last executing test programs:

2.23196253s ago: executing program 0 (id=7120):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x4008af60, &(0x7f0000000340))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000040)={r1, 0x0, 0x2, 0x4a18, 0x0, 0xf, [0x7, 0x3ff, 0x9, 0x2, 0xb, 0x7]})

2.167672594s ago: executing program 0 (id=7121):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async, rerun: 32)
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) (async)
clock_gettime(0x0, &(0x7f0000000000))
r1 = socket$netlink(0x10, 0x3, 0x9)
r2 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xe0000012}) (async)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x80)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r5 = socket(0x10, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) (async, rerun: 32)
r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async, rerun: 64)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) (rerun: 64)
sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
r7 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) (async, rerun: 32)
recvmsg(r8, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40001) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)

2.166405796s ago: executing program 0 (id=7123):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000700000000001400020077673000000000000000000000000000fc010880080100801400040002004e207f0000010000000000000000c40009801c000080060001000200000008000200ac141432050003000000000058000080060001000200000008000200640101020500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac141481050003000300007218647c8781a39040021d4be87e73c100ff0100000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030001000000240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}}, 0x40)
getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_emit_ethernet(0x1f, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0011aaab63f876a76c0cee145e4c67651dcaacc2c9efc2396cff45882a7afd5613110caa70aee6d16e0be5a3e8696da3336a9f0242745d21e0f259ef90f766a7a462f86d75365327953e6d7514aec15fadf26b8635e6f0fb9c993418aa3744ef6afd0c6137715644991274889a693786bd5cbb70b27bdda7c874f6143b3cf491128f07c68024178baaa5a9e285df2900"/184], 0x0)
close(0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
getpid()
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c)
unshare(0x2000000)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
unshare(0x2010100)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x2, 0x2, {0xa, 0x4e24, 0xfffffffa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)

1.27221079s ago: executing program 0 (id=7130):
socket(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) (async)
r5 = socket(0x10, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff3}, {0xe, 0xffe0}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async)
readv(r3, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
r7 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) (async, rerun: 32)
recvmsg(r8, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40001) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c440}, 0x200000b0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))

879.628741ms ago: executing program 0 (id=7133):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f0000000640)=[{0x6a, 0x7, 0x0, 0x4}, {0x0, 0x42, 0x10, 0x3}, {0x7f, 0x4b, 0xd, 0x2}]}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
r1 = socket$packet(0x11, 0xa, 0x300)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0xb8}}, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2)
r5 = accept4(r2, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000040))
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r7, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000f00)={{r1}, r9, 0x1e, @inherit={0x60, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000000000003ab27a2360ca90900004000000000020000000000000000000000000000002400000000000000ff0700000000000003000000000000000d000000000000000d00000000000000550500000000000002000000000000000008000000000000"]}, @name="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"})
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

631.281817ms ago: executing program 2 (id=7140):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
socket$netlink(0x10, 0x3, 0xc)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0xae93c000)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000240))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x1, 0x5, 0x7fffffff, 0x0, r3, 0xd, '\x00', r4, r5, 0x5, 0x1, 0x1, 0x6}, 0x50)
getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x5, 0x9b, 0x3, 0x80, 0x4, 0x1, 0x5, 0xf8, 0x2, 0x4, 0x6, 0x6, 0x3b}, 0xe)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000140))
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x1b, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd36, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x21}]}, 0x60}}, 0x8000002)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

560.268838ms ago: executing program 1 (id=7142):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000240), &(0x7f0000000400)=0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
close(0x3)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e21, 0x1002, @private2, 0xfffffffe}}}, &(0x7f0000000040)=0x84)
ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000540)={0xb, @broadcast})
sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, &(0x7f00000002c0)=0x51)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={r5, 0x17}, 0x8)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6gre0\x00', <r9=>r2, 0x2f, 0x8, 0xd, 0x1, 0x25, @rand_addr=' \x01\x00', @empty, 0x10, 0x80, 0x0, 0x9}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000680)={'tunl0\x00', <r10=>r2, 0x700, 0x7800, 0x6, 0x2, {{0x11, 0x4, 0x2, 0x3, 0x44, 0x64, 0x3, 0x1a, 0x2f, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0x27, 0x28, [@dev={0xac, 0x14, 0x14, 0x31}, @remote, @local, @broadcast, @private=0xa010102, @empty, @loopback, @multicast1, @multicast1]}, @lsrr={0x83, 0x7, 0x93, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa8, r8, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r11 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000007f00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x6, 0x1b}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

560.071228ms ago: executing program 2 (id=7143):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r0, 0x8934, &(0x7f0000000000)={0x1})

441.874322ms ago: executing program 1 (id=7144):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) (rerun: 32)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xfffffffffffffdb7, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async)
clock_gettime(0x8, &(0x7f0000000280))
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000010) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRESHEX=r1, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x4}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc020}, 0x4040)
r5 = socket(0x1, 0x803, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB="08000a00d5e8865062793ef2b3d1161bcfe5ce7994578dc504430cb05529b009102083c53468c856b9252fa41ddf34f132d1218593acbff3bc72fba669b04a6d10ba260f9f12594e597ef2d61dbac2a6916125fba998a2e65a8dc32186", @ANYRES32=r9, @ANYBLOB], 0x4c}}, 0x884)

157.731469ms ago: executing program 2 (id=7145):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000002c0), &(0x7f0000000440)=r1}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000f00300000000000000004800000000eb", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x4c}}, 0x884)

157.017982ms ago: executing program 1 (id=7146):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000c00)={&(0x7f0000000700)=@l2tp6={0xa, 0x0, 0x9, @loopback, 0x70, 0x1}, 0x80, 0x0}, 0x20000080)
ioctl$FIOCLEX(r0, 0x5451)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x4008af60, &(0x7f0000000340))

156.839579ms ago: executing program 1 (id=7147):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc"], 0xdd12}], 0x1}, 0x200400d1)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0xfffffffe, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x400}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108)
r3 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4)
ioctl$int_in(r3, 0x5421, &(0x7f0000000340)=0xfff)
connect$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
connect$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="80a80000a304040008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x5084)

156.156216ms ago: executing program 2 (id=7148):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x4008af60, &(0x7f0000000340))

155.578503ms ago: executing program 2 (id=7149):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000400)=0xffffffbc, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x44001)

153.25878ms ago: executing program 1 (id=7150):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r3 = socket$packet(0x11, 0xa, 0x300)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 32)
ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000040)) (async)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) (async, rerun: 32)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x10) (async, rerun: 64)
close(0x3) (async, rerun: 64)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r7, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) (async)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000f00)={{r3}, r9, 0x14, @unused=[0x0, 0xfffffffffffffffb, 0x7f, 0xffffffffffffb377], @name="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"}) (async)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001300)={{r1}, r9, 0x18, @unused=[0x5a, 0xd, 0xa242, 0x800], @subvolid=0x2}) (async, rerun: 32)
r10 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async, rerun: 64)
socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)

149.112903ms ago: executing program 2 (id=7151):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x400000000000004)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0xf0, 0x0, 0x310, 0x310, 0x310, 0x4, &(0x7f0000000200), {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x9, 0x3, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xd, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 0x3, 0xf, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x0, 0x8, 0x2, 0x3, 0x8000, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, 0x6, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x15b}, 0x1, 0x0, 0x0, 0x5b10df4d84c3f683}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="601a2a79f206030000000000000000000000000905000100070000000900020073797a3100000000140007800500150016000000080012400800000000000000020000000500040001000000110003005261e2a5ecdac8e5093a686173683a69"], 0x60}, 0x1, 0x0, 0x0, 0x24004804}, 0x20004000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r6=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
preadv(r0, &(0x7f0000001a40)=[{&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/183, 0xb7}, {&(0x7f0000001980)=""/168, 0xa8}], 0x4, 0x1, 0x3e)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)

818.171µs ago: executing program 0 (id=7152):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x5f]}}, 0x0, 0x27, 0x0, 0x1, 0x3}, 0x28)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000180)=0x1, 0x2)
ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x4001af84, &(0x7f0000000340))

0s ago: executing program 1 (id=7153):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r5, &(0x7f0000000140), 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000e6000000a17400000061120c00000000009500000000000000225aea69d64d22e0b515f729e494ff00000059beb2f048a2f3f57c90fbeb200053d87207cbc31c28179c1e3dbbdeb3b880fb6c66f529267b0e404119a8adbdf267a8e68a8fc51fcb6efd8bb4857f2b62b6540149800c47eca544f5fb8b66f01391a1b61f08776b0f54e3e488b6cb2e8febd18217c76eed1260acc4530c1d6627af"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb84674d78e0bfa0dfbfc", 0x14}], 0x1}}], 0x1, 0x20008000)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
accept4$inet6(r7, 0x0, 0x0, 0x800)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e6548b32cfc4d94cc444e346f4520a17464657673696d3000000d0087006c325f64726f707300000000"], 0xa4}, 0x1, 0x0, 0x0, 0x88}, 0x24000084)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x3c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0xd221, @private2, 0x8000}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123)
shutdown(r0, 0x1)

kernel console output (not intermixed with test programs):

