd2: unable to read partition table
[  123.998803][ T8708] xt_CT: You must specify a L4 protocol and not use inversions on it
[  124.992057][ T8719] ip6tnl1: entered allmulticast mode
[  125.098517][ T5674] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  125.098775][ T5674] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  125.130687][ T5666] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  125.639181][  T804] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  125.765695][ T8742] infiniband syz0: set down
[  125.767913][ T8742] infiniband syz0: added ipvlan1
[  125.813736][ T8742] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  125.834842][ T8742] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  125.841677][ T8742] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  125.868953][ T8742] RDS/IB: syz0: added
[  125.871866][ T8742] smc: adding ib device syz0 with port count 1
[  125.872638][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1349'.
[  125.878591][ T8742] smc:    ib device syz0 port 1 has no pnetid
[  125.888154][  T804] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  125.965767][ T8767] netlink: 'syz.0.1352': attribute type 21 has an invalid length.
[  125.966031][ T8767] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1352'.
[  126.691523][ T8787] netlink: 'syz.1.1361': attribute type 4 has an invalid length.
[  126.872758][ T8768] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  127.152755][ T8801] netlink: 'syz.2.1368': attribute type 14 has an invalid length.
[  127.166595][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1370'.
[  127.650477][ T8837] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1384'.
[  128.147421][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'.
[  128.151109][ T8865] hsr_slave_0: left promiscuous mode
[  128.155198][ T8865] hsr_slave_1: left promiscuous mode
[  128.443903][ T8870] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.444442][ T8870] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.549371][ T8877] xt_CT: No such helper "snmp_trap"
[  128.847727][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  128.927860][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.927934][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.928052][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.928091][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.928138][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.928177][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.928223][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.928259][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.015014][ T8894] wlan1 speed is unknown, defaulting to 1000
[  129.015060][ T8894] syz2: Port: 1 Link DOWN
[  129.136698][ T8902] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  129.312508][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'.
[  131.019408][ T8965] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1436'.
[  131.103070][ T8969] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  131.453657][ T8982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'.
[  131.461834][ T8982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'.
[  132.054090][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'.
[  132.182330][ T9013] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  132.337672][ T9013] bond2 (unregistering): Released all slaves
[  132.533698][ T9034] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  132.846260][ T9054] netlink: 'syz.1.1470': attribute type 2 has an invalid length.
[  133.260618][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  133.261186][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  133.292186][ T9064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1474'.
[  133.791209][ T9075] netlink: 'syz.1.1479': attribute type 2 has an invalid length.
[  133.906613][ T9079] xt_hashlimit: size too large, truncated to 1048576
[  134.099789][ T9088] Bluetooth: hci0: unsupported parameter 5134
[  134.103447][ T9088] Bluetooth: hci0: unsupported parameter 8192
[  134.106607][ T9088] Bluetooth: hci0: unsupported parameter 5134
[  134.112540][ T9088] Bluetooth: hci0: unsupported parameter 8192
[  134.275035][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'.
[  134.279087][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'.
[  134.283348][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'.
[  134.288166][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'.
[  135.201517][ T9100] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  135.235414][ T9116] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1498'.
[  135.336195][ T9120] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  135.472356][ T9122] bond0: option xmit_hash_policy: invalid value (10)
[  135.476977][ T9122] bond0 (unregistering): Released all slaves
[  136.294954][ T9145] netlink: 'syz.1.1509': attribute type 2 has an invalid length.
[  136.447331][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  136.447655][ T5599] Bluetooth: hci0: command 0x0c20 tx timeout
[  136.572741][ T9149] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1511'.
[  136.611296][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'.
[  136.611349][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'.
[  136.947728][ T9159] pim6reg99999999: entered allmulticast mode
[  137.600634][ T9181] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1526'.
[  139.754426][ T9260] __nla_validate_parse: 1 callbacks suppressed
[  139.755120][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'.
[  140.354955][ T9277] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  141.551313][ T9324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1594'.
[  141.551361][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'.
[  141.551406][ T9324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1594'.
[  141.551442][ T9324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1594'.
[  141.824863][ T9332] ip6gre1: entered allmulticast mode
[  141.829766][ T9322] wlan1 speed is unknown, defaulting to 1000
[  141.877727][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1593'.
[  142.018464][ T9322] lo speed is unknown, defaulting to 1000
[  142.148913][ T9338] netlink: 'syz.2.1599': attribute type 3 has an invalid length.
[  142.643191][ T9356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1607'.
[  142.649319][ T9356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1607'.
[  143.168853][ T9370] netlink: 'syz.0.1614': attribute type 2 has an invalid length.
[  143.615149][ T9386] xt_time: invalid argument - start or stop time greater than 23:59:59
[  143.752705][ T5599] Bluetooth: hci1: unexpected event 0x0e length: 0 < 3
[  144.065743][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'.
[  144.138018][ T9410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1632'.
[  144.272748][ T9419] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[  144.964601][ T9449] __nla_validate_parse: 2 callbacks suppressed
[  144.968632][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1651'.
[  144.972624][ T9449] netlink: 'syz.2.1651': attribute type 30 has an invalid length.
[  144.976898][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1651'.
[  144.992109][ T9449] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  144.996268][ T9449] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  145.566973][ T9473] syzkaller0: entered promiscuous mode
[  145.567025][ T9473] syzkaller0: entered allmulticast mode
[  145.864526][ T9480] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1664'.
[  146.075716][ T9492] syzkaller1: entered promiscuous mode
[  146.076796][ T9492] syzkaller1: entered allmulticast mode
[  146.618942][ T9509] netlink: 'syz.0.1678': attribute type 1 has an invalid length.
[  146.714501][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'.
[  147.008602][   T33] audit: type=1804 audit(1788970577.495:2): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1688" name="/newroot/571/memory.events" dev="tmpfs" ino=2898 res=1 errno=0
[  147.018106][   T33] audit: type=1800 audit(1788970577.495:3): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1688" name="memory.events" dev="tmpfs" ino=2898 res=0 errno=0
[  147.030561][   T33] audit: type=1804 audit(1788970577.515:4): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1688" name="/newroot/571/memory.events" dev="tmpfs" ino=2898 res=1 errno=0
[  147.316637][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'.
[  147.445789][ T9563] netlink: 'syz.1.1696': attribute type 1 has an invalid length.
[  147.505708][ T9563] bond0: entered promiscuous mode
[  147.514636][ T9563] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.533631][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'.
[  147.554618][ T9563] vlan2: entered allmulticast mode
[  147.555258][ T9563] bond0: entered allmulticast mode
[  147.616168][ T9563] bond0: (slave bridge3): making interface the new active one
[  147.616687][ T9563] bridge3: entered promiscuous mode
[  147.620216][ T9563] bridge3: entered allmulticast mode
[  147.651661][ T9563] bond0: (slave bridge3): Enslaving as an active interface with an up link
[  148.139427][ T9597] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1708'.
[  148.164186][ T9601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1710'.
[  148.164263][ T9601] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  148.600791][ T9628] veth0: entered promiscuous mode
[  148.603991][ T9628] veth0: left promiscuous mode
[  148.733117][ T9634] netlink: 'syz.1.1726': attribute type 1 has an invalid length.
[  148.763032][ T9638] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1727'.
[  148.763169][ T9638] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1727'.
[  148.763178][ T9638] netlink: 'syz.0.1727': attribute type 5 has an invalid length.
[  148.778137][ T9634] 8021q: adding VLAN 0 to HW filter on device bond2
[  148.809342][ T9633] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  148.822675][ T9633] bridge4: entered promiscuous mode
[  148.830836][ T9633] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  149.189430][ T9657] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  150.043468][ T9700] netlink: 'syz.2.1756': attribute type 3 has an invalid length.
[  150.554268][ T9732] Bluetooth: MGMT ver 1.23
[  150.806846][ T9745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.114974][   T33] audit: type=1804 audit(1788970581.595:5): pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1784" name="/newroot/563/cgroup.controllers" dev="tmpfs" ino=2861 res=1 errno=0
[  151.115047][   T33] audit: type=1800 audit(1788970581.595:6): pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1784" name="cgroup.controllers" dev="tmpfs" ino=2861 res=0 errno=0
[  151.146573][   T33] audit: type=1804 audit(1788970581.625:7): pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1784" name="/newroot/563/cgroup.controllers" dev="tmpfs" ino=2861 res=1 errno=0
[  151.167634][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  151.499183][ T9778] __nla_validate_parse: 1 callbacks suppressed
[  151.499254][ T9778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1791'.
[  151.525626][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1791'.
[  151.854868][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1796'.
[  152.146145][ T9809] netlink: 'syz.2.1804': attribute type 11 has an invalid length.
[  152.152404][ T9809] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1804'.
[  153.097607][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'.
[  153.412521][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'.
[  154.106838][ T9892] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1841'.
[  154.361978][ T9905] ip6t_ah: unknown flags 4
[  154.476603][ T9913] netlink: 'syz.2.1851': attribute type 1 has an invalid length.
[  154.646331][ T9915] netlink: 'syz.2.1852': attribute type 3 has an invalid length.
[  154.859356][ T9923] syzkaller0: entered promiscuous mode
[  154.860357][ T9923] syzkaller0: entered allmulticast mode
[  155.142063][ T9940] ip6t_srh: unknown srh invflags BA61
[  155.282047][ T9950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1869'.
[  155.282111][ T9950] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  155.335178][ T9952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1870'.
[  155.594926][ T9970] netlink: 'syz.0.1878': attribute type 10 has an invalid length.
[  155.618438][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1879'.
[  155.674847][ T9970] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.679604][ T9970] team0: Port device bond0 added
[  155.726894][ T9974] veth1_vlan: left promiscuous mode
[  155.733312][ T9974] veth1_vlan: entered promiscuous mode
[  155.742267][ T9974] bond6: (slave macvlan1): Enslaving as an active interface with an up link
[  155.888616][ T9976] bond6 (unregistering): (slave macvlan1): Releasing backup interface
[  155.893173][ T9976] veth1_vlan: left promiscuous mode
[  155.904359][ T9976] bond6 (unregistering): Released all slaves
[  156.194867][ T1555] IPVS: starting estimator thread 0...
[  156.307480][ T9995] IPVS: using max 75 ests per chain, 180000 per kthread
[  156.459846][T10002] sock: sock_set_timeout: `syz.2.1889' (pid 10002) tries to set negative timeout
[  156.556116][T10013] openvswitch: netlink: Unknown key attributes 1
[  156.614784][T10017] __nla_validate_parse: 3 callbacks suppressed
[  156.617798][T10017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1896'.
[  156.621666][T10017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1896'.
[  157.044829][T10040] netlink: 'syz.2.1906': attribute type 1 has an invalid length.
[  157.377684][T10052] xt_socket: unknown flags 0x4
[  157.497409][T10058] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1915'.
[  157.810044][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'.
[  157.819532][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'.
[  158.663051][T10111] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  159.011737][T10122] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1943'.
[  162.565595][T10157] macsec1: entered promiscuous mode
[  162.567954][T10157] syz_tun: entered promiscuous mode
[  162.574462][T10157] syz_tun: left promiscuous mode
[  163.044890][T10178] bond0: Device is already in use.
[  163.389314][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1980'.
[  163.396038][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'.
[  163.405208][T10199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1980'.
[  163.405273][T10199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1980'.
[  163.490810][T10205] netlink: 'syz.2.1983': attribute type 1 has an invalid length.
[  164.834468][T10278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2017'.
