last executing test programs:

2.068076097s ago: executing program 1 (id=4530):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b04000000000034f27c76000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aa"], 0x48}}, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x2, &(0x7f0000001d80)=ANY=[], 0x128}, 0x1)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b575", 0x2}], 0x1, 0x0, 0x0, 0x24040010}], 0x1, 0x8844)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r10, 0x1, 0x43, &(0x7f00000000c0)=""/159, &(0x7f0000000040)=0x9f)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000005000000fd0900008800000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000003"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r11}, 0x38)
r12 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r12, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r13 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r13, 0x29, 0xc8, 0x0, 0xc000000)
r14 = socket$netlink(0x10, 0x3, 0x4)
writev(r14, &(0x7f00000013c0)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000080204e0000", 0x58}], 0x1)
r15 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$inet_mreqn(r15, 0x0, 0x23, &(0x7f0000000240)={@initdev, @multicast2}, &(0x7f0000000280)=0xc)

1.19825848s ago: executing program 1 (id=4536):
socket$inet6(0xa, 0x80000, 0x6)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000020a01010000000000000000010000030900010073797a30"], 0x10c}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan0\x00', <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
unshare(0x26020480)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7, r8}, 0xc)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x2c00, 0x0, @void}, 0x10)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r9, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00", @ANYRES32=r10, @ANYBLOB="080004007df7ffff09000100"], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
listen(r9, 0x200)
accept4$llc(r9, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf251d00000008000300", @ANYRES32=r5, @ANYBLOB="2c002f800c0002000201aaaaaaaaaaaa08000100040000001400038008000100010000000500020001000000b3396a0972d78ba8f9329e3932cebfa0f0ffcced4eb0ddd6ad21d399c7acb3f82a05a3690fee8a6b1d5f706bef0c73df25cc1d2a8ad9bb0200fd5b21759488f4d8b721851a1c8debd8cae57b58a581d42a0de1f8ff9b9da68eb6b868d2f68056dcb8bcd3867df3fd14836a1ebc254634253fdcda5f28b87c973ec7a64a95473c86f67358eb54068ae79986759fe85587df74e43fa7e8ea5b01afe199bb4883773698e4684dc5b60ff7ae384730dfbf298eb0b2ceb523cdbc5b912d124e0cf05d"], 0x48}}, 0x8004)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan3\x00', <r12=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425000200", @ANYRES32=r12, @ANYBLOB="060006000100000006000400feff000008000200", @ANYRES32=r5, @ANYBLOB="14003000dab76069d2293e213fa6b50d70bfd87a"], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x40080)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000520001002dbd7000fedbdf251c0000003a2089e6c3d534010df9e5ac345f7d"], 0x14}}, 0x0)

559.311271ms ago: executing program 0 (id=4550):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}, @nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x80, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfa4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x802}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc00}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x74}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x6, 0x1, 0x19}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004840}, 0xcc00)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0)
recvfrom$rose(r4, &(0x7f00000003c0)=""/14, 0xe, 0x2000, &(0x7f0000000400)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40800)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYBLOB="010000000000000000003b0000000800"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x48040)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r3, 0x3, 0x1, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

558.702961ms ago: executing program 0 (id=4551):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="62053c00", 0x4}], 0x1}, 0x4040)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x98})
mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x300000e, 0x11, r2, 0x9cc21000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x200000000000015e, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'vlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'vlan0\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed002889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x29, 0x0, &(0x7f0000000200)=""/41, 0x2, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)="5929528b", 0x2, 0x0, 0x1}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000100256a86cf12893d83a6000000", @ANYRES32=r5], 0x20}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r8=>0x0)
connect(r0, &(0x7f0000000100)=@nfc_llcp={0x27, r8, 0x1, 0xd62e92e10da8d07d, 0x4, 0x43, "23f4354da10ad39e88bcaacacdfe33fb4829a2e572e6a3380a79815a469cba54b421a78613d20756afe6b0cf1c63eaec4d1a535a9f9294109419fefff5b15e", 0x7}, 0x80)

389.532649ms ago: executing program 0 (id=4553):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x4200, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async, rerun: 64)
getsockopt$inet_buf(r2, 0x118, 0x1, 0x0, &(0x7f00000003c0)) (rerun: 64)
close(r1) (async)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x70, r4, 0x100, 0x5, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x40007}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x74}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040000)

388.326813ms ago: executing program 0 (id=4555):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000100039042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="024000000108000008001c00", @ANYRES32, @ANYBLOB="08001b000700000008002800213b0000080013"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000)
close(r3)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0xb2, 0xfffffffffffffffc})
recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0040000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_getroute={0x34, 0x1a, 0x400, 0x70bd2c, 0x25dfdbfd, {0xa, 0x10, 0x80, 0x0, 0xff, 0x0, 0xfd, 0x8, 0x700}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_EXPIRES={0x8, 0x17, 0x483}, @RTA_OIF={0x8, 0x4, r7}]}, 0x34}, 0x1, 0x2000, 0x0, 0x8810}, 0x4048800)

317.793167ms ago: executing program 1 (id=4556):
syz_emit_ethernet(0x48, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x12, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5}]}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xc, 0xbf, 0x5, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7800, 0x20, 0x101, 0x2}})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd27, 0x25dfdbfe, {0xa, 0xb0, 0x0, 0x70, 0xf, 0x0, 0x0, 0x7, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

317.538494ms ago: executing program 1 (id=4557):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000080204e0000", 0x58}], 0x1)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3}, {0x0, 0xfd}, {0x4, 0x0, 0xfe, 0x10000000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x1c, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000240)=0x8003, 0x4)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56561, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r10, &(0x7f0000002dc0), 0x2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x11)
sendto$inet(r6, &(0x7f0000000180)="8b", 0x1, 0x101, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000011c0)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9c1d459ef242e2c4}, 0x38)
syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x7c, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0)

317.20729ms ago: executing program 2 (id=4558):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f00080003400000000008000440000000000800054000000000090002fc00000000020000000800010001"], 0x40}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r2)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8804)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r7=>0x0})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x6c, 0xc, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004802}, 0xc4004)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, r5, 0x8a1b8b6abb25ef8d, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1a}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc8, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x64, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555e}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xcc4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4)

257.161115ms ago: executing program 0 (id=4559):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r6=>0x0})
bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x3, r6, 0x6}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x42}}, 0x10)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r9 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000380)={0x842, 0xfffffffa, 0x2}, 0x10)
sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r11 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a010400000000000000000a0000010900010073797a310000000058000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f0800044026fb676ef93c16030000000220000180080001006475700014000280080002400000001308000140000000100900020073797a3200000000140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r13=>0x0})
sendto$packet(r10, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r13, 0x1, 0x0, 0x6, @multicast}, 0x14)

197.240541ms ago: executing program 1 (id=4560):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e24, 0xbf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc58e}, 0x1c)
writev(r2, &(0x7f0000000680)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x7c}}, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000180)=0xb, 0x4)
sendto$phonet(r4, &(0x7f00000010c0)="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", 0xff, 0x480c0, &(0x7f00000011c0)={0x23, 0x3, 0x95, 0x4}, 0x10)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501000000eb00ae"], 0x18}, 0x1, 0x0, 0x0, 0x8}, 0x0)
recvmmsg(r6, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x800ac}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/58, 0x3a}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

196.026916ms ago: executing program 2 (id=4561):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) (async)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
close(r1) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x4f}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r8 = socket(0x400000000010, 0x3, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x800) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r11=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r13 = openat$cgroup_ro(r12, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
preadv(r13, &(0x7f00000006c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1, 0x4, 0xfffffffe)

192.291304ms ago: executing program 2 (id=4562):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r2, 0x3, 0x1, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x15}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

109.876504ms ago: executing program 2 (id=4563):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xa}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$unix(0x1, 0x2, 0x0)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
accept4(r1, 0x0, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x7ff, @vifc_lcl_addr=@local, @broadcast}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={<r3=>0x0, 0x9}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e23, 0x401, @loopback, 0x200}}, 0x1, 0x0, 0x6, 0x8, 0xd}, &(0x7f00000001c0)=0x98)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10)

109.536664ms ago: executing program 0 (id=4564):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000200)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140), 0x0, 0x0, 0x219b00546e8ad175}, 0x4008001)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYRES64, @ANYBLOB="d839ffd07b45fcb16a6e150e6719bbe9dc1993b63af127c389d403cea730071e450c87f1554b9a9694df0e1d438558d2ea2f866ed7fbdc3f0e6afa49139ea6e94dfc3acd42c6402489fa1724197b888bddee054a16ce99fd0726048ada", @ANYRES16=r0, @ANYRES16=r4, @ANYRESHEX, @ANYRES64=r1, @ANYRESHEX=r3], 0x1c}}, 0x0)
recvmmsg$unix(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4, 0x1], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0x1cc32a6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x5, 0xe, 0x0, &(0x7f0000000080)="0000000000040000000002015370", 0x0, 0xff, 0x0, 0xfffffffffffffda4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x401}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x60, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb7, &(0x7f000000cf3d)=""/183, 0x40f00, 0xe4, '\x00', 0x0, @fallback=0x3}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0xd455d0f2adb9ba32, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
socket$inet(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r9 = socket$tipc(0x1e, 0x2, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r9], 0xc4}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000000266000000000000050000000300000808000100000000260800044000000000e8cb877fb8eea5df6563ad04b1bf1592266dd5a2515b417db4691d64d972d1b26c6b9cc572492d1cb730cbce6e57147d382813eebc4643cc968502b414e9ebcdec9a42621b66188f388a22d2bf89e12d0b6102db56c232de021b8466e7923f43d09c5d823936e4e2b7794fe2508a9f5d6e342d9126651154d232cdcf9abd52846bf389031b37ece0ad66f7defa0f3f6e6cfdde954a60dca49b28a7588caa6125bfb30e5a4acbff2969893b46257ba2fc6d8f3b"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
socket$nl_netfilter(0x10, 0x3, 0xc)

104.389375ms ago: executing program 2 (id=4565):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4)
recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}}], 0x1, 0x40002142, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x4c}}, 0x4048010)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x2100000000000000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x18, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x8000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x11)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2a534b308834d054586feb5c9428624db4b878120e41be144acec28b091f1237c91d74cf1ce0c17632e8dce6ac8c6822c2382fc3ac7c89f2d955bc265df5364df0d56866c920de52e29535b686bb2b4e7e485", 0x53}, {&(0x7f0000000a00)="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", 0x53f}], 0x2}}], 0x2, 0x40)
socket(0x10, 0x3, 0x0)

59.850424ms ago: executing program 1 (id=4566):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r3, &(0x7f0000000380)=@in4={0x21, 0x204b, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="fb", 0x1}], 0x1)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$l2tp6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x0, 0x2}, 0x20)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x2, @local, 0x7f}], 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b00)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = getpid()
write$cgroup_pid(r8, &(0x7f0000000180)=r10, 0x12)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r11, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105)
r12 = openat$cgroup_procs(r9, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r12, &(0x7f0000000380), 0x12)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES16=r13, @ANYBLOB="010028bd7000fe110000000600289264727209080003001db9bdd8d45376f4ccd93131ec92893c2f3c41cbe3e66ad361931f4deaa1706a2172a54bff3ac7130af1b7cb93d1511c4a04e9f9613fae0589772881785cf05235dcd494e790a4248e5b2364ae7d7200"/114, @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x20008840)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000000c0)={'veth0_vlan\x00', 0x400})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r14, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411})

0s ago: executing program 2 (id=4567):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES64=0x0], 0x50)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000006})
r2 = socket$packet(0x11, 0x3, 0x300)
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}, 0x4}}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="53002ce7497d01ead1e7d4e918c467b81794cd4ab25f1fc2da9a04f1d09907974f9ef893ec41a8077d0b86c6e66e4f7bd039c8d238fc2d922f6d8a91ed27ed21e79e0f527acfac48d89b5623e0d8c5033ab2151b4ec0a31bfd814d73d3e9302da0dd07a81223faf8ed01c6d6cd9870af94f1aeb58565165f590d6284b009"], 0x7c}}, 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$6lowpan_control(r6, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000680)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="11000000040000001f000300", @ANYRES32, @ANYRES32, @ANYRES64=0x0], 0xa)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYRES8=r3], 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300077fae1dfff89760000400007012bbd700000000000017c00000400c2801400018006000600843b000006001200843b00000400028003ea6f794f717eff5e3c4a020ff8489bd34a77fa1e464f587fb67ef1baf6"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

kernel console output (not intermixed with test programs):