z.1.3046'.
[  205.516145][T13027] nbd: couldn't find a device at index 0
[  205.543376][T13017] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3052'.
[  205.553450][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3052'.
[  205.813739][T13043] netlink: 'syz.2.3066': attribute type 2 has an invalid length.
[  206.286146][T13081] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3082'.
[  206.682643][T13108] netlink: 'syz.2.3095': attribute type 1 has an invalid length.
[  206.706150][T13108] 8021q: adding VLAN 0 to HW filter on device bond4
[  206.712259][T13108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3095'.
[  206.771929][T13117] netlink: 'syz.2.3095': attribute type 1 has an invalid length.
[  206.783186][T13117] bond4: (slave batadv1): Opening slave failed
[  206.892946][T13125] netlink: 'syz.0.3100': attribute type 1 has an invalid length.
[  206.925404][T13125] 8021q: adding VLAN 0 to HW filter on device bond6
[  206.941725][T13125] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.951238][T13125] bond6: (slave bond0): Enslaving as a backup interface with a down link
[  207.410603][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3112'.
[  207.413670][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3112'.
[  207.416571][T13150] netlink: 'syz.0.3112': attribute type 6 has an invalid length.
[  207.419509][T13150] netlink: 'syz.0.3112': attribute type 5 has an invalid length.
[  207.422858][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3112'.
[  207.426033][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3112'.
[  207.429046][T13150] netlink: 'syz.0.3112': attribute type 6 has an invalid length.
[  207.431690][T13150] netlink: 'syz.0.3112': attribute type 5 has an invalid length.
[  207.601847][T13166] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  207.870887][T13194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3136'.
[  207.900311][T13198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3135'.
[  207.912588][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'.
[  207.922876][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3135'.
[  208.009364][T13205] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  208.509552][T13247] netlink: 'syz.0.3154': attribute type 8 has an invalid length.
[  208.529147][T13247] bond0: entered promiscuous mode
[  208.531389][T13247] bond0: left promiscuous mode
[  208.694076][T13261] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  208.703438][T13261] bond2: (slave lo): Enslaving as an active interface with an up link
[  208.716209][T13261] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  208.880024][T13280] netlink: 'syz.1.3169': attribute type 39 has an invalid length.
[  209.444582][T13306] veth0: entered promiscuous mode
[  209.451169][T13305] veth0: left promiscuous mode
[  209.599213][T13316] sch_tbf: burst 0 is lower than device sit0 mtu (1536) !
[  209.629476][T13319] sctp: [Deprecated]: syz.2.3187 (pid 13319) Use of struct sctp_assoc_value in delayed_ack socket option.
[  209.629476][T13319] Use struct sctp_sack_info instead
[  210.659694][T13360] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  210.663754][T13360] Cannot find set identified by id 3 to match
[  211.526354][T13435] __nla_validate_parse: 7 callbacks suppressed
[  211.526370][T13435] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3241'.
[  212.812042][T13506] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3272'.
[  213.289809][T13542] syzkaller0: entered promiscuous mode
[  213.294457][T13542] syzkaller0: entered allmulticast mode
[  213.408575][T13555] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3294'.
[  213.471466][T13561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3297'.
[  213.734738][T13586] sock: sock_set_timeout: `syz.2.3308' (pid 13586) tries to set negative timeout
[  213.813912][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3313'.
[  213.819864][T13596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3313'.
[  213.892171][T13602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  213.894533][T13602] IPv6: NLM_F_CREATE should be set when creating new route
[  213.896752][T13602] IPv6: NLM_F_CREATE should be set when creating new route
[  213.990589][T13611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.022237][T13611] syzkaller0: entered promiscuous mode
[  214.024031][T13611] syzkaller0: entered allmulticast mode
[  214.026186][T13611] tipc: Resetting bearer <eth:syzkaller0>
[  214.040131][T13610] tipc: Resetting bearer <eth:syzkaller0>
[  214.739848][T13631] validate_nla: 1 callbacks suppressed
[  214.739866][T13631] netlink: 'syz.0.3329': attribute type 6 has an invalid length.
[  215.819024][T13610] tipc: Disabling bearer <eth:syzkaller0>
[  215.914107][T13664] netlink: 'syz.2.3336': attribute type 1 has an invalid length.
[  215.958548][T13664] bond5: entered promiscuous mode
[  215.960474][T13664] 8021q: adding VLAN 0 to HW filter on device bond5
[  216.010653][T13664] 8021q: adding VLAN 0 to HW filter on device bond6
[  216.021844][T13664] bond5: (slave bond6): making interface the new active one
[  216.027858][T13664] bond6: entered promiscuous mode
[  216.038047][T13664] bond5: (slave bond6): Enslaving as an active interface with an up link
[  216.602398][T13706] lo speed is unknown, defaulting to 1000
[  216.716725][T13719] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  216.851220][T13729] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3361'.
[  217.087766][T13759] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  217.096238][T13759] bond7 (unregistering): Released all slaves
[  217.132594][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3379'.
[  217.136446][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3379'.
[  217.141438][T13769] netlink: 'syz.0.3379': attribute type 18 has an invalid length.
[  217.144227][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3379'.
[  217.363186][T13783] bond6: (slave bond0): Releasing backup interface
[  217.376818][T13783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  217.726654][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3403'.
[  217.836165][T13834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3408'.
[  217.910916][T13842] netlink: 'syz.2.3411': attribute type 3 has an invalid length.
[  217.949487][T13842] block nbd2: NBD_DISCONNECT
[  217.962374][T13842] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  217.970062][T13842] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  217.978829][T13842] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  217.989824][T13842] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  218.056339][T13853] veth1_macvtap: left promiscuous mode
[  218.062258][T13853] macsec0: entered promiscuous mode
[  218.064400][T13853] macsec0: entered allmulticast mode
[  218.265905][T13872] syzkaller1: entered promiscuous mode
[  218.269219][T13872] syzkaller1: entered allmulticast mode
[  218.358504][T13879] x_tables: ip_tables: icmp match: only valid for protocol 1
[  218.598162][T13897] netlink: 'syz.0.3437': attribute type 3 has an invalid length.
[  218.776633][T13915] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  219.091699][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3455'.
[  219.202800][T13925] dummy0: left promiscuous mode
[  219.644220][T13925] macvtap0: left promiscuous mode
[  219.675976][T13925] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  219.760675][T13925] geneve3: left promiscuous mode
[  219.877359][T13925] veth5: left promiscuous mode
[  220.019853][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.031996][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.042955][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  220.053100][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.056224][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.059117][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  220.062122][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.065322][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.073473][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  220.077221][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.080533][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.084089][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  220.261109][T13965] vxcan0: tx address claim with different name
[  220.300398][T13960] lo speed is unknown, defaulting to 1000
[  220.313443][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3468'.
[  220.340474][T13962] netlink: 'syz.0.3466': attribute type 2 has an invalid length.
[  220.346013][T13962] netlink: 'syz.0.3466': attribute type 2 has an invalid length.
[  220.398617][T13975] syzkaller0: entered promiscuous mode
[  220.400884][T13975] syzkaller0: entered allmulticast mode
[  220.754543][T13997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3481'.
[  220.761270][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'.
[  222.523143][T14080] __nla_validate_parse: 3 callbacks suppressed
[  222.523158][T14080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3518'.
[  222.529631][T14080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3518'.
[  222.709757][T14087] vlan3: entered promiscuous mode
[  223.864956][T14167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3551'.
[  223.892802][   T55] block nbd1: Receive control failed (result -1)
[  224.377463][T14188] syzkaller1: entered promiscuous mode
[  224.381419][T14188] syzkaller1: entered allmulticast mode
[  224.419889][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3555'.
[  224.425342][T14191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.970449][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'.
[  225.098542][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'.
[  225.146277][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'.
[  225.263714][T14239] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3578'.
[  225.305741][T14244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3581'.
[  225.308807][T14244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3581'.
[  225.436294][T14247] openvswitch: netlink: Flow key attr not present in new flow.
[  225.492842][T14265] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  226.964561][T14363] xt_hashlimit: size too large, truncated to 1048576
[  226.967671][T14363] xt_hashlimit: max too large, truncated to 1048576
[  227.178706][T14383] syzkaller0: entered promiscuous mode
[  227.187121][T14383] syzkaller0: entered allmulticast mode
[  228.134576][T14449] __nla_validate_parse: 5 callbacks suppressed
[  228.134632][T14449] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3674'.
[  228.172356][T14450] lo speed is unknown, defaulting to 1000
[  228.503738][T14467] lo speed is unknown, defaulting to 1000
[  229.233025][T14499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3694'.
[  229.350551][T14508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.353821][T14508] syzkaller0: entered promiscuous mode
[  229.356062][T14508] syzkaller0: entered allmulticast mode
[  230.143143][T14512] tipc: Resetting bearer <eth:syzkaller0>
[  230.153778][T14507] tipc: Resetting bearer <eth:syzkaller0>
[  230.172837][T14507] tipc: Disabling bearer <eth:syzkaller0>
[  230.444580][T14534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3708'.
[  230.655948][T14549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.791071][T14558] netlink: 83 bytes leftover after parsing attributes in process `syz.2.3720'.
[  231.176579][T14593] netlink: 'syz.1.3736': attribute type 1 has an invalid length.
[  231.289762][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3741'.
[  231.503868][T14620] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  231.920466][T14656] netlink: 'syz.0.3765': attribute type 30 has an invalid length.
[  231.923148][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'.
[  231.926318][T14656] bond0: option arp_missed_max: invalid value (0)
[  231.929231][T14656] bond0: option arp_missed_max: allowed values 1 - 255
[  231.975443][T14660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3767'.
[  232.576824][T14702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3786'.
[  232.707132][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  232.707589][ T4999] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  232.835007][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'.
[  233.235460][T14753] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3807'.
[  233.239166][T14753] netlink: 'syz.2.3807': attribute type 1 has an invalid length.
[  233.410592][T14769] netlink: 'syz.2.3815': attribute type 3 has an invalid length.
[  233.413126][T14769] netlink: 'syz.2.3815': attribute type 3 has an invalid length.
[  233.416095][T14769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3815'.
[  233.562714][T14779] geneve4: entered promiscuous mode
[  233.566606][T11669] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.575912][T11669] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.583977][T11669] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.593639][T11669] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.725090][T14795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3827'.
[  233.949554][T14817] sctp: [Deprecated]: syz.0.3835 (pid 14817) Use of struct sctp_assoc_value in delayed_ack socket option.
[  233.949554][T14817] Use struct sctp_sack_info instead
[  234.208597][T14831] sit1: entered allmulticast mode
[  234.302662][T14835] netlink: 'syz.1.3845': attribute type 62 has an invalid length.
[  235.166552][T14902] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3872'.
[  236.304477][T14942] xt_hashlimit: size too large, truncated to 1048576
[  236.475863][T14945] ip6gre1: entered promiscuous mode
[  236.477917][T14945] ip6gre1: entered allmulticast mode
[  237.408670][T14957] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3897'.
[  237.596295][T14967] syzkaller0: entered promiscuous mode
[  237.600418][T14967] syzkaller0: entered allmulticast mode
[  238.028753][T14890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  238.201775][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3909'.
[  238.250802][T14987] netlink: 'syz.2.3912': attribute type 1 has an invalid length.
[  238.414388][T15006] netlink: 'syz.1.3920': attribute type 1 has an invalid length.
[  238.521702][T15018] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3926'.
[  238.524614][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3926'.
[  238.527968][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3926'.
[  238.590611][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3928'.
[  238.594282][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3928'.
[  238.868630][T15056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3944'.
[  238.952791][T15056] veth7: entered allmulticast mode
[  238.966577][T15056] bond7: (slave veth7): Enslaving as an active interface with an up link
[  238.984551][T15056] bond7 (unregistering): (slave veth7): Releasing backup interface
[  238.996134][T15056] bond7 (unregistering): Released all slaves
[  239.060931][T15074] netlink: 'syz.2.3951': attribute type 2 has an invalid length.
[  239.104261][T15077] IPVS: Error connecting to the multicast addr
[  239.391892][T15103] nbd: couldn't find a device at index 0
[  239.402627][T15101] tipc: Failed to remove unknown binding: 66,1,1/2306502013:1236963905/1236963907
[  239.616172][T15120] bond3 (unregistering): Released all slaves
[  239.945539][T15131] lo speed is unknown, defaulting to 1000
[  240.782807][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3993'.
[  240.919411][T15187] netlink: 'syz.0.3996': attribute type 1 has an invalid length.
[  240.950233][T15187] 8021q: adding VLAN 0 to HW filter on device bond7
[  240.966147][T15187] vlan0: entered allmulticast mode
[  240.972061][T15187] bond7: entered allmulticast mode
[  240.986761][T15190] ip6gretap0: entered promiscuous mode
[  241.004159][T15187] bond7: (slave geneve5): making interface the new active one
[  241.008650][T15187] geneve5: entered allmulticast mode
[  241.013742][T15187] bond7: (slave geneve5): Enslaving as an active interface with an up link
[  241.019923][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.024084][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.031201][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.034862][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.170620][T15200] netlink: 'syz.1.4002': attribute type 2 has an invalid length.
[  241.279642][T15209] openvswitch: netlink: Flow key attr not present in new flow.
[  241.435773][T15219] netlink: 1100 bytes leftover after parsing attributes in process `syz.0.4011'.
[  241.476054][T15221] vxcan3: entered promiscuous mode
[  241.544620][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'.
[  241.563421][T15225] No such timeout policy "syz1"
[  241.681892][T15235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4017'.
[  242.120274][T15265] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  242.528322][T15270] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  243.218943][T15307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  243.503609][T15337] bridge7: the hash_elasticity option has been deprecated and is always 16
[  243.509928][T15337] bridge7: entered allmulticast mode
[  243.570267][T15343] __nla_validate_parse: 2 callbacks suppressed
[  243.570287][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4065'.
[  243.576409][T15343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4065'.
[  244.090455][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4073'.
[  244.100248][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4073'.
[  244.701100][T15399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4085'.
[  244.863390][T15413] bridge8: entered promiscuous mode
[  245.110920][T15427] syzkaller1: entered promiscuous mode
[  245.114946][T15427] syzkaller1: entered allmulticast mode
[  245.204670][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4102'.
[  245.210328][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4102'.
[  245.552741][T15460] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4114'.
[  245.556553][T15460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.323384][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4116'.