[  166.425485][T10310] syz.0.2033 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  166.440634][T10310] CPU: 1 UID: 0 PID: 10310 Comm: syz.0.2033 Not tainted syzkaller #0 PREEMPT(full) 
[  166.440673][T10310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.440682][T10310] Call Trace:
[  166.440688][T10310]  <TASK>
[  166.440694][T10310]  dump_stack_lvl+0xe8/0x150
[  166.440716][T10310]  dump_header+0xd3/0x4b0
[  166.440736][T10310]  oom_kill_process+0x3ab/0x9e0
[  166.440755][T10310]  out_of_memory+0x1064/0x1480
[  166.440769][T10310]  ? try_charge_memcg+0xc32/0x15e0
[  166.440793][T10310]  ? __pfx_out_of_memory+0x10/0x10
[  166.440807][T10310]  ? do_raw_spin_unlock+0x4d/0x200
[  166.440830][T10310]  try_charge_memcg+0xcdf/0x15e0
[  166.440856][T10310]  ? __pfx_try_charge_memcg+0x10/0x10
[  166.440885][T10310]  ? charge_memcg+0x47/0x310
[  166.440901][T10310]  charge_memcg+0x1dd/0x310
[  166.440917][T10310]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  166.440932][T10310]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  166.440948][T10310]  swap_cache_alloc_folio+0x4de/0x990
[  166.440974][T10310]  swap_cache_read_folio+0x44/0x120
[  166.440992][T10310]  swap_cluster_readahead+0x392/0x630
[  166.441036][T10310]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  166.441068][T10310]  swapin_readahead+0x1a3/0xc50
[  166.441094][T10310]  ? __pfx_swapin_readahead+0x10/0x10
[  166.441114][T10310]  ? swap_table_get+0x1e/0x260
[  166.441130][T10310]  ? swap_table_get+0x1e/0x260
[  166.441144][T10310]  ? swap_table_get+0x1e/0x260
[  166.441160][T10310]  ? swap_table_get+0x216/0x260
[  166.441177][T10310]  ? swap_cache_get_folio+0x2e7/0x2f0
[  166.441198][T10310]  do_swap_page+0x3fb/0x4c10
[  166.441224][T10310]  ? __lock_acquire+0x6df/0x2e50
[  166.441236][T10310]  ? do_swap_page+0x126/0x4c10
[  166.441252][T10310]  ? __pfx_do_swap_page+0x10/0x10
[  166.441266][T10310]  ? __pte_offset_map+0x1ae/0x240
[  166.441284][T10310]  ? pte_offset_map_rw_nolock+0xea/0x160
[  166.441302][T10310]  handle_mm_fault+0x1398/0x3750
[  166.441325][T10310]  ? handle_mm_fault+0xf1/0x3750
[  166.441348][T10310]  ? __pfx_handle_mm_fault+0x10/0x10
[  166.441363][T10310]  ? lock_vma_under_rcu+0x45a/0x500
[  166.441396][T10310]  do_user_addr_fault+0xa4f/0x1340
[  166.441417][T10310]  ? trace_page_fault_user+0x84/0x1e0
[  166.441433][T10310]  exc_page_fault+0x6a/0xc0
[  166.441452][T10310]  asm_exc_page_fault+0x26/0x30
[  166.441471][T10310] RIP: 0033:0x7fd798b592b8
[  166.441484][T10310] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00
[  166.441495][T10310] RSP: 002b:00007fff1ccce880 EFLAGS: 00010246
[  166.441533][T10310] RAX: 0000000000000000 RBX: 00005555627b9500 RCX: 00007fd798b5e98e
[  166.441542][T10310] RDX: 00007fff1ccce8d0 RSI: 0000000000000000 RDI: 0000000000000000
[  166.441549][T10310] RBP: 00007fd798e27da0 R08: 0000000000000000 R09: 0000000000000000
[  166.441557][T10310] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002899e
[  166.441565][T10310] R13: 00007fd798e25fac R14: 0000000000028692 R15: 00007fff1cccea00
[  166.441585][T10310]  </TASK>
[  166.579766][T10310] memory: usage 307200kB, limit 307200kB, failcnt 2287
[  166.579817][T10310] memory+swap: usage 307280kB, limit 9007199254740988kB, failcnt 0
[  166.579874][T10310] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[  166.579903][T10310] Memory cgroup stats for /syz0:
[  166.580374][T10310] cache 0
[  166.580403][T10310] rss 0
[  166.580429][T10310] rss_huge 0
[  166.580455][T10310] shmem 0
[  166.580481][T10310] mapped_file 0
[  166.580548][T10310] dirty 0
[  166.580575][T10310] writeback 0
[  166.580601][T10310] workingset_refault_anon 9
[  166.580627][T10310] workingset_refault_file 1
[  166.580657][T10310] swap 81920
[  166.580682][T10310] swapcached 147456
[  166.580707][T10310] pgpgin 44979
[  166.580733][T10310] pgpgout 44972
[  166.580759][T10310] pgfault 103954
[  166.580784][T10310] pgmajfault 3
[  166.580811][T10310] inactive_anon 20480
[  166.580837][T10310] active_anon 0
[  166.580863][T10310] inactive_file 0
[  166.580888][T10310] active_file 0
[  166.580913][T10310] unevictable 0
[  166.580938][T10310] hierarchical_memory_limit 314572800
[  166.580963][T10310] hierarchical_memsw_limit 9223372036854771712
[  166.580990][T10310] total_cache 0
[  166.581016][T10310] total_rss 0
[  166.581043][T10310] total_rss_huge 0
[  166.581070][T10310] total_shmem 0
[  166.581096][T10310] total_mapped_file 0
[  166.581123][T10310] total_dirty 0
[  166.581149][T10310] total_writeback 0
[  166.635978][T10310] total_workingset_refault_anon 9
[  166.635992][T10310] total_workingset_refault_file 1
[  166.635996][T10310] total_swap 81920
[  166.636001][T10310] total_swapcached 147456
[  166.636007][T10310] total_pgpgin 44979
[  166.636010][T10310] total_pgpgout 44972
[  166.636014][T10310] total_pgfault 103954
[  166.636019][T10310] total_pgmajfault 3
[  166.636025][T10310] total_inactive_anon 20480
[  166.636028][T10310] total_active_anon 0
[  166.636032][T10310] total_inactive_file 0
[  166.636037][T10310] total_active_file 0
[  166.636042][T10310] total_unevictable 0
[  166.636046][T10310] anon_cost 0
[  166.636049][T10310] file_cost 0
[  166.636053][T10310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2033,pid=10310,uid=0
[  166.657260][T10310] Memory cgroup out of memory: Killed process 10310 (syz.0.2033) total-vm:104228kB, anon-rss:1256kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  168.732092][T10369] syzkaller0: entered promiscuous mode
[  168.732150][T10369] syzkaller0: entered allmulticast mode
[  168.929437][T10381] netlink: 'syz.2.2062': attribute type 37 has an invalid length.
[  169.110170][T10391] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2067'.
[  169.420661][T10399] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  170.250571][T10439] tc_dump_action: action bad kind
[  170.784098][T10465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.828009][T10465] syzkaller0: entered promiscuous mode
[  170.830428][T10465] syzkaller0: entered allmulticast mode
[  170.833100][T10465] tipc: Resetting bearer <eth:syzkaller0>
[  170.854683][T10464] tipc: Resetting bearer <eth:syzkaller0>
[  172.611590][T10464] tipc: Disabling bearer <eth:syzkaller0>
[  172.620537][T10475] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  172.628480][T10475] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  172.632065][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2098'.
[  172.636338][T10475] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  172.648101][   T25] tipc: Node number set to 3614446722
[  173.592760][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2121'.
[  173.596784][T10552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.632211][T10552] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.287318][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  176.287475][   T55] Bluetooth: hci0: command 0x0c20 tx timeout
[  176.389514][T10539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  176.771334][T10615] netlink: 'syz.0.2149': attribute type 61 has an invalid length.
[  177.078815][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'.
[  178.100050][T10659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2167'.
[  178.890210][T10701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.330055][    C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  179.757678][T10710] netlink: 616 bytes leftover after parsing attributes in process `syz.2.2190'.
[  179.962464][T10718] netlink: 'syz.2.2194': attribute type 1 has an invalid length.
[  179.967390][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  179.998651][T10718] 8021q: adding VLAN 0 to HW filter on device bond6
[  180.016910][T10718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2194'.
[  180.041050][T10718] bond6: entered promiscuous mode
[  180.043293][T10718] bond6: entered allmulticast mode
[  180.105317][T10718] team0: Port device dummy0 removed
[  180.123379][T10718] bond6: (slave dummy0): Enslaving as an active interface with a down link
[  180.505124][T10739] ieee802154 phy0 wpan0: encryption failed: -126
[  180.634241][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'.
[  180.689081][T10748] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  180.946652][T10760] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  181.053820][T10765] IPVS: Error connecting to the multicast addr
[  182.345299][T10801] syzkaller0: tun_chr_ioctl cmd 1074025677
[  182.345457][T10801] syzkaller0: linktype set to 8
[  182.445839][T10806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.678200][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'.
[  183.041584][T10847] xt_LOG: prefix is not null-terminated
[  183.755241][T10889] netlink: 'syz.1.2274': attribute type 10 has an invalid length.
[  183.764712][T10889] team0: Device vxcan1 is of different type
[  183.992383][ T1108] IPVS: starting estimator thread 0...
[  184.078169][T10901] IPVS: using max 47 ests per chain, 112800 per kthread
[  184.406965][T10910] vlan2: entered allmulticast mode
[  184.937443][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2285'.
[  186.699683][T10883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  188.442754][T10968] netlink: 'syz.1.2307': attribute type 29 has an invalid length.
[  188.442809][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'.
[  188.442865][T10968] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  188.911736][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'.
[  189.096129][T10992] tc action pedit 'at' offset 5 out of bounds
[  189.096186][T10992] tc action pedit 'at' offset 5 out of bounds
[  189.096271][T10992] tc action pedit 'at' offset 5 out of bounds
[  189.096299][T10992] tc action pedit 'at' offset 5 out of bounds
[  189.096327][T10992] tc action pedit 'at' offset 5 out of bounds
[  189.096355][T10992] tc action pedit 'at' offset 5 out of bounds
[  189.096385][T10992] tc action pedit 'at' offset 5 out of bounds
[  189.096414][T10992] tc action pedit 'at' offset 5 out of bounds
[  189.096443][T10992] tc action pedit 'at' offset 5 out of bounds
[  189.096472][T10992] tc action pedit 'at' offset 5 out of bounds
[  189.096507][T10992] 0: reclassify loop, rule prio 0, protocol 800
[  189.919588][T11004] netlink: 'syz.1.2323': attribute type 2 has an invalid length.
[  189.934919][T11004] D'|o: entered promiscuous mode
[  190.052638][T11009] macsec1: entered allmulticast mode
[  190.052932][T11009] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  190.059563][T11009] 8021q: adding VLAN 0 to HW filter on device macsec1
[  190.061982][T11007] IPVS: persistence engine module ip_vs_pe_ not found
[  190.114597][ T8896] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  190.387886][T11024] Bluetooth: hci0: invalid length 0, exp 2 for type 3
[  190.750618][T11042] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2342'.
[  190.770122][T11044] netlink: 'syz.0.2343': attribute type 12 has an invalid length.
[  190.770172][T11044] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2343'.
[  190.774101][T11044] netlink: 'syz.0.2343': attribute type 12 has an invalid length.
[  190.774116][T11044] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2343'.
[  190.815990][T11042] syzkaller1: entered promiscuous mode
[  190.816041][T11042] syzkaller1: entered allmulticast mode
[  191.641113][T11067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2354'.
[  192.457307][ T5599] Bluetooth: hci2: command 0x0406 tx timeout
[  192.527716][T11093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.165677][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2380'.
[  193.644911][T11149] syzkaller0: entered promiscuous mode
[  193.648631][T11149] syzkaller0: entered allmulticast mode
[  193.658850][T11149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.676090][T11149] tipc: Resetting bearer <eth:syzkaller0>
[  193.688223][T11148] tipc: Resetting bearer <eth:syzkaller0>
[  193.713357][T11148] tipc: Disabling bearer <eth:syzkaller0>
[  194.014378][T11157] syzkaller0: entered promiscuous mode
[  194.014427][T11157] syzkaller0: entered allmulticast mode
[  194.395778][T11162] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  194.694386][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  194.694923][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  194.956315][T11190] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  194.988200][T11193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2409'.
[  195.009467][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2408'.
[  195.104721][T11200] netlink: 'syz.1.2411': attribute type 10 has an invalid length.
[  195.186403][T11200] team0: Port device dummy0 added
[  196.248373][T11246] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2430'.
[  196.521011][T11256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2434'.
[  197.260211][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2450'.
[  197.264006][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2450'.
[  197.389375][T11303] block nbd3: shutting down sockets
[  197.608070][T11312] bridge2: entered promiscuous mode
[  197.609079][T11312] bridge2: entered allmulticast mode
[  197.630500][T11312] team0: Port device bridge2 added
[  197.678395][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2459'.
[  198.005285][T11320] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma?
[  198.051072][T11322] openvswitch: netlink: Message has 8 unknown bytes.
[  198.051139][T11322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.560350][T11352] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  199.554996][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2492'.
[  199.689511][T11398] 8021q: adding VLAN 0 to HW filter on device bond2
[  199.727710][T11404] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  199.869432][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2501'.
[  199.875132][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2501'.
[  199.880956][T11416] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  201.073858][T11474] netlink: 'syz.1.2527': attribute type 1 has an invalid length.
[  201.179211][T11482] geneve0: entered promiscuous mode
[  201.832121][T11529] ip_tables: iptables: counters copy to user failed while replacing table
[  201.930394][T11540] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2558'.