ort of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  300.771073][T17225] batman_adv: batadv0: Interface activated: ip6gretap19
[  300.877895][T17233] syzkaller1: tun_chr_ioctl cmd 2147767506
[  300.881817][T17235] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  300.956035][T17246] netlink: 'syz.1.3306': attribute type 1 has an invalid length.
[  300.976353][T17246] bond47: entered promiscuous mode
[  300.978175][T17246] bond47: entered allmulticast mode
[  300.981439][T17246] 8021q: adding VLAN 0 to HW filter on device bond47
[  300.995225][T17246] macvlan0: entered promiscuous mode
[  300.997471][T17246] macvlan0: entered allmulticast mode
[  301.002348][T17246] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  301.042667][T17246] xt_hashlimit: size too large, truncated to 1048576
[  301.239361][T17264] __nla_validate_parse: 13 callbacks suppressed
[  301.239373][T17264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3309'.
[  301.314951][T17272] syzkaller0: entered promiscuous mode
[  301.316767][T17272] syzkaller0: entered allmulticast mode
[  301.608527][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3316'.
[  301.616588][T17288] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3316'.
[  301.620151][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3316'.
[  301.674373][T17297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3319'.
[  301.706469][T17303] macvtap0: entered promiscuous mode
[  301.708284][T17303] team0: entered promiscuous mode
[  301.711617][T17303] bridge14: entered promiscuous mode
[  301.713514][T17303] macvtap0: entered allmulticast mode
[  301.715249][T17303] team0: entered allmulticast mode
[  301.716818][T17303] bridge14: entered allmulticast mode
[  301.727747][T17303] IPVS: length: 24 != 36888
[  301.732398][T17305] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap20
[  301.742681][T17305] batman_adv: batadv0: Adding interface: ip6gretap20
[  301.744791][T17305] batman_adv: batadv0: The MTU of interface ip6gretap20 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  301.756385][T17305] batman_adv: batadv0: Interface activated: ip6gretap20
[  301.773390][T17307] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  301.775677][T17307] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  301.821940][T17313] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3326'.
[  301.852263][T17315] netlink: 'syz.1.3327': attribute type 1 has an invalid length.
[  301.870820][T17315] 8021q: adding VLAN 0 to HW filter on device bond48
[  301.891352][T17320] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  301.910850][T17315] bond48: (slave veth23): Enslaving as an active interface with a down link
[  301.953228][T17315] bond48: (slave veth25): Enslaving as an active interface with a down link
[  301.965773][T17326] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap17
[  301.972081][T17326] batman_adv: batadv0: Adding interface: ip6gretap17
[  301.974182][T17326] batman_adv: batadv0: The MTU of interface ip6gretap17 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  301.982882][T17326] batman_adv: batadv0: Interface activated: ip6gretap17
[  301.988033][T17315] bond48: entered allmulticast mode
[  302.135454][T17333] bridge22: entered promiscuous mode
[  302.142424][T17333] bridge22: entered allmulticast mode
[  302.151830][T17333] team0: Port device bridge22 added
[  302.216590][T17351] bridge23: entered promiscuous mode
[  302.218333][T17351] bridge23: entered allmulticast mode
[  302.279863][T17355] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap20
[  302.291162][T17355] batman_adv: batadv0: Adding interface: ip6gretap20
[  302.293833][T17355] batman_adv: batadv0: The MTU of interface ip6gretap20 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  302.303223][T17355] batman_adv: batadv0: Interface activated: ip6gretap20
[  302.307570][T17346] lo speed is unknown, defaulting to 1000
[  302.326332][T17360] mac80211_hwsim hwsim43 wlan1: Caught tx_queue_len zero misconfig
[  302.341090][ T5554] veth0_macvtap: entered promiscuous mode
[  302.349114][ T5554] veth0_macvtap: entered allmulticast mode
[  302.428391][ T5554] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  302.446542][T17367] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  302.495079][T17367] pim6reg1: entered promiscuous mode
[  302.497178][T17367] pim6reg1: entered allmulticast mode
[  302.520935][T17370] netlink: 'syz.2.3342': attribute type 1 has an invalid length.
[  302.536928][T17346] ip6_vti0 speed is unknown, defaulting to 1000
[  302.572979][T17370] 8021q: adding VLAN 0 to HW filter on device bond57
[  302.605700][T17370] vlan0: entered promiscuous mode
[  302.607335][T17370] bond57: entered promiscuous mode
[  302.607511][T17374] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  302.609852][T17370] vlan0: entered allmulticast mode
[  302.615287][T17370] bond57: entered allmulticast mode
[  302.659298][T17370] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3342'.
[  302.673768][T17370] 8021q: adding VLAN 0 to HW filter on device batadv4
[  302.677227][T17370] bond57: (slave batadv4): making interface the new active one
[  302.699157][T17370] batadv4: entered promiscuous mode
[  302.701389][T17370] batadv4: entered allmulticast mode
[  302.704353][T17370] bond57: (slave batadv4): Enslaving as an active interface with an up link
[  302.793281][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'.
[  302.942896][T17394] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap18
[  302.947709][T17394] batman_adv: batadv0: Adding interface: ip6gretap18
[  302.952762][T17394] batman_adv: batadv0: The MTU of interface ip6gretap18 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  302.964129][T17394] batman_adv: batadv0: Interface activated: ip6gretap18
[  302.971857][T17392] syzkaller1: entered allmulticast mode
[  302.992806][T17400] netlink: 'syz.2.3352': attribute type 10 has an invalid length.
[  303.117716][T17400] netlink: 'syz.2.3352': attribute type 10 has an invalid length.
[  303.206804][T17408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3354'.
[  303.284466][T17401] nbd3: detected capacity change from 0 to 63
[  303.291859][T17409] block nbd3: Receive control failed (result -104)
[  303.295844][   T56] block nbd3: Receive control failed (result -32)
[  303.383219][T17420] wg1: entered promiscuous mode
[  303.387824][T17420] wg1: entered allmulticast mode
[  303.393870][T17415] smc: removing ib device syz2
[  303.409843][T17422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  303.412681][T17422] IPv6: NLM_F_CREATE should be set when creating new route
[  303.415484][T17422] IPv6: NLM_F_CREATE should be set when creating new route
[  303.443277][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'.
[  303.484390][T17420] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  303.568604][T17429] bond46: (slave lo): Releasing backup interface
[  303.577654][T17429] bond46: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  303.598561][T17429] bond19: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  303.633435][T17429] bond19: (slave lo): Enslaving as an active interface with an up link
[  303.637106][T17429] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  304.208378][T17462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.216587][T17463] lo: Caught tx_queue_len zero misconfig
[  304.278466][T17467] netlink: 'syz.0.3371': attribute type 1 has an invalid length.
[  304.317479][T17467] 8021q: adding VLAN 0 to HW filter on device bond83
[  304.327379][T17470] netlink: 'syz.1.3372': attribute type 1 has an invalid length.
[  304.341764][T17470] 8021q: adding VLAN 0 to HW filter on device bond49
[  304.361642][T17470] bond49: (slave veth27): Enslaving as an active interface with an up link
[  304.386040][T17467] veth45: entered allmulticast mode
[  304.394112][T17467] bond83: (slave veth45): Enslaving as an active interface with a down link
[  304.405795][T17474] bond83 (unregistering): (slave veth45): Releasing active interface
[  304.410741][T17474] bond83 (unregistering): Released all slaves
[  304.436178][T17473] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  304.440391][T17473] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  304.443388][T17470] netlink: 'syz.1.3372': attribute type 1 has an invalid length.
[  304.573720][T17487] netlink: 'syz.0.3378': attribute type 1 has an invalid length.
[  304.646556][T17484] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  304.760768][T17502] xt_CT: No such helper "snmp"
[  304.907395][T17492] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  304.911384][T17492] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  305.162240][T17535] bond19: (slave lo): Releasing backup interface
[  305.165621][T17535] bond19: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  305.171766][T17535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  305.225815][T17540] validate_nla: 1 callbacks suppressed
[  305.225830][T17540] netlink: 'syz.1.3391': attribute type 8 has an invalid length.
[  305.253045][T17543] dummy0: entered allmulticast mode
[  305.262807][T17542] dummy0: left allmulticast mode
[  305.557991][T17557] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  305.593535][T17561] syzkaller1: entered promiscuous mode
[  305.595522][T17561] syzkaller1: entered allmulticast mode
[  305.783456][T17580] netlink: 'syz.0.3407': attribute type 1 has an invalid length.
[  305.803548][T17580] bond83: (slave bridge25): Enslaving as a backup interface with an up link
[  305.815024][T17580] macvlan3: entered promiscuous mode
[  305.816854][T17580] macvlan3: entered allmulticast mode
[  305.820380][T17580] bond83: entered promiscuous mode
[  305.822159][T17580] bridge25: entered promiscuous mode
[  305.824292][T17580] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  305.827219][T17580] bond83: left promiscuous mode
[  305.830714][T17580] bridge25: left promiscuous mode
[  305.847521][T17583] lo speed is unknown, defaulting to 1000
[  306.031368][T17599] xt_TPROXY: Can be used only with -p tcp or -p udp
[  306.279364][T17622] "syz.0.3416" (17622) uses obsolete ecb(arc4) skcipher
[  306.326581][T17627] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig
[  306.333746][T17627] netlink: 'syz.1.3420': attribute type 7 has an invalid length.
[  306.337684][T17631] __nla_validate_parse: 17 callbacks suppressed
[  306.337692][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3421'.
[  306.393191][ T5809] Bluetooth: hci2: command 0x0405 tx timeout
[  306.405624][T17639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3422'.
[  306.448898][T17644] netlink: 'syz.1.3423': attribute type 16 has an invalid length.
[  306.451682][T17644] netlink: 'syz.1.3423': attribute type 17 has an invalid length.
[  306.461256][T17639] veth47: entered allmulticast mode
[  306.468064][T17639] bond84: (slave veth47): Enslaving as an active interface with an up link
[  306.496032][T17639] bond84 (unregistering): (slave veth47): Releasing backup interface
[  306.502463][T17639] bond84 (unregistering): Released all slaves
[  306.633729][T17657] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  306.634632][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'.
[  306.644414][T17658] netlink: 'syz.2.3425': attribute type 1 has an invalid length.
[  306.659498][T17659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3425'.
[  306.672640][T17658] bond58: entered promiscuous mode
[  306.675053][T17658] 8021q: adding VLAN 0 to HW filter on device bond58
[  306.678293][T17658] netlink: 'syz.2.3425': attribute type 1 has an invalid length.
[  306.683478][T17666] netlink: 'syz.0.3427': attribute type 1 has an invalid length.
[  306.683898][T17658] netlink: 'syz.2.3425': attribute type 1 has an invalid length.
[  306.689799][T17658] netlink: 'syz.2.3425': attribute type 1 has an invalid length.
[  306.722474][T17660] bond58: (slave bridge23): making interface the new active one
[  306.724960][T17660] bridge23: entered promiscuous mode
[  306.727162][T17660] bond58: (slave bridge23): Enslaving as an active interface with an up link
[  306.741329][T17667] bond84: (slave vxcan1): The slave device specified does not support setting the MAC address
[  306.747297][T17667] bond84: (slave vxcan1): Error -95 calling set_mac_address
[  306.787047][T17660] bond58: (slave bridge24): Enslaving as a backup interface with an up link
[  306.805887][T17660] bond58: (slave bridge25): Enslaving as a backup interface with an up link
[  306.822009][T17660] bond58: (slave bridge26): Enslaving as a backup interface with an up link
[  306.859102][T17660] bond58: (slave bridge27): Enslaving as a backup interface with an up link
[  306.870696][T17660] bond58: (slave bridge28): Enslaving as a backup interface with an up link
[  306.881661][T17660] bond58: (slave bridge29): Enslaving as a backup interface with an up link
[  306.901707][T17679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3430'.
[  306.904616][T17679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3430'.
[  306.911194][T17660] bond58: (slave bridge30): Enslaving as a backup interface with an up link
[  306.928586][T17660] bond58: (slave bridge31): Enslaving as a backup interface with an up link
[  306.958610][T17660] bond58: (slave bridge32): Enslaving as a backup interface with an up link
[  306.967398][T17660] bond58: (slave bridge33): Enslaving as a backup interface with an up link
[  306.996217][T17660] bond58: (slave bridge34): Enslaving as a backup interface with an up link
[  307.001313][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'.
[  307.010136][T17660] bond58: (slave bridge35): Enslaving as a backup interface with an up link
[  307.014674][T17686] hsr_slave_0: left promiscuous mode
[  307.017003][T17686] hsr_slave_1: left promiscuous mode
[  307.029290][T17660] bond58: (slave bridge36): Enslaving as a backup interface with an up link
[  307.036256][T17687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3431'.
[  307.037388][T17660] bond58: (slave bridge37): Enslaving as a backup interface with an up link
[  307.087659][T17660] bond58: (slave bridge38): Enslaving as a backup interface with an up link
[  307.110194][T17660] bond58: (slave bridge39): Enslaving as a backup interface with an up link
[  307.126094][T17692] netlink: 584 bytes leftover after parsing attributes in process `syz.0.3433'.
[  307.140393][T17660] bond58: (slave bridge40): Enslaving as a backup interface with an up link
[  307.211443][T17660] bond58: (slave bridge41): Enslaving as a backup interface with an up link
[  307.223416][T17660] bond58: (slave bridge42): Enslaving as a backup interface with an up link
[  307.240313][T17696] bond85: option packets_per_slave: invalid value (1684632162)
[  307.243364][T17696] bond85: option packets_per_slave: allowed values 0 - 65535
[  307.252152][T17696] bond85 (unregistering): Released all slaves
[  307.295784][T17660] bond58: (slave bridge43): Enslaving as a backup interface with an up link
[  307.307233][T17660] bond58: (slave bridge44): Enslaving as a backup interface with an up link
[  307.315566][T17660] bond58: (slave bridge45): Enslaving as a backup interface with an up link
[  307.327788][T17660] bond58: (slave bridge46): Enslaving as a backup interface with an up link
[  307.366262][T17660] bond58: (slave bridge47): Enslaving as a backup interface with an up link
[  307.377760][T17660] bond58: (slave bridge48): Enslaving as a backup interface with an up link
[  307.387364][T17660] bond58: (slave bridge49): Enslaving as a backup interface with an up link
[  307.400840][T17660] bond58: (slave bridge50): Enslaving as a backup interface with an up link
[  307.409322][T17706] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap21
[  307.419329][T17706] batman_adv: batadv0: Adding interface: ip6gretap21
[  307.426362][T17706] batman_adv: batadv0: The MTU of interface ip6gretap21 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  307.434843][T17706] batman_adv: batadv0: Interface activated: ip6gretap21
[  307.447752][T17660] bond58: (slave bridge51): Enslaving as a backup interface with an up link
[  307.467897][T17660] bond58: (slave bridge52): Enslaving as a backup interface with an up link
[  307.510742][T17708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3438'.
[  307.680447][T17732] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  307.790292][T17749] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  307.814032][T17747] bond59: entered promiscuous mode
[  307.816164][T17747] 8021q: adding VLAN 0 to HW filter on device bond59
[  307.831164][T17745] syzkaller1: entered promiscuous mode
[  307.833405][T17745] syzkaller1: entered allmulticast mode
[  309.140471][T17780] ip6erspan1: entered allmulticast mode
[  309.249875][T17792] veth29: entered promiscuous mode
[  309.341430][T17799] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  309.492685][T17809] lo speed is unknown, defaulting to 1000
[  309.504135][T17809] bond0: entered promiscuous mode
[  309.508380][T17809] batadv0: entered promiscuous mode
[  309.513618][T17809] bond0: left promiscuous mode
[  309.516221][T17809] batadv0: left promiscuous mode
[  309.537757][T17806] lo speed is unknown, defaulting to 1000
[  309.559169][T17810] syzkaller1: entered promiscuous mode
[  309.563020][T17810] syzkaller1: entered allmulticast mode
[  309.936977][T17837] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  310.126585][T17851] syzkaller1: entered promiscuous mode
[  310.128426][T17851] syzkaller1: entered allmulticast mode
[  310.182108][T17855] 0{X: entered promiscuous mode
[  310.191088][T17855] 1{X: renamed from 30{X
[  310.193604][T17855] 1{X: left promiscuous mode
[  310.195197][T17855] 1{X: entered allmulticast mode
[  310.197330][T17855] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  310.317284][T17871] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  310.353946][T17871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  310.392628][T17875] validate_nla: 32 callbacks suppressed
[  310.392638][T17875] netlink: 'syz.2.3491': attribute type 13 has an invalid length.
[  310.401193][ T5871] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  310.403744][ T5871] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  310.406279][ T5871] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  310.411044][T17875] netlink: 'syz.2.3491': attribute type 13 has an invalid length.
[  310.419196][ T5871] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  310.453652][T17883] xt_socket: unknown flags 0x8
[  310.492341][T17894] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  310.517165][T17894] bond51: entered promiscuous mode
[  310.520667][T17894] 8021q: adding VLAN 0 to HW filter on device bond51