[  246.393952][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4116'.
[  246.410068][T15468] pimreg0: tun_chr_ioctl cmd 1074025681
[  247.209467][T15532] netlink: 'syz.1.4148': attribute type 8 has an invalid length.
[  247.231221][T15532] veth1_to_team: entered promiscuous mode
[  247.234143][T15532] gretap0: entered promiscuous mode
[  247.257219][T15532] veth1_to_team: left promiscuous mode
[  247.260620][T15532] gretap0: left promiscuous mode
[  247.532663][T15548] netlink: set zone limit has 4 unknown bytes
[  247.573346][T15551] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  247.653206][T15561] netlink: 'syz.1.4162': attribute type 6 has an invalid length.
[  247.661770][T15561] IPv6: NLM_F_CREATE should be specified when creating new route
[  248.555581][T15626] veth0: entered promiscuous mode
[  248.565946][T15626] netlink: 'syz.1.4193': attribute type 3 has an invalid length.
[  248.585058][T15625] veth0: left promiscuous mode
[  248.832030][T15650] __nla_validate_parse: 3 callbacks suppressed
[  248.832043][T15650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4201'.
[  248.867155][ T4999] Bluetooth: hci2: command 0x0405 tx timeout
[  248.948512][T15663] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4207'.
[  248.951446][T15663] veth0_to_bond: default FDB implementation only supports local addresses
[  249.543476][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4218'.
[  249.591280][T15707] bond8: entered promiscuous mode
[  249.593913][T15707] 8021q: adding VLAN 0 to HW filter on device bond8
[  249.630562][T15707] vlan3: entered allmulticast mode
[  249.632777][T15707] bond8: entered allmulticast mode
[  249.698064][T15717] sit0: entered promiscuous mode
[  249.700388][T15717] netlink: 'syz.2.4222': attribute type 1 has an invalid length.
[  249.703469][T15717] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4222'.
[  250.318846][T15762] lo speed is unknown, defaulting to 1000
[  250.479713][T15762] gretap1: entered promiscuous mode
[  250.769491][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'.
[  251.590722][T15824] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4269'.
[  251.837798][T15836] openvswitch: netlink: Message has 151 unknown bytes.
[  251.933874][T15843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.404009][   T56] block nbd3: Receive control failed (result -32)
[  252.814115][T15879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4293'.
[  252.914937][T15886] netlink: 'syz.0.4296': attribute type 3 has an invalid length.
[  252.960218][T11669] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.964912][T11669] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.972789][T11669] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.980900][T11669] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  253.486103][T15912] bridge9: entered promiscuous mode
[  253.489036][T15912] bridge9: entered allmulticast mode
[  253.499597][T15912] team0: Port device bridge9 added
[  253.505850][T15912] bridge0: port 1(team0) entered blocking state
[  253.508535][T15912] bridge0: port 1(team0) entered disabled state
[  253.512290][T15912] team0: entered allmulticast mode
[  253.928242][T15936] lo speed is unknown, defaulting to 1000
[  254.125209][T15962] netlink: 'syz.1.4328': attribute type 1 has an invalid length.
[  254.181669][T15968] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4331'.
[  254.503234][T15991] syzkaller0: entered promiscuous mode
[  254.505345][T15991] syzkaller0: entered allmulticast mode
[  255.085570][T16019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4351'.
[  255.092120][T16019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4351'.
[  255.329268][T16037] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4359'.
[  255.341658][T16037] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4359'.
[  255.354914][T16037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4359'.
[  256.403675][T16104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4389'.
[  256.728844][T16150] netlink: 'syz.2.4408': attribute type 6 has an invalid length.
[  256.741154][T16154] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4409'.
[  257.110758][T16197] netlink: 'syz.0.4428': attribute type 4 has an invalid length.
[  257.308746][T16210] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  257.685472][T16252] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4454'.
[  257.724862][T16256] netlink: 'syz.1.4457': attribute type 1 has an invalid length.
[  257.868586][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4467'.
[  259.126821][T16342] syzkaller0: entered promiscuous mode
[  259.128777][T16342] syzkaller0: entered allmulticast mode
[  259.260382][T16352] xt_hashlimit: size too large, truncated to 1048576
[  259.618667][T16362] __nla_validate_parse: 6 callbacks suppressed
[  259.618686][T16362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4502'.
[  261.484342][T16402] tipc: Resetting bearer <ib:geneve1>
[  261.562548][ T7300] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.566360][ T7300] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.570031][ T7300] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.573333][ T7300] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.576677][ T7300] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.580575][ T7300] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.588184][ T7300] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.593958][ T7300] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.136152][T16455] pim6reg1: entered promiscuous mode
[  262.140466][T16455] pim6reg1: entered allmulticast mode
[  262.356001][T16472] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4549'.
[  262.361523][T16472] nbd: couldn't find a device at index 0
[  262.382744][T16470] bond9 (unregistering): Released all slaves
[  262.405498][T16475] syzkaller0: entered promiscuous mode
[  262.407330][T16475] syzkaller0: entered allmulticast mode
[  263.257569][T16522] nbd: must specify a size in bytes for the device
[  263.259991][T16522] nbd: couldn't find device at index 0
[  263.277913][T16524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4572'.
[  263.353712][T16532] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4576'.
[  264.817695][T16585] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4599'.
[  265.367342][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4624'.
[  267.327991][T16707] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4654'.
[  267.331665][T16707] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4654'.
[  268.679894][T16768] netlink: 'syz.1.4681': attribute type 1 has an invalid length.
[  268.683167][T16768] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4681'.
[  270.174231][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4709'.
[  270.215076][T16836] syzkaller0: entered promiscuous mode
[  270.219781][T16836] syzkaller0: entered allmulticast mode
[  270.570591][T16862] batadv_slave_1: entered promiscuous mode
[  270.573631][T16861] batadv_slave_1: left promiscuous mode
[  271.566203][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4734'.
[  271.587237][T16892] netlink: 'syz.2.4734': attribute type 30 has an invalid length.
[  271.614965][T11669] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  271.618204][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4734'.
[  271.622957][T11669] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  271.629707][T16892] netlink: 'syz.2.4734': attribute type 30 has an invalid length.
[  271.632632][T11669] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  271.640724][T11669] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  271.731724][T16897] xt_hashlimit: size too large, truncated to 1048576
[  272.046571][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4742'.
[  272.109354][T16923] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4747'.
[  272.169378][T16928] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4749'.
[  272.315079][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4752'.
[  272.332439][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4752'.
[  273.080536][T17006] syzkaller0: entered promiscuous mode
[  273.082797][T17006] syzkaller0: entered allmulticast mode
[  273.287502][T16966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  273.411357][T17014] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4784'.
[  273.552998][T17024] netlink: 'syz.2.4788': attribute type 1 has an invalid length.
[  273.615070][T17020] netlink: 'syz.1.4787': attribute type 3 has an invalid length.
[  273.618434][T17020] netlink: 'syz.1.4787': attribute type 3 has an invalid length.
[  273.621631][T17020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4787'.
[  275.645214][T17062] 8021q: adding VLAN 0 to HW filter on device macsec2
[  276.083737][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4817'.
[  276.308171][T17112] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4821'.
[  276.322293][T17114] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.384657][T17116] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4823'.
[  276.394018][T17116] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4823'.
[  276.412185][T17118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.453848][T17120] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4825'.
[  276.604542][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4829'.
[  276.934104][T17160] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4841'.
[  276.943303][T17160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4841'.
[  276.949717][T17160] netlink: 'syz.1.4841': attribute type 1 has an invalid length.
[  277.295774][   T33] audit: type=1800 audit(1778670473.697:9): pid=17188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4855" name="memory.events" dev="tmpfs" ino=7866 res=0 errno=0
[  277.305697][   T33] audit: type=1804 audit(1778670473.717:10): pid=17188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4855" name="/newroot/1558/memory.events" dev="tmpfs" ino=7866 res=1 errno=0
[  277.867651][T17224] syzkaller1: entered promiscuous mode
[  277.871818][T17224] syzkaller1: entered allmulticast mode
[  279.084857][T17273] netlink: 'syz.1.4887': attribute type 4 has an invalid length.
[  279.091070][T17273] netlink: 'syz.1.4887': attribute type 4 has an invalid length.
[  279.343652][T17295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.399939][T17298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4899'.
[  279.459030][T17298] bond8: entered promiscuous mode
[  279.460837][T17298] bond8: entered allmulticast mode
[  279.612697][T17317] netlink: 'syz.0.4907': attribute type 14 has an invalid length.
[  279.898095][T17321] syzkaller1: entered promiscuous mode
[  279.908745][T17321] syzkaller1: entered allmulticast mode
[  280.669153][T17382] syzkaller0: entered promiscuous mode
[  280.671155][T17382] syzkaller0: entered allmulticast mode
[  280.890421][T17398] netlink: 'syz.2.4942': attribute type 15 has an invalid length.
[  281.010458][T17407] --map-set only usable from mangle table
[  281.073017][T17413] netlink: 'syz.1.4950': attribute type 1 has an invalid length.
[  281.076660][T17413] netlink: 'syz.1.4950': attribute type 3 has an invalid length.
[  281.081798][T17413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4950'.
[  281.365036][T17434] syzkaller0: entered promiscuous mode
[  281.389039][T17434] syzkaller0: entered allmulticast mode
[  281.622580][T17461] nbd: socks must be embedded in a SOCK_ITEM attr
[  284.392959][T17472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4971'.
[  284.893187][T17509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4987'.
[  285.267704][T17534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5000'.
[  285.580427][T17551] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5008'.
[  285.584276][T17551] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5008'.
[  285.985714][T17567] netlink: 'syz.1.5013': attribute type 1 has an invalid length.
[  285.988921][T17567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  286.324722][T17592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5025'.
[  286.693268][T17632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5042'.
[  286.978261][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.982618][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.000869][T17652] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5053'.
[  287.003379][T17654] netlink: 'syz.0.5052': attribute type 2 has an invalid length.
[  287.060320][T17660] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  287.065922][T17660] nbd: couldn't find a device at index 2
[  287.160746][T17671] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5059'.
[  287.174721][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5049'.
[  287.430996][T17698] netlink: 'syz.0.5069': attribute type 10 has an invalid length.
[  287.434296][T17697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.034302][T17734] lo speed is unknown, defaulting to 1000
[  288.056225][T17736] bond9: option arp_validate: invalid value (18446744073709551613)
[  288.059860][T17736] bond9 (unregistering): Released all slaves
[  288.337585][T17748] netlink: 'syz.1.5087': attribute type 1 has an invalid length.
[  288.416322][T17748] bond3: entered promiscuous mode
[  288.421669][T17748] 8021q: adding VLAN 0 to HW filter on device bond3
[  288.488147][T17753] 8021q: adding VLAN 0 to HW filter on device bond3
[  288.490603][T17753] bond3: (slave wireguard2): The slave device specified does not support setting the MAC address
[  288.504383][T17753] bond3: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  288.513451][T17753] bond3: (slave wireguard2): making interface the new active one
[  288.516158][T17753] wireguard2: entered promiscuous mode
[  288.519540][T17753] bond3: (slave wireguard2): Enslaving as an active interface with an up link
[  288.613981][T17769] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  288.623929][T17769] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  288.968300][T17807] netlink: 'syz.1.5111': attribute type 1 has an invalid length.
[  288.973963][T17807] netlink: 'syz.1.5111': attribute type 1 has an invalid length.
[  289.245068][T17835] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  290.525699][T17876] __nla_validate_parse: 2 callbacks suppressed
[  290.525717][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5140'.
[  290.548442][T17876] : entered promiscuous mode
[  290.559927][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5140'.
[  290.571165][T17876] openvswitch: : Dropping previously announced user features
[  290.724544][T17887] netlink: 'syz.2.5143': attribute type 1 has an invalid length.
[  291.043129][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5150'.
[  291.049430][T17903] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  291.148062][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'.
[  291.554666][T17945] lo speed is unknown, defaulting to 1000
[  291.769031][T17963] xt_hashlimit: size too large, truncated to 1048576
[  291.806779][T17965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5176'.
[  291.948345][T17972] xt_hashlimit: size too large, truncated to 1048576
[  292.087788][T17984] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5182'.
[  292.199564][T17992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.406312][T18008] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5195'.
[  292.554238][T18025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5199'.
[  292.557336][T18025] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5199'.
[  292.560233][T18025] netlink: 'syz.2.5199': attribute type 6 has an invalid length.
[  292.562701][T18025] netlink: 'syz.2.5199': attribute type 5 has an invalid length.
[  292.565265][T18025] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5199'.
[  292.671202][T18029] tun0: tun_chr_ioctl cmd 1074025675
[  292.677297][T18029] tun0: persist enabled
[  292.687920][T18029] tun0: tun_chr_ioctl cmd 1074025675
[  292.689676][T18029] tun0: persist enabled
[  292.692086][T18029] tun0: tun_chr_ioctl cmd 1074025673
[  292.993849][T18039] netlink: 'syz.1.5206': attribute type 39 has an invalid length.
[  294.137511][T18061] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  294.242335][T18066] netlink: 'syz.1.5217': attribute type 61 has an invalid length.
[  295.438718][T18010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  295.704130][T18088] __nla_validate_parse: 3 callbacks suppressed
[  295.704152][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5225'.
[  295.739610][T18088] gtp0: entered promiscuous mode
[  295.747359][T18088] gtp0: entered allmulticast mode
[  296.284379][T18099] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5230'.
[  296.541128][T18116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5236'.
[  296.600271][T18122] netlink: 'syz.1.5238': attribute type 2 has an invalid length.
[  296.604838][T18122] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.5238'.
[  296.631363][T18126] lo speed is unknown, defaulting to 1000
[  297.162388][T18157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5252'.
[  297.199598][   T56] block nbd4: Receive control failed (result -1)
[  297.810225][T18181] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5263'.
[  297.834578][T18181] dummy0 (unregistering): left allmulticast mode
[  297.981430][T18202] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5273'.
[  298.099321][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5273'.
[  298.250042][T18222] syzkaller1: entered promiscuous mode
[  298.252340][T18222] syzkaller1: entered allmulticast mode
[  298.316587][T18223] lo speed is unknown, defaulting to 1000
[  298.444028][T18230] dvmrp1: entered allmulticast mode
[  298.577766][T18235] lo speed is unknown, defaulting to 1000
[  298.795895][T18251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5290'.
[  298.803636][T18251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5290'.
[  298.865848][T18255] tc_dump_action: action bad kind