[  202.692886][T11543] syz.1.2560 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  202.698024][T11543] CPU: 1 UID: 0 PID: 11543 Comm: syz.1.2560 Not tainted syzkaller #0 PREEMPT(full) 
[  202.698077][T11543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.698085][T11543] Call Trace:
[  202.698091][T11543]  <TASK>
[  202.698097][T11543]  dump_stack_lvl+0xe8/0x150
[  202.698120][T11543]  dump_header+0xd3/0x4b0
[  202.698139][T11543]  oom_kill_process+0x3ab/0x9e0
[  202.698157][T11543]  out_of_memory+0x1064/0x1480
[  202.698170][T11543]  ? try_charge_memcg+0xc32/0x15e0
[  202.698190][T11543]  ? __pfx_out_of_memory+0x10/0x10
[  202.698200][T11543]  ? do_raw_spin_unlock+0x4d/0x200
[  202.698221][T11543]  try_charge_memcg+0xcdf/0x15e0
[  202.698245][T11543]  ? __pfx_try_charge_memcg+0x10/0x10
[  202.698268][T11543]  ? charge_memcg+0x47/0x310
[  202.698281][T11543]  charge_memcg+0x1dd/0x310
[  202.698296][T11543]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  202.698307][T11543]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  202.698321][T11543]  swap_cache_alloc_folio+0x4de/0x990
[  202.698341][T11543]  swap_cache_read_folio+0x44/0x120
[  202.698375][T11543]  swap_cluster_readahead+0x392/0x630
[  202.698396][T11543]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  202.698421][T11543]  ? lapic_next_event+0x11/0x20
[  202.698435][T11543]  swapin_readahead+0x1a3/0xc50
[  202.698456][T11543]  ? __pfx_swapin_readahead+0x10/0x10
[  202.698476][T11543]  ? swap_table_get+0x1e/0x260
[  202.698490][T11543]  ? swap_table_get+0x1e/0x260
[  202.698502][T11543]  ? swap_table_get+0x1e/0x260
[  202.698517][T11543]  ? swap_table_get+0x216/0x260
[  202.698534][T11543]  ? swap_cache_get_folio+0x2e7/0x2f0
[  202.698552][T11543]  do_swap_page+0x3fb/0x4c10
[  202.698578][T11543]  ? __lock_acquire+0x6df/0x2e50
[  202.698597][T11543]  ? do_swap_page+0x126/0x4c10
[  202.698612][T11543]  ? __pfx_do_swap_page+0x10/0x10
[  202.698624][T11543]  ? __pte_offset_map+0x1ae/0x240
[  202.698641][T11543]  ? pte_offset_map_rw_nolock+0xea/0x160
[  202.698657][T11543]  handle_mm_fault+0x1398/0x3750
[  202.698678][T11543]  ? handle_mm_fault+0xf1/0x3750
[  202.698702][T11543]  ? __pfx_handle_mm_fault+0x10/0x10
[  202.698716][T11543]  ? lock_vma_under_rcu+0x45a/0x500
[  202.698750][T11543]  do_user_addr_fault+0xa4f/0x1340
[  202.698772][T11543]  ? trace_page_fault_user+0x84/0x1e0
[  202.698786][T11543]  exc_page_fault+0x6a/0xc0
[  202.698806][T11543]  asm_exc_page_fault+0x26/0x30
[  202.698818][T11543] RIP: 0033:0x7f7b445592b8
[  202.698832][T11543] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00
[  202.698841][T11543] RSP: 002b:00007fff50b9b7b0 EFLAGS: 00010246
[  202.698854][T11543] RAX: 0000000000000000 RBX: 00005555741b3500 RCX: 00007f7b4455e98e
[  202.698862][T11543] RDX: 00007fff50b9b800 RSI: 0000000000000000 RDI: 0000000000000000
[  202.698870][T11543] RBP: 00007f7b44827da0 R08: 0000000000000000 R09: 0000000000000000
[  202.698877][T11543] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000317b9
[  202.698883][T11543] R13: 00007f7b44825fac R14: 00000000000314ab R15: 00007fff50b9b930
[  202.698903][T11543]  </TASK>
[  202.818029][T11543] memory: usage 307200kB, limit 307200kB, failcnt 2240
[  202.818486][T11543] memory+swap: usage 307284kB, limit 9007199254740988kB, failcnt 0
[  202.834975][T11543] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[  202.835735][T11543] Memory cgroup stats for /syz1:
[  202.835820][T11543] cache 0
[  202.835826][T11543] rss 0
[  202.835831][T11543] rss_huge 0
[  202.835835][T11543] shmem 0
[  202.835839][T11543] mapped_file 0
[  202.835843][T11543] dirty 0
[  202.835847][T11543] writeback 0
[  202.835851][T11543] workingset_refault_anon 13
[  202.835857][T11543] workingset_refault_file 49
[  202.835861][T11543] swap 86016
[  202.835865][T11543] swapcached 167936
[  202.835869][T11543] pgpgin 63648
[  202.835872][T11543] pgpgout 63641
[  202.835876][T11543] pgfault 129140
[  202.835880][T11543] pgmajfault 8
[  202.835884][T11543] inactive_anon 12288
[  202.835890][T11543] active_anon 16384
[  202.835894][T11543] inactive_file 0
[  202.835897][T11543] active_file 0
[  202.835901][T11543] unevictable 0
[  202.835905][T11543] hierarchical_memory_limit 314572800
[  202.835910][T11543] hierarchical_memsw_limit 9223372036854771712
[  202.835915][T11543] total_cache 0
[  202.835919][T11543] total_rss 0
[  202.835923][T11543] total_rss_huge 0
[  202.835928][T11543] total_shmem 0
[  202.835932][T11543] total_mapped_file 0
[  202.835936][T11543] total_dirty 0
[  202.835940][T11543] total_writeback 0
[  202.835944][T11543] total_workingset_refault_anon 13
[  202.835949][T11543] total_workingset_refault_file 49
[  202.835954][T11543] total_swap 86016
[  202.835958][T11543] total_swapcached 167936
[  202.835962][T11543] total_pgpgin 63648
[  202.835966][T11543] total_pgpgout 63641
[  202.835971][T11543] total_pgfault 129140
[  202.835975][T11543] total_pgmajfault 8
[  202.835979][T11543] total_inactive_anon 12288
[  202.835984][T11543] total_active_anon 16384
[  202.835988][T11543] total_inactive_file 0
[  202.835992][T11543] total_active_file 0
[  202.835997][T11543] total_unevictable 0
[  202.836001][T11543] anon_cost 0
[  202.836005][T11543] file_cost 0
[  202.836010][T11543] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2560,pid=11543,uid=0
[  202.836102][T11543] Memory cgroup out of memory: Killed process 11543 (syz.1.2560) total-vm:104228kB, anon-rss:1260kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  204.140526][ T8896] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  204.263739][T11597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2582'.
[  204.272585][T11597] netlink: 'syz.1.2582': attribute type 8 has an invalid length.
[  204.275890][T11597] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.2582'.
[  204.928393][ T8896] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  204.997885][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  204.997951][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  204.998011][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  204.998064][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  205.133776][T11637] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2601'.
[  205.138962][T11637] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2601'.
[  205.454721][T11655] netlink: 'syz.0.2609': attribute type 5 has an invalid length.
[  205.635947][ T5599] Bluetooth: hci2: link tx timeout
[  205.636506][ T5599] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  205.674637][T11663] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2612'.
[  205.678694][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2612'.
[  205.682872][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2612'.
[  206.168838][T11690] netlink: 'syz.2.2625': attribute type 11 has an invalid length.
[  207.647531][ T8225] Bluetooth: hci2: command 0x0406 tx timeout
[  207.793341][T11745] syzkaller0: entered promiscuous mode
[  207.796658][T11745] syzkaller0: entered allmulticast mode
[  209.608728][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2659'.
[  210.311158][T11824] bridge0: port 3(macvlan3) entered blocking state
[  210.314294][T11824] bridge0: port 3(macvlan3) entered disabled state
[  210.318354][T11824] macvlan3: entered allmulticast mode
[  210.318417][T11824] ip6gretap0: entered allmulticast mode
[  210.328100][T11824] macvlan3: entered promiscuous mode
[  210.332834][T11824] bridge0: port 3(macvlan3) entered blocking state
[  210.333108][T11824] bridge0: port 3(macvlan3) entered forwarding state
[  210.368655][   T25] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  210.401832][   T13] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  210.452553][T11836] netlink: 'syz.0.2675': attribute type 2 has an invalid length.
[  210.453147][T11836] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2675'.
[  210.808700][T11852] syzkaller1: entered promiscuous mode
[  210.808830][T11852] syzkaller1: entered allmulticast mode
[  210.822575][T11857] xt_bpf: check failed: parse error
[  210.877651][   T25] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  211.446312][ T5674] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  211.450786][ T5674] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  211.477439][   T25] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  211.738713][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2696'.
[  212.000028][T11906] ip_tables: iptables: counters copy to user failed while replacing table
[  212.286912][T11923] netlink: 'syz.1.2711': attribute type 1 has an invalid length.
[  212.315010][T11923] bond3: entered promiscuous mode
[  212.315078][T11923] bond3: entered allmulticast mode
[  212.321926][T11923] 8021q: adding VLAN 0 to HW filter on device bond3
[  212.339239][T11923] bridge5: entered promiscuous mode
[  212.341630][T11923] bridge5: entered allmulticast mode
[  212.344507][T11923] bond3: (slave bridge5): Enslaving as a backup interface with an up link
[  212.360605][T11923] bridge6: entered promiscuous mode
[  212.363315][T11923] bridge6: entered allmulticast mode
[  212.366122][T11923] bond3: (slave bridge6): Enslaving as a backup interface with a down link
[  212.384132][T11923] bridge7: entered promiscuous mode
[  212.386589][T11923] bridge7: entered allmulticast mode
[  212.387056][T11923] bond3: (slave bridge7): Enslaving as a backup interface with a down link
[  212.396596][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2711'.
[  212.421165][ T5674] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  212.458080][   T25] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  212.528862][   T25] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  212.539910][ T5674] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  212.594919][T11931] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2713'.
[  212.769578][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.769752][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.971579][T11951] vlan2: entered promiscuous mode
[  212.976115][T11951] bridge0: entered promiscuous mode
[  213.055454][T11959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.682622][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2740'.
[  213.872820][T11990] netlink: 'syz.1.2740': attribute type 12 has an invalid length.
[  213.877884][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.877957][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.152129][T12002] macsec2: entered allmulticast mode
[  214.154586][T12002] veth1_macvtap: entered allmulticast mode
[  214.160899][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'.
[  214.169188][T12002] veth1_macvtap (unregistering): left allmulticast mode
[  214.480449][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2748'.
[  214.480497][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2748'.
[  214.943875][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2760'.
[  214.954421][T12033] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.2758'.
[  214.987378][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.987457][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.242026][T12042] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  215.247673][T12042] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  215.807923][    C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  216.069473][T12068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.208723][T12068] syzkaller0: entered promiscuous mode
[  216.209928][T12068] syzkaller0: entered allmulticast mode
[  216.217767][T12068] tipc: Resetting bearer <eth:syzkaller0>
[  216.253553][T12067] tipc: Resetting bearer <eth:syzkaller0>
[  216.439753][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2778'.
[  217.219041][   T13] net_ratelimit: 168 callbacks suppressed
[  217.219112][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.219175][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.651269][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.772776][T12067] tipc: Disabling bearer <eth:syzkaller0>
[  217.781992][ T8883] tipc: Node number set to 347408724
[  217.854693][T12087] netlink: 'syz.2.2780': attribute type 30 has an invalid length.
[  217.903280][T12087] bond7: option arp_missed_max: invalid value (0)
[  217.903891][T12087] bond7: option arp_missed_max: allowed values 1 - 255
[  218.042206][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'.
[  218.045447][T12087] bond7 (unregistering): Released all slaves
[  218.076679][T12096] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  218.080631][T12096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2784'.
[  218.327552][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.327631][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.539709][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'.
[  218.637997][T12127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.687221][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.748223][T12132] team0: No ports can be present during mode change
[  218.792941][T12133] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  218.792995][T12133] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  218.980462][T12145] netlink: 'syz.1.2805': attribute type 12 has an invalid length.
[  218.985730][T12145] netlink: 'syz.1.2805': attribute type 29 has an invalid length.
[  218.991119][T12145] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2805'.
[  218.991186][T12145] netlink: 'syz.1.2805': attribute type 1 has an invalid length.
[  218.991217][T12145] netlink: 'syz.1.2805': attribute type 2 has an invalid length.