[  310.604229][T17912] bond29: (slave lo): Releasing backup interface
[  310.616744][T17912] bond29: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  310.631170][T17912] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  310.633241][T17919] netlink: 'syz.0.3502': attribute type 1 has an invalid length.
[  310.651974][T17919] 8021q: adding VLAN 0 to HW filter on device bond85
[  310.671266][T17919] vlan4: entered allmulticast mode
[  310.673190][T17919] bond85: entered allmulticast mode
[  310.687984][T17922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  310.724027][T17927] syzkaller1: tun_chr_ioctl cmd 1074025673
[  310.727318][T17925] netlink: 'syz.0.3504': attribute type 1 has an invalid length.
[  310.746337][T17925] bond86: (slave vxcan1): The slave device specified does not support setting the MAC address
[  310.750119][T17925] bond86: (slave vxcan1): Error -95 calling set_mac_address
[  310.799485][T17925] syzkaller1: tun_chr_ioctl cmd 1074025677
[  310.801589][T17925] syzkaller1: Refused to change device type
[  310.803685][T17927] syzkaller1: tun_chr_ioctl cmd 1074025677
[  310.805983][T17927] syzkaller1: Refused to change device type
[  310.836693][T17938] netlink: 'syz.2.3506': attribute type 13 has an invalid length.
[  310.841799][T17938] netlink: 'syz.2.3506': attribute type 17 has an invalid length.
[  310.860937][T17938] 0{X: refused to change device tx_queue_len
[  310.863174][T17938] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  310.938178][T17942] netlink: 'syz.0.3507': attribute type 10 has an invalid length.
[  310.965143][T17952] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  311.138031][T17966] netlink: 'syz.2.3514': attribute type 1 has an invalid length.
[  311.155032][T17966] macvlan1: entered promiscuous mode
[  311.156727][T17966] macvlan1: entered allmulticast mode
[  311.159182][T17966] bond60: entered promiscuous mode
[  311.161103][T17966] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  311.165136][T17966] bond60: left promiscuous mode
[  311.370800][T17976] tipc: Resetting bearer <ib:ip6gre0>
[  311.426559][T17976] team0: left allmulticast mode
[  311.434417][T17976] bridge14: left allmulticast mode
[  311.436536][T17976] team0: left promiscuous mode
[  311.438494][T17976] bridge14: left promiscuous mode
[  311.443749][T17976] batman_adv: batadv0: Interface deactivated: ip6gretap17
[  311.468474][T17976] batman_adv: batadv0: Interface deactivated: ip6gretap18
[  311.642584][ T5820] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.645935][ T5820] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.649546][ T5820] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.652915][ T5820] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  311.737582][T17986] syzkaller0: entered promiscuous mode
[  311.740986][T17986] syzkaller0: entered allmulticast mode
[  311.744475][T17986] netlink: zone id is out of range
[  311.848552][T17986] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.853989][T17985] tipc: Resetting bearer <eth:syzkaller0>
[  311.866326][T17985] tipc: Disabling bearer <eth:syzkaller0>
[  311.882443][T17992] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap21
[  311.887763][T17992] batman_adv: batadv0: Adding interface: ip6gretap21
[  311.890816][T17992] batman_adv: batadv0: The MTU of interface ip6gretap21 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  311.901449][T17992] batman_adv: batadv0: Interface activated: ip6gretap21
[  312.077547][T18004] netlink: 'syz.1.3523': attribute type 10 has an invalid length.
[  312.081196][T18011] __nla_validate_parse: 23 callbacks suppressed
[  312.081206][T18011] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3523'.
[  312.086104][T18004] netlink: 'syz.1.3523': attribute type 10 has an invalid length.
[  312.088496][T18011] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3523'.
[  312.095857][T18011] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3523'.
[  312.100950][T18011] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3523'.
[  312.104396][T18011] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3523'.
[  312.107811][T18011] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3523'.
[  312.115923][T18011] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3523'.
[  312.120483][T18011] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3523'.
[  312.123623][T18011] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3523'.
[  312.126689][T18011] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3523'.
[  312.177977][T18020] 8021q: adding VLAN 0 to HW filter on device bond52
[  312.238545][T18032] tunl0: Caught tx_queue_len zero misconfig
[  312.268505][T18032] bond53 (unregistering): Released all slaves
[  312.517543][T18045] batman_adv: batadv0: Removing interface: ip6gretap9
[  312.528014][T18045] batman_adv: batadv0: Removing interface: ip6gretap10
[  312.531038][T18045] batman_adv: batadv0: Removing interface: ip6gretap12
[  312.533562][T18045] batman_adv: batadv0: Removing interface: ip6gretap13
[  312.536327][T18045] batman_adv: batadv0: Removing interface: ip6gretap14
[  312.546795][T18045] batman_adv: batadv0: Removing interface: ip6gretap15
[  312.552024][T18045] batman_adv: batadv0: Removing interface: ip6gretap16
[  312.556791][T18045] batman_adv: batadv0: Interface deactivated: ip6gretap17
[  312.559826][T18045] batman_adv: batadv0: Removing interface: ip6gretap17
[  312.564513][T18045] batman_adv: batadv0: Interface deactivated: ip6gretap18
[  312.567266][T18045] batman_adv: batadv0: Removing interface: ip6gretap18
[  312.570531][T18045] batman_adv: batadv0: Interface deactivated: ip6gretap19
[  312.573103][T18045] batman_adv: batadv0: Removing interface: ip6gretap19
[  312.575850][T18045] batman_adv: batadv0: Interface deactivated: ip6gretap20
[  312.578059][T18045] batman_adv: batadv0: Removing interface: ip6gretap20
[  312.581532][T18045] batman_adv: batadv0: Interface deactivated: ip6gretap21
[  312.583776][T18045] batman_adv: batadv0: Removing interface: ip6gretap21
[  312.712922][T18051] hsr0: entered promiscuous mode
[  312.717885][T18050] hsr0: left promiscuous mode
[  312.747610][T18057] x_tables: unsorted underflow at hook 4
[  312.762792][T18057] 8021q: adding VLAN 0 to HW filter on device bond61
[  312.781157][T18057] 8021q: adding VLAN 0 to HW filter on device bond62
[  312.784808][T18057] bond61: (slave bond62): Enslaving as an active interface with an up link
[  312.804108][T18057] bond61 (unregistering): (slave bond62): Releasing backup interface
[  312.817004][T18057] bond61 (unregistering): Released all slaves
[  312.858352][T18065] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  313.003236][T18082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  313.090098][T18087] 1{X: left allmulticast mode
[  313.119191][T18087] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.282731][T18119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  314.285061][T18119] IPv6: NLM_F_CREATE should be set when creating new route
[  314.735289][T18145] bridge0: entered allmulticast mode
[  314.757533][T18145] pim6reg: entered allmulticast mode
[  314.772961][T18145] pim6reg: left allmulticast mode
[  314.775093][T18145] bridge0: left allmulticast mode
[  315.058150][T18180] bond87: entered promiscuous mode
[  315.073972][T18180] bond87: entered allmulticast mode
[  315.078594][T18180] 8021q: adding VLAN 0 to HW filter on device bond87
[  315.319725][T18215] ip6gre6: entered promiscuous mode
[  315.321407][T18215] ip6gre6: entered allmulticast mode
[  315.384496][T18206] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  315.391206][T18206] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  315.534418][T18234] validate_nla: 144 callbacks suppressed
[  315.534433][T18234] netlink: 'syz.0.3590': attribute type 1 has an invalid length.
[  315.558603][T18234] bond88: entered promiscuous mode
[  315.563594][T18234] 8021q: adding VLAN 0 to HW filter on device bond88
[  315.576179][T18234] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  315.605330][T18234] 8021q: adding VLAN 0 to HW filter on device bond88
[  315.608542][T18234] bond88: (slave wireguard2): The slave device specified does not support setting the MAC address
[  315.613170][T18234] bond88: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  315.619267][T18234] bond88: (slave wireguard2): making interface the new active one
[  315.622001][T18234] wireguard2: entered promiscuous mode
[  315.625155][T18234] bond88: (slave wireguard2): Enslaving as an active interface with an up link
[  315.674490][T18243] net_ratelimit: 3 callbacks suppressed
[  315.674504][T18243] openvswitch: netlink: Multiple metadata blocks provided
[  315.802422][T18246] IPVS: Scheduler module ip_vs_sip not found
[  316.285782][T18268] syzkaller1: entered promiscuous mode
[  316.287968][T18268] syzkaller1: entered allmulticast mode
[  316.293946][T18275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.337872][T18275] tipc: Disabling bearer <eth:syzkaller0>
[  316.359978][T18278] bond61: option downdelay: invalid value (18446744073709547521)
[  316.362565][T18278] bond61: option downdelay: allowed values 0 - 2147483647
[  316.365531][T18278] bond61 (unregistering): Released all slaves
[  316.473093][T18281] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  316.477018][T18281] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  317.264545][T18315] __nla_validate_parse: 185 callbacks suppressed
[  317.264562][T18315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3610'.
[  317.558124][T18335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3616'.
[  317.597069][T18337] IPVS: ip_vs_edit_dest(): server weight less than zero
[  317.600550][T18337] netlink: 'syz.2.3617': attribute type 1 has an invalid length.
[  317.641071][T18337] bond61: (slave bridge53): Enslaving as a backup interface with an up link
[  317.647066][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3617'.
[  317.651308][T18337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3617'.
[  317.665186][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3618'.
[  317.719005][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  317.722603][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  317.726007][T18348] x_tables: duplicate underflow at hook 3
[  317.783500][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  317.786944][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  317.836978][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  317.840698][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  317.885325][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  317.888857][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  317.935141][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  317.938422][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  317.995344][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  317.999101][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  318.060288][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  318.064867][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  318.124944][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  318.128975][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  318.192959][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  318.197214][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  318.250867][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  318.255722][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  318.310775][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  318.315288][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  318.380756][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  318.385266][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  318.450926][T18340] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  318.454538][T18340] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  319.561357][T18301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  319.778057][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3633'.
[  319.778617][T18382] lo speed is unknown, defaulting to 1000
[  319.782190][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3633'.
[  319.817569][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3632'.
[  319.848216][T18389] netlink: 'syz.0.3632': attribute type 10 has an invalid length.
[  319.863176][T18389] netlink: 'syz.0.3632': attribute type 10 has an invalid length.
[  319.894344][T18394] veth0: left promiscuous mode
[  319.896328][T18394] veth0: left allmulticast mode
[  319.897937][T18394] veth1: left promiscuous mode
[  319.901134][T18394] veth1: left allmulticast mode
[  319.903092][T18394] wg0: left promiscuous mode
[  319.904651][T18394] wg0: left allmulticast mode
[  319.906550][T18394] wg1: left promiscuous mode
[  319.908436][T18394] wg1: left allmulticast mode
[  319.912304][T18394] wg2: left promiscuous mode
[  319.914232][T18394] wg2: left allmulticast mode
[  319.916264][T18394] veth1_to_bridge: left promiscuous mode
[  319.918551][T18394] veth1_to_bridge: left allmulticast mode
[  319.921038][T18394] bridge_slave_1: left promiscuous mode
[  319.924465][T18396] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3634'.
[  319.932117][T18394] bridge_slave_1: left allmulticast mode
[  319.934605][T18394] veth0_to_team: left promiscuous mode
[  319.936429][T18394] veth0_to_team: left allmulticast mode
[  319.938336][T18394] team_slave_0: left promiscuous mode
[  319.951497][T18394] team_slave_0: left allmulticast mode
[  319.953902][T18394] veth1_to_team: left promiscuous mode
[  319.956149][T18394] veth1_to_team: left allmulticast mode
[  319.958538][T18394] team_slave_1: left promiscuous mode
[  319.967780][T18394] team_slave_1: left allmulticast mode
[  319.971847][T18394] veth1_to_batadv: left promiscuous mode
[  319.975040][T18394] veth1_to_batadv: left allmulticast mode
[  319.977742][T18394] batadv_slave_1: left promiscuous mode
[  319.982399][T18394] batadv_slave_1: left allmulticast mode
[  319.984324][T18394] veth0_to_hsr: left promiscuous mode
[  319.986222][T18394] veth0_to_hsr: left allmulticast mode
[  319.995355][T18394] hsr0: left promiscuous mode
[  319.997207][T18394] hsr0: left allmulticast mode
[  320.000153][T18394] hsr_slave_0: left allmulticast mode
[  320.002001][T18394] veth1_macvtap: left allmulticast mode
[  320.004112][T18394] geneve1: left promiscuous mode
[  320.005782][T18394] geneve1: left allmulticast mode
[  320.007894][T18394] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  320.020540][T18394] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  320.023750][T18394] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  320.026728][T18394] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  320.031002][T18394] : left allmulticast mode
[  320.033114][T18394] bridge1: left promiscuous mode
[  320.034883][T18394] bridge1: left allmulticast mode
[  320.036537][T18394] mac80211_hwsim hwsim8 wlan2: left promiscuous mode
[  320.039380][T18394] mac80211_hwsim hwsim8 wlan2: left allmulticast mode
[  320.042426][T18394] bond1: left promiscuous mode
[  320.044627][T18394] bond1: left allmulticast mode
[  320.046913][T18394] veth2: left promiscuous mode
[  320.049415][T18394] veth2: left allmulticast mode
[  320.051528][T18394] veth3: left promiscuous mode
[  320.053764][T18394] veth3: left allmulticast mode
[  320.055904][T18394] bond2: left promiscuous mode
[  320.057969][T18394] bond2: left allmulticast mode
[  320.064771][T18394] sit1: left promiscuous mode
[  320.066624][T18394] sit1: left allmulticast mode
[  320.069200][T18394] gretap1: left promiscuous mode
[  320.071247][T18394] gretap1: left allmulticast mode
[  320.073750][T18394] macsec1: left promiscuous mode
[  320.076079][T18394] macsec1: left allmulticast mode
[  320.078365][T18394] bond3: left promiscuous mode
[  320.081089][T18394] bond3: left allmulticast mode
[  320.083361][T18394] veth4: left promiscuous mode
[  320.085269][T18394] veth4: left allmulticast mode
[  320.087475][T18394] veth5: left promiscuous mode
[  320.089858][T18394] veth5: left allmulticast mode
[  320.092607][T18394] bond4: left promiscuous mode
[  320.094602][T18394] bond4: left allmulticast mode
[  320.096691][T18394] veth6: left promiscuous mode
[  320.098885][T18394] veth6: left allmulticast mode
[  320.101196][T18394] veth7: left promiscuous mode
[  320.103263][T18394] veth7: left allmulticast mode
[  320.105366][T18394] bond5: left promiscuous mode
[  320.107217][T18394] bond5: left allmulticast mode
[  320.110187][T18394] : left promiscuous mode
[  320.112283][T18394] : left allmulticast mode
[  320.114052][T18394] bond6: left promiscuous mode
[  320.115530][T18394] bond6: left allmulticast mode
[  320.117098][T18394] gre1: left promiscuous mode
[  320.118537][T18394] gre1: left allmulticast mode
[  320.120741][T18394] bond7: left promiscuous mode
[  320.122681][T18394] bond7: left allmulticast mode
[  320.125173][T18394] syztnl2: left promiscuous mode
[  320.127130][T18394] syztnl2: left allmulticast mode
[  320.129631][T18394] mac80211_hwsim hwsim11 wlan3: left promiscuous mode
[  320.132691][T18394] mac80211_hwsim hwsim11 wlan3: left allmulticast mode
[  320.135930][T18394] bond8: left promiscuous mode
[  320.137907][T18394] bond8: left allmulticast mode
[  320.140585][T18394] ipip0: left promiscuous mode
[  320.142548][T18394] ipip0: left allmulticast mode
[  320.144744][T18394] bond9: left promiscuous mode
[  320.146871][T18394] bond9: left allmulticast mode
[  320.149143][T18394] gre2: left promiscuous mode
[  320.151297][T18394] gre2: left allmulticast mode
[  320.153357][T18394] bridge2: left promiscuous mode
[  320.155457][T18394] bridge2: left allmulticast mode
[  320.157698][T18394] ipip1: left promiscuous mode
[  320.159745][T18394] ipip1: left allmulticast mode
[  320.162110][T18394] bond10: left promiscuous mode
[  320.164116][T18394] bond10: left allmulticast mode
[  320.166326][T18394] macsec2: left promiscuous mode
[  320.168397][T18394] macsec2: left allmulticast mode
[  320.170887][T18394] vxlan0: left promiscuous mode
[  320.172437][T18394] vxlan0: left allmulticast mode
[  320.174147][T18394] bond11: left promiscuous mode
[  320.175695][T18394] bond11: left allmulticast mode
[  320.177469][T18394] ip6gretap1: left promiscuous mode
[  320.179562][T18394] ip6gretap1: left allmulticast mode
[  320.182347][T18394] bond12: left promiscuous mode
[  320.184337][T18394] bond12: left allmulticast mode
[  320.186371][T18394] vlan0: left promiscuous mode
[  320.188343][T18394] bond_slave_1: left promiscuous mode
[  320.191108][T18394] vlan0: left allmulticast mode
[  320.193092][T18394] bond_slave_1: left allmulticast mode
[  320.195372][T18394] mac80211_hwsim hwsim14 wlan4: left promiscuous mode
[  320.198103][T18394] mac80211_hwsim hwsim14 wlan4: left allmulticast mode