[  298.949461][T18259] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  298.958269][T18259] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  299.022027][T18264] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  299.025612][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.029648][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.040391][T18264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.332851][T18283] netlink: 'syz.2.5304': attribute type 1 has an invalid length.
[  299.425359][T18283] bond10: (slave geneve5): making interface the new active one
[  299.430770][T18283] bond10: (slave geneve5): Enslaving as an active interface with an up link
[  299.434343][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  299.440990][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  299.449601][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  299.460406][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  299.523735][T18288] vlan3: entered promiscuous mode
[  299.616615][T18292] netlink: 'syz.2.5308': attribute type 1 has an invalid length.
[  299.646274][T18294] lo speed is unknown, defaulting to 1000
[  300.136887][T18329] lo speed is unknown, defaulting to 1000
[  300.347830][T18342] syzkaller0: entered promiscuous mode
[  300.364299][T18342] syzkaller0: entered allmulticast mode
[  300.369725][T18342] 0: reclassify loop, rule prio 0, protocol 800
[  300.454248][T18349] sit0: left promiscuous mode
[  300.457948][T18349] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  300.461308][T18349] geneve2: left promiscuous mode
[  300.464031][T18349] ipip0: left promiscuous mode
[  300.466541][T18349] bond2: left promiscuous mode
[  300.473808][T18349] macsec1: left promiscuous mode
[  300.484989][T18349] bond5: left promiscuous mode
[  300.497812][T18349] bond6: left promiscuous mode
[  300.510258][T18349] geneve4: left promiscuous mode
[  300.513877][T18349] bond8: left promiscuous mode
[  301.185791][T18402] __nla_validate_parse: 2 callbacks suppressed
[  301.185813][T18402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5353'.
[  301.239122][T18411] netlink: 'syz.2.5353': attribute type 8 has an invalid length.
[  301.240989][T18402] 8021q: adding VLAN 0 to HW filter on device bond11
[  301.255898][T18412] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5356'.
[  301.277497][T18402] bond11 (unregistering): Released all slaves
[  302.787658][T18507] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5399'.
[  302.791694][T18507] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  303.326433][T18533] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[  303.346923][T18533] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  303.756595][T18551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  303.851978][T18555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5421'.
[  304.060554][ T5617] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  304.064346][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  304.064362][ T5617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  304.064369][ T5617] Call Trace:
[  304.064374][ T5617]  <TASK>
[  304.064380][ T5617]  dump_stack_lvl+0xe8/0x150
[  304.064398][ T5617]  dump_header+0xd3/0x4c0
[  304.064415][ T5617]  oom_kill_process+0x3ab/0x970
[  304.064431][ T5617]  out_of_memory+0x106c/0x1410
[  304.064441][ T5617]  ? try_charge_memcg+0xbb9/0x1570
[  304.064455][ T5617]  ? __pfx___mutex_lock+0x10/0x10
[  304.064469][ T5617]  ? __pfx_out_of_memory+0x10/0x10
[  304.064477][ T5617]  ? do_raw_spin_unlock+0x4d/0x210
[  304.064494][ T5617]  try_charge_memcg+0xc77/0x1570
[  304.064514][ T5617]  ? __pfx_try_charge_memcg+0x10/0x10
[  304.064524][ T5617]  ? percpu_ref_tryget+0x15/0x180
[  304.064546][ T5617]  ? charge_memcg+0x23/0x2b0
[  304.064558][ T5617]  charge_memcg+0x1a2/0x2b0
[  304.064570][ T5617]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  304.064580][ T5617]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  304.064593][ T5617]  __swap_cache_prepare_and_add+0xdc/0x700
[  304.064607][ T5617]  ? page_rmappable_folio+0x9a/0x170
[  304.064657][ T5617]  swap_cache_alloc_folio+0xf1/0x240
[  304.064675][ T5617]  swap_cluster_readahead+0x355/0x670
[  304.064694][ T5617]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  304.064710][ T5617]  ? get_vma_policy+0x27b/0x3c0
[  304.064723][ T5617]  swapin_readahead+0x196/0xc50
[  304.064734][ T5617]  ? swap_table_get+0x1e/0x260
[  304.064745][ T5617]  ? __pfx_swapin_readahead+0x10/0x10
[  304.064756][ T5617]  ? swap_table_get+0x1e/0x260
[  304.064765][ T5617]  ? swap_table_get+0x1e/0x260
[  304.064772][ T5617]  ? swap_table_get+0x1e/0x260
[  304.064781][ T5617]  ? swap_table_get+0x216/0x260
[  304.064790][ T5617]  ? swap_cache_get_folio+0x2e4/0x2f0
[  304.064802][ T5617]  do_swap_page+0x555/0x5120
[  304.064816][ T5617]  ? __pte_offset_map+0x29/0x240
[  304.064826][ T5617]  ? __pte_offset_map+0x29/0x240
[  304.064840][ T5617]  ? do_swap_page+0x128/0x5120
[  304.064848][ T5617]  ? __pfx_do_swap_page+0x10/0x10
[  304.064856][ T5617]  ? __pte_offset_map+0x1ae/0x240
[  304.064867][ T5617]  ? pte_offset_map_rw_nolock+0xea/0x160
[  304.064878][ T5617]  handle_mm_fault+0x12d2/0x3170
[  304.064894][ T5617]  ? handle_mm_fault+0xee/0x3170
[  304.064907][ T5617]  ? __pfx_handle_mm_fault+0x10/0x10
[  304.064916][ T5617]  ? lock_vma_under_rcu+0x45a/0x500
[  304.064940][ T5617]  do_user_addr_fault+0xa73/0x1340
[  304.064953][ T5617]  ? rcu_is_watching+0x15/0xb0
[  304.064963][ T5617]  ? trace_page_fault_user+0x84/0x1e0
[  304.064972][ T5617]  exc_page_fault+0x6a/0xc0
[  304.064988][ T5617]  asm_exc_page_fault+0x26/0x30
[  304.064997][ T5617] RIP: 0033:0x7fd572d5d60e
[  304.065008][ T5617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  304.065015][ T5617] RSP: 002b:00007ffe6a8181a8 EFLAGS: 00010246
[  304.065025][ T5617] RAX: 0000000000000000 RBX: 0000555565118500 RCX: 00007fd572d5d60e
[  304.065031][ T5617] RDX: 00007ffe6a818200 RSI: 0000000000000000 RDI: 0000000000000000
[  304.065036][ T5617] RBP: 00007ffe6a81826c R08: 0000000000000000 R09: 0000000000000000
[  304.065041][ T5617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  304.065045][ T5617] R13: 00000000000927c0 R14: 0000000000049faa R15: 00007ffe6a8182c0
[  304.065059][ T5617]  </TASK>
[  304.227355][ T5617] memory: usage 307200kB, limit 307200kB, failcnt 2086
[  304.276000][ T5617] memory+swap: usage 307300kB, limit 9007199254740988kB, failcnt 0
[  304.279254][ T5617] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[  304.281719][ T5617] Memory cgroup stats for /syz1:
[  304.282095][ T5617] cache 0
[  304.284976][ T5617] rss 0
[  304.286101][ T5617] rss_huge 0
[  304.287558][ T5617] shmem 0
[  304.288798][ T5617] mapped_file 0
[  304.290123][ T5617] dirty 0
[  304.291088][ T5617] writeback 0
[  304.292142][ T5617] workingset_refault_anon 6
[  304.293659][ T5617] workingset_refault_file 0
[  304.295498][ T5617] swap 102400
[  304.296857][ T5617] swapcached 159744
[  304.298683][ T5617] pgpgin 183018
[  304.300097][ T5617] pgpgout 183012
[  304.301533][ T5617] pgfault 357455
[  304.302952][ T5617] pgmajfault 2
[  304.304346][ T5617] inactive_anon 24576
[  304.305895][ T5617] active_anon 0
[  304.307854][ T5617] inactive_file 0
[  304.309309][ T5617] active_file 0
[  304.310527][ T5617] unevictable 0
[  304.311952][ T5617] hierarchical_memory_limit 314572800
[  304.314079][ T5617] hierarchical_memsw_limit 9223372036854771712
[  304.316528][ T5617] total_cache 0
[  304.319232][ T5617] total_rss 0
[  304.321398][ T5617] total_rss_huge 0
[  304.322962][ T5617] total_shmem 0
[  304.324454][ T5617] total_mapped_file 0
[  304.326083][ T5617] total_dirty 0
[  304.327869][ T5617] total_writeback 0
[  304.329418][ T5617] total_workingset_refault_anon 6
[  304.331482][ T5617] total_workingset_refault_file 0
[  304.333468][ T5617] total_swap 102400
[  304.335016][ T5617] total_swapcached 159744
[  304.336771][ T5617] total_pgpgin 183018
[  304.338703][ T5617] total_pgpgout 183012
[  304.344326][ T5617] total_pgfault 357455
[  304.348310][ T5617] total_pgmajfault 2
[  304.348321][T18567] raw_sendmsg: syz.2.5426 forgot to set AF_INET. Fix it!
[  304.353448][ T5617] total_inactive_anon 24576
[  304.355324][ T5617] total_active_anon 0
[  304.357184][ T5617] total_inactive_file 0
[  304.358886][ T5617] total_active_file 0
[  304.360493][ T5617] total_unevictable 0
[  304.362351][ T5617] anon_cost 0
[  304.363702][ T5617] file_cost 0
[  304.365044][ T5617] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5409,pid=18526,uid=0
[  304.371441][ T5617] Memory cgroup out of memory: Killed process 18526 (syz.1.5409) total-vm:102160kB, anon-rss:1240kB, file-rss:21772kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  304.442926][T18569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  304.769910][T18526] syz.1.5409 (18526) used greatest stack depth: 19640 bytes left
[  304.936920][T18581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5433'.
[  305.325130][T18595] bond11: entered promiscuous mode
[  305.443313][T18600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  305.665286][T18620] netlink: 'syz.1.5450': attribute type 11 has an invalid length.
[  305.674180][T18620] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.5450'.
[  306.160337][T18639] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5459'.
[  306.712593][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5464'.
[  306.810713][T18652] lo speed is unknown, defaulting to 1000
[  306.924825][T18672] netlink: 'syz.0.5473': attribute type 2 has an invalid length.
[  306.974506][T18677] syzkaller0: entered allmulticast mode
[  307.197269][T18688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.200854][T18688] syzkaller0: entered promiscuous mode
[  307.203944][T18688] syzkaller0: entered allmulticast mode
[  307.231673][T18688] tipc: Resetting bearer <eth:syzkaller0>
[  307.238311][T18687] tipc: Resetting bearer <eth:syzkaller0>
[  307.259503][T18687] tipc: Disabling bearer <eth:syzkaller0>
[  307.995588][T18727] sctp: [Deprecated]: syz.0.5497 (pid 18727) Use of int in max_burst socket option deprecated.
[  307.995588][T18727] Use struct sctp_assoc_value instead
[  308.033645][   T24] IPVS: starting estimator thread 0...
[  308.084830][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5501'.
[  308.127133][T18731] IPVS: using max 65 ests per chain, 156000 per kthread
[  308.135967][T18735] lo speed is unknown, defaulting to 1000
[  308.210952][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5503'.
[  308.214582][T18744] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5503'.
[  308.223804][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5503'.
[  308.505694][T18754] netlink: 'syz.1.5507': attribute type 61 has an invalid length.
[  308.603133][T18760] netlink: 'syz.1.5509': attribute type 1 has an invalid length.
[  308.659033][T18760] 8021q: adding VLAN 0 to HW filter on device bond4
[  308.683177][T18764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.688316][T18764] syzkaller0: entered promiscuous mode
[  308.694172][T18764] syzkaller0: entered allmulticast mode
[  308.733617][T18764] tipc: Resetting bearer <eth:syzkaller0>
[  308.743755][T18762] tipc: Resetting bearer <eth:syzkaller0>
[  308.803736][T18762] tipc: Disabling bearer <eth:syzkaller0>
[  309.207401][T18811] netlink: 'syz.2.5534': attribute type 1 has an invalid length.
[  309.210684][T18811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.242333][T18813] netlink: 'syz.1.5535': attribute type 2 has an invalid length.
[  309.257301][T18813] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5535'.
[  309.814821][T18855] syzkaller1: tun_chr_ioctl cmd 1074025677
[  309.816923][T18855] syzkaller1: linktype set to 260
[  309.979090][T18869] syzkaller0: entered promiscuous mode
[  309.981373][T18869] syzkaller0: entered allmulticast mode
[  310.022519][T18871] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5561'.
[  310.992336][T18917] lo speed is unknown, defaulting to 1000
[  311.204286][T18932] netlink: 'syz.1.5587': attribute type 1 has an invalid length.
[  311.305569][T18936] SET target dimension over the limit!
[  311.829956][T18932] bond5: (slave bridge11): making interface the new active one
[  311.844298][T18932] bond5: (slave bridge11): Enslaving as an active interface with an up link
[  311.867417][T18936] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  312.194524][T18945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5592'.
[  312.933321][T18964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5600'.
[  312.972513][T18968] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5604'.
[  312.977275][T18968] syzkaller0: entered promiscuous mode
[  312.979299][T18968] syzkaller0: entered allmulticast mode
[  313.026048][T18974] netlink: 'syz.1.5606': attribute type 15 has an invalid length.
[  313.171558][T18990] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5614'.
[  314.533796][T19085] syzkaller1: entered promiscuous mode
[  314.542611][T19085] syzkaller1: entered allmulticast mode
[  314.862938][T19106] netlink: 'syz.2.5664': attribute type 1 has an invalid length.
[  314.866133][T19106] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5664'.
[  315.662825][T19170] batadv_slave_0: entered promiscuous mode
[  315.669494][T19168] batadv_slave_0: left promiscuous mode
[  315.979333][T19208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5711'.
[  316.113312][T19217] syzkaller0: entered promiscuous mode
[  316.118097][T19217] syzkaller0: entered allmulticast mode
[  316.369505][T19231] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  316.773726][T19261] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5734'.
[  317.334674][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5755'.
[  317.369571][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5756'.
[  317.372527][T19308] bond0: Unable to set up delay as MII monitoring is disabled
[  317.623314][T19322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5762'.
[  317.977107][T19338] netlink: 'syz.2.5769': attribute type 3 has an invalid length.
[  318.087819][T19341] block nbd2: NBD_DISCONNECT
[  318.212442][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5771'.
[  318.360775][T19359] netlink: 'syz.1.5776': attribute type 1 has an invalid length.
[  318.369956][T19359] netlink: 'syz.1.5776': attribute type 1 has an invalid length.
[  318.373722][T19359] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.5776'.
[  318.439668][T19361] lo speed is unknown, defaulting to 1000
[  318.520886][T19372] netlink: 'syz.1.5780': attribute type 46 has an invalid length.
[  318.525270][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5781'.
[  318.529755][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5781'.
[  318.589616][T19374] vlan4: entered promiscuous mode
[  318.821409][T19394] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5790'.
[  318.837476][T19394] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5790'.
[  318.886005][T19397] tipc: Resetting bearer <ib:geneve1>
[  319.195217][T19417] netlink: 'syz.0.5802': attribute type 3 has an invalid length.
[  319.288788][T19425] netlink: 'syz.1.5806': attribute type 30 has an invalid length.
[  319.349322][T19429] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5808'.
[  319.595403][T19453] macsec0: left promiscuous mode
[  319.597455][T19453] macsec0: left allmulticast mode
[  319.600441][T19453] bridge1: left allmulticast mode
[  319.603112][T19453] bridge4: left promiscuous mode
[  319.604819][T19453] bridge4: left allmulticast mode
[  319.608993][T19453] sit1: left allmulticast mode
[  319.611158][T19453] ip6gre1: left promiscuous mode
[  319.613300][T19453] ip6gre1: left allmulticast mode
[  319.627444][T19453] bridge7: left allmulticast mode
[  319.629401][T19453] bridge8: left promiscuous mode
[  319.634977][T19453] bond3: left promiscuous mode
[  319.636614][T19453] wireguard2: left promiscuous mode
[  320.022863][T19481] netlink: 'syz.2.5827': attribute type 16 has an invalid length.
[  320.026123][T19481] netlink: 'syz.2.5827': attribute type 17 has an invalid length.
[  320.176647][T19493] syzkaller1: entered promiscuous mode
[  320.184295][T19493] syzkaller1: entered allmulticast mode
[  320.805983][T19519] netlink: 'syz.0.5844': attribute type 1 has an invalid length.
[  321.021627][T19527] siw: device registration error -23
[  322.018607][T19562] netlink: 'syz.2.5864': attribute type 12 has an invalid length.
[  322.248428][T19582] lo speed is unknown, defaulting to 1000
[  322.683921][T19617] __nla_validate_parse: 3 callbacks suppressed
[  322.683934][T19617] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5889'.
[  322.692816][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5889'.
[  323.700778][T19686] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5923'.
[  323.822599][T19697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  324.333900][T19736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5946'.
[  325.196089][T19782] netlink: 'syz.0.5966': attribute type 1 has an invalid length.
[  325.201926][T19782] netlink: 476 bytes leftover after parsing attributes in process `syz.0.5966'.
[  325.206133][T19782] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.5966'.
[  326.000120][T19835] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.219131][T19843] IPVS: persistence engine module ip_vs_pe_ not found
[  326.446499][T19857] lo speed is unknown, defaulting to 1000
[  326.564092][T19867] vlan1: entered promiscuous mode
[  326.566225][T19867] gretap0: entered promiscuous mode
[  327.167181][T19904] netlink: 'syz.0.6020': attribute type 3 has an invalid length.
[  327.183812][T19901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6019'.
[  327.321363][T19915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6026'.
[  327.337210][T19915] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6026'.
[  327.346449][T19915] vlan1: entered promiscuous mode
[  327.349327][T19915] vlan1: entered allmulticast mode
[  327.351111][T19915] gretap0: entered allmulticast mode
[  327.868662][T19942] netlink: 'syz.2.6037': attribute type 10 has an invalid length.
[  327.873192][T19942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6037'.
[  327.878255][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6037'.
[  327.881979][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6037'.
[  328.272600][T19959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6045'.