[  218.991247][T12145] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2805'.
[  219.009342][T12145] netlink: 'syz.1.2805': attribute type 12 has an invalid length.
[  219.013356][T12145] netlink: 'syz.1.2805': attribute type 29 has an invalid length.
[  219.016958][T12145] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2805'.
[  219.016976][T12145] netlink: 'syz.1.2805': attribute type 1 has an invalid length.
[  219.016984][T12145] netlink: 'syz.1.2805': attribute type 2 has an invalid length.
[  219.016990][T12145] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2805'.
[  219.447438][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.447517][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.539586][T12176] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.544420][T12176] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.552063][T12176] batman_adv: batadv0: Removing interface: macvtap1
[  219.727309][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.954908][T12193] team0: Port device dummy0 removed
[  219.957746][T12193] bridge_slave_0: left allmulticast mode
[  219.957771][T12193] bridge_slave_0: left promiscuous mode
[  219.958397][T12193] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.970573][T12193] bridge_slave_1: left allmulticast mode
[  219.973186][T12193] bridge_slave_1: left promiscuous mode
[  219.976075][T12193] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.989171][T12193] bond2: (slave veth0_to_bond): Releasing backup interface
[  219.992631][T12193] bond2: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  220.009925][T12193] team0: Port device team_slave_0 removed
[  220.014268][T12193] team0: Port device team_slave_1 removed
[  220.019732][T12193] bond0: (slave bridge3): Releasing backup interface
[  220.022978][T12193] bridge3: left promiscuous mode
[  220.027709][T12193] bridge3: left allmulticast mode
[  220.039075][T12193] bond2: (slave bridge4): Releasing backup interface
[  220.052353][T12193] bond3: (slave bridge5): Removing an active aggregator
[  220.061609][T12193] bond3: (slave bridge5): Releasing backup interface
[  220.064710][T12193] bond3: (slave bridge5): the permanent HWaddr of slave - 6a:e1:6b:98:42:5d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  220.074214][T12193] bridge5: left promiscuous mode
[  220.076676][ T8882] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  220.081392][T12193] bridge5: left allmulticast mode
[  220.092327][T12193] bond3: (slave bridge6): Releasing backup interface
[  220.096225][T12193] bridge6: left promiscuous mode
[  220.098982][T12193] bridge6: left allmulticast mode
[  220.109928][T12193] bond3: (slave bridge7): Releasing backup interface
[  220.116210][T12193] bridge7: left promiscuous mode
[  220.118869][T12193] bridge7: left allmulticast mode
[  220.524999][T12204] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[  220.550357][T12204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.561442][ T8882] wlan1 speed is unknown, defaulting to 1000
[  220.561491][ T8882] syz2: Port: 1 Link ACTIVE
[  220.977500][T12221] netlink: 'syz.2.2837': attribute type 1 has an invalid length.
[  221.004294][T12221] 8021q: adding VLAN 0 to HW filter on device bond7
[  221.022655][T12221] 8021q: adding VLAN 0 to HW filter on device team0
[  221.027341][ T8882] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  221.044192][T12221] bond7: (slave team0): Enslaving as a backup interface with an up link
[  221.352818][T12240] __nla_validate_parse: 2 callbacks suppressed
[  221.356008][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2846'.
[  222.084055][T12267] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  222.294730][T12281] syzkaller0: entered promiscuous mode
[  222.297966][T12281] syzkaller0: entered allmulticast mode
[  222.607186][    C0] net_ratelimit: 7 callbacks suppressed
[  222.607301][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.669192][T12293] xt_hashlimit: size too large, truncated to 1048576
[  222.852021][T12298] netlink: zone id is out of range
[  222.854370][T12298] netlink: zone id is out of range
[  222.856927][T12298] netlink: zone id is out of range
[  222.864073][T12298] netlink: zone id is out of range
[  222.864114][T12298] netlink: zone id is out of range
[  222.864143][T12298] netlink: zone id is out of range
[  222.864170][T12298] netlink: zone id is out of range
[  222.864198][T12298] netlink: zone id is out of range
[  222.864226][T12298] netlink: zone id is out of range
[  223.015102][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2875'.
[  223.015183][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2875'.
[  223.100836][T12307] syzkaller0: renamed from bond0 (while UP)
[  223.225690][T12315] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  223.620423][T12323] syzkaller0: entered promiscuous mode
[  223.624602][T12323] syzkaller0: entered allmulticast mode
[  223.722656][T12336] validate_nla: 1 callbacks suppressed
[  223.723402][T12336] netlink: 'syz.2.2887': attribute type 10 has an invalid length.
[  223.773719][T12339] netlink: 'syz.2.2887': attribute type 10 has an invalid length.
[  224.768680][    C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  225.182828][T12336] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  225.195627][T12336] team0: Port device netdevsim1 added
[  225.405359][T12339] team0: Port device netdevsim1 removed
[  225.420709][T12339] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  225.426927][T12339] syzkaller0: (slave netdevsim1): Enslaving as an active interface with an up link
[  225.826201][T12366] syzkaller0: entered promiscuous mode
[  225.830312][T12366] syzkaller0: entered allmulticast mode
[  225.922443][T12369] syzkaller1: entered promiscuous mode
[  225.925105][T12369] syzkaller1: entered allmulticast mode
[  226.276090][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2905'.
[  226.288900][   T57] block nbd3: Receive control failed (result -107)
[  227.533639][T12413] syzkaller1: entered promiscuous mode
[  227.536058][T12413] syzkaller1: entered allmulticast mode
[  227.809127][    C0] net_ratelimit: 6 callbacks suppressed
[  227.809224][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.394195][T12472] dummy0: mtu less than device minimum
[  228.620422][T12475] syzkaller0: entered promiscuous mode
[  228.621104][T12475] bond_slave_0: entered promiscuous mode
[  228.624941][T12475] bond_slave_1: entered promiscuous mode
[  228.628436][T12475] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  228.632942][T12475] syzkaller0: entered allmulticast mode
[  228.632954][T12475] bond_slave_0: entered allmulticast mode
[  228.634237][T12475] bond_slave_1: entered allmulticast mode
[  228.635499][T12475] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  228.847232][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.103457][T12497] ip_tables: iptables: counters copy to user failed while replacing table
[  229.674370][T12509] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2957'.
[  229.887265][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.925947][T12512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2958'.
[  230.504891][T12543] ip6tnl2: entered allmulticast mode
[  230.511033][ T5674] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  230.511225][ T5674] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  230.537357][   T25] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  230.927956][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.363371][T12596] netlink: 'syz.1.2994': attribute type 13 has an invalid length.
[  231.364104][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2994'.
[  231.407421][ T8882] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  231.407608][ T8882] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  231.428303][T12598] netlink: 598 bytes leftover after parsing attributes in process `syz.2.2995'.
[  231.613851][T12606] syzkaller0: entered promiscuous mode
[  231.613902][T12606] syzkaller0: entered allmulticast mode
[  231.626480][T12609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2997'.
[  231.755300][T12613] ip_tables: iptables: counters copy to user failed while replacing table
[  231.833240][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3003'.
[  231.967300][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.272986][T12638] ip_tables: iptables: counters copy to user failed while replacing table
[  232.485843][T12652] netlink: 'syz.2.3019': attribute type 2 has an invalid length.
[  233.007275][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.440599][T12711] netlink: 'syz.1.3044': attribute type 3 has an invalid length.
[  233.565831][T12716] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  233.574401][T12716] bond4 (unregistering): Released all slaves
[  233.827788][T12730] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3052'.
[  234.047793][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.396286][T12760] ip_tables: iptables: counters copy to user failed while replacing table
[  234.457381][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  234.732359][ T5652] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  234.822501][ T5652] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  235.087157][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.490441][T12783] syzkaller0: entered promiscuous mode
[  235.492977][T12783] syzkaller0: entered allmulticast mode
[  236.127185][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.079383][T12795] team0: Device wg1 is of different type
[  237.090117][T12795] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  237.167462][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.329887][T12801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.441769][T12801] syzkaller0: entered promiscuous mode
[  237.444351][T12801] syzkaller0: entered allmulticast mode
[  237.447508][T12801] tipc: Resetting bearer <eth:syzkaller0>
[  237.557152][T12797] tipc: Resetting bearer <eth:syzkaller0>
[  238.207232][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.118420][T12797] tipc: Disabling bearer <eth:syzkaller0>
[  239.163899][ T5652] tipc: Node number set to 3577319016
[  239.247892][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.544762][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3104'.
[  239.583800][T12847] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  239.587404][T12853] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  239.870738][T12875] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  239.914894][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'.
[  240.092325][T12886] openvswitch: netlink: Message has 8 unknown bytes.
[  240.092408][T12886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.247780][T12894] macvtap0: entered promiscuous mode
[  240.287323][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.458468][T12904] bond3: option downdelay: invalid value (18446744073709551487)
[  240.458546][T12904] bond3: option downdelay: allowed values 0 - 2147483647
[  240.460248][T12904] bond3 (unregistering): Released all slaves
[  240.647229][T12913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3133'.
[  240.767342][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  241.165732][T12942] netdevsim0: mtu greater than device maximum
[  241.327205][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.489617][T12956] syzkaller0: left promiscuous mode
[  241.489669][T12956] bond_slave_0: left promiscuous mode
[  241.489784][T12956] bond_slave_1: left promiscuous mode
[  241.489856][T12956] netdevsim netdevsim2 netdevsim1: left promiscuous mode
[  241.489956][T12956] syzkaller0: left allmulticast mode
[  241.489962][T12956] bond_slave_0: left allmulticast mode
[  241.489967][T12956] bond_slave_1: left allmulticast mode
[  241.489974][T12956] netdevsim netdevsim2 netdevsim1: left allmulticast mode
[  241.684182][T12964] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3157'.
[  242.047368][    C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  242.367187][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.464094][T12994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3171'.
[  242.551887][T12998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.554809][T12998] syzkaller0: entered promiscuous mode
[  242.554830][T12998] syzkaller0: entered allmulticast mode
[  242.608297][T12998] tipc: Resetting bearer <eth:syzkaller0>
[  242.612023][T12997] tipc: Resetting bearer <eth:syzkaller0>
[  242.635065][T12997] tipc: Disabling bearer <eth:syzkaller0>
[  242.643959][T13000] syzkaller0: entered promiscuous mode
[  242.644028][T13000] syzkaller0: entered allmulticast mode
[  242.687438][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  242.903889][T13008] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.407896][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.543919][T13045] netlink: 'syz.0.3194': attribute type 23 has an invalid length.
[  243.543990][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3194'.
[  243.846035][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'.
[  243.846656][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'.
[  244.105407][T13075] SET target dimension over the limit!
[  244.447579][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  244.745452][T13100] wlan1 speed is unknown, defaulting to 1000
[  244.753505][T13100] lo speed is unknown, defaulting to 1000
[  245.452556][T13116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3225'.
[  245.487197][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.589182][T13104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  246.394137][T13141] bond5: entered promiscuous mode
[  246.394553][T13141] 8021q: adding VLAN 0 to HW filter on device bond5
[  246.528808][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.652368][T13148] netlink: 660 bytes leftover after parsing attributes in process `syz.1.3239'.
[  246.656576][T13148] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3239'.
[  246.806755][T13156] tls_set_device_offload_rx: netdev not found
[  246.931817][T13167] syzkaller1: entered allmulticast mode
[  246.975897][T13169] syzkaller0: entered promiscuous mode
[  246.975952][T13169] syzkaller0: entered allmulticast mode
[  247.567185][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.759838][T13223] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3275'.
[  247.963064][ T8882] lo speed is unknown, defaulting to 1000
[  247.963121][ T8882] sz1: Port: 1 Link DOWN
[  247.966145][ T8882] lo speed is unknown, defaulting to 1000
[  249.137161][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3296'.
[  251.187624][T13260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  251.364839][T13336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3323'.
[  251.680090][T13358] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  252.483377][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3350'.
[  252.520477][T13403] netlink: 'syz.2.3350': attribute type 8 has an invalid length.
[  254.167279][T13429] bridge0: port 1(wlan1) entered blocking state
[  254.167408][T13429] bridge0: port 1(wlan1) entered disabled state
[  254.167768][T13429] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  254.176577][T13429] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  254.955932][T13439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.966797][T13439] syzkaller0: entered promiscuous mode
[  254.973833][T13439] syzkaller0: entered allmulticast mode
[  255.048563][T13439] tipc: Resetting bearer <eth:syzkaller0>
[  255.052379][T13438] tipc: Resetting bearer <eth:syzkaller0>
[  255.087053][T13438] tipc: Disabling bearer <eth:syzkaller0>
[  255.588591][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3378'.