[  320.202223][T18394] bond13: left promiscuous mode
[  320.204166][T18394] bond13: left allmulticast mode
[  320.206226][T18394] veth8: left promiscuous mode
[  320.208114][T18394] veth8: left allmulticast mode
[  320.210677][T18394] veth9: left promiscuous mode
[  320.212663][T18394] veth9: left allmulticast mode
[  320.214720][T18394] bridge3: left promiscuous mode
[  320.216700][T18394] bridge3: left allmulticast mode
[  320.218949][T18394] ip6erspan0: left promiscuous mode
[  320.221248][T18394] ip6erspan0: left allmulticast mode
[  320.223524][T18394] bond14: left promiscuous mode
[  320.225445][T18394] bond14: left allmulticast mode
[  320.227467][T18394] gtp0: left promiscuous mode
[  320.229920][T18394] gtp0: left allmulticast mode
[  320.232199][T18394] bond15: left promiscuous mode
[  320.234230][T18394] bond15: left allmulticast mode
[  320.236295][T18394] macsec3: left promiscuous mode
[  320.238250][T18394] macsec3: left allmulticast mode
[  320.240414][T18394] bond16: left promiscuous mode
[  320.242766][T18394] bond16: left allmulticast mode
[  320.244959][T18394] gretap2: left promiscuous mode
[  320.246850][T18394] gretap2: left allmulticast mode
[  320.249275][T18394] geneve0.4: left promiscuous mode
[  320.251300][T18394] geneve0: left promiscuous mode
[  320.253401][T18394] geneve0.4: left allmulticast mode
[  320.255555][T18394] geneve0: left allmulticast mode
[  320.257728][T18394] syztnl0: left promiscuous mode
[  320.260422][T18394] syztnl0: left allmulticast mode
[  320.262552][T18394] bond17: left promiscuous mode
[  320.264628][T18394] bond17: left allmulticast mode
[  320.266890][T18394] geneve2: left promiscuous mode
[  320.269179][T18394] geneve2: left allmulticast mode
[  320.271567][T18394] bond18: left allmulticast mode
[  320.273585][T18394] veth10: left promiscuous mode
[  320.275470][T18394] veth10: left allmulticast mode
[  320.277665][T18394] veth11: left promiscuous mode
[  320.279783][T18394] veth11: left allmulticast mode
[  320.282183][T18394] ip6tnl1: left promiscuous mode
[  320.284190][T18394] ip6tnl1: left allmulticast mode
[  320.286327][T18394] sit2: left promiscuous mode
[  320.288359][T18394] sit2: left allmulticast mode
[  320.291262][T18394] ip6gretap2: left promiscuous mode
[  320.293368][T18394] ip6gretap2: left allmulticast mode
[  320.295568][T18394] ip6tnl2: left promiscuous mode
[  320.297552][T18394] ip6tnl2: left allmulticast mode
[  320.300112][T18394] bond20: left promiscuous mode
[  320.302026][T18394] bond20: left allmulticast mode
[  320.304129][T18394] veth12: left promiscuous mode
[  320.306132][T18394] veth12: left allmulticast mode
[  320.308172][T18394] veth13: left promiscuous mode
[  320.311072][T18394] veth13: left allmulticast mode
[  320.313459][T18394] : left allmulticast mode
[  320.315396][T18394] ip6tnl3: left promiscuous mode
[  320.317360][T18394] ip6tnl3: left allmulticast mode
[  320.319901][T18394] m1Ie5n: left allmulticast mode
[  320.322414][T18394] ip6gre1: left promiscuous mode
[  320.324393][T18394] ip6gre1: left allmulticast mode
[  320.326448][T18394] ipip2: left promiscuous mode
[  320.328090][T18394] ipip2: left allmulticast mode
[  320.330591][T18394] bond21: left promiscuous mode
[  320.332659][T18394] bond21: left allmulticast mode
[  320.334832][T18394] ip6gretap3: left promiscuous mode
[  320.336827][T18394] ip6gretap3: left allmulticast mode
[  320.339073][T18394] >: left promiscuous mode
[  320.341062][T18394] >: left allmulticast mode
[  320.343111][T18394] bond22: left promiscuous mode
[  320.345061][T18394] bond22: left allmulticast mode
[  320.347121][T18394] : left allmulticast mode
[  320.349854][T18394] bond23: left promiscuous mode
[  320.351859][T18394] bond23: left allmulticast mode
[  320.354080][T18394] gretap3: left promiscuous mode
[  320.356104][T18394] gretap3: left allmulticast mode
[  320.358248][T18394] xfrm1: left promiscuous mode
[  320.360315][T18394] xfrm1: left allmulticast mode
[  320.362729][T18394] bridge4: left promiscuous mode
[  320.364924][T18394] bridge4: left allmulticast mode
[  320.367081][T18394] gretap4: left promiscuous mode
[  320.369332][T18394] gretap4: left allmulticast mode
[  320.371700][T18394] bond24: left promiscuous mode
[  320.373623][T18394] bond24: left allmulticast mode
[  320.375890][T18394] vti0: left promiscuous mode
[  320.377825][T18394] vti0: left allmulticast mode
[  320.380501][T18394] ip6gretap4: left promiscuous mode
[  320.382448][T18394] ip6gretap4: left allmulticast mode
[  320.384356][T18394] bond25: left promiscuous mode
[  320.386427][T18394] bond25: left allmulticast mode
[  320.388525][T18394] bond26: left promiscuous mode
[  320.390858][T18394] bond26: left allmulticast mode
[  320.393231][T18394] mac80211_hwsim hwsim29 wlan5: left promiscuous mode
[  320.395942][T18394] mac80211_hwsim hwsim29 wlan5: left allmulticast mode
[  320.398969][T18394] ip6gretap5: left promiscuous mode
[  320.401280][T18394] ip6gretap5: left allmulticast mode
[  320.403505][T18394] bond27: left promiscuous mode
[  320.405492][T18394] bond27: left allmulticast mode
[  320.407514][T18394] bond28: left promiscuous mode
[  320.410270][T18394] bond28: left allmulticast mode
[  320.412307][T18394] bond29: left promiscuous mode
[  320.414276][T18394] bond29: left allmulticast mode
[  320.416385][T18394] vcan1: left promiscuous mode
[  320.418356][T18394] vcan1: left allmulticast mode
[  320.421152][T18394] bridge5: left promiscuous mode
[  320.423369][T18394] bridge5: left allmulticast mode
[  320.426335][T18394] bond32: left promiscuous mode
[  320.428317][T18394] bond32: left allmulticast mode
[  320.431311][T18394] bond33: left promiscuous mode
[  320.434637][T18394] bond42: left promiscuous mode
[  320.436650][T18394] bond42: left allmulticast mode
[  320.439202][T18394] veth21: left allmulticast mode
[  320.442283][T18394] bond47: left promiscuous mode
[  320.444263][T18394] bond47: left allmulticast mode
[  320.446364][T18394] bond48: left allmulticast mode
[  320.450066][T18394] bond51: left promiscuous mode
[  320.452585][T18394] ip6gre6: left promiscuous mode
[  320.454597][T18394] ip6gre6: left allmulticast mode
[  320.476164][T18406] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap22
[  320.482272][T18406] batman_adv: batadv0: Adding interface: ip6gretap22
[  320.484825][T18406] batman_adv: batadv0: The MTU of interface ip6gretap22 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.495328][T18406] batman_adv: batadv0: Interface activated: ip6gretap22
[  320.596145][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3638'.
[  320.612942][T18414] netlink: 'syz.0.3639': attribute type 1 has an invalid length.
[  320.646584][T18414] 8021q: adding VLAN 0 to HW filter on device bond89
[  320.702743][T18423] netlink: 'syz.1.3641': attribute type 7 has an invalid length.
[  320.741773][T18421] bond89: (slave veth49): Enslaving as an active interface with a down link
[  320.764702][T18414] bond89: (slave veth51): Enslaving as an active interface with a down link
[  320.810309][T18430] bond55 (unregistering): Released all slaves
[  321.125817][T18455] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  321.134912][T18455] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  321.165742][T18459] netlink: 'syz.2.3648': attribute type 11 has an invalid length.
[  321.203207][T18463] syz.1.3649 (18463) used obsolete PPPIOCDETACH ioctl
[  321.294452][T18470] netlink: 'syz.1.3652': attribute type 1 has an invalid length.
[  321.649389][T18499] netlink: 'syz.1.3661': attribute type 1 has an invalid length.
[  321.680015][T18499] 8021q: adding VLAN 0 to HW filter on device bond55
[  321.705013][T18499] bond55: (slave veth29): Enslaving as an active interface with an up link
[  321.708893][T18502] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.732528][T18499] netlink: 'syz.1.3661': attribute type 1 has an invalid length.
[  321.743605][T18499] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.750163][T18499] bond55: (slave batadv0): Enslaving as an active interface with an up link
[  321.775698][T18503] tap0: tun_chr_ioctl cmd 1074025676
[  321.778142][T18503] tap0: owner set to 0
[  321.912493][T18515] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap22
[  321.917674][T18515] batman_adv: batadv0: Adding interface: ip6gretap22
[  321.925181][T18515] batman_adv: batadv0: The MTU of interface ip6gretap22 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  321.934962][T18515] batman_adv: batadv0: Interface activated: ip6gretap22
[  322.084436][T18523] netlink: 'syz.1.3669': attribute type 1 has an invalid length.
[  322.096718][T18523] 8021q: adding VLAN 0 to HW filter on device bond56
[  322.117027][T18523] bond56: (slave veth31): Enslaving as an active interface with an up link
[  322.134923][T18523] netlink: 'syz.1.3669': attribute type 1 has an invalid length.
[  322.142565][T18523] 8021q: adding VLAN 0 to HW filter on device batadv1
[  322.146101][T18523] bond56: (slave batadv1): Enslaving as an active interface with an up link
[  322.230618][T18526] lo speed is unknown, defaulting to 1000
[  322.268839][T18527] __nla_validate_parse: 10 callbacks suppressed
[  322.268849][T18527] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3670'.
[  322.585570][T18535] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3672'.
[  322.625323][T18537] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  322.653063][T18540] netlink: 'syz.0.3674': attribute type 7 has an invalid length.
[  322.690342][T18544] wg1: entered promiscuous mode
[  322.692175][T18544] wg1: entered allmulticast mode
[  322.772947][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3677'.
[  322.782701][T18550] netlink: 'syz.0.3677': attribute type 15 has an invalid length.
[  322.786112][T18550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3677'.
[  322.843387][T18560] team_slave_1: entered promiscuous mode
[  322.856451][T18562] netlink: 'syz.2.3681': attribute type 1 has an invalid length.
[  322.892539][T18562] 8021q: adding VLAN 0 to HW filter on device bond63
[  322.927550][T18562] bond63: (slave bridge54): making interface the new active one
[  322.930641][T18562] bond63: (slave bridge54): Enslaving as an active interface with an up link
[  322.939120][T18569] syzkaller0: entered promiscuous mode
[  322.941309][T18569] syzkaller0: entered allmulticast mode
[  322.947565][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3684'.
[  323.034090][T18574] syzkaller1: entered promiscuous mode
[  323.036361][T18574] syzkaller1: entered allmulticast mode
[  323.102403][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3688'.
[  323.106418][T18578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3688'.
[  323.240660][T18586] bond65: entered promiscuous mode
[  323.255891][T18586] vcan2: entered promiscuous mode
[  323.257895][T18586] vcan2: entered allmulticast mode
[  323.261290][T18586] bond65: (slave vcan2): The slave device specified does not support setting the MAC address
[  323.266011][T18586] bond65: (slave vcan2): Error -95 calling set_mac_address
[  323.461106][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3694'.
[  323.467350][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3694'.
[  323.476560][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3694'.
[  323.754928][T18629] wg2: Caught tx_queue_len zero misconfig
[  324.083462][T18662] IPVS: persistence engine module ip_vs_pe_ not found
[  324.563450][T18682] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  324.638446][T18682] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  324.685921][T18682] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  324.732565][T18682] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  324.810668][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  324.825130][ T5871] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  324.848330][ T5871] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  324.862362][ T5871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  324.882448][T18701] lo speed is unknown, defaulting to 1000
[  325.173494][T18710] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  326.788900][ T5816] Bluetooth: hci2: command 0x0405 tx timeout
[  327.651540][T18693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  327.854234][T18744] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  327.871471][T18746] lo speed is unknown, defaulting to 1000
[  327.910138][T18747] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  327.926948][T18747] __nla_validate_parse: 6 callbacks suppressed
[  327.926958][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3734'.
[  328.083291][T18749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3735'.
[  328.100311][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3735'.
[  328.145512][T18752] bridge0: port 2(wlan0) entered blocking state
[  328.147640][T18752] bridge0: port 2(wlan0) entered disabled state
[  328.159099][T18752] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  328.162310][T18752] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  328.181768][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3736'.
[  328.237768][T18757] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap23
[  328.243232][T18757] batman_adv: batadv0: Adding interface: ip6gretap23
[  328.245332][T18757] batman_adv: batadv0: The MTU of interface ip6gretap23 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  328.254866][T18757] batman_adv: batadv0: Interface activated: ip6gretap23
[  328.258314][T18761] validate_nla: 5 callbacks suppressed
[  328.258322][T18761] netlink: 'syz.1.3739': attribute type 3 has an invalid length.
[  328.288046][T18761] lo speed is unknown, defaulting to 1000
[  328.327846][T18765] syzkaller1: entered promiscuous mode
[  328.335436][T18765] syzkaller1: entered allmulticast mode
[  328.345350][T18765] netlink: 'syz.0.3740': attribute type 1 has an invalid length.
[  328.388385][T18765] 8021q: adding VLAN 0 to HW filter on device bond90
[  328.433513][T18775] bond90: (slave veth53): Enslaving as an active interface with a down link
[  328.484964][T18765] bond90: (slave veth55): Enslaving as an active interface with a down link
[  328.489400][T18765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3740'.
[  328.534183][T18778] openvswitch: netlink: IP tunnel dst address not specified
[  328.653396][T18791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'.
[  328.656865][T18791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'.
[  328.673491][T18794] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  328.678451][T18791] syzkaller1: entered promiscuous mode
[  328.681286][T18791] syzkaller1: entered allmulticast mode
[  328.685564][T18791] syzkaller1: left promiscuous mode
[  328.687334][T18791] syzkaller1: left allmulticast mode
[  328.735639][T18797] lo speed is unknown, defaulting to 1000
[  328.884171][T18799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3745'.
[  328.925527][T18804] netlink: 'syz.1.3749': attribute type 1 has an invalid length.
[  328.928538][T18804] netlink: 264 bytes leftover after parsing attributes in process `syz.1.3749'.
[  328.935372][T18804] netlink: 'syz.1.3749': attribute type 1 has an invalid length.
[  328.940992][T18804] netlink: 264 bytes leftover after parsing attributes in process `syz.1.3749'.
[  329.106413][T18810] netlink: 'syz.1.3751': attribute type 1 has an invalid length.
[  329.143013][T18810] bond57: (slave ip6gretap23): Enslaving as a backup interface with an up link
[  329.162551][T18810] veth33: entered promiscuous mode
[  329.168472][T18810] bond57: (slave veth33): Enslaving as a backup interface with a down link
[  329.175623][T18810] 8021q: adding VLAN 0 to HW filter on device bond57
[  329.176275][ T5871] bond57: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  329.300296][ T5820] bond57: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  329.358533][T18820] syzkaller1: tun_chr_ioctl cmd 1074025677
[  329.361122][T18820] syzkaller1: linktype set to 270
[  329.690826][T18841] sctp: [Deprecated]: syz.0.3760 (pid 18841) Use of int in maxseg socket option.
[  329.690826][T18841] Use struct sctp_assoc_value instead
[  329.705434][T18841] IPVS: Unknown mcast interface: bridge_slave_0
[  330.105920][T18887] netlink: 'syz.0.3774': attribute type 1 has an invalid length.
[  330.125687][T18884] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (32769) !
[  330.136926][T18884] IPv6: NLM_F_CREATE should be specified when creating new route
[  330.141204][T18885] IPv6: NLM_F_CREATE should be specified when creating new route
[  330.144186][T18887] bond91: (slave vxcan1): The slave device specified does not support setting the MAC address
[  330.145343][T18887] bond91: (slave vxcan1): Error -95 calling set_mac_address
[  330.192119][T18890] bond91: (slave bridge27): Enslaving as an active interface with a down link
[  330.203655][T18890] 8021q: adding VLAN 0 to HW filter on device bond91
[  330.285768][T18897] pim6reg: entered allmulticast mode
[  330.291956][T18897] pim6reg: left allmulticast mode
[  330.513629][T18925] netlink: 'syz.2.3785': attribute type 1 has an invalid length.
[  330.524891][T18908] lo speed is unknown, defaulting to 1000
[  330.608050][T18921] mac80211_hwsim hwsim5 wlan0: Caught tx_queue_len zero misconfig
[  330.614675][T18921] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  330.713336][T18944] pim6reg1: entered promiscuous mode
[  330.717395][T18944] pim6reg1: entered allmulticast mode
[  330.863957][T18959] lo: Caught tx_queue_len zero misconfig
[  330.941935][T18954] ip6gre7: entered promiscuous mode
[  330.957052][T18954] ip6gre7: entered allmulticast mode
[  331.097840][T18975] SET target dimension over the limit!
[  331.157858][T18973] netlink: 'syz.1.3799': attribute type 1 has an invalid length.
[  331.301378][T18998] netlink: 'syz.1.3807': attribute type 12 has an invalid length.
[  331.310507][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  331.321373][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  331.324441][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  331.333029][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  331.375547][T19012] netlink: 'syz.2.3811': attribute type 1 has an invalid length.
[  331.402237][T19012] bond66: entered promiscuous mode
[  331.404772][T19012] 8021q: adding VLAN 0 to HW filter on device bond66
[  331.415404][T19012] ip6_vti0: Caught tx_queue_len zero misconfig
[  331.419751][T19012] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  331.648191][T19026] tipc: Resetting bearer <ib:ip6gre0>
[  331.736324][T19036] 8021q: adding VLAN 0 to HW filter on device bond92
[  331.804221][T19036] bond92: entered promiscuous mode
[  331.806356][T19036] bond92: entered allmulticast mode
[  331.824363][T19036] team_slave_1: entered allmulticast mode