[  329.506942][T19998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6063'.
[  329.622629][T20006] netlink: 'syz.0.6067': attribute type 1 has an invalid length.
[  329.670696][T20010] bond3: (slave ip6gretap0): Removing an active aggregator
[  329.680481][T20010] bond3: (slave ip6gretap0): Releasing backup interface
[  329.750934][T20017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6067'.
[  329.755582][T20006] 8021q: adding VLAN 0 to HW filter on device bond10
[  329.764603][T20006] bond9: (slave bond10): making interface the new active one
[  329.777959][T20006] bond9: (slave bond10): Enslaving as an active interface with an up link
[  329.786800][T20017] 8021q: adding VLAN 0 to HW filter on device bond9
[  330.033406][T20033] bond6: option lacp_rate: invalid value (128)
[  330.040204][T20033] bond6 (unregistering): Released all slaves
[  330.206612][T20055] netlink: set zone limit has 8 unknown bytes
[  330.501304][T20082] netlink: 'syz.0.6094': attribute type 29 has an invalid length.
[  330.504723][T20082] netlink: 'syz.0.6094': attribute type 29 has an invalid length.
[  330.510505][T20082] netlink: 604 bytes leftover after parsing attributes in process `syz.0.6094'.
[  330.511938][T20084] netlink: 'syz.2.6093': attribute type 4 has an invalid length.
[  330.524051][T20084] netlink: 'syz.2.6093': attribute type 4 has an invalid length.
[  330.535123][ T8908] lo speed is unknown, defaulting to 1000
[  330.537656][ T8908] syz2: Port: 1 Link ACTIVE
[  330.657900][T20094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6099'.
[  331.698059][T20129] openvswitch: netlink: Message has 5 unknown bytes.
[  333.001557][T20177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6137'.
[  333.039297][T20177] team1: entered promiscuous mode
[  333.043530][T20177] team1: entered allmulticast mode
[  333.060293][T20183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6137'.
[  333.074258][T20177] 8021q: adding VLAN 0 to HW filter on device team1
[  333.122149][T20183] team2: entered promiscuous mode
[  333.126975][T20183] team2: entered allmulticast mode
[  333.133275][T20183] 8021q: adding VLAN 0 to HW filter on device team2
[  333.306602][T20207] xt_CONNSECMARK: invalid mode: 0
[  333.360821][T20209] lo speed is unknown, defaulting to 1000
[  333.872590][T20256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6170'.
[  334.229843][ T4999] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  334.854678][T20306] netlink: 'syz.0.6192': attribute type 2 has an invalid length.
[  334.858792][T20306] netlink: 'syz.0.6192': attribute type 1 has an invalid length.
[  334.891189][T20309] geneve1: entered promiscuous mode
[  335.083955][T20321] netlink: 'syz.2.6198': attribute type 1 has an invalid length.
[  335.816829][T20367] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6218'.
[  335.980885][T20373] lo speed is unknown, defaulting to 1000
[  336.265459][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6231'.
[  336.301042][T20398] bond12: option ad_actor_sys_prio: invalid value (0)
[  336.303942][T20398] bond12: option ad_actor_sys_prio: allowed values 1 - 65535
[  336.315103][T20398] bond12 (unregistering): Released all slaves
[  336.606086][T20421] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  336.668909][T20427] netlink: 'syz.0.6245': attribute type 1 has an invalid length.
[  336.698351][T20427] 8021q: adding VLAN 0 to HW filter on device bond11
[  336.730754][T20427] bond11: (slave syz_tun): Enslaving as a backup interface with an up link
[  336.808106][ T7060] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  336.918020][ T7060] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  337.035971][T20441] netlink: 'syz.0.6251': attribute type 6 has an invalid length.
[  337.130598][T20443] netlink: 34 bytes leftover after parsing attributes in process `syz.1.6252'.
[  337.214823][T20453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6256'.
[  337.218098][T20452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6257'.
[  337.241887][T20452] bond12: entered promiscuous mode
[  337.243905][T20452] 8021q: adding VLAN 0 to HW filter on device bond12
[  337.264948][T20452] bridge13: entered promiscuous mode
[  337.274795][T20452] bond12: (slave bridge13): Enslaving as an active interface with an up link
[  337.282239][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6257'.
[  337.302006][T20452] bond12 (unregistering): (slave bridge13): Releasing backup interface
[  337.305310][T20452] bridge13: left promiscuous mode
[  337.312108][T20452] bond12 (unregistering): Released all slaves
[  338.494819][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6281'.
[  338.673733][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6292'.
[  338.676706][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6292'.
[  338.931206][T20559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6304'.
[  338.934346][T20559] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6304'.
[  338.937670][T20559] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6304'.
[  338.940556][T20559] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6304'.
[  338.993197][T20563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6306'.
[  339.170798][T20583] netem: change failed
[  339.236921][T20593] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  339.313949][T20601] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6324'.
[  339.329763][T20601] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  339.383226][T20608] netlink: 'syz.1.6326': attribute type 1 has an invalid length.
[  339.412495][T20608] 8021q: adding VLAN 0 to HW filter on device bond6
[  339.438894][T20608] bond6: (slave veth17): Enslaving as an active interface with a down link
[  339.446300][T20608] netlink: 'syz.1.6326': attribute type 10 has an invalid length.
[  339.453650][T20608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6326'.
[  339.481310][T20612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.516882][T20616] netlink: 'syz.2.6330': attribute type 1 has an invalid length.
[  339.920390][T20664] netlink: 'syz.0.6351': attribute type 1 has an invalid length.
[  339.944233][T20664] 8021q: adding VLAN 0 to HW filter on device bond12
[  339.951520][T20664] bond12: option tlb_dynamic_lb: unable to set because the bond device is up
[  340.311115][T20694] netlink: 'syz.1.6364': attribute type 14 has an invalid length.
[  340.999435][   T33] audit: type=1804 audit(1778670537.397:11): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6367" name="/newroot/2191/cgroup.controllers" dev="tmpfs" ino=11067 res=1 errno=0
[  341.021931][   T33] audit: type=1800 audit(1778670537.397:12): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6367" name="cgroup.controllers" dev="tmpfs" ino=11067 res=0 errno=0
[  341.089443][T20710] syzkaller0: entered promiscuous mode
[  341.099313][T20710] syzkaller0: entered allmulticast mode
[  341.927809][T20778] openvswitch: netlink: Flow key attr not present in new flow.
[  342.271943][T20808] netlink: 'syz.0.6410': attribute type 62 has an invalid length.
[  342.274877][T20807] vxcan1: entered promiscuous mode
[  342.432210][T20822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  342.527623][T20826] syzkaller0: entered promiscuous mode
[  342.534998][T20826] syzkaller0: entered allmulticast mode
[  343.152457][T20875] x9: renamed from bridge_slave_0
[  343.693543][T20894] __nla_validate_parse: 12 callbacks suppressed
[  343.693561][T20894] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6449'.
[  343.832669][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6454'.
[  343.861153][T20906] bond7: entered promiscuous mode
[  343.863703][T20906] 8021q: adding VLAN 0 to HW filter on device bond7
[  344.112227][T20926] veth1: entered promiscuous mode
[  344.114441][T20926] veth1: entered allmulticast mode
[  344.140853][T20928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6464'.
[  344.434164][T20954] bridge13: the hash_elasticity option has been deprecated and is always 16
[  344.437169][T20954] bridge13: entered allmulticast mode
[  344.441093][T20956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.596730][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6485'.
[  344.600400][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6485'.
[  344.603888][T20972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  344.643376][T20976] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6487'.
[  344.894259][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6495'.
[  344.996886][T21003] netlink: 'syz.2.6500': attribute type 2 has an invalid length.
[  345.269532][T21029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6513'.
[  345.315628][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6515'.
[  345.599673][T21053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6523'.
[  346.045365][T21077] .70X: left allmulticast mode
[  346.203041][T21077] vlan3: left allmulticast mode
[  346.206801][T21077] bond8: left allmulticast mode
[  346.239086][T21077] bond11: left promiscuous mode
[  346.245007][   T24] lo speed is unknown, defaulting to 1000
[  346.250170][ T7300] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.251852][   T24] syz2: Port: 1 Link DOWN
[  346.258410][ T7300] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.263522][ T7300] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  346.270731][ T7300] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.281339][ T7300] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.285902][ T7300] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  346.293261][ T7300] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.299202][ T7300] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.307270][ T7300] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  346.311623][ T7300] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.315747][ T7300] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.321691][ T7300] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  346.918133][T21120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  347.332268][T21163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.837253][T21199] netlink: 'syz.1.6587': attribute type 32 has an invalid length.
[  348.125770][T21228] SET target dimension over the limit!
[  348.836780][T21272] netlink: 'syz.1.6619': attribute type 8 has an invalid length.
[  348.840211][T21272] __nla_validate_parse: 7 callbacks suppressed
[  348.840225][T21272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6619'.
[  348.855132][T21272] veth1_to_team: entered promiscuous mode
[  348.859983][T21272] gretap0: entered promiscuous mode
[  348.862972][T21272] veth1_to_team: left promiscuous mode
[  348.866038][T21272] gretap0: left promiscuous mode
[  349.041520][T21278] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  349.048821][T21278] bond13 (unregistering): Released all slaves
[  349.265962][T21295] hsr0: entered promiscuous mode
[  349.281323][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6630'.
[  349.285450][T21295] hsr_slave_0: left promiscuous mode
[  349.294962][T21295] hsr_slave_1: left promiscuous mode
[  349.300103][T21295] hsr0 (unregistering): left promiscuous mode
[  349.441854][T21306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6635'.
[  349.445912][T21306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6635'.
[  349.471093][T21308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6636'.
[  349.473982][T21308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6636'.
[  349.520087][T21314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6638'.
[  349.534436][T21316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6640'.
[  349.674485][T21331] netlink: 'syz.2.6647': attribute type 4 has an invalid length.
[  349.784380][T21340] netlink: 'syz.1.6651': attribute type 1 has an invalid length.
[  350.159717][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  350.559176][T21391] IPVS: stopping backup sync thread 16210 ...
[  350.904841][T21425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6690'.
[  350.923875][T21425] bond8: entered promiscuous mode
[  350.926687][T21425] 8021q: adding VLAN 0 to HW filter on device bond8
[  350.939541][T21428] sit0: entered promiscuous mode
[  350.942728][T21428] netlink: 'syz.2.6691': attribute type 1 has an invalid length.
[  350.945880][T21428] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6691'.
[  350.957554][T21425] vlan3: entered allmulticast mode
[  350.961573][T21425] bond8: entered allmulticast mode
[  351.360205][T21460] netlink: 'syz.2.6705': attribute type 3 has an invalid length.
[  352.426966][T21511] netlink: 'syz.2.6729': attribute type 1 has an invalid length.
[  352.430446][T21511] netlink: 'syz.2.6729': attribute type 2 has an invalid length.
[  354.499395][T21631] syzkaller0: entered promiscuous mode
[  354.501758][T21631] syzkaller0: entered allmulticast mode
[  356.382718][T21653] kthread_run failed with err -4
[  356.405049][T21655] lo speed is unknown, defaulting to 1000
[  356.419937][T21662] vlan4: entered allmulticast mode
[  356.422088][T21662] bond0: entered allmulticast mode
[  356.424901][T21662] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6778'.
[  356.443259][T21662] bond0 (unregistering): Released all slaves
[  356.501991][T21664] lo speed is unknown, defaulting to 1000
[  356.677812][T21669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6780'.
[  356.762311][ T4999] Bluetooth: hci2: link tx timeout
[  356.764388][ T4999] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  356.781471][T21672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6781'.
[  356.906272][T21680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6783'.
[  356.931626][T21680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6783'.
[  357.093956][T21694] netlink: 'syz.0.6786': attribute type 13 has an invalid length.
[  357.100018][T21694] netlink: 'syz.0.6786': attribute type 17 has an invalid length.
[  357.153094][T21694] ip6gretap0: left promiscuous mode
[  357.168592][ T7060] bond11: (slave syz_tun): link status up again after 0 ms
[  357.177494][T21694] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.198567][ T7060] bond11: (slave syz_tun): link status up again after 0 ms
[  357.201403][T21702] netlink: 'syz.0.6786': attribute type 9 has an invalid length.
[  357.217637][T21694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  357.220791][T21694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  357.227269][ T7300] bond11: (slave syz_tun): link status up again after 0 ms
[  357.239597][T21694] veth1_macvtap: left promiscuous mode
[  357.242250][T21694] veth0_macvtap: left promiscuous mode
[  357.247398][ T7060] bond11: (slave syz_tun): link status up again after 0 ms
[  357.254409][T21694] veth0_macvtap: entered promiscuous mode
[  357.269290][   T12] bond11: (slave syz_tun): link status up again after 0 ms
[  357.273755][T21694] veth1_macvtap: entered promiscuous mode
[  357.280601][T21694] geneve1: left promiscuous mode
[  357.284600][T21694] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  357.287107][   T12] bond11: (slave syz_tun): link status up again after 0 ms
[  357.295971][T21694] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  357.304459][T21694] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  357.307175][   T12] bond11: (slave syz_tun): link status up again after 0 ms
[  357.315528][T21694] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  357.327360][   T12] bond11: (slave syz_tun): link status up again after 0 ms
[  357.331184][T21694] 8021q: adding VLAN 0 to HW filter on device bond1
[  357.336658][T21694] 8021q: adding VLAN 0 to HW filter on device bond2
[  357.340172][T21694] 8021q: adding VLAN 0 to HW filter on device bond3
[  357.347832][ T7060] bond11: (slave syz_tun): link status up again after 0 ms
[  357.351725][T21694] 8021q: adding VLAN 0 to HW filter on device bond4
[  357.355938][T21694] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  357.360074][T21694] ip6gretap0: entered promiscuous mode
[  357.363430][T21694] A link change request failed with some changes committed already. Interface wlan3 may have been left with an inconsistent configuration, please check.
[  357.401302][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  357.412593][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  357.422581][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  357.428033][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  357.613817][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6788'.
[  357.787886][T21711] syzkaller1: entered promiscuous mode
[  357.790520][T21711] syzkaller1: entered allmulticast mode
[  357.819418][T21709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6789'.
[  358.066214][T21727] syzkaller1: entered promiscuous mode
[  358.071991][T21727] syzkaller1: entered allmulticast mode
[  358.681017][T21727] veth7: left allmulticast mode
[  358.688802][T21727] vlan0: left allmulticast mode
[  358.690807][T21727] bond7: left allmulticast mode
[  358.692969][T21727] geneve5: left allmulticast mode
[  358.701651][T21727] bond8: left promiscuous mode
[  358.707199][T21727] bond8: left allmulticast mode
[  358.712113][T21727] gtp0: left promiscuous mode
[  358.714990][T21727] gtp0: left allmulticast mode
[  358.798017][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  358.809825][T21727] syzkaller1: left promiscuous mode
[  358.812289][T21727] syzkaller1: left allmulticast mode
[  358.836486][ T7060] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.865012][ T7060] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  358.872480][ T7060] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.884393][ T7060] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  358.930556][ T7060] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.934220][ T7060] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  358.943068][ T7060] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.947754][ T7060] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  358.970255][T21728] lo speed is unknown, defaulting to 1000
[  359.072216][T21740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6797'.
[  359.075602][T21740] syzkaller0: entered promiscuous mode
[  359.078665][T21740] syzkaller0: entered allmulticast mode