[  256.136707][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  256.142584][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  256.637317][T13503] syzkaller0: entered promiscuous mode
[  256.637415][T13503] bond_slave_0: entered promiscuous mode
[  256.638216][T13503] bond_slave_1: entered promiscuous mode
[  256.638525][T13503] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  256.638869][T13503] syzkaller0: entered allmulticast mode
[  256.638954][T13503] bond_slave_0: entered allmulticast mode
[  256.639356][T13503] bond_slave_1: entered allmulticast mode
[  256.639436][T13503] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  257.071365][T13519] syzkaller1: entered promiscuous mode
[  257.071458][T13519] syzkaller1: entered allmulticast mode
[  257.248291][T13529] openvswitch: netlink: IPv4 tunnel dst address is zero
[  257.519838][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'.
[  257.519907][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'.
[  257.536924][T13541] bond6 (unregistering): Released all slaves
[  257.564815][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'.
[  257.564884][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3411'.
[  257.580575][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  257.580674][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.581340][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.581365][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  258.150420][T13578] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  258.181905][T13582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  258.181954][T13582] IPv6: NLM_F_CREATE should be set when creating new route
[  258.182000][T13582] IPv6: NLM_F_CREATE should be set when creating new route
[  258.540089][T13613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3441'.
[  258.660724][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3444'.
[  258.687258][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  258.693299][T13619] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  258.698460][T13619] bond7 (unregistering): Released all slaves
[  258.728844][T13619] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  259.684299][T13668] syzkaller0: entered promiscuous mode
[  259.686319][T13668] syzkaller0: entered allmulticast mode
[  260.455379][ T6829] block nbd4: Receive control failed (result -32)
[  260.456004][   T57] block nbd4: Receive control failed (result -32)
[  261.101172][T13693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3472'.
[  261.113992][T13693] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3472'.
[  261.853630][T13705] syzkaller0: entered promiscuous mode
[  261.857051][T13705] syzkaller0: entered allmulticast mode
[  261.996449][T13711] xt_hashlimit: size too large, truncated to 1048576
[  263.391275][T13802] syzkaller0: entered promiscuous mode
[  263.395209][T13802] syzkaller0: entered allmulticast mode
[  263.400160][T13802] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  263.434268][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3522'.
[  265.739811][T13764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  266.104242][T13829] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
[  266.273219][T13842] vlan2: entered promiscuous mode
[  266.279887][T13842] hsr0: entered promiscuous mode
[  266.280146][T13842] vlan2: entered allmulticast mode
[  266.293160][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3537'.
[  267.097840][T13842] hsr_slave_0: left promiscuous mode
[  267.105974][T13842] hsr_slave_1: left promiscuous mode
[  267.893232][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3547'.
[  268.208770][T13884] syzkaller1: entered promiscuous mode
[  268.208823][T13884] syzkaller1: entered allmulticast mode
[  268.726983][T13892] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3558'.
[  268.805035][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3559'.
[  268.809212][T13898] bridge_slave_1: left allmulticast mode
[  268.812398][T13898] bridge_slave_1: left promiscuous mode
[  268.812613][T13898] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.823594][T13898] bridge_slave_0: left allmulticast mode
[  268.823644][T13898] bridge_slave_0: left promiscuous mode
[  268.823825][T13898] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.998874][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'.
[  269.131448][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3566'.
[  269.628953][T13934] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3575'.
[  269.633257][T13934] gretap0: entered promiscuous mode
[  269.638917][T13934] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  269.645006][T13934] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  269.645037][T13934] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  269.665890][T13934] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  269.691131][T13941] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3575'.
[  269.691328][T13941] 0{X: renamed from gretap0
[  269.701588][T13941] 0{X: left promiscuous mode
[  269.703972][T13941] 0{X: entered allmulticast mode
[  269.711124][T13941] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  270.045558][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3586'.
[  270.133362][T13967] netlink: 'syz.1.3589': attribute type 1 has an invalid length.
[  270.169777][T13967] bond7: entered promiscuous mode
[  270.172750][T13967] 8021q: adding VLAN 0 to HW filter on device bond7
[  270.405275][T13967] 8021q: adding VLAN 0 to HW filter on device bond7
[  270.417707][T13967] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address
[  270.418275][T13967] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  270.433265][T13967] bond7: (slave xfrm1): making interface the new active one
[  270.433805][T13967] xfrm1: entered promiscuous mode
[  270.447794][T13967] xfrm1: left promiscuous mode
[  270.851602][T13985] netlink: 'syz.2.3596': attribute type 8 has an invalid length.
[  271.349271][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3606'.
[  271.349978][T14018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3606'.
[  271.683425][T14028] syzkaller0: entered promiscuous mode
[  271.686277][T14028] syzkaller0: entered allmulticast mode
[  271.932926][T14035] netlink: 'syz.0.3614': attribute type 16 has an invalid length.
[  271.936349][T14035] netlink: 'syz.0.3614': attribute type 17 has an invalid length.
[  271.984261][T14035] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.991707][T14035] 8021q: adding VLAN 0 to HW filter on device team0
[  272.264778][T14043] netlink: 'syz.1.3618': attribute type 10 has an invalid length.
[  272.264828][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3618'.
[  272.266404][T14035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  272.266420][T14035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  272.324225][T14035] veth1_macvtap: left promiscuous mode
[  272.337125][T14035] veth0_macvtap: left promiscuous mode
[  272.350533][T14035] veth0_macvtap: entered promiscuous mode
[  272.353148][T14035] macvtap0: left promiscuous mode
[  272.368948][T14035] veth1_macvtap: entered promiscuous mode
[  272.388646][T14035] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  272.394233][T14035] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  272.398980][T14035] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  272.404604][T14035] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  272.426497][T14035] bond1: left promiscuous mode
[  272.429596][T14035] ipip0: left promiscuous mode
[  272.433762][T14035] 8021q: adding VLAN 0 to HW filter on device bond1
[  272.498680][T14035] bridge2: left promiscuous mode
[  272.500972][T14035] bridge2: left allmulticast mode
[  272.506047][T14035] 8021q: adding VLAN 0 to HW filter on device bond2
[  273.134750][ T5659] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  273.138940][ T5631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.139557][ T5631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.140065][ T5631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.140210][ T5631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.365973][ T5659] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  273.594447][T14083] Bluetooth: hci0: invalid length 0, exp 2 for type 29
[  273.610269][T14081] bridge8: port 1(veth7) entered blocking state
[  273.613213][T14081] bridge8: port 1(veth7) entered disabled state
[  273.620373][T14081] veth7: entered allmulticast mode
[  273.631873][T14081] veth7: entered promiscuous mode
[  273.683581][ T5631] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  273.754978][T14084] bridge8: port 2(veth9) entered blocking state
[  273.757199][T14084] bridge8: port 2(veth9) entered disabled state
[  273.757993][T14084] veth9: entered allmulticast mode
[  273.764318][T14084] veth9: entered promiscuous mode
[  273.788154][T14091] netlink: 'syz.0.3635': attribute type 10 has an invalid length.
[  273.938953][T14096] __nla_validate_parse: 1 callbacks suppressed
[  273.939099][T14096] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3635'.
[  274.004571][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3635'.
[  274.046959][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3640'.
[  274.211982][T14107] netlink: 'syz.1.3642': attribute type 13 has an invalid length.
[  274.215435][T14107] netlink: 'syz.1.3642': attribute type 17 has an invalid length.
[  274.225975][T14091] team0 (unregistering): Port device team_slave_0 removed
[  274.247612][T14091] team0 (unregistering): Port device team_slave_1 removed
[  274.262374][T14091] team0 (unregistering): Port device bond0 removed
[  274.289239][T14091] team0 (unregistering): Port device bridge2 removed
[  274.333888][T14098] 8021q: adding VLAN 0 to HW filter on device bond8
[  274.340876][T14101] bond8: entered allmulticast mode
[  274.345576][T14101] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3640'.
[  274.466474][T14107] 0{X: left allmulticast mode
[  274.474277][T14107] 0{X: refused to change device tx_queue_len
[  274.476526][T14107] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  274.706002][ T5674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  274.712628][ T5674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  274.773005][T14123] netlink: 'syz.0.3649': attribute type 1 has an invalid length.
[  275.574382][   T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  275.610901][T14123] 8021q: adding VLAN 0 to HW filter on device bond3
[  275.726872][T14124] bond3: (slave veth5): Enslaving as an active interface with a down link
[  275.773678][T14125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.789931][T14125] bond3: (slave batadv0): making interface the new active one
[  275.811645][T14125] batadv0: entered promiscuous mode
[  275.815145][T14125] bond3: (slave batadv0): Enslaving as an active interface with an up link
[  276.607642][    C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  277.074105][T14174] bond7: (slave team0): Removing an active aggregator
[  277.082991][T14174] bond7: (slave team0): Releasing backup interface
[  277.097939][ T8883] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  277.099000][ T8883] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  277.258543][T14174] bond6: (slave dummy0): Releasing active interface
[  277.273686][T14174] bridge_slave_0: left promiscuous mode
[  277.276479][T14174] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.290472][T14174] bridge_slave_1: left allmulticast mode
[  277.293083][T14174] bridge_slave_1: left promiscuous mode
[  277.295987][T14174] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.302805][   T25] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  277.311215][T14174] syzkaller0: (slave bond_slave_0): Releasing backup interface
[  277.315393][T14174] bond_slave_0: left promiscuous mode
[  277.319693][T14174] bond_slave_0: left allmulticast mode
[  277.328407][T14174] syzkaller0: (slave bond_slave_1): Releasing backup interface
[  277.332684][T14174] bond_slave_1: left promiscuous mode
[  277.336233][T14174] bond_slave_1: left allmulticast mode
[  277.357045][T14174] team0: Port device team_slave_0 removed
[  277.371943][T14174] team0: Port device team_slave_1 removed
[  277.376552][T14174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  277.380093][T14174] batman_adv: batadv0: Removing interface: batadv_slave_0
[  277.395483][T14174] syzkaller0: (slave netdevsim1): Releasing backup interface
[  277.404084][T14174] netdevsim netdevsim2 netdevsim1: left promiscuous mode
[  277.407864][T14174] netdevsim netdevsim2 netdevsim1: left allmulticast mode
[  277.510122][   T25] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  277.515874][T14174] bond1: (slave erspan1): Releasing active interface
[  277.516419][T14174] erspan1: left promiscuous mode
[  277.691423][T14174] bond3: (slave bond4): Releasing backup interface
[  277.691955][T14174] bond4: left promiscuous mode
[  277.874210][T14174] macvlan3: left allmulticast mode
[  277.874740][T14174] ip6gretap0: left allmulticast mode
[  277.888595][T14174] macvlan3: left promiscuous mode
[  277.888887][T14174] bridge0: port 3(macvlan3) entered disabled state
[  277.927403][ T8883] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  277.940420][ T8883] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  278.477629][ T8883] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  278.687990][ T8883] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  278.806575][T14143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  278.826710][T14133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  278.903510][T14201] netlink: 'syz.0.3677': attribute type 2 has an invalid length.
[  278.929257][T14203] netlink: 'syz.2.3678': attribute type 1 has an invalid length.
[  278.936036][T14203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3678'.
[  279.007617][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  279.289843][T14218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3685'.
[  279.565831][T14228] ip_tables: iptables: counters copy to user failed while replacing table
[  279.847434][T14244] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 2, id = 0
[  280.732903][T14274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3710'.
[  280.917661][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3714'.
[  281.086582][   T25] wlan1 speed is unknown, defaulting to 1000
[  281.086626][   T25] syz2: Port: 1 Link DOWN
[  281.089668][T14144] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  281.089684][T14144] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.089707][T14144] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  281.089716][T14144] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.089730][T14144] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  281.089739][T14144] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.089751][T14144] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  281.089760][T14144] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.540261][T14317] erspan0: entered promiscuous mode
[  281.541588][T14317] erspan0: entered allmulticast mode
[  281.816906][T14345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3745'.
[  281.902271][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3743'.
[  281.902311][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'.
[  281.930128][T14351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3746'.
[  282.265540][T14372] netlink: 'syz.1.3757': attribute type 9 has an invalid length.
[  282.265585][T14372] netlink: 'syz.1.3757': attribute type 6 has an invalid length.
[  282.265629][T14372] netlink: 'syz.1.3757': attribute type 7 has an invalid length.
[  282.265653][T14372] netlink: 'syz.1.3757': attribute type 8 has an invalid length.
[  282.607582][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3768'.
[  282.611487][T14397] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3768'.