[  331.829618][T19036] bond92: (slave team_slave_1): Enslaving as an active interface with an up link
[  331.918453][T19056] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  331.956514][T19058] 8021q: adding VLAN 0 to HW filter on device bond67
[  331.970254][T19058] bond67: (slave veth39): Enslaving as an active interface with a down link
[  331.984995][T19058] bond67: (slave veth41): Enslaving as an active interface with a down link
[  332.002447][T19058] bond67: (slave bridge55): Enslaving as an active interface with a down link
[  332.438063][T19091] bond58: entered promiscuous mode
[  332.636256][T19115] syzkaller1: entered promiscuous mode
[  332.637934][T19115] syzkaller1: entered allmulticast mode
[  332.666011][T19118] 8021q: adding VLAN 0 to HW filter on device bond93
[  332.668486][T19116] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) !
[  332.673262][T19115] wg1: left promiscuous mode
[  332.674953][T19115] wg1: left allmulticast mode
[  332.705293][T19115] batman_adv: batadv0: Interface deactivated: ip6gretap22
[  332.742407][T19115] veth33: left promiscuous mode
[  332.749136][T19115] ip6gre7: left promiscuous mode
[  332.750781][T19115] ip6gre7: left allmulticast mode
[  332.756073][T19115] bond58: left promiscuous mode
[  332.760495][T19115] syzkaller1: left promiscuous mode
[  332.762120][T19115] syzkaller1: left allmulticast mode
[  332.765370][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.771561][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.774619][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.777258][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.801226][T19118] SET target dimension over the limit!
[  332.957938][T19127] __nla_validate_parse: 111 callbacks suppressed
[  332.957954][T19127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3840'.
[  332.973152][T19127] xt_hashlimit: size too large, truncated to 1048576
[  333.096940][T19138] bond59: entered promiscuous mode
[  333.101316][T19138] 8021q: adding VLAN 0 to HW filter on device bond59
[  333.131555][T19145] 8021q: adding VLAN 0 to HW filter on device bond68
[  333.145832][T19138] vlan5: entered allmulticast mode
[  333.147694][T19138] bond59: entered allmulticast mode
[  333.162099][T19148] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3845'.
[  333.293006][T19158] ip6tnl5: entered promiscuous mode
[  333.445682][T19172] validate_nla: 9 callbacks suppressed
[  333.445712][T19172] netlink: 'syz.2.3849': attribute type 30 has an invalid length.
[  333.457235][T19172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3849'.
[  333.494369][T19172] bond69: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  333.504304][T19172] bond69 (unregistering): Released all slaves
[  333.581394][T19192] syzkaller1: entered promiscuous mode
[  333.588779][T19192] syzkaller1: entered allmulticast mode
[  333.599682][  T839] block nbd3: Connection timed out, retrying (0/2 alive)
[  333.602137][  T839] block nbd3: Connection timed out, retrying (0/2 alive)
[  333.604552][  T839] block nbd3: Connection timed out, retrying (0/2 alive)
[  333.606684][  T839] block nbd3: Connection timed out, retrying (0/2 alive)
[  333.609312][  T839] block nbd3: Dead connection, failed to find a fallback
[  333.612236][  T839] block nbd3: shutting down sockets
[  333.614099][  T839] blk_print_req_error: 138 callbacks suppressed
[  333.614107][  T839] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  333.619573][  T839] buffer_io_error: 138 callbacks suppressed
[  333.619580][  T839] Buffer I/O error on dev nbd3, logical block 3, async page read
[  333.624492][  T839] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  333.627827][  T839] Buffer I/O error on dev nbd3, logical block 2, async page read
[  333.631120][  T839] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  333.634886][  T839] Buffer I/O error on dev nbd3, logical block 1, async page read
[  333.638100][  T839] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  333.641970][  T839] Buffer I/O error on dev nbd3, logical block 0, async page read
[  333.648400][T17368] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  333.661793][T17368] Buffer I/O error on dev nbd3, logical block 0, async page read
[  333.664226][T17368] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  333.668786][T17368] Buffer I/O error on dev nbd3, logical block 1, async page read
[  333.671335][T17368] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  333.678925][T17368] Buffer I/O error on dev nbd3, logical block 2, async page read
[  333.681358][T17368] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  333.684237][T17368] Buffer I/O error on dev nbd3, logical block 3, async page read
[  333.686689][T17368] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  333.704424][T17368] Buffer I/O error on dev nbd3, logical block 0, async page read
[  333.706816][T17368] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  333.723337][T17368] Buffer I/O error on dev nbd3, logical block 1, async page read
[  333.730612][T17368] ldm_validate_partition_table(): Disk read failed.
[  333.733629][T17368] Dev nbd3: unable to read RDB block 0
[  333.736182][T17368]  nbd3: unable to read partition table
[  333.740379][T17368] ldm_validate_partition_table(): Disk read failed.
[  333.743788][T17368] Dev nbd3: unable to read RDB block 0
[  333.745747][T17368]  nbd3: unable to read partition table
[  333.798104][T19205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3856'.
[  333.843531][T19209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.895314][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3859'.
[  333.914779][T19213] ip6erspan0: entered allmulticast mode
[  333.969346][T19218] netlink: 'syz.1.3858': attribute type 1 has an invalid length.
[  334.014813][T19213] gretap0: entered allmulticast mode
[  334.022392][T19213] bond60: (slave gretap0): making interface the new active one
[  334.026044][T19213] bond60: (slave gretap0): Enslaving as an active interface with an up link
[  334.169067][T19224] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3857'.
[  334.215843][T19236] netlink: 'syz.0.3863': attribute type 1 has an invalid length.
[  334.276951][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3863'.
[  334.280886][T19236] 8021q: adding VLAN 0 to HW filter on device bond94
[  334.280901][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3863'.
[  334.299039][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3864'.
[  334.304532][T19236] bond94 (unregistering): Released all slaves
[  334.362412][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3865'.
[  334.415438][T19246] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  334.427769][T19248] IPVS: set_ctl: invalid protocol: 56 224.0.0.1:20001
[  334.438185][T19248] ip6tnl0: mtu less than device minimum
[  334.667990][T19273] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  334.815419][T19291] 0{X: renamed from 31{X
[  334.818049][T19291] 0{X: entered allmulticast mode
[  334.822872][T19291] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  334.853580][T19293] openvswitch: : Dropping previously announced user features
[  334.894989][T19293] openvswitch: : Dropping previously announced user features
[  335.227577][T19310] netlink: 'syz.1.3888': attribute type 29 has an invalid length.
[  335.231445][T19310] netlink: 'syz.1.3888': attribute type 29 has an invalid length.
[  335.234995][T19310] netlink: 'syz.1.3888': attribute type 29 has an invalid length.
[  335.238397][T19310] netlink: 'syz.1.3888': attribute type 29 has an invalid length.
[  335.242106][T19310] netlink: 'syz.1.3888': attribute type 29 has an invalid length.
[  335.245566][T19310] netlink: 'syz.1.3888': attribute type 29 has an invalid length.
[  335.249342][T19310] netlink: 'syz.1.3888': attribute type 29 has an invalid length.
[  335.266734][T19310] hsr0: entered promiscuous mode
[  335.271820][T19309] hsr0: left promiscuous mode
[  335.682883][T19323] ip6_vti0: entered promiscuous mode
[  335.802170][T19328] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  335.805940][T19328] tc_dump_action: action bad kind
[  335.849120][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.881731][T19320] nbd4: detected capacity change from 0 to 63
[  335.896523][T17409] block nbd4: Receive control failed (result -104)
[  335.900706][   T56] block nbd4: Receive control failed (result -32)
[  336.043145][T19346] ip6gre5: entered promiscuous mode
[  336.045367][T19346] ip6gre5: entered allmulticast mode
[  336.048981][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.300867][T19369] lo speed is unknown, defaulting to 1000
[  336.778323][T19391] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  337.241379][T19420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  337.256735][T19420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.260202][T19420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.262963][T19420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.410858][T19427] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  338.001207][T19473] tipc: Resetting bearer <ib:ip6gre0>
[  338.072230][T19475] ip6_vti0: left promiscuous mode
[  338.112809][T19482] syzkaller1: tun_chr_ioctl cmd 1074025673
[  338.134120][T19481] bond94: (slave vxcan1): The slave device specified does not support setting the MAC address
[  338.137884][T19481] bond94: (slave vxcan1): Error -95 calling set_mac_address
[  338.158500][T19485] __nla_validate_parse: 95 callbacks suppressed
[  338.158512][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3941'.
[  338.177802][T19486] bond69: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  338.192160][T19486] bond69 (unregistering): Released all slaves
[  338.207808][T19481] syzkaller1: tun_chr_ioctl cmd 1074025677
[  338.210059][T19481] syzkaller1: Refused to change device type
[  338.394464][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3944'.
[  338.409322][T19498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3944'.
[  338.431760][T19503] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3946'.
[  338.457925][T19504] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.531399][T19512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3948'.
[  338.563819][T19512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3948'.
[  338.621352][T19515] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3949'.
[  338.634256][T19515] sch_tbf: burst 512 is lower than device lo mtu (11337746) !
[  338.681801][T19523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3952'.
[  338.685421][T19523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3952'.
[  338.750462][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3953'.
[  338.868045][T19533] lo speed is unknown, defaulting to 1000
[  339.366441][T19562] tipc: Resetting bearer <ib:ip6gre0>
[  339.409001][T19567] validate_nla: 82 callbacks suppressed
[  339.409012][T19567] netlink: 'syz.2.3964': attribute type 1 has an invalid length.
[  339.437516][T19567] 8021q: adding VLAN 0 to HW filter on device bond69
[  339.453709][T19567] vlan0: entered promiscuous mode
[  339.455327][T19567] bond69: entered promiscuous mode
[  339.456993][T19567] vlan0: entered allmulticast mode
[  339.459133][T19567] bond69: entered allmulticast mode
[  339.465362][T19567] hma(kX: entered promiscuous mode
[  339.679223][T19597] netlink: 'syz.1.3970': attribute type 1 has an invalid length.
[  339.754637][T19600] bond95: entered promiscuous mode
[  339.757098][T19600] 8021q: adding VLAN 0 to HW filter on device bond95
[  340.205813][T19631] netlink: 'syz.1.3981': attribute type 21 has an invalid length.
[  340.242114][T19639] netlink: 'syz.0.3983': attribute type 1 has an invalid length.
[  340.256984][T19639] bond96: entered promiscuous mode
[  340.262818][T19639] 8021q: adding VLAN 0 to HW filter on device bond96
[  340.286603][T19639] bond96: left promiscuous mode
[  340.288909][T19639] bond96: entered allmulticast mode
[  340.373702][T19648] netlink: 'syz.2.3985': attribute type 14 has an invalid length.
[  340.376888][T19648] netlink: 'syz.2.3985': attribute type 13 has an invalid length.
[  340.573264][T19674] syzkaller1: entered promiscuous mode
[  340.575478][T19674] syzkaller1: entered allmulticast mode
[  340.668534][T19684] netlink: 'syz.0.3998': attribute type 1 has an invalid length.
[  340.673103][T19684] netlink: 'syz.0.3998': attribute type 2 has an invalid length.
[  340.713810][T19686] netlink: 'syz.0.3999': attribute type 3 has an invalid length.
[  340.715812][T19688] netlink: 'syz.2.4000': attribute type 10 has an invalid length.
[  340.908883][T19688] nbd5: detected capacity change from 0 to 63
[  340.916060][   T56] block nbd5: Receive control failed (result -104)
[  340.919374][T17409] block nbd5: Receive control failed (result -32)
[  341.032631][T19702] net_ratelimit: 1025 callbacks suppressed
[  341.032674][T19702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  341.075785][T19710] dvmrp0: entered allmulticast mode
[  341.113511][T19715] gre0: Master is either lo or non-ether device
[  341.224059][T19728] 8021q: adding VLAN 0 to HW filter on device bond29
[  341.243185][T19728] bond29: (slave ip6gretap19): Enslaving as a backup interface with an up link
[  341.320100][   T12] bond29: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  341.329303][   T12] bond29: (slave ip6gretap19): link status up again after 0 ms
[  341.332662][   T12] bond29: (slave ip6gretap19): failed to get link speed/duplex
[  341.439465][   T12] bond29: (slave ip6gretap19): failed to get link speed/duplex
[  341.442375][   T12] bond29: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  341.531490][T19758] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  341.550868][T15674] bond29: (slave ip6gretap19): failed to get link speed/duplex
[  341.602230][T19758] ip6gre8: entered allmulticast mode
[  341.700380][T19778] bond66: entered allmulticast mode
[  341.734902][T19781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  341.744745][T19783] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  341.751769][T15674] bond29: (slave ip6gretap19): failed to get link speed/duplex
[  341.807055][T19791] bond97: entered promiscuous mode
[  341.812972][T19791] 8021q: adding VLAN 0 to HW filter on device bond97
[  341.917569][T19805] batman_adv: batadv0: Removing interface: ip6gretap0
[  342.234742][T19823] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  342.268323][T19822] team0 (unregistering): Port device bridge14 removed
[  342.274417][T19822] team0 (unregistering): Port device bridge22 removed
[  342.404752][T19826] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  342.652000][T19844] bond70: (slave vxcan1): The slave device specified does not support setting the MAC address
[  342.656053][T19844] bond70: (slave vxcan1): Error -95 calling set_mac_address
[  342.672111][T19850] workqueue: Failed to create a rescuer kthread for wq "bond98": -EINTR
[  342.696592][T19847] syzkaller1: entered promiscuous mode
[  342.702228][T19847] syzkaller1: entered allmulticast mode
[  342.750136][T19844] bond71: entered promiscuous mode
[  342.752119][T19844] 8021q: adding VLAN 0 to HW filter on device bond71
[  342.777133][T19844] bond70: (slave bridge56): Enslaving as an active interface with a down link
[  342.993844][T19880] hmac(sha224: entered promiscuous mode
[  343.074106][T19890] pimreg0: tun_chr_ioctl cmd 1074025681
[  343.162147][T19898] lo: entered allmulticast mode
[  343.163833][T19898] lo: left allmulticast mode
[  343.173396][T19896] x_tables: ip6_tables: udplite match: only valid for protocol 136
[  343.176190][T19896] __nla_validate_parse: 215 callbacks suppressed
[  343.176198][T19896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4058'.
[  343.182167][T19902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4060'.
[  343.186354][T19902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4060'.
[  343.202179][T19903] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4060'.
[  343.205465][T19903] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4060'.
[  343.233412][T19905] xt_time: invalid argument - start or stop time greater than 23:59:59
[  343.261321][T19908] pim6reg1: entered promiscuous mode
[  343.263410][T19908] pim6reg1: entered allmulticast mode
[  343.330148][T19918] bond62: entered promiscuous mode
[  343.332052][T19918] 8021q: adding VLAN 0 to HW filter on device bond62
[  343.360493][T19926] erspan0: entered promiscuous mode
[  343.362823][T19926] macsec4: entered promiscuous mode
[  343.366651][T19926] erspan0: left promiscuous mode
[  343.376655][T19928] wg1: left promiscuous mode
[  343.383200][T19928] bond87: left promiscuous mode
[  343.385929][T19928] bond88: left promiscuous mode
[  343.387911][T19928] wireguard2: left promiscuous mode
[  343.394697][T19928] bond92: left promiscuous mode
[  343.396646][T19928] team_slave_1: left promiscuous mode
[  343.397910][T19918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  343.400877][T19928] ip6tnl5: left promiscuous mode
[  343.405877][T19928] bond95: left promiscuous mode
[  343.408444][T19928] bond97: left promiscuous mode
[  343.485104][T19934] syzkaller1: entered promiscuous mode
[  343.487016][T19934] syzkaller1: entered allmulticast mode
[  343.512313][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4070'.
[  343.566607][T19943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4070'.
[  343.634728][T19948] netlink: 34 bytes leftover after parsing attributes in process `syz.0.4072'.
[  343.644800][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4072'.
[  343.783249][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4074'.
[  344.403990][T19979] tipc: Resetting bearer <ib:ip6gre0>
[  344.420802][T19983] validate_nla: 73 callbacks suppressed
[  344.420823][T19983] netlink: 'syz.2.4082': attribute type 13 has an invalid length.
[  344.427790][T19983] netlink: 'syz.2.4082': attribute type 17 has an invalid length.
[  344.558220][T19988] netlink: 'syz.0.4084': attribute type 1 has an invalid length.
[  345.258232][T19993] xt_connbytes: Forcing CT accounting to be enabled
[  345.262561][T19993] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  345.272186][T19993] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  345.275110][T19993] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  347.227755][T19977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  347.231485][T19988] netlink: 'syz.0.4084': attribute type 2 has an invalid length.
[  347.234537][T19988] netlink: 'syz.0.4084': attribute type 1 has an invalid length.
[  347.321084][T19995] netlink: 'syz.2.4086': attribute type 1 has an invalid length.
[  347.410739][T20000] netlink: 'syz.2.4088': attribute type 1 has an invalid length.