[  359.228767][T21742] vlan4: entered allmulticast mode
[  359.230622][T21742] bond0: entered allmulticast mode
[  359.232621][T21742] bond_slave_0: entered allmulticast mode
[  359.235206][T21742] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6798'.
[  359.246779][T21742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  359.252824][T21742] bond_slave_0: left allmulticast mode
[  359.255255][T21742] bond0 (unregistering): Released all slaves
[  359.403877][T21753] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6801'.
[  360.110389][T21775] netlink: 'syz.1.6807': attribute type 13 has an invalid length.
[  360.113586][T21775] netlink: 'syz.1.6807': attribute type 17 has an invalid length.
[  360.155921][T21775] ip6gretap0: left promiscuous mode
[  360.183791][T21775] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.192808][T21775] veth1: left promiscuous mode
[  360.194822][T21775] veth1: left allmulticast mode
[  360.263123][T21775] veth1_vlan: left promiscuous mode
[  360.266915][T21775] veth0_vlan: left promiscuous mode
[  360.270781][T21775] veth0_vlan: entered promiscuous mode
[  360.277612][T21775] veth1_vlan: entered promiscuous mode
[  360.285567][T21775] veth0_macvtap: left promiscuous mode
[  360.289903][T21775] veth0_macvtap: entered promiscuous mode
[  360.303894][T21775] veth1_macvtap: entered promiscuous mode
[  360.330568][T21775] 8021q: adding VLAN 0 to HW filter on device bond1
[  360.455323][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.462962][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.474052][ T5680] syz1: Port: 1 Link ACTIVE
[  360.474985][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.483128][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.526846][   T56] block nbd6: Receive control failed (result -1)
[  361.147802][T21798] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.151255][T21798] syzkaller0: entered promiscuous mode
[  361.153546][T21798] syzkaller0: entered allmulticast mode
[  361.176030][T21798] netlink: 'syz.2.6811': attribute type 10 has an invalid length.
[  361.185086][T21798] tipc: Resetting bearer <eth:syzkaller0>
[  361.193774][T21797] tipc: Resetting bearer <eth:syzkaller0>
[  361.213520][T21797] tipc: Disabling bearer <eth:syzkaller0>
[  361.293148][T21800] netlink: 'syz.2.6812': attribute type 13 has an invalid length.
[  361.296246][T21800] netlink: 'syz.2.6812': attribute type 17 has an invalid length.
[  361.331815][T21800] sit0: left promiscuous mode
[  361.354846][T21800] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.408041][T21800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  361.415655][T21800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.434034][T21800] virt_wifi0: left promiscuous mode
[  361.456274][T21800] veth1_vlan: left promiscuous mode
[  361.459566][T21800] veth0_vlan: left promiscuous mode
[  361.463039][T21800] veth0_vlan: entered promiscuous mode
[  361.469257][T21800] veth1_vlan: entered promiscuous mode
[  361.479433][T21800] veth0_macvtap: left promiscuous mode
[  361.483558][T21800] veth0_macvtap: entered promiscuous mode
[  361.496950][T21800] veth1_macvtap: entered promiscuous mode
[  361.512606][T21800] 8021q: adding VLAN 0 to HW filter on device bond1
[  361.550413][    T9] lo speed is unknown, defaulting to 1000
[  361.552728][    T9] syz2: Port: 1 Link ACTIVE
[  361.559809][ T9529] bridge0: port 1(1x9) entered blocking state
[  361.562204][ T9529] bridge0: port 1(1x9) entered forwarding state
[  361.589498][ T6834] syz0: Port: 1 Link ACTIVE
[  361.598657][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  361.605112][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.608102][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  361.610796][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.656874][T21814] syzkaller0: entered promiscuous mode
[  361.659424][T21814] syzkaller0: entered allmulticast mode
[  361.663439][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  361.666527][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.670817][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  361.674021][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.780643][T21819] __nla_validate_parse: 7 callbacks suppressed
[  361.780654][T21819] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6815'.
[  361.839693][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6817'.
[  361.846448][T21825] vlan1: entered allmulticast mode
[  361.849013][T21825] bond0: entered allmulticast mode
[  361.854185][T21822] netlink: 'syz.1.6816': attribute type 2 has an invalid length.
[  361.854768][T21825] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6817'.
[  361.861870][T21822] netlink: 'syz.1.6816': attribute type 2 has an invalid length.
[  361.871757][T21825] bond0 (unregistering): Released all slaves
[  362.086756][T21829] lo speed is unknown, defaulting to 1000
[  362.270516][T21842] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6821'.
[  362.308861][   T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  362.315637][T21842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6821'.
[  362.370408][T21844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6821'.
[  362.397808][T21844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6821'.
[  362.399358][T21845] netlink: 'syz.1.6819': attribute type 2 has an invalid length.
[  362.410140][T21845] netlink: 'syz.1.6819': attribute type 2 has an invalid length.
[  362.436577][T21845] macsec2: entered promiscuous mode
[  362.476669][   T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  362.521271][T21843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6819'.
[  362.524098][T21843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6819'.
[  363.075905][T21855] lo speed is unknown, defaulting to 1000
[  363.092984][T21853] netlink: 'syz.0.6823': attribute type 1 has an invalid length.
[  363.383414][T21864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6825'.
[  364.015911][T21873] tipc: Resetting bearer <ib:geneve1>
[  364.235609][ T6848] syz1: Port: 1 Link DOWN
[  364.257289][T21883] macsec1: entered promiscuous mode
[  364.280999][ T7300] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.294827][ T7300] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.309305][ T7300] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.311992][ T7300] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.332145][T21890] syzkaller0: entered promiscuous mode
[  364.334363][T21890] syzkaller0: entered allmulticast mode
[  364.714318][T21899] syzkaller0: entered promiscuous mode
[  364.716195][T21899] syzkaller0: entered allmulticast mode
[  364.722953][T21899] sctp: [Deprecated]: syz.2.6833 (pid 21899) Use of struct sctp_assoc_value in delayed_ack socket option.
[  364.722953][T21899] Use struct sctp_sack_info instead
[  365.064806][T21906] bridge0: port 1(1x9) entered disabled state
[  365.227998][T21906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.259342][T21906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.684139][ T5076] syz0: Port: 1 Link DOWN
[  365.684398][ T7300] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.688682][ T6848] lo speed is unknown, defaulting to 1000
[  365.691482][ T6848] syz2: Port: 1 Link DOWN
[  365.693170][ T7300] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.718761][ T7300] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.726449][ T7300] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.729843][ T7300] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.732475][ T7300] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.735829][ T7300] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.740038][ T7300] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.757279][T21924] netlink: 'syz.2.6839': attribute type 13 has an invalid length.
[  365.759742][T21924] netlink: 'syz.2.6839': attribute type 17 has an invalid length.
[  365.794364][T21924] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.832225][T21924] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.836110][T21924] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.843769][T21924] veth1_vlan: left promiscuous mode
[  365.846228][T21924] veth0_vlan: left promiscuous mode
[  365.848526][T21924] veth0_vlan: entered promiscuous mode
[  365.852286][T21924] veth1_vlan: entered promiscuous mode
[  365.856923][T21924] veth1_macvtap: left promiscuous mode
[  365.859613][T21924] veth0_macvtap: left promiscuous mode
[  365.862148][T21924] veth0_macvtap: entered promiscuous mode
[  365.872597][T21924] veth1_macvtap: entered promiscuous mode
[  365.882367][T21924] 8021q: adding VLAN 0 to HW filter on device bond1
[  365.914442][T21924] net_ratelimit: 11 callbacks suppressed
[  365.914453][T21924] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  365.922302][T21916] lo speed is unknown, defaulting to 1000
[  365.923079][ T5076] lo speed is unknown, defaulting to 1000
[  365.932898][ T5076] syz2: Port: 1 Link ACTIVE
[  365.946193][  T154] bridge0: port 1(1x9) entered blocking state
[  365.948332][  T154] bridge0: port 1(1x9) entered forwarding state
[  365.973025][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  365.975659][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.978387][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  365.980862][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.985408][ T6848] syz0: Port: 1 Link ACTIVE
[  365.987633][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  365.991713][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.999533][ T7300] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  366.002912][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  366.005950][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.014828][ T7300] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  366.270484][T21943] syzkaller0: entered promiscuous mode
[  366.272963][T21943] syzkaller0: entered allmulticast mode
[  366.901383][T21995] netlink: 'syz.2.6852': attribute type 1 has an invalid length.
[  366.908139][T21995] __nla_validate_parse: 135 callbacks suppressed
[  366.908151][T21995] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6852'.
[  366.921930][T22000] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6851'.
[  366.995315][T22006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6853'.
[  366.998418][T22005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6853'.
[  367.039707][T22009] tunl0: entered allmulticast mode
[  367.042630][T22009] syzkaller0: entered promiscuous mode
[  367.045868][T22009] syzkaller0: entered allmulticast mode
[  367.082095][T22011] lo speed is unknown, defaulting to 1000
[  367.092777][T22012] lo speed is unknown, defaulting to 1000
[  367.217699][T22020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.220217][T22021] syzkaller0: entered promiscuous mode
[  367.221998][T22021] syzkaller0: entered allmulticast mode
[  367.236481][T22021] tipc: Resetting bearer <eth:syzkaller0>
[  367.258145][T22021] tipc: Disabling bearer <eth:syzkaller0>
[  367.475768][T22035] netlink: 'syz.0.6859': attribute type 29 has an invalid length.
[  367.480847][T22035] netlink: 'syz.0.6859': attribute type 29 has an invalid length.
[  367.491517][T22035] netlink: 596 bytes leftover after parsing attributes in process `syz.0.6859'.
[  367.513760][T22035] netlink: 'syz.0.6859': attribute type 1 has an invalid length.
[  367.540553][T22046] netlink: 'syz.2.6860': attribute type 4 has an invalid length.
[  367.545048][T22045] netlink: 'syz.2.6860': attribute type 4 has an invalid length.
[  367.575766][ T6844] lo speed is unknown, defaulting to 1000
[  367.581511][ T6844] syz2: Port: 1 Link DOWN
[  367.590328][T22035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6859'.
[  367.606802][T22049] team1: left promiscuous mode
[  367.609558][T22049] team1: left allmulticast mode
[  367.611378][T22049] team2: left promiscuous mode
[  367.612951][T22049] team2: left allmulticast mode
[  367.615007][T22049] bond7: left promiscuous mode
[  367.616736][T22049] bridge13: left allmulticast mode
[  367.619241][T22049] bond8: left promiscuous mode
[  367.621217][T22049] vlan3: left allmulticast mode
[  367.623145][T22049] bond8: left allmulticast mode
[  367.722356][ T6844] lo speed is unknown, defaulting to 1000
[  367.724439][T22060] lo speed is unknown, defaulting to 1000
[  367.728579][ T6844] syz2: Port: 1 Link ACTIVE
[  367.801032][T22074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6868'.
[  367.805830][T22074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6868'.
[  367.809363][T22074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6868'.
[  367.812269][T22074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6868'.
[  367.874147][T22076] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  368.046766][T22071] bridge0: port 1(1x9) entered disabled state
[  368.285701][T22071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.305584][T22071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.732819][ T5687] lo speed is unknown, defaulting to 1000
[  368.737949][   T24] syz0: Port: 1 Link DOWN
[  368.738416][ T7060] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.742973][ T5687] syz2: Port: 1 Link DOWN
[  368.743038][ T7060] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.752889][ T7060] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.759677][ T7060] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.792336][ T7060] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.795258][ T7060] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.804341][ T7060] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.807130][ T7060] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.810854][T22099] syzkaller0: entered promiscuous mode
[  368.812567][T22099] syzkaller0: entered allmulticast mode
[  369.883874][T22113] syzkaller0: entered promiscuous mode
[  369.886048][T22113] syzkaller0: entered allmulticast mode
[  370.115420][T22125] syzkaller0: entered promiscuous mode
[  370.122080][T22125] syzkaller0: entered allmulticast mode
[  370.190999][T22127] netlink: 'syz.0.6882': attribute type 1 has an invalid length.
[  370.213267][T22127] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  370.218091][T22127] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  371.139012][T22138] netlink: 'syz.1.6885': attribute type 13 has an invalid length.
[  371.142217][T22138] netlink: 'syz.1.6885': attribute type 17 has an invalid length.
[  371.182885][T22138] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.225611][T22138] veth1_vlan: left promiscuous mode
[  371.229288][T22138] veth0_vlan: left promiscuous mode
[  371.232117][T22138] veth0_vlan: entered promiscuous mode
[  371.238209][T22138] veth1_vlan: entered promiscuous mode
[  371.247064][T22138] veth1_macvtap: left promiscuous mode
[  371.250376][T22138] veth0_macvtap: left promiscuous mode
[  371.253881][T22138] veth0_macvtap: entered promiscuous mode
[  371.258816][T22138] veth1_macvtap: entered promiscuous mode
[  371.266963][T22138] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  371.309169][ T7300] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.312749][ T7300] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.316502][   T24] syz1: Port: 1 Link ACTIVE
[  371.327495][ T7300] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.360610][ T7300] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.438971][T22147] xt_policy: output policy not valid in PREROUTING and INPUT
[  372.084542][T22156] __nla_validate_parse: 121 callbacks suppressed
[  372.084553][T22156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6888'.
[  372.298123][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6889'.
[  372.473720][T22155] tipc: Resetting bearer <ib:geneve1>
[  372.492914][ T6848] syz1: Port: 1 Link DOWN
[  372.494781][ T7060] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.499553][ T7060] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.503431][ T7060] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.506801][ T7060] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.553790][T22166] netlink: 'syz.1.6891': attribute type 21 has an invalid length.
[  372.556633][T22166] IPv6: NLM_F_CREATE should be specified when creating new route
[  372.559491][T22166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  372.562347][T22166] IPv6: NLM_F_CREATE should be set when creating new route
[  372.565092][T22166] IPv6: NLM_F_CREATE should be set when creating new route
[  372.568023][T22166] IPv6: NLM_F_CREATE should be set when creating new route
[  372.574718][T22166] netlink: 'syz.1.6891': attribute type 21 has an invalid length.
[  372.575842][T22164] netlink: 'syz.0.6890': attribute type 13 has an invalid length.
[  372.579536][T22166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  372.582102][T22164] netlink: 'syz.0.6890': attribute type 17 has an invalid length.
[  372.588843][T22166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6891'.
[  372.607160][T22164] ip6gretap0: left promiscuous mode
[  372.637578][T22164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  372.641444][T22164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  372.649213][T22164] veth1_macvtap: left promiscuous mode
[  372.652017][T22164] veth0_macvtap: left promiscuous mode
[  372.654765][T22164] veth0_macvtap: entered promiscuous mode
[  372.658900][T22164] veth1_macvtap: entered promiscuous mode
[  372.664062][T22164] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  372.669990][T22164] 8021q: adding VLAN 0 to HW filter on device bond1
[  372.675023][T22164] 8021q: adding VLAN 0 to HW filter on device bond2
[  372.679338][T22164] 8021q: adding VLAN 0 to HW filter on device bond3
[  372.684990][T22164] 8021q: adding VLAN 0 to HW filter on device bond4
[  372.689360][T22164] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  372.692499][T22164] ip6gretap0: entered promiscuous mode
[  372.696459][T22164] A link change request failed with some changes committed already. Interface wlan3 may have been left with an inconsistent configuration, please check.