[  283.306105][T14408] wlan1 speed is unknown, defaulting to 1000
[  283.318702][T14408] lo speed is unknown, defaulting to 1000
[  283.707306][T14429] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  283.794432][T14429] bond8 (unregistering): Released all slaves
[  283.915503][T14432] ip_tables: iptables: counters copy to user failed while replacing table
[  284.204494][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3785'.
[  284.651852][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3792'.
[  284.652390][T14461] netlink: 'syz.2.3792': attribute type 1 has an invalid length.
[  284.652399][T14461] netlink: 'syz.2.3792': attribute type 2 has an invalid length.
[  285.926626][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3825'.
[  286.156194][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3826'.
[  286.330923][T14571] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3834'.
[  286.410837][T14578] syzkaller1: entered promiscuous mode
[  286.414398][T14578] syzkaller1: entered allmulticast mode
[  286.575569][T14590] ovs-s!: entered promiscuous mode
[  287.140984][T14623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3858'.
[  287.390287][T14629] erspan0: left promiscuous mode
[  287.563839][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3862'.
[  287.563897][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3862'.
[  287.641730][T14629] 8021q: adding VLAN 0 to HW filter on device team0
[  287.954138][T14629] veth1_vlan: left promiscuous mode
[  287.958749][T14629] veth0_vlan: left promiscuous mode
[  287.962489][T14629] veth0_vlan: entered promiscuous mode
[  287.968640][T14629] veth1_vlan: entered promiscuous mode
[  287.985538][T14629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  287.990204][T14629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  287.996082][T14629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  288.019576][T14629] 8021q: adding VLAN 0 to HW filter on device bond1
[  288.033385][T14629] erspan0: entered promiscuous mode
[  288.105191][T14629] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  288.201163][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  288.266606][T14629] veth0_to_team: entered promiscuous mode
[  288.316353][T14629] 8021q: adding VLAN 0 to HW filter on device bond4
[  288.322879][T14629] 8021q: adding VLAN 0 to HW filter on device bond6
[  288.345573][T14629] 8021q: adding VLAN 0 to HW filter on device bond7
[  288.431797][T14657] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  288.488210][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  288.505093][   T27] bridge8: port 1(veth7) entered blocking state
[  288.505207][   T27] bridge8: port 1(veth7) entered forwarding state
[  288.514865][   T27] bridge8: port 2(veth9) entered blocking state
[  288.514972][   T27] bridge8: port 2(veth9) entered forwarding state
[  288.544338][ T8883] syz0: Port: 1 Link ACTIVE
[  288.880517][T14144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.946940][T14144] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  288.960673][T14144] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  288.966108][T14144] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  289.036966][ T5659] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  289.129829][T14144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.130170][T14144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.130266][T14144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.321307][ T5659] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  289.971233][ T5659] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  290.098572][T14685] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3876'.
[  290.195157][ T5599] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  290.315721][T14703] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3886'.
[  290.319376][T14703] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3886'.
[  290.322403][T14703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3886'.
[  290.362378][T14707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3888'.
[  291.599091][T14756] netlink: 'syz.1.3910': attribute type 5 has an invalid length.
[  291.967750][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  292.687548][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  293.052451][T14837] netlink: 'syz.1.3947': attribute type 25 has an invalid length.
[  293.055811][T14837] netlink: 'syz.1.3947': attribute type 3 has an invalid length.
[  293.060174][T14837] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3947'.
[  293.121830][T14841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3949'.
[  293.352481][T14856] netlink: 'syz.2.3957': attribute type 10 has an invalid length.
[  293.356503][T14856] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3957'.
[  293.380346][T14856] team0: Port device wg2 added
[  294.339588][T14144] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x32
[  294.406761][T14889] syzkaller0: entered promiscuous mode
[  294.407583][T14889] syzkaller0: entered allmulticast mode
[  294.625213][T14910] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  294.625308][T14910] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  294.935242][T14924] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3980'.
[  297.939168][T14934] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  298.005462][T14948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3986'.
[  298.022759][T14946] syz.2.3985: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  298.023076][T14946] CPU: 1 UID: 0 PID: 14946 Comm: syz.2.3985 Not tainted syzkaller #0 PREEMPT(full) 
[  298.023114][T14946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  298.023125][T14946] Call Trace:
[  298.023132][T14946]  <TASK>
[  298.023139][T14946]  dump_stack_lvl+0xe8/0x150
[  298.023166][T14946]  warn_alloc+0x24d/0x270
[  298.023191][T14946]  ? kasan_save_track+0x4f/0x80
[  298.023205][T14946]  ? kasan_save_track+0x3e/0x80
[  298.023222][T14946]  ? __pfx_warn_alloc+0x10/0x10
[  298.023241][T14946]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  298.023255][T14946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.023282][T14946]  __vmalloc_node_range_noprof+0x127/0x1540
[  298.023313][T14946]  ? rcu_is_watching+0x16/0xb0
[  298.023333][T14946]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  298.023351][T14946]  ? __kmalloc_cache_noprof+0x321/0x600
[  298.023370][T14946]  ? __kmalloc_cache_noprof+0x14d/0x600
[  298.023392][T14946]  ? xskq_create+0x56/0x220
[  298.023413][T14946]  xskq_create+0x148/0x220
[  298.023430][T14946]  ? xsk_init_queue+0x8a/0xe0
[  298.023449][T14946]  xsk_init_queue+0x8a/0xe0
[  298.023466][T14946]  xsk_setsockopt+0x52a/0x960
[  298.023484][T14946]  ? __pfx_xsk_setsockopt+0x10/0x10
[  298.023501][T14946]  ? __pfx_aa_sk_perm+0x10/0x10
[  298.023523][T14946]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  298.023540][T14946]  ? __pfx_xsk_setsockopt+0x10/0x10
[  298.023555][T14946]  do_sock_setsockopt+0x17c/0x1b0
[  298.023569][T14946]  __x64_sys_setsockopt+0x13d/0x1b0
[  298.023586][T14946]  do_syscall_64+0x166/0x520
[  298.023604][T14946]  ? trace_irq_disable+0x3b/0x140
[  298.023616][T14946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.023633][T14946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.023647][T14946] RIP: 0033:0x7fd4add9e159
[  298.023661][T14946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.023673][T14946] RSP: 002b:00007fd4aece6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  298.023688][T14946] RAX: ffffffffffffffda RBX: 00007fd4ae025fa0 RCX: 00007fd4add9e159
[  298.023696][T14946] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  298.023704][T14946] RBP: 00007fd4ade35024 R08: 0000000000000004 R09: 0000000000000000
[  298.023714][T14946] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  298.023721][T14946] R13: 00007fd4ae026038 R14: 00007fd4ae025fa0 R15: 00007ffc3409e168
[  298.023742][T14946]  </TASK>
[  298.023771][T14946] Mem-Info:
[  298.023802][T14946] active_anon:11836 inactive_anon:12 isolated_anon:0
[  298.023802][T14946]  active_file:72 inactive_file:50642 isolated_file:0
[  298.023802][T14946]  unevictable:1000 dirty:167 writeback:0
[  298.023802][T14946]  slab_reclaimable:10890 slab_unreclaimable:90328
[  298.023802][T14946]  mapped:18115 shmem:1597 pagetables:1055
[  298.023802][T14946]  sec_pagetables:0 bounce:0
[  298.023802][T14946]  kernel_misc_reclaimable:0
[  298.023802][T14946]  free:1095155 free_pcp:17134 free_cma:0
[  298.023859][T14946] Node 0 active_anon:13144kB inactive_anon:4kB active_file:0kB inactive_file:124848kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:38620kB dirty:152kB writeback:0kB shmem:3224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6720kB pagetables:1616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  298.174201][T14946] Node 1 active_anon:34000kB inactive_anon:44kB active_file:288kB inactive_file:77720kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:33840kB dirty:516kB writeback:0kB shmem:3164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6096kB pagetables:2304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  298.188587][T14946] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  298.200762][T14946] lowmem_reserve[]: 0 1581 2111 2111 2111
[  298.203676][T14946] Node 0 DMA32 free:1535920kB boost:0kB min:24948kB low:31184kB high:37420kB reserved_highatomic:0kB free_highatomic:0kB active_anon:16kB inactive_anon:4kB active_file:0kB inactive_file:10772kB unevictable:0kB writepending:12kB zspages:0kB present:2080636kB managed:1619436kB mlocked:0kB bounce:0kB free_pcp:580kB local_pcp:0kB free_cma:0kB
[  298.237162][T14946] lowmem_reserve[]: 0 0 529 529 529
[  298.238641][T14946] Node 0 Normal free:45552kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0kB free_highatomic:0kB active_anon:13124kB inactive_anon:0kB active_file:0kB inactive_file:114076kB unevictable:2000kB writepending:140kB zspages:0kB present:1572868kB managed:542444kB mlocked:0kB bounce:0kB free_pcp:668kB local_pcp:660kB free_cma:0kB
[  298.239188][T14946] lowmem_reserve[]: 0 0 0 0 0
[  298.239205][T14946] Node 1 Normal free:2783788kB boost:0kB min:56408kB low:70508kB high:84608kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34000kB inactive_anon:44kB active_file:288kB inactive_file:77720kB unevictable:2000kB writepending:516kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:67928kB local_pcp:33052kB free_cma:0kB
[  298.239230][T14946] lowmem_reserve[]: 0 0 0 0 0
[  298.239244][T14946] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  298.239292][T14946] Node 0 DMA32: 62*4kB (UM) 79*8kB (UME) 128*16kB (UME) 204*32kB (UM) 87*64kB (UME) 42*128kB (UME) 24*256kB (UM) 18*512kB (UME) 5*1024kB (UM) 4*2048kB (UME) 363*4096kB (UM) = 1535920kB
[  298.239362][T14946] Node 0 Normal: 242*4kB (UME) 517*8kB (UME) 364*16kB (UM) 102*32kB (UM) 298*64kB (UM) 68*128kB (UM) 8*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 45552kB
[  298.239415][T14946] Node 1 Normal: 1645*4kB (UME) 1193*8kB (UME) 535*16kB (UME) 1620*32kB (UM) 669*64kB (UME) 352*128kB (UM) 162*256kB (UME) 29*512kB (UME) 13*1024kB (UM) 13*2048kB (UME) 616*4096kB (UM) = 2783788kB
[  298.239475][T14946] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  298.239482][T14946] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  298.239488][T14946] 52313 total pagecache pages
[  298.239491][T14946] 2 pages in swap cache
[  298.239495][T14946] Free swap  = 124988kB
[  298.239498][T14946] Total swap = 124996kB
[  298.239501][T14946] 1834877 pages RAM
[  298.239504][T14946] 0 pages HighMem/MovableOnly
[  298.239506][T14946] 391895 pages reserved
[  298.239509][T14946] 0 pages cma reserved
[  298.557356][T14963] sch_fq: defrate 2 ignored.
[  298.561391][T14963] syzkaller0: entered promiscuous mode
[  298.565582][T14963] syzkaller0: entered allmulticast mode
[  298.588670][T14967] bond0: (slave bond_slave_0): Releasing backup interface
[  298.601922][T14967] bond0: (slave bond_slave_1): Releasing backup interface
[  298.619322][T14967] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  298.633641][T14963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.642461][T14962] tipc: Resetting bearer <eth:syzkaller0>
[  298.674315][T14962] tipc: Disabling bearer <eth:syzkaller0>
[  299.593286][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4015'.
[  300.287356][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  300.331831][T15020] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  300.470388][T15020] ip6tnl1: left allmulticast mode
[  300.611041][T15020] vlan2: left allmulticast mode
[  300.613337][T15020] bond0: left allmulticast mode
[  300.702875][T15020] bond3: left allmulticast mode
[  300.875531][T15020] bridge8: port 2(veth9) entered disabled state
[  300.877525][T15020] bridge8: port 1(veth7) entered disabled state
[  300.948571][ T8883] syz0: Port: 1 Link DOWN
[  301.027307][T14144] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.030362][T14144] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.036643][T14144] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.040333][T14144] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.297576][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.298142][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.298206][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.298245][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.515733][T15056] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4022'.
[  301.554281][T15056] netlink: 'syz.2.4022': attribute type 4 has an invalid length.
[  301.554348][T15056] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.4022'.
[  302.367815][T15099] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  302.730713][T15112] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4042'.
[  303.391755][T15147] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  304.065929][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.066628][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.097158][T15156] openvswitch: netlink: Duplicate or invalid key (type 0).
[  304.102841][ T5659] wlan1 speed is unknown, defaulting to 1000
[  304.103367][ T5659] syz2: Port: 1 Link ACTIVE
[  304.117272][T15156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4064'.