[  347.437166][T20006] net_ratelimit: 28 callbacks suppressed
[  347.437180][T20006] openvswitch: netlink: IP tunnel dst address not specified
[  347.459976][T20006] netlink: 'syz.1.4089': attribute type 2 has an invalid length.
[  347.463040][T20006] netlink: 'syz.1.4089': attribute type 1 has an invalid length.
[  347.517820][T20009] syzkaller0: entered promiscuous mode
[  347.521225][T20009] syzkaller0: entered allmulticast mode
[  347.602429][T20020] netlink: 'syz.1.4095': attribute type 1 has an invalid length.
[  347.622781][T20020] 8021q: adding VLAN 0 to HW filter on device bond63
[  348.073389][T20062] lo speed is unknown, defaulting to 1000
[  348.156853][T20069] bridge57: entered promiscuous mode
[  348.159494][T20069] bridge57: entered allmulticast mode
[  348.319803][T20069] bridge57: entered promiscuous mode
[  348.321603][T20069] bridge57: entered allmulticast mode
[  348.435397][T20090] workqueue: Failed to create a rescuer kthread for wq "bond98": -EINTR
[  348.443367][T20087] xt_hashlimit: size too large, truncated to 1048576
[  348.529309][T20099] wg1: entered promiscuous mode
[  348.613311][T20107] 8021q: adding VLAN 0 to HW filter on device bond64
[  348.643189][T20111] __nla_validate_parse: 82 callbacks suppressed
[  348.643203][T20111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4114'.
[  348.703410][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4116'.
[  348.706972][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4116'.
[  349.456425][T20107] bond64: (slave veth35): Enslaving as an active interface with an up link
[  349.494725][T20118] 8021q: adding VLAN 0 to HW filter on device batadv2
[  349.497861][T20118] bond64: (slave batadv2): Enslaving as an active interface with an up link
[  349.545299][   T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.548351][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.551032][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.553671][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.577710][T20126] validate_nla: 5 callbacks suppressed
[  349.577721][T20126] netlink: 'syz.1.4119': attribute type 10 has an invalid length.
[  349.583346][T20126] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4119'.
[  349.671036][T20136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4122'.
[  349.704606][T20140] netlink: 'syz.2.4125': attribute type 3 has an invalid length.
[  349.711453][T20140] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.4125'.
[  349.750121][T20142] tipc: Can't bind to reserved service type 0
[  349.836399][T20155] batman_adv: batadv0: Interface deactivated: ip6gretap20
[  349.844828][T20155] batman_adv: batadv0: Interface deactivated: ip6gretap21
[  349.854835][T20155] batman_adv: batadv0: Interface deactivated: ip6gretap22
[  349.860537][T20155] batman_adv: batadv0: Interface deactivated: ip6gretap23
[  349.876446][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  349.882059][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  349.884618][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  349.887146][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  349.976320][T20167] xt_hashlimit: size too large, truncated to 1048576
[  350.086321][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4132'.
[  350.098707][T20184] openvswitch: netlink: Flow actions attr not present in new flow.
[  350.187989][T20191] openvswitch: netlink: IP tunnel dst address not specified
[  350.192259][T20191] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4139'.
[  350.199126][T20191] netlink: 'syz.1.4139': attribute type 2 has an invalid length.
[  350.207863][T20191] netlink: 'syz.1.4139': attribute type 1 has an invalid length.
[  350.239020][T20204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4142'.
[  350.239936][T20203] wg1: entered promiscuous mode
[  350.242237][T20204] netlink: 94 bytes leftover after parsing attributes in process `syz.0.4142'.
[  350.243370][T20203] wg1: entered allmulticast mode
[  350.322490][T20212] netlink: 'syz.1.4147': attribute type 1 has an invalid length.
[  350.341661][T20212] bond65: entered promiscuous mode
[  350.343855][T20212] 8021q: adding VLAN 0 to HW filter on device bond65
[  350.411012][T20224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  350.413261][T20224] IPv6: NLM_F_CREATE should be set when creating new route
[  350.415595][T20224] IPv6: NLM_F_CREATE should be set when creating new route
[  350.417964][T20224] IPv6: NLM_F_CREATE should be set when creating new route
[  350.424754][T20227] openvswitch: netlink: IP tunnel dst address not specified
[  350.428213][T20227] netlink: 'syz.1.4150': attribute type 2 has an invalid length.
[  350.431238][T20227] netlink: 'syz.1.4150': attribute type 1 has an invalid length.
[  350.634644][T20252] openvswitch: netlink: IP tunnel dst address not specified
[  350.641780][T20252] netlink: 'syz.1.4158': attribute type 2 has an invalid length.
[  350.644875][T20252] netlink: 'syz.1.4158': attribute type 1 has an invalid length.
[  350.692006][T20258] bond66: Removing last arp target with arp_interval on
[  350.702171][T20254] netlink: 'syz.2.4159': attribute type 29 has an invalid length.
[  350.785336][T20270] bridge0: entered allmulticast mode
[  350.792477][T20270] pim6reg: entered allmulticast mode
[  350.805351][T20270] pim6reg: left allmulticast mode
[  350.807240][T20270] bridge0: left allmulticast mode
[  351.017762][T20289] 8021q: adding VLAN 0 to HW filter on device bond67
[  351.047946][T20289] bond67: (slave veth37): Enslaving as an active interface with a down link
[  351.445920][T20327] bond98: (slave vxcan1): The slave device specified does not support setting the MAC address
[  351.451909][T20327] bond98: (slave vxcan1): Error -95 calling set_mac_address
[  351.491167][T20326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.493044][T20327] bond98: (slave bridge28): Enslaving as an active interface with a down link
[  351.505327][T20327] macvlan4: entered promiscuous mode
[  351.507077][T20327] macvlan4: entered allmulticast mode
[  351.511135][T20327] bond98: entered promiscuous mode
[  351.513779][T20327] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  351.517962][T20327] bond98: left promiscuous mode
[  351.637420][T20338] bond68: (slave bridge21): Enslaving as a backup interface with an up link
[  352.214380][T20377] mac80211_hwsim hwsim5 wlan0 (unregistering): left allmulticast mode
[  352.224162][T20377] mac80211_hwsim hwsim5 wlan0 (unregistering): left promiscuous mode
[  352.227898][T20377] bridge0: port 2(wlan0) entered disabled state
[  352.741070][T20419] netem: change failed
[  352.743278][T20419] netem: change failed
[  352.745368][T20419] netem: change failed
[  352.747394][T20419] netem: change failed
[  352.755219][T20419] netem: change failed
[  352.757378][T20419] netem: change failed
[  352.760330][T20419] netem: change failed
[  352.762418][T20419] netem: change failed
[  352.764443][T20419] netem: change failed
[  352.766504][T20419] netem: change failed
[  352.768428][T20419] netem: change failed
[  352.772171][T20419] netem: change failed
[  352.774230][T20419] netem: change failed
[  352.776272][T20419] netem: change failed
[  352.778328][T20419] netem: change failed
[  352.782688][T20419] netem: change failed
[  352.784647][T20419] netem: change failed
[  352.786722][T20419] netem: change failed
[  352.793147][T20419] netem: change failed
[  352.795231][T20419] netem: change failed
[  352.797268][T20419] netem: change failed
[  352.800363][T20419] netem: change failed
[  352.802268][T20419] netem: change failed
[  352.804103][T20419] netem: change failed
[  352.805654][T20419] netem: change failed
[  352.807332][T20419] netem: change failed
[  352.809828][T20419] netem: change failed
[  352.811694][T20419] netem: change failed
[  352.813329][T20419] netem: change failed
[  352.814937][T20419] netem: change failed
[  352.816529][T20419] netem: change failed
[  352.818279][T20419] netem: change failed
[  352.820753][T20419] netem: change failed
[  353.482478][T20440] net_ratelimit: 11 callbacks suppressed
[  353.482495][T20440] openvswitch: netlink: IP tunnel dst address not specified
[  353.636700][T20445] tipc: Resetting bearer <ib:ip6gre0>
[  353.642413][T20445] tipc: Resetting bearer <ib:ip6gre0>
[  353.647446][T20445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.656600][ T5275] lo speed is unknown, defaulting to 1000
[  353.663344][T20445] __nla_validate_parse: 132 callbacks suppressed
[  353.663354][T20445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4211'.
[  353.668941][ T5275] sqz0: Port: 1 Link ACTIVE
[  353.671102][ T5275] lo speed is unknown, defaulting to 1000
[  353.759302][T20452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4214'.
[  353.763925][T20452] 8021q: adding VLAN 0 to HW filter on device bond69
[  353.785303][T20452] macvlan0: entered promiscuous mode
[  353.787444][T20452] macvlan0: entered allmulticast mode
[  353.791689][T20452] bond69: entered promiscuous mode
[  353.794235][T20452] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  353.802195][T20452] bond69: left promiscuous mode
[  353.817167][T20457] tipc: Resetting bearer <ib:ip6gre0>
[  353.821149][T20457] bond92: (slave team_slave_1): Releasing backup interface
[  353.829607][T20457] team_slave_1: left allmulticast mode
[  353.832375][T20457] batman_adv: batadv0: Removing interface: ip6gretap1
[  353.836657][T20457] bond1: (slave veth3): Releasing active interface
[  353.842787][T20457] bond1: (slave veth3): the permanent HWaddr of slave - de:22:21:bb:d9:5a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  353.862283][T20457] bond1: (slave veth5): Releasing active interface
[  353.876250][T20457] bond1: (slave bridge3): Releasing active interface
[  353.880673][T20457] bond5: (slave bond6): Releasing backup interface
[  353.886490][T20457] bond12: (slave gretap1): Releasing active interface
[  353.891318][T20457] bond20: (slave bridge8): Releasing active interface
[  353.896379][T20457] bond21: (slave bond22): Releasing backup interface
[  353.897140][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4219'.
[  353.905823][T20457] batman_adv: batadv0: Removing interface: ip6gretap2
[  353.915382][T20457] batman_adv: batadv0: Removing interface: ip6gretap3
[  353.922310][T20457] bond24: (slave veth9): Releasing backup interface
[  353.925088][T20457] bond24: (slave veth9): the permanent HWaddr of slave - c6:f7:3b:37:c4:40 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  353.933929][T20457] bond24: (slave batadv1): Releasing backup interface
[  353.938623][T20457] bond32: (slave ip6gre2): Releasing backup interface
[  353.944603][T20457] bond33: (slave bridge14): Releasing active interface
[  353.951583][T20457] bond34: (slave bridge15): Releasing backup interface
[  353.962054][T20457] bond38: (slave bridge17): Releasing backup interface
[  353.971733][T20457] bond40: (slave bridge18): Releasing backup interface
[  353.976084][T20457] bond43: (slave ip6gretap10): Releasing backup interface
[  353.978413][T20457] bond43: (slave ip6gretap10): the permanent HWaddr of slave - 3e:68:c6:97:1a:8f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  353.993613][T20457] bond43: (slave veth29): Releasing backup interface
[  353.997498][T20457] batman_adv: batadv0: Removing interface: ip6gretap11
[  354.004980][T20457] bond44: (slave bridge20): Releasing backup interface
[  354.008560][T20457] bond45: (slave veth33): Releasing backup interface
[  354.012966][T20457] bond45: (slave veth33): the permanent HWaddr of slave - 1e:16:7a:0d:ed:fb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  354.019734][T20457] bond45: (slave veth35): Releasing backup interface
[  354.022950][T20457] bond51: (slave veth39): Releasing active interface
[  354.025127][T20457] bond51: (slave veth39): the permanent HWaddr of slave - e2:4d:87:c8:d7:96 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  354.030670][T20457] batadv2: entered promiscuous mode
[  354.034096][T20457] bond51: (slave batadv2): Releasing active interface
[  354.036775][T20457] batadv2: left promiscuous mode
[  354.041607][T20457] batman_adv: batadv0: Removing interface: ip6gretap13
[  354.044786][T20457] batman_adv: batadv0: Removing interface: ip6gretap14
[  354.047902][T20457] batman_adv: batadv0: Removing interface: ip6gretap15
[  354.051943][T20457] batman_adv: batadv0: Removing interface: ip6gretap16
[  354.055946][T20457] bond54: (slave bond55): Releasing backup interface
[  354.058588][T20457] bond54: (slave bond55): the permanent HWaddr of slave - b2:36:33:d2:30:74 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  354.065090][T20457] bond54: (slave bond56): making interface the new active one
[  354.076719][T20457] bond54: (slave bond56): Releasing backup interface
[  354.079464][T20457] bond54: (slave bond57): making interface the new active one
[  354.084099][T20457] bond54: (slave bond57): Releasing backup interface
[  354.086814][T20457] bond54: (slave bond58): making interface the new active one
[  354.092370][T20457] bond54: (slave bond58): Releasing backup interface
[  354.094975][T20457] bond54: (slave bond59): making interface the new active one
[  354.100456][T20457] bond54: (slave bond59): Releasing backup interface
[  354.103056][T20457] bond54: (slave bond60): making interface the new active one
[  354.107574][T20457] bond54: (slave bond60): Releasing backup interface
[  354.110690][T20457] bond54: (slave bond61): making interface the new active one
[  354.115205][T20457] bond54: (slave bond61): Releasing backup interface
[  354.117814][T20457] bond54: (slave bond62): making interface the new active one
[  354.123161][T20457] bond54: (slave bond62): Releasing backup interface
[  354.125721][T20457] bond54: (slave bond63): making interface the new active one
[  354.131851][T20457] bond54: (slave bond63): Releasing backup interface
[  354.134441][T20457] bond54: (slave bond64): making interface the new active one
[  354.142163][T20457] bond54: (slave bond64): Releasing backup interface
[  354.144332][T20457] bond54: (slave bond65): making interface the new active one
[  354.148093][T20457] bond54: (slave bond65): Releasing backup interface
[  354.150832][T20457] bond54: (slave bond66): making interface the new active one
[  354.154589][T20457] bond54: (slave bond66): Releasing backup interface
[  354.157237][T20457] bond54: (slave bond67): making interface the new active one
[  354.162560][T20457] bond54: (slave bond67): Releasing backup interface
[  354.165223][T20457] bond54: (slave bond68): making interface the new active one
[  354.171875][T20457] bond54: (slave bond68): Releasing backup interface
[  354.174636][T20457] bond54: (slave bond69): making interface the new active one
[  354.182132][T20457] bond54: (slave bond69): Releasing backup interface
[  354.184678][T20457] bond54: (slave bond70): making interface the new active one
[  354.191282][T20457] bond54: (slave bond70): Releasing backup interface
[  354.194058][T20457] bond54: (slave bond71): making interface the new active one
[  354.201877][T20457] bond54: (slave bond71): Releasing backup interface
[  354.204563][T20457] bond54: (slave bond72): making interface the new active one
[  354.210321][T20457] bond54: (slave bond72): Releasing backup interface
[  354.213131][T20457] bond54: (slave bond73): making interface the new active one
[  354.218180][T20457] bond54: (slave bond73): Releasing backup interface
[  354.221959][T20457] bond54: (slave bond74): making interface the new active one
[  354.226861][T20457] bond54: (slave bond74): Releasing backup interface
[  354.230008][T20457] bond54: (slave bond75): making interface the new active one
[  354.235075][T20457] bond54: (slave bond75): Releasing backup interface
[  354.237834][T20457] bond54: (slave bond76): making interface the new active one
[  354.243991][T20457] bond54: (slave bond76): Releasing backup interface
[  354.246684][T20457] bond54: (slave bond77): making interface the new active one
[  354.252703][T20457] bond54: (slave bond77): Releasing backup interface
[  354.255604][T20457] bond54: (slave bond78): making interface the new active one
[  354.261008][T20457] bond54: (slave bond78): Releasing backup interface
[  354.263790][T20457] bond54: (slave bond79): making interface the new active one
[  354.269040][T20457] bond54: (slave bond79): Releasing backup interface
[  354.271838][T20457] bond54: (slave bond80): making interface the new active one
[  354.276826][T20457] bond54: (slave bond80): Releasing backup interface
[  354.279899][T20457] bond54: (slave bond81): making interface the new active one
[  354.283435][T20457] bond54: (slave bond81): Releasing backup interface
[  354.286133][T20457] batman_adv: batadv0: Removing interface: ip6gretap17
[  354.289221][T20457] batman_adv: batadv0: Removing interface: ip6gretap18
[  354.292872][T20457] batman_adv: batadv0: Removing interface: ip6gretap19
[  354.296052][T20457] batman_adv: batadv0: Removing interface: ip6gretap20
[  354.300485][T20457] bond83: (slave bridge25): Releasing backup interface
[  354.304171][T20457] batman_adv: batadv0: Removing interface: ip6gretap21
[  354.308130][T20457] bond88: (slave wireguard2): Releasing backup interface
[  354.312462][T20457] batman_adv: batadv0: Removing interface: ip6gretap22
[  354.316456][T20457] bond89: (slave veth49): Releasing active interface
[  354.319520][T20457] bond89: (slave veth49): the permanent HWaddr of slave - b6:48:50:68:4f:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  354.327376][T20457] bond89: (slave veth51): Releasing active interface
[  354.332879][T20457] batman_adv: batadv0: Removing interface: ip6gretap23
[  354.337771][T20457] bond90: (slave veth53): Releasing active interface
[  354.341858][T20457] bond90: (slave veth53): the permanent HWaddr of slave - ae:3c:60:f8:d5:5b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  354.349941][T20457] bond90: (slave veth55): Releasing active interface
[  354.354010][T20457] bond91: (slave bridge27): Releasing active interface
[  354.358062][T20457] bond98: (slave bridge28): Releasing active interface
[  354.377418][T20477] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  354.388561][T20478] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  354.394746][T20478] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  354.423512][T20481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4220'.
[  354.484468][T20483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4221'.
[  354.508623][T20483] 8021q: adding VLAN 0 to HW filter on device bond70
[  354.658172][T20503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4227'.
[  354.670300][T20503] validate_nla: 112 callbacks suppressed
[  354.670317][T20503] netlink: 'syz.1.4227': attribute type 17 has an invalid length.
[  354.686713][T20506] netlink: 'syz.0.4228': attribute type 13 has an invalid length.