[  372.729718][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.732970][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  372.741133][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.749025][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  372.765961][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.769954][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  372.770697][T22173] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20321
[  372.794634][ T7300] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.798181][ T7300] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  372.910505][T22176] syzkaller1: entered promiscuous mode
[  372.912678][T22176] syzkaller1: entered allmulticast mode
[  373.919424][T22205] netlink: 'syz.0.6899': attribute type 1 has an invalid length.
[  373.953356][T22205] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  373.957887][T22205] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  374.003836][T22207] macvlan0: entered promiscuous mode
[  374.006092][T22207] macvlan0: entered allmulticast mode
[  374.012164][T22207] bond13: entered promiscuous mode
[  374.018609][T22207] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  374.024072][T22207] bond13: left promiscuous mode
[  374.251140][T22213] netlink: 'syz.0.6902': attribute type 1 has an invalid length.
[  374.284803][T22215] bridge15: entered promiscuous mode
[  374.287380][T22215] bridge15: entered allmulticast mode
[  374.304706][T22215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6903'.
[  374.446601][T22222] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6904'.
[  374.605910][T22226] lo speed is unknown, defaulting to 1000
[  374.686594][T22230] netlink: 'syz.0.6906': attribute type 1 has an invalid length.
[  374.770271][T22235] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6908'.
[  374.839824][T22236] lo speed is unknown, defaulting to 1000
[  374.974728][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6910'.
[  375.187572][ T9526] wlan1: Trigger new scan to find an IBSS to join
[  375.715856][T22266] netlink: 'syz.1.6915': attribute type 1 has an invalid length.
[  375.746424][T22266] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  375.751773][T22266] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  375.799940][T22268] bond0: (slave gretap4): making interface the new active one
[  375.817228][T22268] bond0: (slave gretap4): Enslaving as an active interface with an up link
[  375.848498][T22266] macvlan3: entered promiscuous mode
[  375.850334][T22266] macvlan3: entered allmulticast mode
[  375.852563][T22266] bond0: entered promiscuous mode
[  375.854294][T22266] gretap4: entered promiscuous mode
[  375.860379][T22266] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  375.865232][T22266] bond0: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap4
[  375.872617][T22266] bond0: left promiscuous mode
[  375.874237][T22266] gretap4: left promiscuous mode
[  376.154686][T22284] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6919'.
[  376.232195][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6924'.
[  376.239256][T22292] syzkaller0: entered promiscuous mode
[  376.243671][T22292] syzkaller0: entered allmulticast mode
[  376.341218][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6925'.
[  376.506808][T22303] lo speed is unknown, defaulting to 1000
[  377.163974][T22310] __nla_validate_parse: 1 callbacks suppressed
[  377.163990][T22310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6928'.
[  377.340054][T22319] openvswitch: : Dropping previously announced user features
[  377.342552][T22317] lo speed is unknown, defaulting to 1000
[  377.366317][T22319] netlink: 'syz.2.6930': attribute type 4 has an invalid length.
[  377.369533][T22319] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6930'.
[  377.485268][T22319] lo speed is unknown, defaulting to 1000
[  377.606068][T22323] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6931'.
[  377.721021][T22329] netlink: 'syz.0.6932': attribute type 13 has an invalid length.
[  377.724359][T22329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6932'.
[  377.973592][T22334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6933'.
[  378.147307][ T9526] wlan1: Trigger new scan to find an IBSS to join
[  378.292519][ T5478] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  378.298630][ T5478] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  378.302345][ T5478] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  378.305856][ T5478] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  378.312645][ T5478] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  378.320048][ T5478] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  378.325339][ T5478] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  378.329010][ T5478] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  378.517804][T22341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6935'.
[  378.551474][T22343] netlink: 'syz.2.6936': attribute type 1 has an invalid length.
[  378.606944][   T56] block nbd7: Receive control failed (result -1)
[  378.612237][T22343] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[  378.616792][T22343] bond0: (slave vxcan1): Error -95 calling set_mac_address
[  378.689790][T22351] bond0: (slave gretap1): making interface the new active one
[  378.693358][T22351] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  378.701875][T22343] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6936'.
[  379.034863][T22379] netlink: 'syz.2.6944': attribute type 58 has an invalid length.
[  379.038533][T22379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6944'.
[  379.155995][T22386] syzkaller0: entered promiscuous mode
[  379.158405][T22386] syzkaller0: entered allmulticast mode
[  379.420838][T22389] netlink: 'syz.2.6947': attribute type 2 has an invalid length.
[  379.428099][T22389] netlink: 'syz.2.6947': attribute type 2 has an invalid length.
[  379.455281][T22389] macsec1: entered promiscuous mode
[  379.512205][T22393] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6948'.
[  379.523728][T22388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6947'.
[  379.619882][T22400] netlink: 'syz.1.6952': attribute type 13 has an invalid length.
[  379.622628][T22400] netlink: 'syz.1.6952': attribute type 17 has an invalid length.
[  379.652347][T22400] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.676486][T22400] veth1_vlan: left promiscuous mode
[  379.679256][T22400] veth0_vlan: left promiscuous mode
[  379.681772][T22400] veth0_vlan: entered promiscuous mode
[  379.685281][T22400] veth1_vlan: entered promiscuous mode
[  379.689963][T22400] veth1_macvtap: left promiscuous mode
[  379.692651][T22400] veth0_macvtap: left promiscuous mode
[  379.695366][T22400] veth0_macvtap: entered promiscuous mode
[  379.700678][T22400] veth1_macvtap: entered promiscuous mode
[  379.709664][T22400] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  379.756137][ T7060] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.762482][ T7060] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.771192][ T7060] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.771198][  T992] syz1: Port: 1 Link ACTIVE
[  379.787338][ T7060] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.074842][T22430] netlink: 'syz.2.6959': attribute type 5 has an invalid length.
[  380.539951][T22462] syzkaller0: entered promiscuous mode
[  380.542229][T22462] syzkaller0: entered allmulticast mode
[  381.170609][T22472] tipc: Resetting bearer <ib:geneve1>
[  381.201360][ T6834] syz1: Port: 1 Link DOWN
[  381.203346][ T5478] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.208038][ T5478] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.211435][ T5478] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.214861][ T5478] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.034191][T22495] atomic_op ffff888106ac2998 conn xmit_atomic 0000000000000000
[  385.140902][T22497] __nla_validate_parse: 3 callbacks suppressed
[  385.140914][T22497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6974'.
[  385.140917][T22498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6974'.
[  385.165226][T22498] macsec2: entered promiscuous mode
[  385.196500][T22513] syzkaller1: entered promiscuous mode
[  385.198528][T22513] syzkaller1: entered allmulticast mode
[  385.202679][T22513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6976'.
[  385.403468][T22521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.410384][T22521] syzkaller0: entered promiscuous mode
[  385.413902][T22521] syzkaller0: entered allmulticast mode
[  385.451246][T22521] netlink: 'syz.2.6979': attribute type 10 has an invalid length.
[  385.460197][T22521] tipc: Resetting bearer <eth:syzkaller0>
[  385.470751][T22520] tipc: Resetting bearer <eth:syzkaller0>
[  385.502354][T22520] tipc: Disabling bearer <eth:syzkaller0>
[  385.571921][T22532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6983'.
[  385.686126][T22540] netlink: 'syz.1.6986': attribute type 1 has an invalid length.
[  385.742570][T22540] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  385.746512][T22540] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  385.788529][T22542] syzkaller0: entered promiscuous mode
[  385.797700][T22542] syzkaller0: entered allmulticast mode
[  385.952770][T22553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.961862][T22553] syzkaller0: entered promiscuous mode
[  385.968853][T22553] syzkaller0: entered allmulticast mode
[  385.996154][T22553] netlink: 'syz.0.6989': attribute type 10 has an invalid length.
[  386.012216][T22553] tipc: Resetting bearer <eth:syzkaller0>
[  386.016847][T22552] tipc: Resetting bearer <eth:syzkaller0>
[  386.040910][T22552] tipc: Disabling bearer <eth:syzkaller0>
[  386.113627][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6993'.
[  386.119092][T22567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6993'.
[  386.205419][T22572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6994'.
[  386.452027][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6993'.
[  386.458805][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6993'.
[  386.462612][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6993'.
[  386.564709][T22585] netlink: 'syz.1.6998': attribute type 13 has an invalid length.
[  386.568437][T22585] netlink: 'syz.1.6998': attribute type 17 has an invalid length.
[  386.601913][T22585] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.628843][T22585] veth1_vlan: left promiscuous mode
[  386.631848][T22585] veth0_vlan: left promiscuous mode
[  386.634364][T22585] veth0_vlan: entered promiscuous mode
[  386.641241][T22585] veth1_vlan: entered promiscuous mode
[  386.650014][T22585] veth1_macvtap: left promiscuous mode
[  386.659189][T22585] veth0_macvtap: left promiscuous mode
[  386.662469][T22585] veth0_macvtap: entered promiscuous mode
[  386.665741][T22585] veth1_macvtap: entered promiscuous mode
[  386.692995][T22585] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  386.733453][ T7060] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.742387][ T7060] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.751406][ T6834] syz1: Port: 1 Link ACTIVE
[  386.752155][ T7060] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.760869][ T7060] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.945918][T22611] netem: change failed
[  388.060633][T22629] tipc: Resetting bearer <ib:geneve1>
[  388.080385][   T24] syz1: Port: 1 Link DOWN
[  388.083503][ T7060] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.092950][ T7060] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.099117][ T7060] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.106689][ T7060] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.266535][T22653] netlink: 'syz.2.7013': attribute type 10 has an invalid length.
[  388.336772][T22657] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check.
[  388.622942][T22666] lo speed is unknown, defaulting to 1000
[  389.016687][T22678] lo speed is unknown, defaulting to 1000
[  389.117940][T22678] netlink: 'syz.1.7023': attribute type 1 has an invalid length.
[  389.163285][T22685] syzkaller0: entered promiscuous mode
[  389.165400][T22685] syzkaller0: entered allmulticast mode
[  389.455123][T22697] netlink: 'syz.2.7030': attribute type 13 has an invalid length.
[  389.458626][T22697] netlink: 'syz.2.7030': attribute type 17 has an invalid length.
[  389.478721][T22697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.511219][T22697] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.515139][T22697] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.522458][T22697] veth1_vlan: left promiscuous mode
[  389.525213][T22697] veth0_vlan: left promiscuous mode
[  389.528245][T22697] veth0_vlan: entered promiscuous mode
[  389.532137][T22697] veth1_vlan: entered promiscuous mode
[  389.536701][T22697] veth1_macvtap: left promiscuous mode
[  389.539962][T22697] veth0_macvtap: left promiscuous mode
[  389.542607][T22697] veth0_macvtap: entered promiscuous mode
[  389.545048][T22697] veth1_macvtap: entered promiscuous mode
[  389.553622][T22697] 8021q: adding VLAN 0 to HW filter on device bond1
[  389.576533][T22697] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  389.581936][   T24] lo speed is unknown, defaulting to 1000
[  389.586691][   T24] syz2: Port: 1 Link ACTIVE
[  389.588616][ T1111] bridge0: port 1(1x9) entered blocking state
[  389.590942][ T1111] bridge0: port 1(1x9) entered forwarding state
[  389.610533][ T5478] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  389.616556][ T5478] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.622603][ T5478] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  389.625630][ T5478] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.629822][ T6846] syz0: Port: 1 Link ACTIVE
[  389.633321][ T5478] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  389.636377][ T5478] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.646489][ T5478] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  389.649351][ T5478] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.675255][T22697] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  389.678271][T22697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.740181][T22706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.744273][T22706] syzkaller0: entered promiscuous mode
[  389.746520][T22706] syzkaller0: entered allmulticast mode
[  389.753104][ T5478] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  389.784132][T22706] tipc: Resetting bearer <eth:syzkaller0>
[  389.792325][T22705] tipc: Resetting bearer <eth:syzkaller0>
[  389.814561][T22705] tipc: Disabling bearer <eth:syzkaller0>
[  389.908446][ T7060] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  390.352045][T22728] syzkaller0: entered promiscuous mode
[  390.353928][T22728] syzkaller0: entered allmulticast mode
[  390.462744][T22735] syzkaller0: entered promiscuous mode
[  390.464894][T22735] syzkaller0: entered allmulticast mode
[  390.641544][T22739] netlink: 'syz.0.7048': attribute type 1 has an invalid length.
[  390.679306][T22739] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address
[  390.684073][T22739] bond14: (slave vxcan3): Error -95 calling set_mac_address
[  390.729166][T22741] macvlan0: entered promiscuous mode
[  390.731401][T22741] macvlan0: entered allmulticast mode
[  390.734163][T22741] bond14: entered promiscuous mode
[  390.740630][T22741] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  390.749606][T22741] bond14: left promiscuous mode
[  391.042387][T22753] __nla_validate_parse: 248 callbacks suppressed
[  391.042403][T22753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7054'.
[  391.062029][T22753] bond15: entered promiscuous mode
[  391.064273][T22753] 8021q: adding VLAN 0 to HW filter on device bond15
[  391.084126][T22753] 8021q: adding VLAN 0 to HW filter on device bond15
[  391.087564][T22753] bond15: (slave sit3): The slave device specified does not support setting the MAC address
[  391.092439][T22753] bond15: (slave sit3): Error -95 calling set_mac_address
[  391.253042][T22761] netlink: 'syz.1.7056': attribute type 12 has an invalid length.
[  391.331328][T22765] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7058'.
[  391.390231][T22770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7060'.
[  391.974447][T22786] can: request_module (can-proto-4) failed.
[  391.990965][T22781] lo speed is unknown, defaulting to 1000
[  392.436289][T22809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7070'.
[  392.537761][T22801] nbd8: detected capacity change from 0 to 63
[  392.550367][T22814] syzkaller0: entered promiscuous mode
[  392.552792][T14172] block nbd8: Receive control failed (result -32)
[  392.558424][   T55] block nbd8: Receive control failed (result -32)
[  392.573305][T22814] syzkaller0: entered allmulticast mode
[  392.604716][T22667] block nbd8: Dead connection, failed to find a fallback
[  392.608966][T22667] block nbd8: shutting down sockets
[  392.613144][T22667] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.616441][T22667] Buffer I/O error on dev nbd8, logical block 0, async page read
[  392.619690][T22667] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.623808][T22667] Buffer I/O error on dev nbd8, logical block 1, async page read
[  392.630656][T22667] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.635855][T22667] Buffer I/O error on dev nbd8, logical block 2, async page read
[  392.638903][T22667] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.644399][T22667] Buffer I/O error on dev nbd8, logical block 3, async page read
[  392.647537][T22667] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.656654][T22667] Buffer I/O error on dev nbd8, logical block 0, async page read
[  392.662186][T22667] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.666928][T22667] Buffer I/O error on dev nbd8, logical block 1, async page read
[  392.673341][T22667] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.677908][T22667] Buffer I/O error on dev nbd8, logical block 2, async page read
[  392.682051][T22667] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.686586][T22667] Buffer I/O error on dev nbd8, logical block 3, async page read
[  392.691409][T22667] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.694580][T22667] Buffer I/O error on dev nbd8, logical block 0, async page read