[  304.725388][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4065'.
[  305.008758][T15171] siw: device registration error -23
[  305.285927][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4075'.
[  305.330586][T15187] bond4: option arp_validate: invalid value (8192)
[  305.334958][T15187] bond4 (unregistering): Released all slaves
[  305.372003][T15189] IPv6: NLM_F_CREATE should be specified when creating new route
[  305.376444][T15191] bridge0: port 1(veth1_to_bridge) entered blocking state
[  305.376622][T15191] bridge0: port 1(veth1_to_bridge) entered disabled state
[  305.382414][T15191] veth1_to_bridge: entered allmulticast mode
[  305.385285][T15191] veth1_to_bridge: entered promiscuous mode
[  305.386635][T15191] bridge0: port 1(veth1_to_bridge) entered blocking state
[  305.386719][T15191] bridge0: port 1(veth1_to_bridge) entered forwarding state
[  305.403192][T15189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  305.403237][T15189] IPv6: NLM_F_CREATE should be set when creating new route
[  305.403309][T15189] IPv6: NLM_F_CREATE should be set when creating new route
[  305.403350][T15189] IPv6: NLM_F_CREATE should be set when creating new route
[  305.533691][T15199] tls_set_device_offload: netdev not found
[  305.615723][T15205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4086'.
[  305.876721][T15224] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  306.225463][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4101'.
[  306.225802][T15240] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4101'.
[  306.342907][T15248] vlan0: entered allmulticast mode
[  306.342964][T15248] bridge_slave_0: entered allmulticast mode
[  307.550235][T15272] netlink: 'syz.2.4116': attribute type 21 has an invalid length.
[  307.550849][T15272] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4116'.
[  311.163973][T15311] netlink: 'syz.1.4132': attribute type 1 has an invalid length.
[  311.164028][T15311] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4132'.
[  311.699636][T15337] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4142'.
[  311.704373][T15337] netlink: 'syz.1.4142': attribute type 2 has an invalid length.
[  311.708394][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4142'.
[  311.708409][T15337] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4142'.
[  312.013802][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4149'.
[  312.073570][T15351] 8021q: adding VLAN 0 to HW filter on device bond9
[  312.089776][T15357] macvlan4: entered promiscuous mode
[  312.092268][T15357] macvlan4: entered allmulticast mode
[  312.218468][T14144] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c
[  312.228985][T15367] netlink: 'syz.2.4154': attribute type 2 has an invalid length.
[  312.245118][T15359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  312.371902][T15371] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4157'.
[  312.449440][    C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  312.732353][T15388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4164'.
[  313.022931][T15393] nbd: must specify a size in bytes for the device
[  313.326187][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4175'.
[  313.448963][T15421] syzkaller1: entered promiscuous mode
[  313.449014][T15421] syzkaller1: entered allmulticast mode
[  313.527498][T15423] syzkaller1: entered promiscuous mode
[  313.528875][T15423] syzkaller1: entered allmulticast mode
[  313.589489][T15425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4181'.
[  314.012877][T15450] netlink: 'syz.2.4192': attribute type 4 has an invalid length.
[  314.768913][T15484] tc action pedit offset must be on 32 bit boundaries
[  314.768964][T15484] tc action pedit offset must be on 32 bit boundaries
[  314.768990][T15484] tc action pedit offset must be on 32 bit boundaries
[  314.769012][T15484] tc action pedit offset must be on 32 bit boundaries
[  314.769034][T15484] tc action pedit offset must be on 32 bit boundaries
[  314.769056][T15484] tc action pedit offset must be on 32 bit boundaries
[  314.769079][T15484] tc action pedit offset must be on 32 bit boundaries
[  314.769101][T15484] tc action pedit offset must be on 32 bit boundaries
[  314.769123][T15484] tc action pedit offset must be on 32 bit boundaries
[  314.769146][T15484] tc action pedit offset must be on 32 bit boundaries
[  314.769173][T15484] 0: reclassify loop, rule prio 0, protocol 800
[  315.649627][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4212'.
[  316.028791][ T5652] wlan1 speed is unknown, defaulting to 1000
[  316.029495][ T5652] syz2: Port: 1 Link DOWN
[  316.143838][T15513] wlan1 speed is unknown, defaulting to 1000
[  316.151526][T15513] lo speed is unknown, defaulting to 1000
[  316.827971][T15538] netlink: 'syz.0.4231': attribute type 39 has an invalid length.
[  317.136435][T15547] __nla_validate_parse: 1 callbacks suppressed
[  317.136508][T15547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4235'.
[  317.136748][T15547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4235'.
[  317.576537][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  317.802975][T15565] syzkaller1: entered promiscuous mode
[  317.808886][T15565] syzkaller1: entered allmulticast mode
[  318.325288][T15576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.805357][T15596] syzkaller0: left promiscuous mode
[  318.805404][T15596] syzkaller0: left allmulticast mode
[  319.471731][T15635] pim6reg0: tun_chr_ioctl cmd 1074812118
[  320.074497][T15669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4293'.
[  320.543176][T15695] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  320.567150][T15695] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  320.671099][T15703] netlink: 'syz.1.4309': attribute type 1 has an invalid length.
[  320.706468][T15703] bond8: entered promiscuous mode
[  320.713681][T15703] 8021q: adding VLAN 0 to HW filter on device bond8
[  320.736537][T15703] 8021q: adding VLAN 0 to HW filter on device bond8
[  320.736833][T15703] bond8: (slave ipip2): The slave device specified does not support setting the MAC address
[  320.736894][T15703] bond8: (slave ipip2): Setting fail_over_mac to active for active-backup mode
[  320.762014][T15703] bond8: (slave ipip2): making interface the new active one
[  320.765357][T15703] ipip2: entered promiscuous mode
[  320.773375][T15703] bond8: (slave ipip2): Enslaving as an active interface with an up link
[  320.870409][T15710] block nbd0: reconnected socket
[  320.873933][T15710] netlink: 'syz.1.4312': attribute type 9 has an invalid length.
[  320.947677][T13683] block nbd0: Receive control failed (result -32)
[  321.096697][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4316'.
[  321.820343][T15751] sctp: [Deprecated]: syz.1.4330 (pid 15751) Use of int in maxseg socket option.
[  321.820343][T15751] Use struct sctp_assoc_value instead
[  322.800201][T15791] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4349'.
[  322.923264][T15796] netlink: 'syz.2.4351': attribute type 1 has an invalid length.
[  322.926832][T15796] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4351'.
[  322.934588][T15796] netlink: 'syz.2.4351': attribute type 2 has an invalid length.
[  322.938919][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4351'.
[  323.016703][T15801] netlink: 'syz.2.4354': attribute type 13 has an invalid length.
[  323.059527][ T8893] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  323.107467][ T8882] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  323.107685][ T8882] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  323.402799][T15820] netlink: 'syz.1.4362': attribute type 1 has an invalid length.
[  323.402850][T15820] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4362'.
[  323.402906][T15820] NCSI netlink: No device for ifindex 0
[  323.412768][ T8882] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  323.578273][ T8882] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  323.683938][T15834] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4369'.
[  323.967527][ T8882] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  324.141014][T15858] syzkaller0: Caught tx_queue_len zero misconfig
[  324.177398][T15858] syzkaller0: entered promiscuous mode
[  324.177460][T15858] syzkaller0: entered allmulticast mode
[  324.186401][T15858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.236986][T15858] tipc: Resetting bearer <eth:syzkaller0>
[  324.553323][T15881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4389'.
[  325.452487][T15909] IPv6: sit2: Disabled Multicast RS
[  325.460156][T15914] netlink: 'syz.1.4403': attribute type 1 has an invalid length.
[  325.624726][T15919] syzkaller0: entered promiscuous mode
[  325.629647][T15919] syzkaller0: entered allmulticast mode
[  326.888819][T15937] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  328.845891][T16012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4444'.
[  329.489614][T16044] netlink: 'syz.1.4459': attribute type 10 has an invalid length.
[  329.493171][T16044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4459'.
[  329.496547][T16044] dummy0: entered promiscuous mode
[  329.503829][T16044] bridge0: port 1(dummy0) entered blocking state
[  329.506076][T16044] bridge0: port 1(dummy0) entered disabled state
[  329.509622][T16044] dummy0: entered allmulticast mode
[  330.353732][T16109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4489'.
[  330.357816][T16109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  330.357883][T16109] IPv6: NLM_F_CREATE should be set when creating new route
[  330.358005][T16109] IPv6: NLM_F_CREATE should be set when creating new route
[  331.013047][T16132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4499'.
[  331.346710][T16145] RDS: rds_bind could not find a transport for 0:0:80::, load rds_tcp or rds_rdma?
[  331.520371][T16156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.569602][T16159] 
[  331.570636][T16159] ======================================================
[  331.573400][T16159] WARNING: possible circular locking dependency detected
[  331.576225][T16159] syzkaller #0 Not tainted
[  331.578129][T16159] ------------------------------------------------------
[  331.580939][T16159] syz.2.4511/16159 is trying to acquire lock:
[  331.583362][T16159] ffff8881012d4210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0
[  331.587532][T16159] 
[  331.587532][T16159] but task is already holding lock:
[  331.590478][T16159] ffff8881012d4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  331.594200][T16159] 
[  331.594200][T16159] which lock already depends on the new lock.