[  354.690892][T20506] netlink: 'syz.0.4228': attribute type 17 has an invalid length.
[  354.695825][T20506] tipc: Resetting bearer <ib:ip6gre0>
[  354.700503][T20506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  354.759824][T20509] tipc: Resetting bearer <ib:ip6gre0>
[  354.764343][T20509] wg1: left promiscuous mode
[  354.766350][T20509] wg1: left allmulticast mode
[  354.796974][T20509] geneve3: left allmulticast mode
[  354.799610][T20509] veth45: left allmulticast mode
[  354.801985][T20509] veth47: left allmulticast mode
[  354.804377][T20509] ip6erspan1: left allmulticast mode
[  354.806738][T20509] vlan4: left allmulticast mode
[  354.809289][T20509] bond85: left allmulticast mode
[  354.812578][T20509] bond87: left allmulticast mode
[  354.816816][T20509] bond92: left allmulticast mode
[  354.819446][T20509] bond96: left allmulticast mode
[  354.821609][ T5844] lo speed is unknown, defaulting to 1000
[  354.823472][ T5844] sqz0: Port: 1 Link DOWN
[  354.825007][ T5844] lo speed is unknown, defaulting to 1000
[  354.910848][T20515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4231'.
[  355.448243][T20532] netlink: 'syz.0.4235': attribute type 7 has an invalid length.
[  355.521501][T20542] netlink: 'syz.1.4238': attribute type 4 has an invalid length.
[  355.544644][T20542] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  355.556292][T20542] syzkaller0: entered promiscuous mode
[  355.558061][T20542] syzkaller0: entered allmulticast mode
[  355.717680][T20555] netlink: 'syz.1.4241': attribute type 1 has an invalid length.
[  355.740955][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'.
[  355.752182][T20555] bond0: Unable to set down delay as MII monitoring is disabled
[  355.767383][T20555] bond71: (slave vxcan1): The slave device specified does not support setting the MAC address
[  355.775205][T20555] bond71: (slave vxcan1): Error -95 calling set_mac_address
[  355.838083][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'.
[  355.839496][T20561] netem: change failed
[  356.062463][T20582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.067069][T20582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4249'.
[  356.141297][T20586] netlink: 'syz.2.4251': attribute type 21 has an invalid length.
[  356.144435][T20586] netlink: 'syz.2.4251': attribute type 7 has an invalid length.
[  356.202723][T20586] bridge57: entered promiscuous mode
[  356.204706][T20586] bridge57: entered allmulticast mode
[  356.263582][T20590] bridge22: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  356.359205][T20591] bridge57: entered promiscuous mode
[  356.363305][T20591] bridge57: entered allmulticast mode
[  356.427270][T20603] xt_NFQUEUE: number of total queues is 0
[  356.961066][T20636] netlink: 'syz.2.4264': attribute type 1 has an invalid length.
[  356.980401][T20636] 8021q: adding VLAN 0 to HW filter on device bond73
[  357.295361][T20663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  357.298002][T20663] IPv6: NLM_F_CREATE should be set when creating new route
[  357.300653][T20663] IPv6: NLM_F_CREATE should be set when creating new route
[  357.302934][T20663] IPv6: NLM_F_CREATE should be set when creating new route
[  357.307611][T20663] netlink: 'syz.0.4271': attribute type 10 has an invalid length.
[  357.593833][T20676] sctp: [Deprecated]: syz.2.4277 (pid 20676) Use of int in max_burst socket option.
[  357.593833][T20676] Use struct sctp_assoc_value instead
[  357.771384][T20697] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  357.773933][T20697] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  357.910720][T20707] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  357.963104][T20709] lo speed is unknown, defaulting to 1000
[  358.352127][T20729] syzkaller1: entered promiscuous mode
[  358.357321][T20729] syzkaller1: entered allmulticast mode
[  358.666452][T20751] sock: sock_timestamping_bind_phc: sock not bind to device
[  358.677605][T20751] __nla_validate_parse: 78 callbacks suppressed
[  358.677618][T20751] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4295'.
[  358.685258][T20751] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4295'.
[  358.714018][T20753] bond100: invalid ARP target 0.0.0.0 specified for addition
[  358.716936][T20753] bond100: option arp_ip_target: invalid value (0)
[  358.722287][T20753] bond100 (unregistering): Released all slaves
[  358.807072][T20756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  358.830979][T20758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4299'.
[  358.836507][T20758] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4299'.
[  358.840129][T20758] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4299'.
[  358.843088][T20758] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4299'.
[  358.849984][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4299'.
[  358.929859][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4300'.
[  359.046754][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4304'.
[  359.050162][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4304'.
[  359.163370][T20780] bond100: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  359.166395][T20780] bond100: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[  359.204197][T20783] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  359.207889][T20783] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  359.415948][T20790] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  359.422860][T20790] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  359.724602][T20811] wlan0: mtu greater than device maximum
[  359.726803][T20811] bond0: (slave wlan0): Error -22 calling dev_set_mtu
[  359.813398][T20815] validate_nla: 109 callbacks suppressed
[  359.813409][T20815] netlink: 'syz.1.4315': attribute type 1 has an invalid length.
[  359.827013][T20815] 8021q: adding VLAN 0 to HW filter on device bond72
[  359.843284][T20815] bond72 (unregistering): Released all slaves
[  359.909381][T20824] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  360.075061][T20841] block nbd2: not configured, cannot reconfigure
[  360.098352][T20843] netlink: 'syz.1.4324': attribute type 1 has an invalid length.
[  360.128071][T20843] 8021q: adding VLAN 0 to HW filter on device bond72
[  360.153779][T20843] bond72: (slave veth39): Enslaving as an active interface with a down link
[  360.176122][T20843] bond72: (slave veth41): Enslaving as an active interface with a down link
[  360.196921][T20843] bond72: (slave bridge23): Enslaving as an active interface with a down link
[  360.492168][T20867] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  360.495162][T20867] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  360.857082][T20889] bridge0: Device is already in use.
[  360.941203][T20898] netlink: 'syz.0.4340': attribute type 9 has an invalid length.
[  361.061279][T20901] veth1: Caught tx_queue_len zero misconfig
[  361.424709][T20931] netlink: 'syz.1.4348': attribute type 16 has an invalid length.
[  361.427854][T20931] netlink: 'syz.1.4348': attribute type 3 has an invalid length.
[  361.601903][T20926] netlink: 'syz.2.4349': attribute type 1 has an invalid length.
[  361.605276][T20926] tipc: Disabling bearer <udp:syz2>
[  361.640204][T20926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  361.771327][T20953] netlink: 'syz.1.4355': attribute type 10 has an invalid length.
[  361.818298][T20957] netlink: 'syz.2.4357': attribute type 1 has an invalid length.
[  361.827286][T20962] netlink: 'syz.1.4355': attribute type 10 has an invalid length.
[  361.831877][T20957] 8021q: adding VLAN 0 to HW filter on device bond74
[  361.839148][T20953] nbd2: detected capacity change from 0 to 63
[  361.847713][ T6536] block nbd2: Receive control failed (result -104)
[  361.920268][T20976] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  362.001377][T20986] mac80211_hwsim hwsim30 wlan0: Caught tx_queue_len zero misconfig
[  362.008211][T20984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.020214][T20984] syzkaller0: entered promiscuous mode
[  362.022222][T20984] syzkaller0: entered allmulticast mode
[  362.063747][T20984] syzkaller0: mtu less than device minimum
[  362.101786][T20984] tipc: Resetting bearer <eth:syzkaller0>
[  362.115829][T20984] tipc: Disabling bearer <eth:syzkaller0>
[  362.126386][T20998] bridge58: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  362.138244][T21001] bridge59: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  362.227660][T21008] lo speed is unknown, defaulting to 1000
[  362.281075][T21012] openvswitch: netlink: IP tunnel dst address not specified
[  362.284908][T21012] netlink: 'syz.2.4375': attribute type 2 has an invalid length.
[  362.326117][T21014] bond74 (unregistering): Released all slaves
[  363.104952][T21050] xt_TPROXY: Can be used only with -p tcp or -p udp
[  363.117320][T21050] bond75: (slave bridge60): making interface the new active one
[  363.120404][T21050] bond75: (slave bridge60): Enslaving as an active interface with an up link
[  363.147915][T21053] netlink: 'syz.2.4385': attribute type 11 has an invalid length.
[  363.165581][T21053] bond76: entered promiscuous mode
[  363.167476][T21053] 8021q: adding VLAN 0 to HW filter on device bond76
[  363.544197][T21083] syzkaller1: entered promiscuous mode
[  363.547888][T21083] syzkaller1: entered allmulticast mode
[  363.683534][T21089] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  363.718088][T21091] __nla_validate_parse: 134 callbacks suppressed
[  363.718105][T21091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4399'.
[  363.765821][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4399'.
[  363.769929][T21091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4399'.
[  363.786122][T21093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4400'.
[  363.795511][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4400'.
[  363.822117][T21093] bond77: Setting coupled_control to off (0)
[  363.919604][T21102] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.927071][T21102] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  363.932808][T21102] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  364.066604][T21104] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4404'.
[  364.082353][T21111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4406'.
[  364.093253][T21111] ipip1: entered promiscuous mode
[  364.219491][T21118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4408'.
[  364.238282][T21118] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4408'.
[  364.453783][T21129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4413'.
[  364.468075][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  364.473743][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  364.489087][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  364.677832][T21146] bond101: Removing last arp target with arp_interval on
[  364.681202][T21149] openvswitch: : Dropping previously announced user features
[  365.077115][T21171] gretap0: entered promiscuous mode
[  365.082887][T21171] 0{X: renamed from gretap0
[  365.086733][T21171] 0{X: left promiscuous mode
[  365.089339][T21171] 0{X: entered allmulticast mode
[  365.093062][T21171] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  365.332941][T21188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  365.467071][T21195] netlink: 'syz.0.4434': attribute type 11 has an invalid length.
[  365.509121][T21200] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  365.612688][T21206] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  365.890489][T21221] validate_nla: 11 callbacks suppressed
[  365.890504][T21221] netlink: 'syz.1.4442': attribute type 30 has an invalid length.
[  366.174258][T21129] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  366.212459][T21129] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  366.232708][  T839] block nbd4: Connection timed out, retrying (0/2 alive)
[  366.235629][  T839] block nbd4: Connection timed out, retrying (0/2 alive)
[  366.238979][  T839] block nbd4: Connection timed out, retrying (0/2 alive)
[  366.241951][  T839] block nbd4: Connection timed out, retrying (0/2 alive)
[  366.245046][  T839] block nbd4: Dead connection, failed to find a fallback
[  366.248024][  T839] block nbd4: shutting down sockets
[  366.251989][  T839] blk_print_req_error: 138 callbacks suppressed
[  366.252001][  T839] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  366.258338][  T839] buffer_io_error: 138 callbacks suppressed
[  366.258351][  T839] Buffer I/O error on dev nbd4, logical block 3, async page read
[  366.264259][  T839] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  366.264977][T21129] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  366.268002][  T839] Buffer I/O error on dev nbd4, logical block 2, async page read
[  366.274486][  T839] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  366.277763][  T839] Buffer I/O error on dev nbd4, logical block 1, async page read
[  366.280249][  T839] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  366.283761][  T839] Buffer I/O error on dev nbd4, logical block 0, async page read
[  366.286926][T17368] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  366.290761][T17368] Buffer I/O error on dev nbd4, logical block 0, async page read
[  366.293742][T17368] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  366.297334][T17368] Buffer I/O error on dev nbd4, logical block 1, async page read
[  366.300830][T17368] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  366.304645][T17368] Buffer I/O error on dev nbd4, logical block 2, async page read
[  366.307730][T17368] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  366.312415][T17368] Buffer I/O error on dev nbd4, logical block 3, async page read
[  366.317255][T17368] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  366.321867][T17368] Buffer I/O error on dev nbd4, logical block 0, async page read
[  366.324302][T17368] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  366.327322][T17368] Buffer I/O error on dev nbd4, logical block 1, async page read
[  366.331252][T17368] ldm_validate_partition_table(): Disk read failed.
[  366.333738][T17368] Dev nbd4: unable to read RDB block 0
[  366.335762][ T5820] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  366.338519][T17368]  nbd4: unable to read partition table
[  366.338756][ T5820] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  366.346104][T17368] ldm_validate_partition_table(): Disk read failed.
[  366.353076][T17368] Dev nbd4: unable to read RDB block 0
[  366.355199][T17368]  nbd4: unable to read partition table
[  366.355474][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  366.367732][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  367.357726][T21269] ipip6: entered promiscuous mode
[  367.577388][T21293] bond0: entered promiscuous mode
[  367.583471][T21293] bond0: left promiscuous mode
[  367.645199][T21298] syzkaller1: entered promiscuous mode
[  367.647312][T21298] syzkaller1: entered allmulticast mode
[  368.303835][T21359] xt_hashlimit: max too large, truncated to 1048576
[  368.331668][T21360] netlink: 'syz.0.4482': attribute type 22 has an invalid length.
[  368.334335][T21360] netlink: 'syz.0.4482': attribute type 22 has an invalid length.
[  368.432402][T21373] IPVS: set_ctl: invalid protocol: 5 8.0.0.0:3072
[  368.435588][T21373] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  368.532999][T21388] netlink: 'syz.0.4488': attribute type 1 has an invalid length.
[  368.564154][T21388] 8021q: adding VLAN 0 to HW filter on device bond102
[  368.596222][T21390] syzkaller0: entered promiscuous mode
[  368.598025][T21390] syzkaller0: entered allmulticast mode
[  369.676208][T21404] __nla_validate_parse: 26 callbacks suppressed
[  369.676218][T21404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4493'.
[  369.713707][T21404] bond75: entered promiscuous mode
[  369.716088][T21404] 8021q: adding VLAN 0 to HW filter on device bond75
[  369.736657][T21408] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4494'.
[  369.740601][T21408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4494'.
[  369.813723][T21415] tap0: tun_chr_ioctl cmd 1074025677
[  369.816104][T21415] tap0: linktype set to 778
[  369.887527][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4497'.
[  369.893933][T21417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4497'.
[  369.938116][T21421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4498'.
[  369.942208][T21421] bond51: (slave vcan0): Releasing backup interface
[  369.944873][T21421] bond51: Destroying bond
[  369.947886][T21421] bond51 (unregistering): Released all slaves
[  370.036184][T21426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4499'.
[  370.294848][T21440] tipc: Resetting bearer <ib:ip6gre0>
[  370.316304][T15674] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.322278][T15674] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.325833][T15674] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.329629][T15674] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  370.660475][T21462] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4511'.
[  370.663655][T21463] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4511'.
[  370.690955][T21459] syzkaller0: entered promiscuous mode
[  370.693324][T21459] syzkaller0: entered allmulticast mode
[  371.352343][   T11] block nbd5: Connection timed out, retrying (0/2 alive)
[  371.355313][   T11] block nbd5: Connection timed out, retrying (0/2 alive)
[  371.358241][   T11] block nbd5: Connection timed out, retrying (0/2 alive)
[  371.361259][   T11] block nbd5: Connection timed out, retrying (0/2 alive)
[  371.364710][   T11] block nbd5: Dead connection, failed to find a fallback
[  371.367703][   T11] block nbd5: shutting down sockets
[  371.370009][   T11] blk_print_req_error: 138 callbacks suppressed
[  371.370020][   T11] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  371.376476][   T11] buffer_io_error: 138 callbacks suppressed
[  371.376488][   T11] Buffer I/O error on dev nbd5, logical block 2, async page read
[  371.382229][   T11] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  371.386042][   T11] Buffer I/O error on dev nbd5, logical block 1, async page read
[  371.389529][   T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  371.393620][   T11] Buffer I/O error on dev nbd5, logical block 0, async page read
[  371.397537][   T11] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  371.402005][   T11] Buffer I/O error on dev nbd5, logical block 3, async page read
[  371.406857][T17337] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  371.410555][T17337] Buffer I/O error on dev nbd5, logical block 0, async page read