[  392.697573][T22667] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  392.700850][T22667] Buffer I/O error on dev nbd8, logical block 1, async page read
[  392.705618][T22667] ldm_validate_partition_table(): Disk read failed.
[  392.710513][T22667] Dev nbd8: unable to read RDB block 0
[  392.716230][T22667]  nbd8: unable to read partition table
[  392.738376][T22667] ldm_validate_partition_table(): Disk read failed.
[  392.744640][T22667] Dev nbd8: unable to read RDB block 0
[  392.755013][T22667]  nbd8: unable to read partition table
[  394.070455][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  394.239230][    C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  396.221109][T22827] bridge0: port 1(1x9) entered disabled state
[  396.367286][T22827] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.379937][T22827] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.733951][ T6848] lo speed is unknown, defaulting to 1000
[  396.736344][ T6848] syz2: Port: 1 Link DOWN
[  396.742319][ T5076] syz0: Port: 1 Link DOWN
[  396.744071][ T5478] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.754832][ T5478] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.767485][ T5478] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.780505][ T5478] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.791136][ T5478] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.803544][ T5478] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.809700][ T5478] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.813240][ T5478] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.918254][T22847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7079'.
[  397.079129][T22855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7082'.
[  397.173291][T22861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7084'.
[  397.179325][T22861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7084'.
[  397.477979][T22870] lo speed is unknown, defaulting to 1000
[  398.203973][T22879] syzkaller0: entered promiscuous mode
[  398.210427][T22879] syzkaller0: entered allmulticast mode
[  399.755421][T22915] ip6gretap0: left promiscuous mode
[  399.801072][T22915] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  400.122196][T22934] lo speed is unknown, defaulting to 1000
[  401.334212][T22983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7118'.
[  401.388187][T22974] xt_hl: Unknown Hop Limit match mode: 206
[  401.391114][T22974] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  401.761104][T23013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7125'.
[  402.500848][T23027] netlink: 'syz.0.7130': attribute type 17 has an invalid length.
[  402.507184][T23027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7130'.
[  402.845155][T23035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7132'.
[  402.944948][T23042] bond0: Error: Cannot enslave bond to itself.
[  403.010095][T23045] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  403.120793][T23053] vlan2: entered allmulticast mode
[  403.122548][T23053] bond0: entered allmulticast mode
[  403.124151][T23053] gretap1: entered allmulticast mode
[  403.127576][T23053] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7138'.
[  403.188241][T23059] vlan4: entered allmulticast mode
[  403.191759][T23059] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7140'.
[  403.322693][T23067] netlink: 'syz.1.7144': attribute type 1 has an invalid length.
[  403.325699][T23068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7144'.
[  403.343804][T23072] netlink: 'syz.2.7145': attribute type 1 has an invalid length.
[  403.374696][T23072] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  403.378465][T23072] bond12: (slave vxcan1): Error -95 calling set_mac_address
[  403.677472][T23089] x_tables: duplicate underflow at hook 1
[  403.741019][T23094] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7151'.
[  403.790424][T23098] 
[  403.791448][T23098] ======================================================
[  403.794038][T23098] WARNING: possible circular locking dependency detected
[  403.796717][T23098] syzkaller #0 Not tainted
[  403.798557][T23098] ------------------------------------------------------
[  403.800702][T23098] syz.1.7153/23098 is trying to acquire lock:
[  403.802510][T23098] ffff8881012d7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430
[  403.805699][T23098] 
[  403.805699][T23098] but task is already holding lock:
[  403.808080][T23098] ffffffff8e7eb750 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  403.811466][T23098] 
[  403.811466][T23098] which lock already depends on the new lock.
[  403.811466][T23098] 
[  403.814782][T23098] 
[  403.814782][T23098] the existing dependency chain (in reverse order) is:
[  403.817766][T23098] 
[  403.817766][T23098] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  403.820053][T23098]        cpus_read_lock+0x42/0x160
[  403.821595][T23098]        static_key_slow_inc+0x12/0x30
[  403.823313][T23098]        tcp_md5_do_add+0x1d4/0x390
[  403.825234][T23098]        tcp_v6_parse_md5_keys+0x562/0x680
[  403.827451][T23098]        do_tcp_setsockopt+0x12ec/0x2060
[  403.829293][T23098]        do_sock_setsockopt+0x17c/0x1b0
[  403.831092][T23098]        __x64_sys_setsockopt+0x13d/0x1b0
[  403.832821][T23098]        do_syscall_64+0x15f/0xf80
[  403.834524][T23098]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.836400][T23098] 
[  403.836400][T23098] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  403.838988][T23098]        lock_sock_nested+0x41/0x100
[  403.840683][T23098]        inet_shutdown+0x6a/0x390
[  403.842146][T23098]        nbd_mark_nsock_dead+0x2e9/0x560
[  403.843912][T23098]        recv_work+0x1c2e/0x1d40
[  403.845484][T23098]        process_scheduled_works+0xb5d/0x1860
[  403.847257][T23098]        worker_thread+0xa53/0xfc0
[  403.848765][T23098]        kthread+0x388/0x470
[  403.850315][T23098]        ret_from_fork+0x514/0xb70
[  403.852153][T23098]        ret_from_fork_asm+0x1a/0x30
[  403.853978][T23098] 
[  403.853978][T23098] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  403.856521][T23098]        __mutex_lock+0x1a3/0x1550
[  403.858020][T23098]        nbd_queue_rq+0x37b/0x1100
[  403.859860][T23098]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  403.861998][T23098]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  403.863975][T23098]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  403.865879][T23098]        blk_mq_run_hw_queue+0x348/0x4f0
[  403.867760][T23098]        blk_mq_dispatch_list+0xd16/0xe10
[  403.869696][T23098]        blk_mq_flush_plug_list+0x48d/0x570
[  403.871828][T23098]        __blk_flush_plug+0x3ed/0x4d0
[  403.873788][T23098]        __submit_bio+0x28d/0x580
[  403.875717][T23098]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  403.877754][T23098]        block_read_full_folio+0x599/0x830
[  403.879629][T23098]        filemap_read_folio+0x137/0x3b0
[  403.881733][T23098]        do_read_cache_folio+0x358/0x590
[  403.883842][T23098]        read_part_sector+0xb6/0x2b0
[  403.885855][T23098]        adfspart_check_ICS+0xb1/0x960
[  403.887915][T23098]        bdev_disk_changed+0x817/0x1770
[  403.890025][T23098]        blkdev_get_whole+0x380/0x510
[  403.891979][T23098]        bdev_open+0x31e/0xd30
[  403.893442][T23098]        blkdev_open+0x470/0x610
[  403.894942][T23098]        do_dentry_open+0x785/0x14e0
[  403.896477][T23098]        vfs_open+0x3b/0x340
[  403.897842][T23098]        path_openat+0x2e08/0x3860
[  403.899347][T23098]        do_file_open+0x23e/0x4a0
[  403.900847][T23098]        do_sys_openat2+0x113/0x200
[  403.902385][T23098]        __x64_sys_openat+0x138/0x170
[  403.903982][T23098]        do_syscall_64+0x15f/0xf80
[  403.905785][T23098]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.907952][T23098] 
[  403.907952][T23098] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  403.910588][T23098]        __mutex_lock+0x1a3/0x1550
[  403.912167][T23098]        nbd_queue_rq+0xc6/0x1100
[  403.913926][T23098]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  403.915784][T23098]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  403.917858][T23098]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  403.919765][T23098]        blk_mq_run_hw_queue+0x348/0x4f0
[  403.921805][T23098]        blk_mq_dispatch_list+0xd16/0xe10
[  403.923911][T23098]        blk_mq_flush_plug_list+0x48d/0x570
[  403.925689][T23098]        __blk_flush_plug+0x3ed/0x4d0
[  403.927309][T23098]        __submit_bio+0x28d/0x580
[  403.928773][T23098]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  403.930566][T23098]        block_read_full_folio+0x599/0x830
[  403.932251][T23098]        filemap_read_folio+0x137/0x3b0
[  403.933861][T23098]        do_read_cache_folio+0x358/0x590
[  403.935718][T23098]        read_part_sector+0xb6/0x2b0
[  403.937656][T23098]        adfspart_check_ICS+0xb1/0x960
[  403.939451][T23098]        bdev_disk_changed+0x817/0x1770
[  403.941147][T23098]        blkdev_get_whole+0x380/0x510
[  403.942860][T23098]        bdev_open+0x31e/0xd30
[  403.944375][T23098]        blkdev_open+0x470/0x610
[  403.945892][T23098]        do_dentry_open+0x785/0x14e0
[  403.947685][T23098]        vfs_open+0x3b/0x340
[  403.949344][T23098]        path_openat+0x2e08/0x3860
[  403.951084][T23098]        do_file_open+0x23e/0x4a0
[  403.953091][T23098]        do_sys_openat2+0x113/0x200
[  403.955098][T23098]        __x64_sys_openat+0x138/0x170
[  403.956756][T23098]        do_syscall_64+0x15f/0xf80
[  403.958419][T23098]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.960301][T23098] 
[  403.960301][T23098] -> #4 (set->srcu){.+.+}-{0:0}:
[  403.962594][T23098]        __synchronize_srcu+0xca/0x300
[  403.964717][T23098]        elevator_switch+0x1e8/0x7a0
[  403.966814][T23098]        elevator_change+0x2cc/0x450
[  403.968922][T23098]        elevator_set_default+0x36c/0x430
[  403.971178][T23098]        blk_register_queue+0x3e9/0x4e0
[  403.973355][T23098]        __add_disk+0x677/0xd50
[  403.975289][T23098]        add_disk_fwnode+0xfb/0x480
[  403.977371][T23098]        nbd_dev_add+0x72c/0xb50
[  403.979367][T23098]        nbd_init+0x168/0x1f0
[  403.981253][T23098]        do_one_initcall+0x250/0x870
[  403.983311][T23098]        do_initcall_level+0x104/0x190
[  403.985519][T23098]        do_initcalls+0x59/0xa0
[  403.987467][T23098]        kernel_init_freeable+0x2a6/0x3e0
[  403.989740][T23098]        kernel_init+0x1d/0x1d0
[  403.991600][T23098]        ret_from_fork+0x514/0xb70
[  403.993304][T23098]        ret_from_fork_asm+0x1a/0x30
[  403.994936][T23098] 
[  403.994936][T23098] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  403.997909][T23098]        __mutex_lock+0x1a3/0x1550
[  403.999917][T23098]        elevator_change+0x1b3/0x450
[  404.001583][T23098]        elevator_set_none+0xb5/0x140
[  404.003198][T23098]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  404.005079][T23098]        nbd_start_device+0x17f/0xb10
[  404.006689][T23098]        nbd_genl_connect+0x165b/0x1cf0
[  404.008466][T23098]        genl_family_rcv_msg_doit+0x22a/0x330
[  404.010295][T23098]        genl_rcv_msg+0x61c/0x7a0
[  404.011790][T23098]        netlink_rcv_skb+0x232/0x4b0
[  404.013834][T23098]        genl_rcv+0x28/0x40
[  404.015622][T23098]        netlink_unicast+0x75c/0x8e0
[  404.017253][T23098]        netlink_sendmsg+0x813/0xb40
[  404.018753][T23098]        ____sys_sendmsg+0x972/0x9f0
[  404.020385][T23098]        ___sys_sendmsg+0x2a5/0x360
[  404.021956][T23098]        __x64_sys_sendmsg+0x1bd/0x2a0
[  404.023616][T23098]        do_syscall_64+0x15f/0xf80
[  404.025456][T23098]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.027778][T23098] 
[  404.027778][T23098] -> #2 (&q->q_usage_counter(io)#57){++++}-{0:0}:
[  404.030448][T23098]        blk_alloc_queue+0x546/0x680
[  404.032089][T23098]        __blk_mq_alloc_disk+0x197/0x390
[  404.033983][T23098]        nbd_dev_add+0x499/0xb50
[  404.035892][T23098]        nbd_init+0x168/0x1f0
[  404.037556][T23098]        do_one_initcall+0x250/0x870
[  404.039191][T23098]        do_initcall_level+0x104/0x190
[  404.040863][T23098]        do_initcalls+0x59/0xa0
[  404.042380][T23098]        kernel_init_freeable+0x2a6/0x3e0
[  404.044090][T23098]        kernel_init+0x1d/0x1d0
[  404.045606][T23098]        ret_from_fork+0x514/0xb70
[  404.047297][T23098]        ret_from_fork_asm+0x1a/0x30
[  404.049091][T23098] 
[  404.049091][T23098] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  404.051331][T23098]        fs_reclaim_acquire+0x71/0x100
[  404.053021][T23098]        kmem_cache_alloc_noprof+0x40/0x650
[  404.054809][T23098]        __kernfs_iattrs+0xdf/0x320
[  404.056420][T23098]        kernfs_iop_setattr+0xea/0x3f0
[  404.058495][T23098]        notify_change+0xc1a/0xf40
[  404.060516][T23098]        do_truncate+0x1c2/0x250
[  404.062095][T23098]        path_openat+0x2f89/0x3860
[  404.063653][T23098]        do_file_open+0x23e/0x4a0
[  404.065182][T23098]        do_sys_openat2+0x113/0x200
[  404.066778][T23098]        __x64_sys_openat+0x138/0x170
[  404.068514][T23098]        do_syscall_64+0x15f/0xf80
[  404.070051][T23098]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.071953][T23098] 
[  404.071953][T23098] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  404.074485][T23098]        __lock_acquire+0x15a5/0x2cf0
[  404.076129][T23098]        lock_acquire+0x106/0x350
[  404.077981][T23098]        down_read+0x47/0x2e0
[  404.079871][T23098]        kernfs_iop_permission+0x7f/0x430
[  404.082123][T23098]        inode_permission+0x46f/0x5f0
[  404.084337][T23098]        cgroup_attach_permissions+0x286/0x9e0
[  404.086800][T23098]        __cgroup_procs_write+0x23a/0x300
[  404.088614][T23098]        cgroup_threads_write+0x24/0x50
[  404.090303][T23098]        cgroup_file_write+0x331/0x8f0
[  404.091970][T23098]        kernfs_fop_write_iter+0x3af/0x540
[  404.093793][T23098]        vfs_write+0x61d/0xb90
[  404.095261][T23098]        ksys_write+0x150/0x270
[  404.096733][T23098]        do_syscall_64+0x15f/0xf80
[  404.098410][T23098]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.100393][T23098] 
[  404.100393][T23098] other info that might help us debug this:
[  404.100393][T23098] 
[  404.103444][T23098] Chain exists of:
[  404.103444][T23098]   &root->kernfs_iattr_rwsem --> sk_lock-AF_INET6 --> cpu_hotplug_lock
[  404.103444][T23098] 
[  404.108561][T23098]  Possible unsafe locking scenario:
[  404.108561][T23098] 
[  404.111213][T23098]        CPU0                    CPU1
[  404.112866][T23098]        ----                    ----
[  404.114504][T23098]   rlock(cpu_hotplug_lock);
[  404.115964][T23098]                                lock(sk_lock-AF_INET6);
[  404.118191][T23098]                                lock(cpu_hotplug_lock);
[  404.120363][T23098]   rlock(&root->kernfs_iattr_rwsem);
[  404.122360][T23098] 
[  404.122360][T23098]  *** DEADLOCK ***
[  404.122360][T23098] 
[  404.125540][T23098] 5 locks held by syz.1.7153/23098:
[  404.127355][T23098]  #0: ffff8881acd810f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  404.130626][T23098]  #1: ffff88816db4c410 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[  404.133828][T23098]  #2: ffff88819fda5480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[  404.136746][T23098]  #3: ffffffff8e99c420 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  404.139854][T23098]  #4: ffffffff8e7eb750 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  404.143655][T23098] 
[  404.143655][T23098] stack backtrace:
[  404.145679][T23098] CPU: 1 UID: 0 PID: 23098 Comm: syz.1.7153 Not tainted syzkaller #0 PREEMPT(full) 
[  404.145702][T23098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  404.145714][T23098] Call Trace:
[  404.145726][T23098]  <TASK>
[  404.145737][T23098]  dump_stack_lvl+0xe8/0x150
[  404.145759][T23098]  print_circular_bug+0x2e1/0x300
[  404.145785][T23098]  check_noncircular+0x12e/0x150
[  404.145806][T23098]  __lock_acquire+0x15a5/0x2cf0
[  404.145830][T23098]  ? kernfs_iop_permission+0x7f/0x430
[  404.145850][T23098]  lock_acquire+0x106/0x350
[  404.145864][T23098]  ? kernfs_iop_permission+0x7f/0x430
[  404.145883][T23098]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  404.145903][T23098]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  404.145921][T23098]  down_read+0x47/0x2e0
[  404.145937][T23098]  ? kernfs_iop_permission+0x7f/0x430
[  404.145956][T23098]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  404.145975][T23098]  kernfs_iop_permission+0x7f/0x430
[  404.145994][T23098]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  404.146012][T23098]  inode_permission+0x46f/0x5f0
[  404.146030][T23098]  cgroup_attach_permissions+0x286/0x9e0
[  404.146058][T23098]  __cgroup_procs_write+0x23a/0x300
[  404.146082][T23098]  cgroup_threads_write+0x24/0x50
[  404.146102][T23098]  ? __pfx_cgroup_threads_write+0x10/0x10
[  404.146121][T23098]  cgroup_file_write+0x331/0x8f0
[  404.146142][T23098]  ? __pfx_cgroup_file_write+0x10/0x10
[  404.146165][T23098]  ? __pfx_cgroup_file_write+0x10/0x10
[  404.146184][T23098]  kernfs_fop_write_iter+0x3af/0x540
[  404.146200][T23098]  vfs_write+0x61d/0xb90
[  404.146259][T23098]  ? __pfx_vfs_write+0x10/0x10
[  404.146282][T23098]  ? __fget_files+0x2a/0x420
[  404.146304][T23098]  ksys_write+0x150/0x270
[  404.146332][T23098]  ? __pfx_ksys_write+0x10/0x10
[  404.146355][T23098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.146371][T23098]  do_syscall_64+0x15f/0xf80
[  404.146386][T23098]  ? trace_irq_disable+0x3b/0x140
[  404.146412][T23098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.146427][T23098] RIP: 0033:0x7fd572d9cdd9
[  404.146445][T23098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.146459][T23098] RSP: 002b:00007fd573ceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  404.146476][T23098] RAX: ffffffffffffffda RBX: 00007fd573015fa0 RCX: 00007fd572d9cdd9
[  404.146487][T23098] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000006
[  404.146496][T23098] RBP: 00007fd572e32d69 R08: 0000000000000000 R09: 0000000000000000
[  404.146505][T23098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.146514][T23098] R13: 00007fd573016038 R14: 00007fd573015fa0 R15: 00007ffe6a817ec8
[  404.146532][T23098]  </TASK>
[  404.278431][T23101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7154'.