[  331.594200][T16159] 
[  331.597514][T16159] 
[  331.597514][T16159] the existing dependency chain (in reverse order) is:
[  331.600336][T16159] 
[  331.600336][T16159] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  331.602959][T16159]        down_write+0x96/0x200
[  331.604540][T16159]        kernfs_add_one+0x41/0x6f0
[  331.606148][T16159]        kernfs_create_dir_ns+0x1a1/0x230
[  331.607964][T16159]        internal_create_group+0x440/0x1180
[  331.609823][T16159]        cpuhp_invoke_callback+0x434/0x810
[  331.612023][T16159]        cpuhp_issue_call+0x3f0/0x750
[  331.613820][T16159]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[  331.615880][T16159]        __cpuhp_setup_state+0x3f/0x60
[  331.617861][T16159]        do_one_initcall+0x250/0x870
[  331.619559][T16159]        do_initcall_level+0x10a/0x1a0
[  331.621313][T16159]        do_initcalls+0x59/0xa0
[  331.623283][T16159]        kernel_init_freeable+0x29d/0x3e0
[  331.625532][T16159]        kernel_init+0x22/0x1d0
[  331.627486][T16159]        ret_from_fork+0x514/0xb70
[  331.629535][T16159]        ret_from_fork_asm+0x1a/0x30
[  331.631657][T16159] 
[  331.631657][T16159] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  331.634749][T16159] 
[  331.634749][T16159] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  331.637848][T16159]        cpus_read_lock+0x42/0x160
[  331.639893][T16159]        static_key_slow_inc+0x12/0x30
[  331.642106][T16159]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  331.644597][T16159]        nbd_genl_foreach_sock+0x265/0x450
[  331.646944][T16159]        nbd_genl_reconfigure+0xbbb/0x1040
[  331.649050][T16159]        genl_family_rcv_msg_doit+0x233/0x340
[  331.650981][T16159]        genl_rcv_msg+0x614/0x7a0
[  331.652597][T16159]        netlink_rcv_skb+0x226/0x4a0
[  331.654278][T16159]        genl_rcv+0x28/0x40
[  331.655726][T16159]        netlink_unicast+0x7bd/0x940
[  331.657392][T16159]        netlink_sendmsg+0x813/0xb40
[  331.659084][T16159]        sock_sendmsg_nosec+0x13a/0x180
[  331.660834][T16159]        ____sys_sendmsg+0x54e/0x850
[  331.662520][T16159]        ___sys_sendmsg+0x2a5/0x360
[  331.664188][T16159]        __x64_sys_sendmsg+0x1b1/0x290
[  331.665928][T16159]        do_syscall_64+0x166/0x520
[  331.667559][T16159]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.669594][T16159] 
[  331.669594][T16159] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  331.671982][T16159]        __mutex_lock+0x19d/0x1550
[  331.673895][T16159]        nbd_queue_rq+0x373/0xff0
[  331.675965][T16159]        blk_mq_dispatch_rq_list+0x499/0x1990
[  331.678406][T16159]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  331.681145][T16159]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  331.683783][T16159]        blk_mq_run_work_fn+0x16c/0x300
[  331.686021][T16159]        process_scheduled_works+0xc3d/0x1630
[  331.688476][T16159]        worker_thread+0xa47/0xfb0
[  331.690585][T16159]        kthread+0x38b/0x480
[  331.692476][T16159]        ret_from_fork+0x514/0xb70
[  331.694547][T16159]        ret_from_fork_asm+0x1a/0x30
[  331.696697][T16159] 
[  331.696697][T16159] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  331.699611][T16159]        __mutex_lock+0x19d/0x1550
[  331.701698][T16159]        nbd_queue_rq+0xc1/0xff0
[  331.703746][T16159]        blk_mq_dispatch_rq_list+0x499/0x1990
[  331.706212][T16159]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  331.708954][T16159]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  331.711593][T16159]        blk_mq_run_work_fn+0x16c/0x300
[  331.713832][T16159]        process_scheduled_works+0xc3d/0x1630
[  331.716295][T16159]        worker_thread+0xa47/0xfb0
[  331.718407][T16159]        kthread+0x38b/0x480
[  331.720308][T16159]        ret_from_fork+0x514/0xb70
[  331.722420][T16159]        ret_from_fork_asm+0x1a/0x30
[  331.724616][T16159] 
[  331.724616][T16159] -> #4 (set->srcu){.+.+}-{0:0}:
[  331.727475][T16159]        __synchronize_srcu+0xc9/0x2f0
[  331.729709][T16159]        elevator_switch+0x1e8/0x7b0
[  331.731867][T16159]        elevator_change+0x2fa/0x480
[  331.734027][T16159]        elevator_set_default+0x375/0x440
[  331.736344][T16159]        blk_register_queue+0x3f3/0x4e0
[  331.738583][T16159]        __add_disk+0x6cb/0xe30
[  331.740563][T16159]        add_disk_fwnode+0x100/0x3a0
[  331.742714][T16159]        nbd_dev_add+0x733/0xb60
[  331.744745][T16159]        nbd_init+0x168/0x1f0
[  331.746679][T16159]        do_one_initcall+0x250/0x870
[  331.748837][T16159]        do_initcall_level+0x10a/0x1a0
[  331.751059][T16159]        do_initcalls+0x59/0xa0
[  331.753042][T16159]        kernel_init_freeable+0x29d/0x3e0
[  331.755336][T16159]        kernel_init+0x22/0x1d0
[  331.757341][T16159]        ret_from_fork+0x514/0xb70
[  331.759425][T16159]        ret_from_fork_asm+0x1a/0x30
[  331.761586][T16159] 
[  331.761586][T16159] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  331.764782][T16159]        __mutex_lock+0x19d/0x1550
[  331.766871][T16159]        elevator_change+0x1af/0x480
[  331.769020][T16159]        elevator_set_none+0xb5/0x140
[  331.771201][T16159]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  331.773783][T16159]        nbd_start_device+0x189/0xb30
[  331.776011][T16159]        nbd_genl_connect+0x167d/0x1cd0
[  331.778288][T16159]        genl_family_rcv_msg_doit+0x233/0x340
[  331.780773][T16159]        genl_rcv_msg+0x614/0x7a0
[  331.782868][T16159]        netlink_rcv_skb+0x226/0x4a0
[  331.785025][T16159]        genl_rcv+0x28/0x40
[  331.786902][T16159]        netlink_unicast+0x7bd/0x940
[  331.789063][T16159]        netlink_sendmsg+0x813/0xb40
[  331.791224][T16159]        sock_sendmsg_nosec+0x13a/0x180
[  331.793487][T16159]        ____sys_sendmsg+0x54e/0x850
[  331.795632][T16159]        ___sys_sendmsg+0x2a5/0x360
[  331.797757][T16159]        __x64_sys_sendmsg+0x1b1/0x290
[  331.799977][T16159]        do_syscall_64+0x166/0x520
[  331.802075][T16159]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.804676][T16159] 
[  331.804676][T16159] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[  331.808147][T16159]        blk_alloc_queue+0x544/0x690
[  331.810282][T16159]        __blk_mq_alloc_disk+0x194/0x390
[  331.812551][T16159]        nbd_dev_add+0x494/0xb60
[  331.814566][T16159]        nbd_init+0x168/0x1f0
[  331.816480][T16159]        do_one_initcall+0x250/0x870
[  331.818633][T16159]        do_initcall_level+0x10a/0x1a0
[  331.820864][T16159]        do_initcalls+0x59/0xa0
[  331.822868][T16159]        kernel_init_freeable+0x29d/0x3e0
[  331.825190][T16159]        kernel_init+0x22/0x1d0
[  331.827191][T16159]        ret_from_fork+0x514/0xb70
[  331.829262][T16159]        ret_from_fork_asm+0x1a/0x30
[  331.831423][T16159] 
[  331.831423][T16159] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  331.834346][T16159]        fs_reclaim_acquire+0x71/0x100
[  331.836562][T16159]        kmem_cache_alloc_noprof+0x5f/0x600
[  331.838958][T16159]        __kernfs_iattrs+0xdd/0x380
[  331.841087][T16159]        kernfs_iop_setattr+0xe6/0x3f0
[  331.843305][T16159]        notify_change+0xbba/0xea0
[  331.845401][T16159]        do_truncate+0x1c2/0x250
[  331.847447][T16159]        path_openat+0x15b5/0x1d60
[  331.849599][T16159]        do_file_open+0x23e/0x4a0
[  331.851661][T16159]        do_sys_openat2+0x115/0x200
[  331.853771][T16159]        __x64_sys_openat+0x138/0x170
[  331.855956][T16159]        do_syscall_64+0x166/0x520
[  331.858059][T16159]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.860686][T16159] 
[  331.860686][T16159] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  331.864091][T16159]        __lock_acquire+0x15ff/0x2e50
[  331.866284][T16159]        lock_acquire+0x115/0x350
[  331.868353][T16159]        down_write+0x96/0x200
[  331.870303][T16159]        kernfs_link_sibling+0x4c7/0x5a0
[  331.872624][T16159]        kernfs_add_one+0x2db/0x6f0
[  331.874738][T16159]        kernfs_create_dir_ns+0x1a1/0x230
[  331.877006][T16159]        sysfs_create_dir_ns+0x12f/0x2a0
[  331.879311][T16159]        kobject_add_internal+0x622/0xcd0
[  331.881648][T16159]        kobject_add+0x163/0x240
[  331.883612][T16159]        device_add+0x3fa/0xb80
[  331.885597][T16159]        tty_register_device_attr+0x425/0x990
[  331.888038][T16159]        rfcomm_dev_ioctl+0x1b6c/0x21c0
[  331.890248][T16159]        sock_do_ioctl+0x101/0x320
[  331.892329][T16159]        sock_ioctl+0x57a/0x7e0
[  331.894343][T16159]        __se_sys_ioctl+0xfc/0x170
[  331.896383][T16159]        do_syscall_64+0x166/0x520
[  331.898488][T16159]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.901015][T16159] 
[  331.901015][T16159] other info that might help us debug this:
[  331.901015][T16159] 
[  331.905089][T16159] Chain exists of:
[  331.905089][T16159]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  331.905089][T16159] 
[  331.910737][T16159]  Possible unsafe locking scenario:
[  331.910737][T16159] 
[  331.913677][T16159]        CPU0                    CPU1
[  331.915781][T16159]        ----                    ----
[  331.917941][T16159]   lock(&root->kernfs_rwsem);
[  331.919869][T16159]                                lock(cpuhp_state_mutex);
[  331.922717][T16159]                                lock(&root->kernfs_rwsem);
[  331.925617][T16159]   lock(&root->kernfs_iattr_rwsem);
[  331.927764][T16159] 
[  331.927764][T16159]  *** DEADLOCK ***
[  331.927764][T16159] 
[  331.930963][T16159] locks held by syz.2.4511/16159: 2, last CPU#1:
[  331.933553][T16159]  #0: ffffffff903fefe0 (rfcomm_ioctl_mutex){+.+.}-{4:4}, at: rfcomm_dev_ioctl+0x25f/0x21c0
[  331.937648][T16159]  #1: ffff8881012d4180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  331.941620][T16159] 
[  331.941620][T16159] stack backtrace:
[  331.944026][T16159] CPU: 1 UID: 0 PID: 16159 Comm: syz.2.4511 Not tainted syzkaller #0 PREEMPT(full) 
[  331.947805][T16159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  331.951869][T16159] Call Trace:
[  331.953244][T16159]  <TASK>
[  331.954489][T16159]  dump_stack_lvl+0xe8/0x150
[  331.956352][T16159]  print_circular_bug+0x2e2/0x300
[  331.958425][T16159]  check_noncircular+0x12f/0x150
[  331.960484][T16159]  __lock_acquire+0x15ff/0x2e50
[  331.962401][T16159]  ? __lock_acquire+0x6df/0x2e50
[  331.964441][T16159]  lock_acquire+0x115/0x350
[  331.966325][T16159]  ? kernfs_link_sibling+0x4c7/0x5a0
[  331.968491][T16159]  down_write+0x96/0x200
[  331.970213][T16159]  ? kernfs_link_sibling+0x4c7/0x5a0
[  331.972374][T16159]  ? __pfx_down_write+0x10/0x10
[  331.974369][T16159]  ? kernfs_root+0x1c/0x230
[  331.976247][T16159]  ? kernfs_root+0x1c/0x230
[  331.978129][T16159]  ? kernfs_root+0x1c/0x230
[  331.980006][T16159]  ? kernfs_root+0x1ea/0x230
[  331.981952][T16159]  kernfs_link_sibling+0x4c7/0x5a0
[  331.984054][T16159]  kernfs_add_one+0x2db/0x6f0
[  331.986000][T16159]  kernfs_create_dir_ns+0x1a1/0x230
[  331.988130][T16159]  sysfs_create_dir_ns+0x12f/0x2a0
[  331.990255][T16159]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  331.992553][T16159]  ? do_raw_spin_unlock+0x4d/0x200
[  331.994610][T16159]  kobject_add_internal+0x622/0xcd0
[  331.996693][T16159]  kobject_add+0x163/0x240
[  331.998547][T16159]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  332.000917][T16159]  ? __pfx_kobject_add+0x10/0x10
[  332.002969][T16159]  ? get_device_parent+0x366/0x3a0
[  332.005025][T16159]  device_add+0x3fa/0xb80
[  332.006805][T16159]  tty_register_device_attr+0x425/0x990
[  332.009072][T16159]  ? __pfx_tty_register_device_attr+0x10/0x10
[  332.011591][T16159]  ? tty_port_register_device+0xca/0x150
[  332.013904][T16159]  rfcomm_dev_ioctl+0x1b6c/0x21c0
[  332.015947][T16159]  ? kasan_quarantine_put+0xbb/0x1f0
[  332.018082][T16159]  ? __pfx_rfcomm_dev_ioctl+0x10/0x10
[  332.020246][T16159]  ? tomoyo_path_number_perm+0x219/0x5f0
[  332.022527][T16159]  ? tomoyo_path_number_perm+0x219/0x5f0
[  332.024794][T16159]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  332.026818][T16159]  sock_do_ioctl+0x101/0x320
[  332.028701][T16159]  ? __pfx_sock_do_ioctl+0x10/0x10
[  332.030775][T16159]  ? hook_file_ioctl+0x1f2/0x600
[  332.032781][T16159]  sock_ioctl+0x57a/0x7e0
[  332.034549][T16159]  ? __pfx_sock_ioctl+0x10/0x10
[  332.036527][T16159]  ? __fget_files+0x2a/0x420
[  332.038415][T16159]  ? __fget_files+0x3a2/0x420
[  332.040335][T16159]  ? __fget_files+0x2a/0x420
[  332.042249][T16159]  ? bpf_lsm_file_ioctl+0x9/0x20
[  332.044260][T16159]  ? __pfx_sock_ioctl+0x10/0x10
[  332.046238][T16159]  __se_sys_ioctl+0xfc/0x170
[  332.048115][T16159]  do_syscall_64+0x166/0x520
[  332.049992][T16159]  ? trace_irq_disable+0x3b/0x140
[  332.052014][T16159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.054479][T16159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.056852][T16159] RIP: 0033:0x7fd4add9e159
[  332.058680][T16159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.066274][T16159] RSP: 002b:00007fd4aece6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  332.069625][T16159] RAX: ffffffffffffffda RBX: 00007fd4ae025fa0 RCX: 00007fd4add9e159
[  332.072809][T16159] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000007
[  332.075958][T16159] RBP: 00007fd4ade35024 R08: 0000000000000000 R09: 0000000000000000
[  332.079109][T16159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.082247][T16159] R13: 00007fd4ae026038 R14: 00007fd4ae025fa0 R15: 00007ffc3409e168
[  332.085436][T16159]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  332.433312][ T5607] syz-executor (5607) used greatest stack depth: 19936 bytes left