[  371.418469][T17337] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  371.422129][T17337] Buffer I/O error on dev nbd5, logical block 1, async page read
[  371.431012][T17337] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  371.433965][T17337] Buffer I/O error on dev nbd5, logical block 2, async page read
[  371.436348][T17337] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  371.444973][T17337] Buffer I/O error on dev nbd5, logical block 3, async page read
[  371.447498][T17337] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  371.456428][T17337] Buffer I/O error on dev nbd5, logical block 0, async page read
[  371.459629][T17337] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  371.462555][T17337] Buffer I/O error on dev nbd5, logical block 1, async page read
[  371.470867][T17337] ldm_validate_partition_table(): Disk read failed.
[  371.473241][T17337] Dev nbd5: unable to read RDB block 0
[  371.475297][T17337]  nbd5: unable to read partition table
[  371.484727][T17337] ldm_validate_partition_table(): Disk read failed.
[  371.487034][T17337] Dev nbd5: unable to read RDB block 0
[  371.490915][T17337]  nbd5: unable to read partition table
[  371.972585][T21473] lo speed is unknown, defaulting to 1000
[  373.402111][T21448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  373.534662][T21482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4517'.
[  373.546675][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  373.549870][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  373.554796][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  373.565949][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  373.701087][T21490] ip6gre0: entered promiscuous mode
[  373.726142][T21502] wg2: Caught tx_queue_len zero misconfig
[  373.746044][T21505] netlink: 'syz.1.4522': attribute type 32 has an invalid length.
[  373.822365][T21514] netlink: 'syz.0.4525': attribute type 8 has an invalid length.
[  374.093258][T21528] netlink: 'syz.1.4530': attribute type 8 has an invalid length.
[  374.160042][T21529] netlink: 'syz.1.4530': attribute type 1 has an invalid length.
[  374.766757][T21531] block nbd0: reconnected socket
[  374.768508][T21531] block nbd0: reconnected socket
[  374.773469][   T57] block nbd0: Receive control failed (result -32)
[  374.776021][ T6536] block nbd0: Receive control failed (result -32)
[  374.868340][T21537] __nla_validate_parse: 10 callbacks suppressed
[  374.868355][T21537] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.4534'.
[  375.026570][T21543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4536'.
[  375.092081][T21543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4536'.
[  375.096865][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4536'.
[  375.123950][T21565] sock: sock_timestamping_bind_phc: sock not bind to device
[  375.132622][T21565] batadv0: entered promiscuous mode
[  375.135100][T21565] 0{X: entered promiscuous mode
[  375.138085][T21565] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  375.144769][T21565] hsr1: Slave B (30{X) is not up; please bring it up to get a fully working HSR network
[  375.148546][T21565] hsr1: entered allmulticast mode
[  375.155178][T21565] batadv0: entered allmulticast mode
[  375.164763][T21565] 0{X: entered allmulticast mode
[  375.194265][T21596] openvswitch: netlink: IP tunnel dst address not specified
[  375.356384][T21621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4546'.
[  375.360154][T21621] netlink: 'syz.0.4546': attribute type 10 has an invalid length.
[  375.395023][T21626] netlink: 'syz.0.4548': attribute type 1 has an invalid length.
[  375.437385][T21626] bond103: entered promiscuous mode
[  375.440397][T21626] 8021q: adding VLAN 0 to HW filter on device bond103
[  375.486577][T21626] bond103: (slave bridge31): making interface the new active one
[  375.489217][T21626] bridge31: entered promiscuous mode
[  375.491973][T21626] bond103: (slave bridge31): Enslaving as an active interface with an up link
[  375.601119][T21637] openvswitch: netlink: IP tunnel dst address not specified
[  375.706685][T21643] ip6gretap20: entered allmulticast mode
[  375.810193][T21655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4555'.
[  375.909510][T21661] veth0: Caught tx_queue_len zero misconfig
[  375.920266][T21663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4558'.
[  375.925107][T21663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4558'.
[  375.974098][T21665] syzkaller0: entered promiscuous mode
[  375.976394][T21665] syzkaller0: entered allmulticast mode
[  375.991486][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4560'.
[  376.060700][T21677] dvmrp8: entered allmulticast mode
[  376.105292][T21681] netlink: 'syz.2.4565': attribute type 1 has an invalid length.
[  376.107901][T21681] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4565'.
[  376.122211][T21684] SET target dimension over the limit!
[  376.185687][T21688] 
[  376.186592][T21688] ======================================================
[  376.188821][T21688] WARNING: possible circular locking dependency detected
[  376.191496][T21688] syzkaller #0 Not tainted
[  376.193303][T21688] ------------------------------------------------------
[  376.195995][T21688] syz.1.4566/21688 is trying to acquire lock:
[  376.198126][T21688] ffffffff8e8837a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  376.200975][T21688] 
[  376.200975][T21688] but task is already holding lock:
[  376.203868][T21688] ffffffff8e5ed5f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  376.207368][T21688] 
[  376.207368][T21688] which lock already depends on the new lock.
[  376.207368][T21688] 
[  376.210575][T21688] 
[  376.210575][T21688] the existing dependency chain (in reverse order) is:
[  376.214016][T21688] 
[  376.214016][T21688] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  376.216611][T21688]        cpus_read_lock+0x42/0x160
[  376.218264][T21688]        static_key_slow_inc+0x12/0x30
[  376.220001][T21688]        nbd_genl_reconfigure+0x132f/0x1ea0
[  376.222022][T21688]        genl_family_rcv_msg_doit+0x22a/0x330
[  376.224432][T21688]        genl_rcv_msg+0x61c/0x7a0
[  376.225963][T21688]        netlink_rcv_skb+0x232/0x4b0
[  376.227589][T21688]        genl_rcv+0x28/0x40
[  376.228960][T21688]        netlink_unicast+0x80f/0x9b0
[  376.230651][T21688]        netlink_sendmsg+0x813/0xb40
[  376.232579][T21688]        ____sys_sendmsg+0x972/0x9f0
[  376.234709][T21688]        ___sys_sendmsg+0x2a5/0x360
[  376.236332][T21688]        __x64_sys_sendmsg+0x1bd/0x2a0
[  376.238072][T21688]        do_syscall_64+0x14d/0xf80
[  376.239827][T21688]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.242040][T21688] 
[  376.242040][T21688] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  376.244697][T21688]        __mutex_lock+0x19f/0x1300
[  376.246258][T21688]        nbd_queue_rq+0x37b/0x1100
[  376.248052][T21688]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  376.249996][T21688]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  376.252425][T21688]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  376.254983][T21688]        blk_mq_run_hw_queue+0x348/0x4f0
[  376.256765][T21688]        blk_mq_dispatch_list+0xd16/0xe10
[  376.258699][T21688]        blk_mq_flush_plug_list+0x48d/0x570
[  376.260563][T21688]        __blk_flush_plug+0x3ed/0x4d0
[  376.262231][T21688]        __submit_bio+0x28d/0x580
[  376.263819][T21688]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  376.266065][T21688]        block_read_full_folio+0x599/0x830
[  376.267997][T21688]        filemap_read_folio+0x137/0x3b0
[  376.270038][T21688]        do_read_cache_folio+0x358/0x590
[  376.272294][T21688]        read_part_sector+0xb6/0x2b0
[  376.274463][T21688]        adfspart_check_ICS+0xa5/0xa40
[  376.276765][T21688]        bdev_disk_changed+0x7ba/0x1550
[  376.279070][T21688]        blkdev_get_whole+0x380/0x510
[  376.281270][T21688]        bdev_open+0x31e/0xd30
[  376.283271][T21688]        blkdev_open+0x470/0x610
[  376.285316][T21688]        do_dentry_open+0x785/0x14e0
[  376.287425][T21688]        vfs_open+0x3b/0x340
[  376.289259][T21688]        path_openat+0x2e08/0x3860
[  376.291291][T21688]        do_file_open+0x23e/0x4a0
[  376.293261][T21688]        do_sys_openat2+0x113/0x200
[  376.295296][T21688]        __x64_sys_openat+0x138/0x170
[  376.297445][T21688]        do_syscall_64+0x14d/0xf80
[  376.299530][T21688]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.302020][T21688] 
[  376.302020][T21688] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  376.304810][T21688]        __mutex_lock+0x19f/0x1300
[  376.306905][T21688]        nbd_queue_rq+0xc6/0x1100
[  376.308862][T21688]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  376.311221][T21688]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  376.314004][T21688]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  376.316631][T21688]        blk_mq_run_hw_queue+0x348/0x4f0
[  376.318940][T21688]        blk_mq_dispatch_list+0xd16/0xe10
[  376.321292][T21688]        blk_mq_flush_plug_list+0x48d/0x570
[  376.323656][T21688]        __blk_flush_plug+0x3ed/0x4d0
[  376.325857][T21688]        __submit_bio+0x28d/0x580
[  376.327929][T21688]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  376.330487][T21688]        block_read_full_folio+0x599/0x830
[  376.332888][T21688]        filemap_read_folio+0x137/0x3b0
[  376.335108][T21688]        do_read_cache_folio+0x358/0x590
[  376.337380][T21688]        read_part_sector+0xb6/0x2b0
[  376.339556][T21688]        adfspart_check_ICS+0xa5/0xa40
[  376.341747][T21688]        bdev_disk_changed+0x7ba/0x1550
[  376.343925][T21688]        blkdev_get_whole+0x380/0x510
[  376.346124][T21688]        bdev_open+0x31e/0xd30
[  376.348120][T21688]        blkdev_open+0x470/0x610
[  376.350130][T21688]        do_dentry_open+0x785/0x14e0
[  376.352322][T21688]        vfs_open+0x3b/0x340
[  376.354275][T21688]        path_openat+0x2e08/0x3860
[  376.356334][T21688]        do_file_open+0x23e/0x4a0
[  376.358377][T21688]        do_sys_openat2+0x113/0x200
[  376.360428][T21688]        __x64_sys_openat+0x138/0x170
[  376.362510][T21688]        do_syscall_64+0x14d/0xf80
[  376.364173][T21688]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.366130][T21688] 
[  376.366130][T21688] -> #3 (set->srcu){.+.+}-{0:0}:
[  376.368774][T21688]        __synchronize_srcu+0xca/0x300
[  376.370813][T21688]        elevator_switch+0x1e8/0x7a0
[  376.372495][T21688]        elevator_change+0x2cc/0x450
[  376.374131][T21688]        elevator_set_default+0x36c/0x430
[  376.375922][T21688]        blk_register_queue+0x366/0x430
[  376.377652][T21688]        __add_disk+0x677/0xd50
[  376.379180][T21688]        add_disk_fwnode+0xfb/0x480
[  376.380804][T21688]        nbd_dev_add+0x72c/0xb50
[  376.382367][T21688]        nbd_init+0x168/0x1f0
[  376.383843][T21688]        do_one_initcall+0x250/0x8d0
[  376.385590][T21688]        do_initcall_level+0x104/0x190
[  376.387275][T21688]        do_initcalls+0x59/0xa0
[  376.388814][T21688]        kernel_init_freeable+0x2a6/0x3e0
[  376.390593][T21688]        kernel_init+0x1d/0x1d0
[  376.392101][T21688]        ret_from_fork+0x51e/0xb90
[  376.393711][T21688]        ret_from_fork_asm+0x1a/0x30
[  376.395368][T21688] 
[  376.395368][T21688] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  376.397717][T21688]        __mutex_lock+0x19f/0x1300
[  376.399333][T21688]        elevator_change+0x1b3/0x450
[  376.400985][T21688]        elevator_set_none+0xb5/0x140
[  376.402908][T21688]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  376.405257][T21688]        nbd_start_device+0x17f/0xb10
[  376.407048][T21688]        nbd_genl_connect+0x165b/0x1cf0
[  376.408844][T21688]        genl_family_rcv_msg_doit+0x22a/0x330
[  376.410744][T21688]        genl_rcv_msg+0x61c/0x7a0
[  376.412302][T21688]        netlink_rcv_skb+0x232/0x4b0
[  376.413936][T21688]        genl_rcv+0x28/0x40
[  376.415365][T21688]        netlink_unicast+0x80f/0x9b0
[  376.417025][T21688]        netlink_sendmsg+0x813/0xb40
[  376.418852][T21688]        ____sys_sendmsg+0x972/0x9f0
[  376.420549][T21688]        ___sys_sendmsg+0x2a5/0x360
[  376.422163][T21688]        __x64_sys_sendmsg+0x1bd/0x2a0
[  376.423859][T21688]        do_syscall_64+0x14d/0xf80
[  376.425452][T21688]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.427424][T21688] 
[  376.427424][T21688] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  376.430066][T21688]        blk_alloc_queue+0x546/0x680
[  376.432117][T21688]        __blk_mq_alloc_disk+0x197/0x390
[  376.434188][T21688]        nbd_dev_add+0x499/0xb50
[  376.435985][T21688]        nbd_init+0x168/0x1f0
[  376.437782][T21688]        do_one_initcall+0x250/0x8d0
[  376.439874][T21688]        do_initcall_level+0x104/0x190
[  376.441710][T21688]        do_initcalls+0x59/0xa0
[  376.443296][T21688]        kernel_init_freeable+0x2a6/0x3e0
[  376.445254][T21688]        kernel_init+0x1d/0x1d0
[  376.446884][T21688]        ret_from_fork+0x51e/0xb90
[  376.448518][T21688]        ret_from_fork_asm+0x1a/0x30
[  376.450468][T21688] 
[  376.450468][T21688] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  376.452821][T21688]        __lock_acquire+0x15a5/0x2cf0
[  376.454450][T21688]        lock_acquire+0xf0/0x2e0
[  376.456087][T21688]        fs_reclaim_acquire+0x71/0x100
[  376.457815][T21688]        __kmalloc_cache_noprof+0x40/0x660
[  376.459743][T21688]        find_css_set+0x9b6/0x1a50
[  376.461555][T21688]        cgroup_migrate_prepare_dst+0x130/0x700
[  376.463637][T21688]        cgroup_attach_task+0x47c/0x870
[  376.465564][T21688]        __cgroup1_procs_write+0x2d2/0x3d0
[  376.467820][T21688]        cgroup_file_write+0x36f/0x790
[  376.469959][T21688]        kernfs_fop_write_iter+0x3af/0x540
[  376.472262][T21688]        vfs_write+0x61d/0xb90
[  376.474079][T21688]        ksys_write+0x150/0x270
[  376.475623][T21688]        do_syscall_64+0x14d/0xf80
[  376.477187][T21688]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.479107][T21688] 
[  376.479107][T21688] other info that might help us debug this:
[  376.479107][T21688] 
[  376.482524][T21688] Chain exists of:
[  376.482524][T21688]   fs_reclaim --> &nsock->tx_lock --> cpu_hotplug_lock
[  376.482524][T21688] 
[  376.486591][T21688]  Possible unsafe locking scenario:
[  376.486591][T21688] 
[  376.488967][T21688]        CPU0                    CPU1
[  376.490784][T21688]        ----                    ----
[  376.492454][T21688]   rlock(cpu_hotplug_lock);
[  376.494009][T21688]                                lock(&nsock->tx_lock);
[  376.496417][T21688]                                lock(cpu_hotplug_lock);
[  376.498711][T21688]   lock(fs_reclaim);
[  376.500191][T21688] 
[  376.500191][T21688]  *** DEADLOCK ***
[  376.500191][T21688] 
[  376.503381][T21688] 5 locks held by syz.1.4566/21688:
[  376.505439][T21688]  #0: ffff8881a24244f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  376.508965][T21688]  #1: ffff888110e88420 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[  376.512117][T21688]  #2: ffff8881bcc69488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[  376.515262][T21688]  #3: ffffffff8e79d328 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  376.518291][T21688]  #4: ffffffff8e5ed5f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  376.522089][T21688] 
[  376.522089][T21688] stack backtrace:
[  376.523930][T21688] CPU: 1 UID: 0 PID: 21688 Comm: syz.1.4566 Not tainted syzkaller #0 PREEMPT(full) 
[  376.523940][T21688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.523945][T21688] Call Trace:
[  376.523951][T21688]  <TASK>
[  376.523955][T21688]  dump_stack_lvl+0xe8/0x150
[  376.523968][T21688]  print_circular_bug+0x2e1/0x300
[  376.523981][T21688]  check_noncircular+0x12e/0x150
[  376.523994][T21688]  __lock_acquire+0x15a5/0x2cf0
[  376.524006][T21688]  ? __lock_acquire+0x6b5/0x2cf0
[  376.524016][T21688]  ? __lock_acquire+0x6b5/0x2cf0
[  376.524027][T21688]  lock_acquire+0xf0/0x2e0
[  376.524036][T21688]  ? __kmalloc_cache_noprof+0x40/0x660
[  376.524048][T21688]  fs_reclaim_acquire+0x71/0x100
[  376.524057][T21688]  ? __kmalloc_cache_noprof+0x40/0x660
[  376.524065][T21688]  __kmalloc_cache_noprof+0x40/0x660
[  376.524073][T21688]  ? find_css_set+0x9b6/0x1a50
[  376.524081][T21688]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.524091][T21688]  find_css_set+0x9b6/0x1a50
[  376.524098][T21688]  ? check_path+0x21/0x40
[  376.524109][T21688]  ? lockdep_unlock+0x5d/0xd0
[  376.524117][T21688]  ? __lock_acquire+0x146e/0x2cf0
[  376.524126][T21688]  ? __pfx_find_css_set+0x10/0x10
[  376.524137][T21688]  cgroup_migrate_prepare_dst+0x130/0x700
[  376.524151][T21688]  cgroup_attach_task+0x47c/0x870
[  376.524160][T21688]  ? __pfx_cgroup_attach_task+0x10/0x10
[  376.524169][T21688]  ? get_task_cred+0x23/0x300
[  376.524177][T21688]  ? get_task_cred+0x23/0x300
[  376.524184][T21688]  ? get_task_cred+0x23/0x300
[  376.524191][T21688]  ? get_task_cred+0x2c1/0x300
[  376.524198][T21688]  ? get_task_cred+0x23/0x300
[  376.524205][T21688]  __cgroup1_procs_write+0x2d2/0x3d0
[  376.524216][T21688]  ? __pfx___cgroup1_procs_write+0x10/0x10
[  376.524225][T21688]  ? kernfs_root+0x1c/0x230
[  376.524236][T21688]  ? kernfs_root+0x1c/0x230
[  376.524248][T21688]  ? kernfs_root+0x1ea/0x230
[  376.524258][T21688]  ? __pfx_cgroup1_tasks_write+0x10/0x10
[  376.524269][T21688]  cgroup_file_write+0x36f/0x790
[  376.524281][T21688]  ? __pfx_cgroup_file_write+0x10/0x10
[  376.524297][T21688]  ? __pfx_cgroup_file_write+0x10/0x10
[  376.524307][T21688]  kernfs_fop_write_iter+0x3af/0x540
[  376.524316][T21688]  vfs_write+0x61d/0xb90
[  376.524326][T21688]  ? __pfx_vfs_write+0x10/0x10
[  376.524335][T21688]  ? __fget_files+0x2a/0x420
[  376.524343][T21688]  ksys_write+0x150/0x270
[  376.524375][T21688]  ? __pfx_ksys_write+0x10/0x10
[  376.524384][T21688]  do_syscall_64+0x14d/0xf80
[  376.524395][T21688]  ? trace_irq_disable+0x3b/0x150
[  376.524402][T21688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.524410][T21688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.524418][T21688] RIP: 0033:0x7f899759cdd9
[  376.524427][T21688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  376.524433][T21688] RSP: 002b:00007f8998490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  376.524442][T21688] RAX: ffffffffffffffda RBX: 00007f8997816090 RCX: 00007f899759cdd9
[  376.524447][T21688] RDX: 0000000000000012 RSI: 0000200000000380 RDI: 000000000000000c
[  376.524453][T21688] RBP: 00007f8997632d69 R08: 0000000000000000 R09: 0000000000000000
[  376.524458][T21688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.524463][T21688] R13: 00007f8997816128 R14: 00007f8997816090 R15: 00007ffda4632b48
[  376.524472][T21688]  </TASK>
